Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/AF40409EC7886F609CB8882BA9E77EC9DF34FCB1.mft
File:                     AF40409EC7886F609CB8882BA9E77EC9DF34FCB1.mft (raw, json)
Hash identifier:          r+u6UOGCKzIMIHi9OjcU7mEReaOfiKvtZrGPGFIkluQ=
Subject key identifier:   35:CE:E5:38:6F:CF:52:AF:84:80:65:2E:89:B1:22:74:C7:29:A4:94
Authority key identifier: AF:40:40:9E:C7:88:6F:60:9C:B8:88:2B:A9:E7:7E:C9:DF:34:FC:B1
Certificate issuer:       /CN=AF40409EC7886F609CB8882BA9E77EC9DF34FCB1
Certificate serial:       1E677D3B5D4CF65F665E930E30F0D7CEF66E4BB8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF40409EC7886F609CB8882BA9E77EC9DF34FCB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/AF40409EC7886F609CB8882BA9E77EC9DF34FCB1.mft
Manifest number:          4F
Signing time:             Sun 14 Apr 2024 11:51:32 +0000
Manifest this update:     Sun 14 Apr 2024 11:46:32 +0000
Manifest next update:     Mon 15 Apr 2024 11:58:32 +0000
Files and hashes:         1: AF40409EC7886F609CB8882BA9E77EC9DF34FCB1.crl (hash: /c2TlHsTn4W9B/6qmgz31QRWGTbCqfdlXsBFli0cTA0=)
                          2: 34352e3136332e3137322e302f32322d3234203d3e20323638353536.roa (hash: YMFCGvBfUgyi7egUHBS4mwFHZHi6IU78lTWwe7oy7+k=)
                          3: 323830343a353330303a3a2f33322d3332203d3e20323638353536.roa (hash: KQUZNH9cnFgA3glAyOONnwA+Zv7vh0ZOuOG716G3UMk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:67:7d:3b:5d:4c:f6:5f:66:5e:93:0e:30:f0:d7:ce:f6:6e:4b:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF40409EC7886F609CB8882BA9E77EC9DF34FCB1
        Validity
            Not Before: Apr 14 11:46:32 2024 GMT
            Not After : Apr 15 11:58:32 2024 GMT
        Subject: CN=35CEE5386FCF52AF8480652E89B12274C729A494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:58:8d:f7:4b:4e:f2:ed:d2:49:0f:06:df:9c:
                    e4:42:b3:ef:14:05:75:af:f3:7a:48:ff:5f:99:91:
                    c7:d4:e0:ff:c3:6c:33:53:c1:fe:81:d9:c2:63:ad:
                    4e:71:de:89:8f:b7:0d:37:38:13:a4:a3:d1:af:e7:
                    bc:a5:8b:a8:30:93:38:f2:04:d4:95:8f:17:30:6b:
                    45:06:ba:70:1f:a6:87:2e:aa:49:eb:a2:e9:49:f9:
                    00:c8:72:d7:ac:18:84:8c:32:8e:2a:2e:2d:4c:62:
                    93:a3:55:79:8d:9e:f8:4d:bc:94:db:18:fd:96:b6:
                    ac:30:98:5c:c5:6a:1f:fc:6b:ca:43:f3:4d:ae:ce:
                    58:3f:15:c6:42:98:d2:bc:76:5b:f4:74:05:92:34:
                    a2:6c:fd:2e:be:da:19:9b:12:58:df:75:35:5b:48:
                    90:0a:82:c9:fd:bb:e5:10:d1:1c:07:53:b5:5e:c4:
                    ec:40:08:d6:8f:d4:e0:ae:76:c3:86:a6:e2:65:2c:
                    48:7f:2f:e4:bf:06:7e:a8:83:b0:90:bc:b9:f6:4e:
                    4e:8b:6a:c0:67:55:4b:2b:18:ab:a0:9c:2b:69:95:
                    2f:99:44:e1:63:57:56:ac:76:05:b3:89:fc:7b:09:
                    30:07:0d:ee:ac:49:83:5d:a9:63:69:95:05:65:3a:
                    57:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:CE:E5:38:6F:CF:52:AF:84:80:65:2E:89:B1:22:74:C7:29:A4:94
            X509v3 Authority Key Identifier:
                keyid:AF:40:40:9E:C7:88:6F:60:9C:B8:88:2B:A9:E7:7E:C9:DF:34:FC:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/AF40409EC7886F609CB8882BA9E77EC9DF34FCB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF40409EC7886F609CB8882BA9E77EC9DF34FCB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/AF40409EC7886F609CB8882BA9E77EC9DF34FCB1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:f0:d3:7a:58:25:71:a9:08:79:9d:c0:4a:22:9d:ee:13:5d:
         07:67:2f:02:0d:a0:bb:ae:ee:09:d3:03:83:18:14:fc:e5:9d:
         3c:d8:52:f2:22:c4:1c:4d:4d:82:8f:b3:d6:06:dd:17:2b:81:
         a4:19:27:ad:e6:9a:af:be:05:ab:c7:51:86:2c:4b:5b:55:51:
         30:08:3c:68:dc:cc:e4:cd:93:02:06:60:21:53:84:bc:2e:69:
         04:c7:33:34:18:14:fe:f2:e6:e4:f0:16:92:b4:d9:ba:6c:d4:
         ad:8e:9b:b6:55:2b:14:93:9c:dc:69:5a:d5:a2:c9:99:37:d8:
         77:c4:d8:5b:4c:be:a0:bb:5e:03:54:cd:b3:cc:d0:53:2a:84:
         0f:58:fe:ea:19:f3:8a:a2:fc:cf:56:61:4b:a0:65:63:61:90:
         0b:d9:49:d5:ed:d0:e0:6b:0d:02:5e:86:8d:0a:34:7c:11:fe:
         7a:67:6a:1d:c6:f4:a9:cf:cb:be:c0:9f:91:e7:2d:aa:3d:5a:
         8b:dd:65:e7:7a:00:21:65:d5:2e:cf:9c:e3:9b:1f:1c:8d:1c:
         68:4b:0b:59:4f:88:98:97:81:fc:6c:53:79:1a:20:c3:fa:a5:
         c1:21:10:02:43:36:b3:78:53:33:b1:d9:99:8b:c0:03:a1:d2:
         a9:b6:4f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----