Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/B928C789E5CF21532927DA25F3DD79DBEF62E896.mft
File:                     B928C789E5CF21532927DA25F3DD79DBEF62E896.mft (raw, json)
Hash identifier:          8Ok2WiIW68wFQW4kxf2D+kWC8JshzAdL9om75WMouR8=
Subject key identifier:   71:E3:DF:E9:F5:E1:1B:AA:14:CF:AC:F6:7D:55:14:8E:CB:75:CD:EE
Authority key identifier: B9:28:C7:89:E5:CF:21:53:29:27:DA:25:F3:DD:79:DB:EF:62:E8:96
Certificate issuer:       /CN=B928C789E5CF21532927DA25F3DD79DBEF62E896
Certificate serial:       1C1590EBF8B48044FE06F9DC55338ECAEE155082
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B928C789E5CF21532927DA25F3DD79DBEF62E896.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/B928C789E5CF21532927DA25F3DD79DBEF62E896.mft
Manifest number:          6D
Signing time:             Sun 14 Apr 2024 19:39:57 +0000
Manifest this update:     Sun 14 Apr 2024 19:34:57 +0000
Manifest next update:     Mon 15 Apr 2024 22:00:57 +0000
Files and hashes:         1: B928C789E5CF21532927DA25F3DD79DBEF62E896.crl (hash: Rz4W/bK8pJKjSYxmSHF1Yy8AE0uSYzfWFPJoknlEKgc=)
                          2: 3137302e3233392e3235322e302f32322d3234203d3e20323636333630.roa (hash: USN4H0UibeJWE4jJ+kqowFTFrlNHAmv58x+CH4DHmdw=)
                          3: 323830343a333661303a3a2f33322d3335203d3e20323636333630.roa (hash: 8wueU7tPPYDPk3Il26sslDD+iwk71OLizDjvT3sGwj4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:15:90:eb:f8:b4:80:44:fe:06:f9:dc:55:33:8e:ca:ee:15:50:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B928C789E5CF21532927DA25F3DD79DBEF62E896
        Validity
            Not Before: Apr 14 19:34:57 2024 GMT
            Not After : Apr 15 22:00:57 2024 GMT
        Subject: CN=71E3DFE9F5E11BAA14CFACF67D55148ECB75CDEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8c:d5:0e:6c:5c:c5:59:19:2b:fe:bb:82:80:
                    ff:fe:aa:55:0d:d4:a2:1f:f1:22:07:51:c0:0d:dd:
                    62:1c:70:4c:5d:d3:a6:40:b1:8e:1b:97:f0:51:cb:
                    d2:1e:38:22:98:aa:87:25:4e:a4:fe:7a:15:91:55:
                    2e:28:06:d0:70:c0:8d:68:e5:18:e8:b7:5a:c5:e1:
                    a7:38:27:df:9f:69:98:33:49:5b:99:b9:28:5f:f0:
                    82:85:18:b1:3c:6f:1d:14:07:bd:8b:f5:25:c7:2d:
                    af:df:4a:e8:dd:c7:47:d3:6c:ef:11:2e:58:74:b8:
                    28:7b:cc:e9:a4:e7:22:cc:03:f1:e3:3a:f0:b0:3d:
                    6e:4b:19:13:3e:a8:36:17:36:1a:47:7e:3b:ce:4e:
                    b5:34:e4:68:56:03:99:84:51:3f:ae:b8:e3:c4:6d:
                    8b:4e:71:d5:1b:ec:5d:e6:a3:39:ce:57:0d:a3:8f:
                    fe:ef:08:ae:c0:21:6b:52:24:1f:76:ac:61:07:6c:
                    02:ef:1b:cc:1a:e6:b4:e1:70:8a:cd:ff:1d:d2:2a:
                    1b:ab:03:b3:09:2b:89:37:f6:b8:e7:1b:c1:b7:37:
                    07:55:ac:7c:d4:86:8e:f8:7c:32:53:2f:45:db:53:
                    05:e3:90:4e:74:f0:d8:3e:4e:4d:36:d1:31:13:20:
                    03:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E3:DF:E9:F5:E1:1B:AA:14:CF:AC:F6:7D:55:14:8E:CB:75:CD:EE
            X509v3 Authority Key Identifier:
                keyid:B9:28:C7:89:E5:CF:21:53:29:27:DA:25:F3:DD:79:DB:EF:62:E8:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/B928C789E5CF21532927DA25F3DD79DBEF62E896.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B928C789E5CF21532927DA25F3DD79DBEF62E896.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/B928C789E5CF21532927DA25F3DD79DBEF62E896.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:65:df:94:b9:7c:44:c1:01:d5:b9:95:01:83:69:63:6e:15:
         42:65:6d:69:f4:fa:fb:bf:56:b3:77:fc:2d:57:93:04:ad:8e:
         68:ca:fa:07:86:3c:3b:1e:b5:81:a1:e0:88:a6:75:4d:f5:89:
         e3:25:71:a7:a8:c9:cd:f2:f4:7d:4a:1e:72:fd:71:6f:2e:ac:
         da:ef:d4:35:9a:0d:46:88:a3:4f:43:94:ac:da:70:ab:3a:0b:
         ca:56:c6:9c:27:68:1f:82:da:13:bd:3e:4f:a7:03:f6:10:b9:
         cf:af:6f:6b:88:c2:74:68:3f:c2:1c:f4:a3:ab:57:21:d5:20:
         a3:af:60:95:68:0d:2b:d7:43:3b:8f:e4:7d:91:31:22:60:97:
         f6:00:11:ae:38:39:fb:55:7c:00:38:04:c5:3d:27:ef:0c:25:
         8a:fd:f2:32:10:47:00:89:7c:da:15:98:0c:a3:34:9f:47:64:
         1b:f8:5c:63:34:2c:aa:6a:37:ef:30:28:66:05:87:26:4e:16:
         fe:2e:98:f0:40:35:c2:c1:f3:d5:87:8b:24:91:4d:8e:84:7b:
         ba:72:0c:89:04:85:36:89:5b:1a:fa:34:8d:85:53:b1:25:b4:
         60:4f:4e:a0:fa:3b:88:dd:cd:e2:f9:52:8e:b2:70:ea:79:14:
         63:b0:79:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----