Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/CF4643F228289E568079F3C6358BADAED2E6A42B.mft
File:                     CF4643F228289E568079F3C6358BADAED2E6A42B.mft (raw, json)
Hash identifier:          vdiU8cxANzb9Rk9oExlt0f2GcsPWpK3Cq/mUudZBiAo=
Subject key identifier:   5D:49:93:1A:46:D1:3A:97:C7:BE:73:DF:AA:95:20:AE:DA:35:DC:91
Authority key identifier: CF:46:43:F2:28:28:9E:56:80:79:F3:C6:35:8B:AD:AE:D2:E6:A4:2B
Certificate issuer:       /CN=CF4643F228289E568079F3C6358BADAED2E6A42B
Certificate serial:       213BDCEE13008A673EDAEDA2069B138ED2A41F74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF4643F228289E568079F3C6358BADAED2E6A42B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/CF4643F228289E568079F3C6358BADAED2E6A42B.mft
Manifest number:          06
Signing time:             Wed 17 Jan 2024 21:45:34 +0000
Manifest this update:     Wed 17 Jan 2024 21:40:34 +0000
Manifest next update:     Thu 18 Jan 2024 23:21:34 +0000
Files and hashes:         1: CF4643F228289E568079F3C6358BADAED2E6A42B.crl (hash: I8TOTgGKVlnA/Cr4nqhYhPPrIJy7ji72+J/oLI7nVmA=)
                          2: 3137302e3233392e3235322e302f32322d3234203d3e20323636333630.roa (hash: lpfgAIYTtxbdYk2lWaNgdFSlBtlc95gYLKqDgkZ60tk=)
                          3: 323830343a333661303a3a2f33322d3335203d3e20323636333630.roa (hash: K148l/Kqn7XvscOtaBFsESIeBNg5/X0UwabiwCVBSjA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:3b:dc:ee:13:00:8a:67:3e:da:ed:a2:06:9b:13:8e:d2:a4:1f:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF4643F228289E568079F3C6358BADAED2E6A42B
        Validity
            Not Before: Jan 17 21:40:34 2024 GMT
            Not After : Jan 18 23:21:34 2024 GMT
        Subject: CN=5D49931A46D13A97C7BE73DFAA9520AEDA35DC91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:24:65:37:db:7b:3b:7d:d0:74:63:fb:27:91:
                    aa:1e:a5:6c:02:8e:e6:6f:2e:78:67:bf:e3:d5:ec:
                    87:38:61:18:2d:d2:be:b7:e0:2d:32:32:5f:b6:ff:
                    cb:82:f2:22:0f:0d:02:58:7e:78:4e:ea:b0:ce:86:
                    d5:34:c1:a9:7a:a2:4a:c6:b0:56:08:a4:c8:8d:8d:
                    54:81:fd:e3:1f:96:1e:bc:70:a3:a2:bc:d3:39:ec:
                    c7:54:60:6e:68:c8:ff:2c:2c:50:ba:8b:aa:40:9e:
                    9c:bc:c0:e8:90:dc:f5:37:30:59:e5:71:8d:0b:3c:
                    31:fc:5e:e2:06:4d:92:6f:fa:8d:c5:37:2f:59:18:
                    f8:78:b8:93:46:40:49:10:87:e4:74:fd:97:07:db:
                    d0:3f:7e:34:d5:41:8e:15:b7:0e:24:73:da:0f:52:
                    f9:b5:15:34:00:5d:46:6d:aa:7a:98:7e:2b:d5:87:
                    86:23:5d:cc:6b:7e:f4:08:74:75:23:df:e8:e3:4e:
                    68:d5:c5:20:20:18:3d:2f:88:3e:6e:9d:4d:60:60:
                    4e:ba:0e:f0:9a:fd:75:59:84:6f:5d:a1:5e:7c:82:
                    ef:df:e5:ff:ae:b3:4e:4b:27:b5:93:75:b4:67:5a:
                    d7:69:b2:bf:a6:15:6b:39:e1:88:40:7e:1a:b3:03:
                    43:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:49:93:1A:46:D1:3A:97:C7:BE:73:DF:AA:95:20:AE:DA:35:DC:91
            X509v3 Authority Key Identifier:
                keyid:CF:46:43:F2:28:28:9E:56:80:79:F3:C6:35:8B:AD:AE:D2:E6:A4:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/CF4643F228289E568079F3C6358BADAED2E6A42B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF4643F228289E568079F3C6358BADAED2E6A42B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/CF4643F228289E568079F3C6358BADAED2E6A42B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:7f:2b:3b:1e:67:d9:c5:bc:7a:51:55:77:0a:d8:7b:d6:06:
         cd:1c:58:03:c9:b8:95:b6:40:98:75:cb:2d:75:f4:60:c1:cf:
         ea:6f:02:e5:01:b0:ae:41:5d:59:cc:03:71:c9:31:49:39:d8:
         86:35:c3:ea:94:0d:a7:58:78:01:63:65:65:9b:7c:55:91:b7:
         0f:65:81:bb:25:86:38:6a:29:2d:8b:a5:02:50:59:ce:9f:d5:
         f8:eb:12:c8:ab:96:3e:36:ac:33:5e:20:51:5f:64:53:3b:ab:
         f0:f8:40:23:88:31:c6:34:e3:db:96:3b:c1:6c:c5:af:b9:6b:
         d6:0e:fa:75:c4:dc:39:96:d5:72:ff:ef:56:a3:8a:af:09:b8:
         e5:18:cd:f7:79:83:41:8e:8f:0a:e1:7d:3f:0d:97:9d:ab:c4:
         52:c2:d7:de:5c:01:0a:5d:35:a9:ac:c0:98:f2:2c:d9:e7:08:
         40:cb:fb:95:5a:38:9b:f8:5d:6a:41:6b:97:fe:9b:f5:e2:59:
         91:75:ca:8e:2c:b8:cb:2c:b7:a1:0e:d0:a5:20:31:9c:8c:b3:
         ec:e9:0d:75:22:4e:80:25:b4:0f:80:da:13:88:d3:72:a9:c0:
         9d:79:67:32:55:16:25:d6:50:80:89:19:ac:e6:4f:eb:3a:7b:
         7a:74:f8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----