Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/C932A24EC705A8BEBC3C663ACEF965792455753E.mft
File:                     C932A24EC705A8BEBC3C663ACEF965792455753E.mft (raw, json)
Hash identifier:          G+cPakUbKxMznpx3CYnL0IZf9DokDjhjL74OS4MWoEA=
Subject key identifier:   94:C4:3F:CC:13:54:06:0D:41:06:F7:06:BC:3E:86:7B:61:F8:9C:78
Authority key identifier: C9:32:A2:4E:C7:05:A8:BE:BC:3C:66:3A:CE:F9:65:79:24:55:75:3E
Certificate issuer:       /CN=C932A24EC705A8BEBC3C663ACEF965792455753E
Certificate serial:       6DE913CBD861E17033E70772FA712AF85611055A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C932A24EC705A8BEBC3C663ACEF965792455753E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/C932A24EC705A8BEBC3C663ACEF965792455753E.mft
Manifest number:          0229
Signing time:             Mon 15 Apr 2024 11:42:11 +0000
Manifest this update:     Mon 15 Apr 2024 11:37:11 +0000
Manifest next update:     Tue 16 Apr 2024 12:39:11 +0000
Files and hashes:         1: C932A24EC705A8BEBC3C663ACEF965792455753E.crl (hash: tI4gGdYyAO6NpJHW3c7xCJ/gPYDnRcnQ1fQlYv4GMGQ=)
                          2: 323830343a376463383a3a2f33322d3332203d3e20323731353832.roa (hash: 5YAGV9jbwKMR/gM+AJT/My9jgtMFHngGwXQAJv7s2UU=)
                          3: 34352e3136352e3138302e302f32322d3232203d3e20323731353832.roa (hash: AiJgcK0zV/mzlR2kR0/YPxhIl6aPN6IrKe5LS5nUKT4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e9:13:cb:d8:61:e1:70:33:e7:07:72:fa:71:2a:f8:56:11:05:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C932A24EC705A8BEBC3C663ACEF965792455753E
        Validity
            Not Before: Apr 15 11:37:11 2024 GMT
            Not After : Apr 16 12:39:11 2024 GMT
        Subject: CN=94C43FCC1354060D4106F706BC3E867B61F89C78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:98:b5:56:1a:b1:c1:2b:9d:4c:b0:0e:77:fb:
                    51:28:34:9f:43:c6:d3:ca:7e:46:59:96:fe:cd:70:
                    e4:8c:d5:fd:d7:ce:44:39:c6:ae:22:9a:dd:96:69:
                    2d:e7:d2:28:71:d5:ea:8e:7a:d9:ad:31:3b:15:77:
                    7a:3d:7c:f7:b7:a7:2b:42:a7:1f:43:c0:e0:3a:1e:
                    d4:47:ac:30:71:14:81:a9:85:f2:6b:9d:83:fd:da:
                    f9:86:fb:c7:e7:ae:bd:5c:33:7e:24:4b:22:bb:1d:
                    6b:0c:b6:a2:16:a8:7b:cf:98:29:ce:6b:7f:01:40:
                    3e:50:41:da:62:42:35:65:f0:17:15:9e:34:27:8f:
                    c0:3c:e4:cc:ac:92:c0:ef:ea:58:a7:a0:ef:cc:f6:
                    ff:b8:6f:3a:2d:e5:9b:37:87:1c:b9:76:00:50:d8:
                    26:4a:75:8f:6a:d3:0f:86:93:c0:05:bf:bc:de:1b:
                    85:9d:cc:4f:5d:bf:41:99:68:9c:d5:a8:82:85:0e:
                    91:48:9d:6a:75:41:3d:a3:9b:3c:a1:50:fd:bb:58:
                    fc:d0:a3:d0:4c:f1:7a:c3:aa:9b:8c:e8:9f:19:bd:
                    92:e5:32:d0:01:cf:9e:fe:e3:3b:7a:0f:de:38:e9:
                    f5:ac:9f:85:21:10:42:d7:86:06:1a:5c:1c:a3:95:
                    2c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C4:3F:CC:13:54:06:0D:41:06:F7:06:BC:3E:86:7B:61:F8:9C:78
            X509v3 Authority Key Identifier:
                keyid:C9:32:A2:4E:C7:05:A8:BE:BC:3C:66:3A:CE:F9:65:79:24:55:75:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/C932A24EC705A8BEBC3C663ACEF965792455753E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C932A24EC705A8BEBC3C663ACEF965792455753E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/C932A24EC705A8BEBC3C663ACEF965792455753E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:a6:9a:b8:7f:0d:65:b1:ea:08:ce:1a:3a:91:89:5d:42:4d:
         11:4f:eb:36:ed:f9:58:59:44:65:d5:68:e1:20:31:d1:2c:f6:
         e7:dd:72:08:09:ec:b4:b6:2e:25:00:fe:a9:a0:b3:61:ac:04:
         67:a1:5f:0b:38:fa:eb:61:68:72:b8:ef:cd:19:8b:d3:23:fb:
         6c:0c:f9:fe:d0:23:9c:44:6a:d0:54:40:d8:35:47:90:8b:2e:
         cb:24:97:1f:f0:37:d2:28:87:8e:9e:6e:86:d2:10:32:f9:13:
         55:94:f4:06:ac:73:81:f3:75:ab:24:8e:51:18:38:1a:be:2a:
         8c:95:c3:08:22:dc:61:35:1e:f0:2c:fc:8b:29:c3:fe:a5:db:
         53:f4:37:6a:8d:07:6b:c7:15:5f:c2:a4:ae:b4:f9:f5:51:01:
         04:ba:5f:6a:e1:8b:c1:38:20:64:2e:c0:2b:bd:bc:b3:56:2c:
         18:d6:91:95:6a:78:41:71:74:8a:29:17:82:36:68:e3:82:13:
         d5:2e:2d:b0:90:39:17:7f:f7:a0:d8:e5:52:85:99:2d:ae:9f:
         cd:40:bd:49:5d:69:26:44:92:30:4f:23:40:0f:0a:e8:7c:67:
         ce:0b:48:ce:8c:46:82:e7:03:1d:a3:7e:0f:53:c1:1f:d7:9a:
         14:b0:92:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----