Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2nQq7qfL1f4fjaU4jxT7vT6Y2kamm1p2kt2kXzCo6pA3/0/0E4984FFBE023CCC1B7FA4F39EF6B28BD40292F1.mft
File:                     0E4984FFBE023CCC1B7FA4F39EF6B28BD40292F1.mft (raw, json)
Hash identifier:          HQ/SjGM+wZQaE7BliPHI0muvPsvK0ya+NhMtKE2L7TA=
Subject key identifier:   3D:27:57:61:5D:FE:20:20:F7:D1:0A:53:AA:10:F1:FB:D6:E8:18:4C
Authority key identifier: 0E:49:84:FF:BE:02:3C:CC:1B:7F:A4:F3:9E:F6:B2:8B:D4:02:92:F1
Certificate issuer:       /CN=0E4984FFBE023CCC1B7FA4F39EF6B28BD40292F1
Certificate serial:       2807A43B3254C78143AECBF0AFC7A784DC487676
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0E4984FFBE023CCC1B7FA4F39EF6B28BD40292F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nQq7qfL1f4fjaU4jxT7vT6Y2kamm1p2kt2kXzCo6pA3/0/0E4984FFBE023CCC1B7FA4F39EF6B28BD40292F1.mft
Manifest number:          4C
Signing time:             Sun 14 Apr 2024 18:28:06 +0000
Manifest this update:     Sun 14 Apr 2024 18:23:06 +0000
Manifest next update:     Mon 15 Apr 2024 21:38:06 +0000
Files and hashes:         1: 3136342e3136332e32382e302f32322d3234203d3e20323635393337.roa (hash: QLq1yX/UDhou6BaBPbxj9urGhwtS4RFLDQbVA92lKms=)
                          2: 0E4984FFBE023CCC1B7FA4F39EF6B28BD40292F1.crl (hash: JknUx59nzDYP7woLjbrZefEr/R4PjEQxiNkvE2+YQWI=)
                          3: 323830343a343032343a3a2f33322d3438203d3e20323635393337.roa (hash: 1y+a8Z68+re3K0F9zvcKnssyd0AHSDaxlYuhvFrxz5A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:07:a4:3b:32:54:c7:81:43:ae:cb:f0:af:c7:a7:84:dc:48:76:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E4984FFBE023CCC1B7FA4F39EF6B28BD40292F1
        Validity
            Not Before: Apr 14 18:23:06 2024 GMT
            Not After : Apr 15 21:38:06 2024 GMT
        Subject: CN=3D2757615DFE2020F7D10A53AA10F1FBD6E8184C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:da:38:41:62:0f:56:f6:6c:df:0c:78:f0:93:
                    32:7f:df:89:89:52:74:a3:58:ee:95:25:a1:d1:37:
                    dc:53:25:2f:c2:ca:3f:8c:97:d6:10:fd:2a:54:d4:
                    51:93:ef:5b:6e:b9:11:73:07:17:b5:36:04:fa:03:
                    5c:b1:81:a8:4a:09:12:d1:c3:b3:7d:1b:f7:50:a5:
                    38:2a:23:9f:5a:49:65:ff:33:39:cb:9c:b3:a9:46:
                    dc:92:f4:8b:ae:b1:22:80:3c:df:d5:a0:0b:4d:6b:
                    ed:10:b2:d8:df:3a:47:c3:56:91:76:a7:da:50:75:
                    6b:5e:d8:42:12:73:72:8b:3c:74:2c:da:68:51:e1:
                    29:52:dc:81:3d:bd:2c:e0:fd:a6:c8:af:44:3b:d1:
                    ee:04:61:94:45:5a:0b:5e:33:38:e0:ca:c0:fa:88:
                    f7:22:45:4c:20:3f:a4:8c:0c:d9:de:7b:9c:c6:6e:
                    51:20:85:ea:f5:7b:82:76:3f:76:cc:e9:ad:ba:23:
                    a7:96:5e:be:f6:d3:6c:f2:bd:cc:4b:17:df:f1:ae:
                    81:83:83:b2:58:28:26:43:dd:49:ed:95:90:3a:17:
                    2c:3e:72:73:11:26:e7:a6:11:45:c5:fe:e2:1c:60:
                    bd:9a:93:51:c6:bb:bb:99:18:4b:34:f1:d5:07:4e:
                    ea:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:27:57:61:5D:FE:20:20:F7:D1:0A:53:AA:10:F1:FB:D6:E8:18:4C
            X509v3 Authority Key Identifier:
                keyid:0E:49:84:FF:BE:02:3C:CC:1B:7F:A4:F3:9E:F6:B2:8B:D4:02:92:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nQq7qfL1f4fjaU4jxT7vT6Y2kamm1p2kt2kXzCo6pA3/0/0E4984FFBE023CCC1B7FA4F39EF6B28BD40292F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0E4984FFBE023CCC1B7FA4F39EF6B28BD40292F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nQq7qfL1f4fjaU4jxT7vT6Y2kamm1p2kt2kXzCo6pA3/0/0E4984FFBE023CCC1B7FA4F39EF6B28BD40292F1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:22:b0:6c:3f:eb:cc:ed:52:95:cb:0e:6e:a7:d3:6a:7f:1c:
         19:9e:19:18:e0:ba:a6:5b:e6:58:f5:10:21:f4:38:6b:83:b1:
         0b:12:8c:8e:ca:da:4c:e1:6f:fc:43:ab:5a:84:f9:ef:81:80:
         3b:5b:94:ef:cc:12:1c:dc:8b:e1:92:3d:9b:11:e4:c6:cc:fa:
         8f:fd:e4:21:58:c9:1c:9c:e7:52:43:bc:2f:cc:47:fc:88:63:
         2d:23:7b:3c:32:5d:22:54:8d:c2:dc:4b:6e:6d:a2:4a:5c:85:
         4f:0a:8b:d2:0e:58:4c:eb:dc:3e:98:34:1a:7f:2a:c9:2e:29:
         d3:26:cf:4a:8e:aa:2f:88:68:29:6a:58:1a:d3:f8:39:76:95:
         f9:3a:45:1a:92:01:b1:f9:d3:bb:ab:9e:43:48:05:6b:18:27:
         14:63:a4:ff:d7:1e:4d:fc:f2:94:7c:4f:c3:cd:0a:25:fe:77:
         25:66:c7:15:08:d5:1a:b5:38:b2:6a:ad:71:2d:78:2d:fa:0b:
         ff:73:a7:11:fc:ff:df:79:68:40:b3:bb:47:1c:06:07:11:63:
         2b:42:42:ef:36:4f:5e:57:df:43:09:21:aa:06:ad:cf:3c:d5:
         a8:9d:dd:6e:8b:08:e0:86:db:02:ff:09:0c:de:ca:69:5e:39:
         6e:ad:e6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----