Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/9BB8BEF22E2BBA85B858961647B317702684E0EE.mft
File:                     9BB8BEF22E2BBA85B858961647B317702684E0EE.mft (raw, json)
Hash identifier:          Wgw9rumwtJEQ/0qo2ooGBQ2XW2IGvNQ/TeSPDF4au+U=
Subject key identifier:   B4:DA:77:B8:C4:72:8B:92:25:D8:E6:94:78:39:0B:1E:73:F6:1E:3E
Authority key identifier: 9B:B8:BE:F2:2E:2B:BA:85:B8:58:96:16:47:B3:17:70:26:84:E0:EE
Certificate issuer:       /CN=9BB8BEF22E2BBA85B858961647B317702684E0EE
Certificate serial:       02B38F0BEB445BD6F2FB27763EDB6E53CC2EC4D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9BB8BEF22E2BBA85B858961647B317702684E0EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/9BB8BEF22E2BBA85B858961647B317702684E0EE.mft
Manifest number:          067B
Signing time:             Sun 14 Apr 2024 21:22:01 +0000
Manifest this update:     Sun 14 Apr 2024 21:17:01 +0000
Manifest next update:     Mon 15 Apr 2024 21:22:01 +0000
Files and hashes:         1: 3138392e33392e3139322e302f32302d3234203d3e20323632363639.roa (hash: qBpzk5FSGguBDBs72Hd6s9GowQBAHBY89dz5MJJHw8c=)
                          2: 3137302e37382e36382e302f32322d3234203d3e20323632363639.roa (hash: pl7yHTiWjrYLbYNeD0FyZSOL/1tHtge2lwyh9i4kIKI=)
                          3: 3137372e32322e3232342e302f32302d3234203d3e20323632363639.roa (hash: BvOtq4k89e+HSR9KPGxk41fdZiQdW7IQ/b9lFdwxAzg=)
                          4: 3133382e39342e3232342e302f32322d3234203d3e20323632363639.roa (hash: FH0y1zxBwhdkC50rSoTfCd91FcczP6+esoKMX6vzvP0=)
                          5: 9BB8BEF22E2BBA85B858961647B317702684E0EE.crl (hash: xMGxfPSwj9CKtLmy3pjpmcIzEulMtY7a4ApEEx77toE=)
                          6: 3134332e3230322e3134382e302f32322d3234203d3e20323632363639.roa (hash: Fda4WjpHwM1qBXWnwZDj5pjrgoengEyQbWysryd8WrY=)
                          7: 3138372e37332e3234302e302f32302d3234203d3e20323632363639.roa (hash: BEjKgtBjX2SiFMOceWfmzxucDCXdNG+fHbpdZzqOfF4=)
                          8: 323830343a313364383a3a2f33322d3438203d3e20323632363639.roa (hash: PuVXwbNTyg1FyyphYwIeEcbPqIvZKYnBYJ1XMrm66gc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:b3:8f:0b:eb:44:5b:d6:f2:fb:27:76:3e:db:6e:53:cc:2e:c4:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BB8BEF22E2BBA85B858961647B317702684E0EE
        Validity
            Not Before: Apr 14 21:17:01 2024 GMT
            Not After : Apr 21 21:22:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:13:63:39:ae:ad:bf:47:34:1d:2c:11:9b:e9:
                    d4:99:98:47:85:cf:40:b1:0a:41:5b:6b:4c:d9:bc:
                    5d:b7:73:0e:dd:04:14:03:15:49:50:70:6c:d8:b6:
                    a9:f8:02:34:b8:cc:e2:b8:73:7e:ac:4c:ff:78:ca:
                    6f:46:23:1c:ec:60:62:8a:d6:9a:cd:41:73:03:9a:
                    77:56:66:7d:1e:86:20:21:87:70:bb:43:95:66:b4:
                    2d:9b:e3:8d:d8:ef:31:01:10:6b:bb:08:c0:53:d8:
                    ea:f0:a4:be:8e:eb:c8:e7:9f:06:bc:b1:d4:f4:db:
                    ba:58:80:a7:af:8c:4a:b6:de:22:a6:f8:cc:d4:af:
                    00:a5:8a:9a:bf:e4:de:52:74:62:90:34:f1:26:36:
                    ac:c3:33:73:0d:ea:78:b0:b9:84:1b:46:af:3c:12:
                    a5:da:e4:83:61:71:bd:29:ab:c6:f6:3f:4c:27:3b:
                    4f:a1:f4:8f:93:c0:fd:99:ff:bf:89:f2:35:38:69:
                    56:bc:d1:e2:6a:34:e3:eb:da:6a:79:37:d3:50:95:
                    10:5e:55:cf:33:22:20:0c:72:46:a0:dc:cc:bb:c9:
                    44:f2:9a:63:c5:b7:38:6b:4d:1c:0d:3d:fb:ea:c9:
                    f1:05:1b:84:34:09:27:dc:6d:76:12:8b:9a:3b:7f:
                    02:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:DA:77:B8:C4:72:8B:92:25:D8:E6:94:78:39:0B:1E:73:F6:1E:3E
            X509v3 Authority Key Identifier:
                keyid:9B:B8:BE:F2:2E:2B:BA:85:B8:58:96:16:47:B3:17:70:26:84:E0:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/9BB8BEF22E2BBA85B858961647B317702684E0EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9BB8BEF22E2BBA85B858961647B317702684E0EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/9BB8BEF22E2BBA85B858961647B317702684E0EE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:c9:ee:22:a8:07:ed:05:2a:41:f3:1a:92:e2:a1:56:96:01:
         e4:05:38:67:fd:65:f4:95:2c:eb:af:ff:22:f6:75:eb:d1:96:
         e6:11:ed:b9:d8:30:61:50:65:3e:58:eb:42:78:84:07:a3:bf:
         e0:7b:85:b4:b0:50:5c:21:92:8c:f3:61:3d:d5:5d:fe:20:56:
         04:06:d5:59:74:b8:6a:dc:78:3a:c7:68:32:4f:2a:a6:09:b1:
         b2:76:f4:84:dd:74:d5:de:de:6f:ed:48:eb:84:7f:2d:05:86:
         81:d4:64:3c:a8:85:a3:82:a0:ca:e5:91:97:7f:ef:90:ab:a5:
         6f:41:db:9b:6c:f3:a7:91:19:58:a5:96:7a:ae:6c:a0:5f:d8:
         b3:24:a5:32:7a:5f:e0:db:14:a2:08:5f:04:f7:b3:76:a9:91:
         cc:f1:ef:f6:8f:eb:2e:85:f0:0d:aa:b9:f8:fd:20:d3:8b:ca:
         31:52:c4:71:22:5f:21:0b:65:b1:a9:60:3f:79:9b:5d:1d:11:
         3e:e6:00:ae:21:e1:c0:f5:9b:3a:ae:7a:15:13:dd:25:0f:0b:
         5e:21:bb:d3:0a:04:da:cc:cd:75:ea:ac:be:22:a6:e8:ab:d0:
         70:cf:f6:cb:f8:fd:81:1c:5a:5f:00:b7:71:2b:d8:8e:8a:6f:
         74:fb:e8:a5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----