Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/96D6AE6D52F298970A86B774958FB5B4488CAF64.mft
File:                     96D6AE6D52F298970A86B774958FB5B4488CAF64.mft (raw, json)
Hash identifier:          qC0EpgkJF12KTeGmyZIRuCH6CigTgYCx1TdanHdo4oA=
Subject key identifier:   FD:C2:8D:80:E8:D3:31:22:86:F8:68:FE:F4:D8:A1:99:73:FE:C1:9D
Authority key identifier: 96:D6:AE:6D:52:F2:98:97:0A:86:B7:74:95:8F:B5:B4:48:8C:AF:64
Certificate issuer:       /CN=96D6AE6D52F298970A86B774958FB5B4488CAF64
Certificate serial:       67A674B0ECFCBE04D94FAAC46E20BB7EDFA99B14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/96D6AE6D52F298970A86B774958FB5B4488CAF64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/96D6AE6D52F298970A86B774958FB5B4488CAF64.mft
Manifest number:          8B
Signing time:             Mon 15 Apr 2024 03:59:54 +0000
Manifest this update:     Mon 15 Apr 2024 03:54:54 +0000
Manifest next update:     Tue 16 Apr 2024 06:27:54 +0000
Files and hashes:         1: 96D6AE6D52F298970A86B774958FB5B4488CAF64.crl (hash: GxmeaMcGuSB/Yupn4jHcsCWTswvOYDi4ftqENMiNKcA=)
                          2: 3230302e3231352e3232342e302f32322d3234203d3e20323731333837.roa (hash: HX+4EgMemzg/EJ7YuXetzHThsxVjJ+LuDP/bYRRgR38=)
                          3: 323830343a376162343a3a2f33322d3334203d3e20323731333837.roa (hash: w0fD3gEtNlh7olodl58S/fxGjvgh/mNldlpkGmB4JSg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:a6:74:b0:ec:fc:be:04:d9:4f:aa:c4:6e:20:bb:7e:df:a9:9b:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96D6AE6D52F298970A86B774958FB5B4488CAF64
        Validity
            Not Before: Apr 15 03:54:54 2024 GMT
            Not After : Apr 16 06:27:54 2024 GMT
        Subject: CN=FDC28D80E8D3312286F868FEF4D8A19973FEC19D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:1f:25:86:83:7c:04:a3:6a:86:98:5c:f8:3a:
                    94:cf:36:06:a8:cd:02:35:8f:ef:ee:86:bc:2a:4d:
                    ab:45:8b:a1:e5:85:bf:0a:d2:86:6f:b3:a7:44:f5:
                    3f:41:02:a4:fe:fb:c2:8a:21:3c:2e:1d:ec:c4:34:
                    6f:ea:2a:2f:dc:0f:45:15:3d:a8:f4:6d:cd:ea:a7:
                    b1:f5:c1:b2:ae:f0:86:21:bb:3c:8f:e4:58:b4:fd:
                    e8:f5:f4:03:88:36:c7:41:0f:2b:f9:60:6c:f8:d5:
                    09:3d:28:95:df:27:53:2b:1f:af:7a:06:eb:ca:be:
                    88:f6:66:bb:eb:66:37:4d:f2:3b:7a:b7:4f:30:8e:
                    5b:ca:e5:91:dd:d0:17:80:03:04:c1:05:73:c7:bd:
                    5d:62:2b:ce:eb:25:db:52:c0:c2:9e:e7:c4:1b:b9:
                    a8:0c:31:d4:e6:dc:8b:c7:f6:84:5f:f9:0d:10:46:
                    e7:3a:80:d7:f5:ae:15:e7:3a:51:b0:a9:78:9c:76:
                    79:e6:c1:e2:6f:48:a0:cb:6c:da:2c:83:96:7c:fd:
                    2a:dc:76:15:d7:1a:c4:4d:70:58:5b:57:66:34:2f:
                    d6:a6:0e:e9:9d:85:79:4b:e7:62:2a:0c:10:96:42:
                    f9:00:70:b5:6c:88:82:ef:de:ce:99:38:f2:ca:c1:
                    eb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C2:8D:80:E8:D3:31:22:86:F8:68:FE:F4:D8:A1:99:73:FE:C1:9D
            X509v3 Authority Key Identifier:
                keyid:96:D6:AE:6D:52:F2:98:97:0A:86:B7:74:95:8F:B5:B4:48:8C:AF:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/96D6AE6D52F298970A86B774958FB5B4488CAF64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/96D6AE6D52F298970A86B774958FB5B4488CAF64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/96D6AE6D52F298970A86B774958FB5B4488CAF64.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:e1:53:b9:e1:dc:0d:7d:3d:7e:85:54:44:86:73:10:d3:d1:
         e1:97:94:3a:da:38:48:20:95:a1:25:fd:a7:df:56:40:0f:31:
         35:5b:81:e3:fa:bf:69:9e:db:6f:88:d8:ea:ff:ca:ee:41:e2:
         3b:81:d5:f9:38:9b:e1:18:64:9a:27:5b:3c:13:62:dc:73:fe:
         f6:1c:c3:69:6e:ea:da:71:2f:5b:29:d3:5a:f6:45:f5:93:bb:
         9c:1c:55:ec:10:0c:30:0c:82:e1:28:52:e2:a8:97:de:30:46:
         f7:3e:70:f7:9b:38:5f:f1:f2:ca:d2:1a:c8:ce:ed:84:07:12:
         d4:41:c4:46:a5:18:3a:08:c9:bb:fe:84:44:4d:6d:7b:9d:82:
         5d:91:29:7b:24:7b:8d:96:77:64:64:10:8a:0f:46:ee:2b:4d:
         29:ba:37:4d:45:98:d8:3a:e8:cb:5a:0d:cf:29:98:d0:8f:69:
         80:48:4b:a0:9c:68:02:9d:73:32:18:c4:4e:e7:bd:de:5c:20:
         83:37:d7:90:24:97:10:7e:57:37:b5:3b:87:a4:43:c1:d8:36:
         04:35:5e:d4:74:6a:3e:67:78:b8:5d:98:06:f1:d0:c5:3a:72:
         c6:99:21:51:93:63:c1:8a:31:18:6a:dc:e9:5d:f7:95:8a:d9:
         7e:98:13:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----