Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/0/4314A8D7EDCECD2C467E1EF8634BDC6275077A86.mft
File:                     4314A8D7EDCECD2C467E1EF8634BDC6275077A86.mft (raw, json)
Hash identifier:          KU5fs3UEKPzx88IyguiYeFuJDzD3QYfiBd1lJstxMrE=
Subject key identifier:   51:84:A9:D3:0E:CE:B0:02:EA:A3:A5:08:64:81:79:08:72:01:E2:76
Authority key identifier: 43:14:A8:D7:ED:CE:CD:2C:46:7E:1E:F8:63:4B:DC:62:75:07:7A:86
Certificate issuer:       /CN=4314A8D7EDCECD2C467E1EF8634BDC6275077A86
Certificate serial:       4888ED07EF98890378FFAC17EBAA6E08CF394FBF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4314A8D7EDCECD2C467E1EF8634BDC6275077A86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/0/4314A8D7EDCECD2C467E1EF8634BDC6275077A86.mft
Manifest number:          9F
Signing time:             Mon 15 Apr 2024 10:15:37 +0000
Manifest this update:     Mon 15 Apr 2024 10:10:37 +0000
Manifest next update:     Tue 16 Apr 2024 10:57:37 +0000
Files and hashes:         1: 4314A8D7EDCECD2C467E1EF8634BDC6275077A86.crl (hash: 65ou1XQImOr1pJyCdHm0nMd2fkfxJKYL6sSwM54rafw=)
                          2: 323830343a333564383a3a2f33322d3332203d3e20323636333130.roa (hash: /oV4j4/O/dnWaRorBSn68otJgARtjFOwAl/SKOYVELc=)
                          3: 3137302e37392e3139362e302f32322d3232203d3e20323636333130.roa (hash: oETLqgGWyffzH6MdlVajxwDoMB3/P6er+z+ioyq/YqA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:88:ed:07:ef:98:89:03:78:ff:ac:17:eb:aa:6e:08:cf:39:4f:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4314A8D7EDCECD2C467E1EF8634BDC6275077A86
        Validity
            Not Before: Apr 15 10:10:37 2024 GMT
            Not After : Apr 16 10:57:37 2024 GMT
        Subject: CN=5184A9D30ECEB002EAA3A508648179087201E276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dc:e3:ef:44:21:59:62:92:b2:32:30:12:59:
                    52:bb:79:95:b9:a4:52:d1:20:c5:99:44:25:52:f3:
                    1a:69:24:d6:e6:b8:bb:ee:28:b0:9f:a2:1b:fe:97:
                    c6:b4:55:a9:2f:e1:5c:ce:74:44:45:c5:2d:93:c1:
                    3e:cc:19:29:22:48:b1:17:e7:0f:7e:b7:8c:e4:66:
                    7b:2c:a6:e4:f3:a0:0b:8e:03:b2:88:ee:80:be:a6:
                    ea:ee:1c:b6:10:e3:c5:12:9c:4e:97:87:27:50:e2:
                    4b:10:af:29:75:c4:69:8d:aa:0f:ab:06:4f:d4:72:
                    4d:39:66:0d:69:ed:15:94:10:1b:6a:63:cd:93:e4:
                    07:a6:f7:c6:25:b4:ca:27:79:d9:0a:72:2c:d6:ce:
                    3c:8e:90:20:2b:c9:15:3d:7f:2d:05:8e:33:55:2e:
                    91:46:a3:3f:66:62:e4:96:85:72:76:34:99:aa:21:
                    1b:9f:df:1d:33:53:70:c3:04:12:46:0f:1b:ba:45:
                    63:e2:cc:06:7f:5b:a8:dd:c7:72:f0:a8:86:c2:5b:
                    b3:a1:aa:62:95:fc:fc:9b:50:8b:3f:81:76:6e:82:
                    49:2e:c2:85:57:83:0e:9f:f3:8c:77:d4:a2:57:0b:
                    e5:4b:aa:1f:8d:4b:09:26:5d:a7:14:09:52:c9:ee:
                    96:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:84:A9:D3:0E:CE:B0:02:EA:A3:A5:08:64:81:79:08:72:01:E2:76
            X509v3 Authority Key Identifier:
                keyid:43:14:A8:D7:ED:CE:CD:2C:46:7E:1E:F8:63:4B:DC:62:75:07:7A:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/0/4314A8D7EDCECD2C467E1EF8634BDC6275077A86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4314A8D7EDCECD2C467E1EF8634BDC6275077A86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/0/4314A8D7EDCECD2C467E1EF8634BDC6275077A86.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:bc:5b:ea:26:e3:71:0e:6d:0f:1e:ae:f9:50:2c:f8:94:40:
         b7:92:8e:b4:6d:8e:b4:1b:15:98:22:3f:a0:3b:f4:fd:c3:b1:
         76:c1:a2:0a:0d:1c:27:b4:11:a9:04:a3:a9:c7:b1:f9:ef:79:
         42:bc:59:58:11:22:af:68:c3:90:e3:77:7b:4a:a9:41:fe:91:
         01:86:10:30:dc:f2:7a:ac:f9:3f:19:01:66:1d:4d:e4:35:c4:
         9e:ce:b3:c0:53:6f:ba:73:a8:f4:90:c2:5b:1b:0f:7c:42:c8:
         11:b5:d8:ef:c2:e1:6b:87:39:ff:f5:72:3a:62:52:7c:48:34:
         6b:51:91:ed:13:4a:56:cd:2f:42:1e:00:0c:73:ac:a1:4b:9a:
         6e:5d:23:c0:98:6b:eb:dd:95:d8:4a:53:e0:6d:c8:d5:81:22:
         5c:c6:a6:fb:e1:cf:c1:08:23:85:9f:69:55:37:ce:05:bd:4d:
         88:ad:4f:11:05:ea:f9:48:92:47:52:82:67:8b:46:74:cb:82:
         8d:72:b3:36:34:0f:07:41:09:28:59:fb:1b:a6:69:35:53:cb:
         41:e6:bb:42:f9:57:8d:b2:2b:92:08:93:77:73:0f:c8:67:98:
         78:a8:11:14:04:b6:b0:74:04:b0:9f:e4:b2:3d:d5:66:97:c7:
         5a:5b:a8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----