Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.mft
File:                     63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.mft (raw, json)
Hash identifier:          9rU2VBggAT4pZoghMEEWyzkC9gD2YmwwdgUYiErQMTc=
Subject key identifier:   93:5D:12:EA:0A:0D:5B:4C:6A:AB:A1:17:CD:2D:66:84:5E:67:13:FF
Authority key identifier: 63:ED:33:87:01:F5:B4:BC:E8:EF:3D:98:81:EE:5E:F1:29:9F:D2:37
Certificate issuer:       /CN=63ED338701F5B4BCE8EF3D9881EE5EF1299FD237
Certificate serial:       622882E2015D85E57E88C6DDCBB1BDEB48B1832B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.mft
Manifest number:          0468
Signing time:             Mon 15 Apr 2024 09:20:00 +0000
Manifest this update:     Mon 15 Apr 2024 09:15:00 +0000
Manifest next update:     Tue 16 Apr 2024 09:45:00 +0000
Files and hashes:         1: 323830343a6438303a3a2f33322d3438203d3e203532363335.roa (hash: OUtMocKpqTsuU9z5ENkBvvlBYUvLMDThrENeI7ysn9U=)
                          2: 63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.crl (hash: OoMMek+rLN1RE/xkgYBhZ5IJWsjTkP94zyFMscG1CxM=)
                          3: 3137372e3132352e32302e302f32322d3234203d3e203532363335.roa (hash: Xn4qkxDWtSiq418O7b8PDyoSmFQWlLo6u8GmCiu0fn4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:28:82:e2:01:5d:85:e5:7e:88:c6:dd:cb:b1:bd:eb:48:b1:83:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63ED338701F5B4BCE8EF3D9881EE5EF1299FD237
        Validity
            Not Before: Apr 15 09:15:00 2024 GMT
            Not After : Apr 16 09:45:00 2024 GMT
        Subject: CN=935D12EA0A0D5B4C6AABA117CD2D66845E6713FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fb:df:96:8d:04:2b:48:4a:a8:01:d2:b5:e4:
                    aa:d9:f9:60:19:75:17:19:cb:9a:6a:4a:3f:2c:e7:
                    3d:8e:01:f4:bb:7f:d3:2f:02:4e:ae:ad:38:6a:3b:
                    d5:17:94:9a:82:2c:c1:d3:be:9f:c8:99:24:9e:6b:
                    dd:47:1e:49:e0:9c:75:e1:fe:ae:19:4d:0b:7b:98:
                    92:5a:f6:a1:1d:40:f0:ba:2a:8d:87:2e:e0:3d:28:
                    10:ac:03:e9:a0:70:21:3c:70:ad:f0:5c:27:ce:f6:
                    b0:57:1d:ec:e6:ef:f1:fe:d0:ee:30:28:89:24:4a:
                    bc:97:43:4c:c4:6a:5b:9f:84:d8:37:e7:4b:40:89:
                    d7:fb:f8:2c:bb:8c:48:e3:17:a8:5c:54:b6:e3:a3:
                    2e:42:cc:3d:ee:87:51:01:7e:eb:ef:c2:5b:e8:1e:
                    4a:47:51:e5:11:18:76:c5:50:fe:0d:b8:5f:97:11:
                    20:74:fe:36:92:da:0b:f0:87:3f:72:86:78:57:fa:
                    c2:b7:c4:9f:89:01:7f:13:cb:45:d6:90:da:f4:3c:
                    5c:b3:06:14:1d:42:4c:84:f5:7d:53:44:67:51:bf:
                    00:16:de:b6:4d:82:ae:20:28:f9:d5:0e:8d:0b:29:
                    3c:6e:6c:26:37:c7:27:e0:80:20:9c:7b:78:28:5f:
                    fe:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5D:12:EA:0A:0D:5B:4C:6A:AB:A1:17:CD:2D:66:84:5E:67:13:FF
            X509v3 Authority Key Identifier:
                keyid:63:ED:33:87:01:F5:B4:BC:E8:EF:3D:98:81:EE:5E:F1:29:9F:D2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:c1:5a:6b:07:d1:2a:47:5d:d4:f0:47:55:b7:48:14:28:c5:
         79:4f:c5:db:d5:68:2c:10:35:d2:09:3e:ff:61:f1:37:e2:18:
         50:ea:6a:dc:2b:70:b6:bc:7a:6e:e4:5e:83:63:6a:96:3a:5c:
         26:36:94:20:70:f3:9f:df:95:42:76:6c:33:1a:76:87:8c:54:
         82:bb:78:23:45:11:35:31:b6:33:4c:b3:82:39:57:9a:f1:8b:
         3f:ea:34:c7:ab:18:e0:cb:04:11:28:ec:42:3d:d1:28:66:e2:
         df:4e:a9:18:49:e5:63:a4:36:5a:5c:e3:eb:96:41:ea:35:59:
         3f:8b:32:fa:68:2c:ee:eb:eb:12:80:8f:5f:2c:ab:d5:fd:85:
         83:70:c6:de:7f:e6:5c:cc:35:5e:e7:20:0b:ce:c8:df:a2:a8:
         5b:c7:e8:0e:f8:b3:15:60:76:c1:6f:98:b8:13:51:3d:16:aa:
         56:94:84:f7:e0:21:88:3b:0d:29:f7:86:9d:ca:f3:1a:13:77:
         0d:18:65:42:61:73:3c:df:94:db:a9:da:3a:79:44:bf:a2:03:
         c7:c8:d8:de:e9:85:9b:b6:4d:3a:1d:d0:7d:79:51:65:50:d0:
         23:b7:b2:ba:28:8b:08:e2:25:ec:33:2a:d9:e2:27:c6:bc:bb:
         99:70:d3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----