Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/1/047A120BAFD61D12F625BE87FA116FE46AC41E8B.mft
File:                     047A120BAFD61D12F625BE87FA116FE46AC41E8B.mft (raw, json)
Hash identifier:          v+6hrK6N6pWyfIltbgttO9FVY27B294fVlJQhwcLAd0=
Subject key identifier:   38:7E:B7:52:83:DD:76:EB:CD:83:6C:08:19:53:73:E8:C0:69:D9:77
Authority key identifier: 04:7A:12:0B:AF:D6:1D:12:F6:25:BE:87:FA:11:6F:E4:6A:C4:1E:8B
Certificate issuer:       /CN=047A120BAFD61D12F625BE87FA116FE46AC41E8B
Certificate serial:       27747856FE78185EB695BFC3D583D7B1CC0D5EE9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/047A120BAFD61D12F625BE87FA116FE46AC41E8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/1/047A120BAFD61D12F625BE87FA116FE46AC41E8B.mft
Manifest number:          67
Signing time:             Wed 19 Jun 2024 07:59:32 +0000
Manifest this update:     Wed 19 Jun 2024 07:54:32 +0000
Manifest next update:     Thu 20 Jun 2024 11:25:32 +0000
Files and hashes:         1: 3139312e3234332e3231362e302f32312d3232203d3e20323633353135.roa (hash: TML6UcsThHz/xSe8E5e6/zf3oU9SLT1Y+ntLHvwCRs0=)
                          2: 047A120BAFD61D12F625BE87FA116FE46AC41E8B.crl (hash: gg5eysKZnQOxWEMvFWiQntZ8EvtFone76xAdW3AILb8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:74:78:56:fe:78:18:5e:b6:95:bf:c3:d5:83:d7:b1:cc:0d:5e:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=047A120BAFD61D12F625BE87FA116FE46AC41E8B
        Validity
            Not Before: Jun 19 07:54:32 2024 GMT
            Not After : Jun 20 11:25:32 2024 GMT
        Subject: CN=387EB75283DD76EBCD836C08195373E8C069D977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c0:ed:d3:80:6f:8c:4b:9d:51:52:3e:50:2a:
                    34:cd:3b:d8:3d:78:97:e0:b5:1c:c1:71:58:9d:c1:
                    21:1e:d4:81:5c:d9:ef:92:51:5c:ed:96:98:48:a3:
                    79:a1:2a:fd:46:74:12:19:4d:42:78:48:28:31:a1:
                    8a:c7:e7:5c:76:a3:78:1f:46:50:4f:9c:dd:cd:e2:
                    7d:c6:7b:c2:76:6f:65:a3:50:e4:68:45:ee:df:f5:
                    01:86:f9:f1:b9:48:35:ea:72:d9:08:82:2d:39:5a:
                    bb:bb:20:c9:f1:64:75:72:3e:17:9f:f5:3a:75:b0:
                    84:23:40:af:8f:25:f3:28:0b:d5:9b:0c:05:a1:7a:
                    63:6e:11:6e:96:a4:5c:5d:ca:b0:c2:f9:a6:aa:07:
                    46:c7:34:d8:02:41:b8:68:77:95:4d:68:67:12:83:
                    a6:a7:1e:57:a2:d7:68:76:98:f6:2d:7b:ca:bf:a0:
                    7c:04:67:4d:ac:5d:48:8a:33:60:94:74:77:69:47:
                    a7:cc:7f:40:a4:a3:2a:70:74:47:af:f5:e0:2d:35:
                    45:11:ad:31:fb:79:a3:d5:52:32:ce:af:e7:52:48:
                    25:ae:e5:2e:2f:d5:d4:1b:65:56:6c:0e:8d:e2:7b:
                    ee:ed:6d:98:3b:7e:e4:b3:cb:a8:b3:4d:91:a1:fa:
                    3f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7E:B7:52:83:DD:76:EB:CD:83:6C:08:19:53:73:E8:C0:69:D9:77
            X509v3 Authority Key Identifier:
                keyid:04:7A:12:0B:AF:D6:1D:12:F6:25:BE:87:FA:11:6F:E4:6A:C4:1E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/1/047A120BAFD61D12F625BE87FA116FE46AC41E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/047A120BAFD61D12F625BE87FA116FE46AC41E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/1/047A120BAFD61D12F625BE87FA116FE46AC41E8B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:ab:4a:0c:d5:f8:40:bd:cf:20:b4:1f:2f:d2:bb:8f:7a:0b:
         a3:e0:63:6e:03:32:a5:03:a4:ee:f0:53:aa:04:95:8a:77:c1:
         59:a4:5a:78:b5:e6:2d:8e:33:93:69:ee:b1:dd:b8:cc:58:4e:
         ae:8e:8d:f7:ff:a7:59:90:2f:57:14:a7:09:13:d0:d3:83:02:
         59:f9:53:dc:90:32:dd:3f:2b:09:20:07:7e:cd:c0:17:b6:da:
         e9:02:ce:a6:c8:51:48:59:bb:f0:ce:3c:fb:ee:74:0d:67:c2:
         d0:b7:b8:e4:a6:3b:60:ea:bf:49:08:ed:b1:97:4c:29:b3:49:
         bf:89:0b:15:0b:92:ef:bd:9b:b7:ff:d3:ee:6b:f4:9c:5e:fb:
         a2:de:7f:94:4b:89:a2:96:f6:c9:c0:9f:ea:f8:ea:02:66:7b:
         82:f4:ae:8b:2e:ea:52:77:c2:39:71:bb:1f:68:08:c9:f6:6a:
         86:e5:a4:0f:e7:81:34:35:68:18:b4:fb:87:e4:29:20:eb:92:
         3a:72:4a:56:ec:15:a1:ae:ee:51:89:f9:97:d5:18:80:62:09:
         a8:44:cb:2c:63:41:1d:c7:8f:d5:14:da:b0:c8:c4:96:da:bc:
         22:62:98:92:69:ad:28:2c:2e:94:61:0c:97:d8:b4:ca:38:ff:
         45:9b:b6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----