Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2GYAWzKaEAsSXpYAZTzaNu8NgwWSidLrtSUEQgLtiqpF/0/4C877B842838E9616EB624E5ADB8C99C14F0AC36.mft
File:                     4C877B842838E9616EB624E5ADB8C99C14F0AC36.mft (raw, json)
Hash identifier:          /aJI7OhvO1Yy1z0jh1WMFwkQRRz0ghhmxZMvFOgbeXA=
Subject key identifier:   0B:4D:AB:97:07:82:80:ED:25:D1:16:A7:E6:F6:83:22:83:D8:E2:2B
Authority key identifier: 4C:87:7B:84:28:38:E9:61:6E:B6:24:E5:AD:B8:C9:9C:14:F0:AC:36
Certificate issuer:       /CN=4C877B842838E9616EB624E5ADB8C99C14F0AC36
Certificate serial:       6424FB86FB70E7E6B5EECCD6728C124892CED009
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C877B842838E9616EB624E5ADB8C99C14F0AC36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2GYAWzKaEAsSXpYAZTzaNu8NgwWSidLrtSUEQgLtiqpF/0/4C877B842838E9616EB624E5ADB8C99C14F0AC36.mft
Manifest number:          04
Signing time:             Wed 17 Jan 2024 06:59:24 +0000
Manifest this update:     Wed 17 Jan 2024 06:54:24 +0000
Manifest next update:     Thu 18 Jan 2024 07:00:24 +0000
Files and hashes:         1: 34352e3232362e342e302f32322d3234203d3e20323636393533.roa (hash: g8vvpwZ5QG3Z+v+vjn8X6Gm7HPdvYolMtFYyp9ldVOs=)
                          2: 323830343a343564383a3a2f33322d3438203d3e20323636393533.roa (hash: I6/KUB3DdIVyjBi8RMNNVdhdi1nK8k8Dn2mkK2koUQc=)
                          3: 4C877B842838E9616EB624E5ADB8C99C14F0AC36.crl (hash: v0IM//NPrcyq0GDXrgL5rY92fj/FUOOA0omeWaLOCQk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:24:fb:86:fb:70:e7:e6:b5:ee:cc:d6:72:8c:12:48:92:ce:d0:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C877B842838E9616EB624E5ADB8C99C14F0AC36
        Validity
            Not Before: Jan 17 06:54:24 2024 GMT
            Not After : Jan 18 07:00:24 2024 GMT
        Subject: CN=0B4DAB97078280ED25D116A7E6F6832283D8E22B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f5:fd:7e:9f:b4:7a:39:3d:c5:7a:7a:bd:19:
                    f7:2a:39:c1:56:af:64:20:34:21:5c:20:f6:c2:3b:
                    f4:93:31:c7:65:f5:e1:37:25:22:4b:e8:c3:05:f3:
                    37:6a:d7:7d:bf:63:8e:6b:98:6c:fd:65:f1:65:43:
                    b9:ab:a4:97:b2:02:a3:db:ce:ee:be:3c:a7:db:06:
                    fa:e1:e6:37:ef:91:80:37:9b:1c:c5:40:97:43:ae:
                    48:58:2e:da:11:52:c4:0c:eb:c7:22:d6:04:98:26:
                    63:b2:4c:2e:3c:b8:c7:6f:9f:d5:6e:c3:1e:6d:64:
                    9f:f8:df:82:18:5c:f1:b0:9b:6e:52:4d:10:6f:f2:
                    d7:9e:71:c9:ff:96:c8:7e:ea:5f:c9:98:8d:63:16:
                    87:c2:d9:27:72:25:08:9a:c0:1f:4a:bf:6d:6d:68:
                    16:40:67:f3:51:11:74:fa:52:97:6a:c4:5a:45:ce:
                    fc:af:a9:22:8e:1e:bf:92:6f:4d:1d:a2:65:ca:fa:
                    b1:a1:e2:58:90:2e:b4:c3:14:59:83:20:99:42:95:
                    b9:1c:11:ba:1b:63:c1:08:b8:8c:3b:a0:6b:77:ef:
                    a6:c9:e5:ef:15:18:b5:0b:c6:96:49:cd:2e:d4:ab:
                    47:72:5b:60:f0:f6:61:d0:1b:76:98:ef:62:7c:86:
                    b3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4D:AB:97:07:82:80:ED:25:D1:16:A7:E6:F6:83:22:83:D8:E2:2B
            X509v3 Authority Key Identifier:
                keyid:4C:87:7B:84:28:38:E9:61:6E:B6:24:E5:AD:B8:C9:9C:14:F0:AC:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2GYAWzKaEAsSXpYAZTzaNu8NgwWSidLrtSUEQgLtiqpF/0/4C877B842838E9616EB624E5ADB8C99C14F0AC36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C877B842838E9616EB624E5ADB8C99C14F0AC36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GYAWzKaEAsSXpYAZTzaNu8NgwWSidLrtSUEQgLtiqpF/0/4C877B842838E9616EB624E5ADB8C99C14F0AC36.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:0a:e9:f6:e9:68:ed:b5:2b:50:b8:f3:57:f9:bd:26:80:7c:
         54:80:b0:a7:b8:62:45:92:bb:93:4b:85:59:3a:86:f1:69:a8:
         ac:95:6e:5f:d9:c4:17:df:1d:cc:fa:9f:21:02:db:e2:4a:e0:
         30:a1:08:97:ba:09:74:25:ca:39:5b:3c:b1:c4:bf:53:7d:4c:
         6e:98:c8:e8:b8:4a:a1:50:29:82:a6:73:88:f4:0a:18:95:fd:
         47:98:d9:34:5e:ac:26:b6:04:86:a4:10:aa:37:b9:41:4e:08:
         e6:66:ce:18:4b:8b:10:8e:31:d4:ae:94:d1:86:e7:53:74:3a:
         bb:b5:b9:a8:a1:3a:84:f5:32:b2:45:9d:fd:d0:d2:a1:90:12:
         b9:93:99:87:72:d9:83:5a:8b:2d:45:fc:e7:49:c4:15:22:cd:
         78:f6:77:f9:99:32:b7:f1:7f:6c:5f:b0:07:d8:a5:50:66:98:
         0f:28:c1:b7:57:03:7c:5b:ed:24:c0:89:9d:5e:c9:41:b8:55:
         aa:06:a1:26:ae:67:7f:a5:ce:fd:ce:c7:5e:0b:db:9d:8c:84:
         a9:4d:13:b7:b0:8d:56:78:83:a2:83:cc:88:67:c0:8c:20:75:
         76:50:7b:51:8f:ac:f3:5e:9f:f9:ec:e1:8e:42:21:79:85:43:
         48:97:9c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----