Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/0964731379C1B14D7D868A5D0D394335B0C618C0.mft
File:                     0964731379C1B14D7D868A5D0D394335B0C618C0.mft (raw, json)
Hash identifier:          AP4lYcE8pwt/8Zp45ksPEsxAXBXt+dH2EVSnF1YpSwE=
Subject key identifier:   54:B9:4E:C4:6A:BE:C6:1C:C5:00:F7:90:48:68:83:9E:67:37:F7:78
Authority key identifier: 09:64:73:13:79:C1:B1:4D:7D:86:8A:5D:0D:39:43:35:B0:C6:18:C0
Certificate issuer:       /CN=0964731379C1B14D7D868A5D0D394335B0C618C0
Certificate serial:       45B3190F5D730E60D39C8F106C95851B2C0C6CCE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0964731379C1B14D7D868A5D0D394335B0C618C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/0964731379C1B14D7D868A5D0D394335B0C618C0.mft
Manifest number:          25
Signing time:             Tue 10 Oct 2023 14:51:14 +0000
Manifest this update:     Tue 10 Oct 2023 14:46:14 +0000
Manifest next update:     Wed 11 Oct 2023 17:52:14 +0000
Files and hashes:         1: 3137372e33362e3132382e302f31392d3332203d3e20323632343031.roa (hash: Ollc/HmQU9laN5KjeGyaXBH+lsGaNslMg5aTpEj6HaI=)
                          2: 0964731379C1B14D7D868A5D0D394335B0C618C0.crl (hash: 3WVwrqn3b5dZTiDXIuKWfax0ODTNs6fFOvQWP9ybnQQ=)
                          3: 323830343a3364343a3a2f33322d313238203d3e20323632343031.roa (hash: 9Hy1xAwV/b33r6KBYPBybLBo7QRY8ngbwhW3LSVFsDI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:b3:19:0f:5d:73:0e:60:d3:9c:8f:10:6c:95:85:1b:2c:0c:6c:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0964731379C1B14D7D868A5D0D394335B0C618C0
        Validity
            Not Before: Oct 10 14:46:14 2023 GMT
            Not After : Oct 11 17:52:14 2023 GMT
        Subject: CN=54B94EC46ABEC61CC500F7904868839E6737F778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2c:2e:d8:6d:8a:34:64:81:92:e1:f0:2d:9b:
                    29:86:f1:ad:68:bc:2b:53:c2:b0:4f:8b:ad:3e:09:
                    69:9b:8c:c6:c2:e9:73:c4:71:39:71:d9:10:bc:55:
                    22:a4:a7:3a:87:de:06:84:89:4e:af:a2:a8:27:b2:
                    9d:ec:ae:d1:0f:22:8d:a6:fe:2c:40:e7:ba:55:d1:
                    5e:b1:61:2b:e3:48:99:fc:e7:46:f8:37:23:4d:6e:
                    c9:76:4d:ce:ae:d8:7f:c0:06:8b:0e:22:6a:7c:0c:
                    74:f2:d4:85:89:01:35:e3:0d:a9:ce:85:c9:77:06:
                    4d:c3:12:cf:f8:19:19:39:2d:61:31:4b:b4:cf:b7:
                    9d:8c:36:f1:cf:67:6e:c0:a6:b5:ef:13:a2:ba:eb:
                    a1:6a:d4:64:06:d0:93:99:98:0a:1b:73:8a:fb:14:
                    a7:89:97:6b:8c:72:b8:7f:90:2d:e1:0a:eb:15:11:
                    47:0b:2b:68:26:61:61:41:7e:f6:74:95:0f:77:b8:
                    91:af:40:46:1c:25:09:6a:5b:ea:ed:56:02:ea:97:
                    b9:39:59:49:9d:3b:e1:b8:67:5c:90:77:b0:eb:58:
                    d9:ae:c6:f0:be:df:74:32:3d:84:f3:45:22:c4:69:
                    4f:4f:71:0f:d5:ab:bf:7d:a4:20:bf:94:0e:69:d7:
                    d0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B9:4E:C4:6A:BE:C6:1C:C5:00:F7:90:48:68:83:9E:67:37:F7:78
            X509v3 Authority Key Identifier:
                keyid:09:64:73:13:79:C1:B1:4D:7D:86:8A:5D:0D:39:43:35:B0:C6:18:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/0964731379C1B14D7D868A5D0D394335B0C618C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0964731379C1B14D7D868A5D0D394335B0C618C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/0964731379C1B14D7D868A5D0D394335B0C618C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:34:2a:05:79:d5:a6:97:42:57:38:22:dd:5d:c5:d8:9e:17:
         f8:2c:35:bb:f7:f8:50:75:85:6b:0e:16:d4:10:51:3c:98:67:
         c9:0e:73:c8:c5:fc:bc:ac:e5:69:9c:c9:98:91:d7:30:9b:7a:
         ac:25:d4:a0:4d:6a:f2:f0:fb:05:bc:94:c3:8f:e5:2e:90:ec:
         a2:60:f8:5f:6b:8b:a3:77:0c:13:11:33:f5:34:63:cc:06:83:
         29:46:60:7d:b5:c4:51:3b:d0:9f:11:21:75:77:ef:9a:d0:39:
         b5:9b:d3:09:eb:02:54:17:55:bf:86:dd:05:2c:d9:c2:ae:d1:
         66:74:12:c6:cb:94:25:f1:a3:c8:5a:0c:a1:34:d8:de:0f:58:
         fa:7a:e4:1c:9d:ad:8a:85:34:88:d5:3f:ba:40:6a:39:ec:31:
         e7:0b:76:45:bc:57:31:85:a3:b4:31:0c:6f:87:f5:c4:16:fa:
         6f:ac:24:10:2d:d7:22:ef:eb:65:a6:d1:b1:e0:a9:38:88:ed:
         1f:7b:62:7d:a6:36:ae:c1:06:c1:0c:af:0f:84:e2:8f:5a:b7:
         e2:1c:b2:47:09:40:86:e8:e7:ca:35:a9:de:a7:8b:e2:a1:e0:
         d1:ff:1a:54:9a:6a:29:5c:31:80:ae:24:20:ab:de:74:a7:bc:
         65:82:b2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----