Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/21AD11813E5933796A90E41AAF2BB30C2579D0DA.mft
File:                     21AD11813E5933796A90E41AAF2BB30C2579D0DA.mft (raw, json)
Hash identifier:          G6WqpTVbKWPwIHTb70GwoO6ONt0G/H9T38XAUiQFdeU=
Subject key identifier:   8B:1F:9B:62:B0:8F:CF:23:54:A5:2D:64:83:1E:DC:A4:3C:14:14:65
Authority key identifier: 21:AD:11:81:3E:59:33:79:6A:90:E4:1A:AF:2B:B3:0C:25:79:D0:DA
Certificate issuer:       /CN=21AD11813E5933796A90E41AAF2BB30C2579D0DA
Certificate serial:       012F5980AC12A7F1D408210850590EA3FDDC8C6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21AD11813E5933796A90E41AAF2BB30C2579D0DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/21AD11813E5933796A90E41AAF2BB30C2579D0DA.mft
Manifest number:          0439
Signing time:             Tue 19 Sep 2023 08:29:25 +0000
Manifest this update:     Tue 19 Sep 2023 08:24:23 +0000
Manifest next update:     Wed 20 Sep 2023 11:37:23 +0000
Files and hashes:         1: 3136382e3139362e3137362e302f32322d3232203d3e20323635343636.roa (hash: NlU37LB22LBjGMvtbSB5c11JUcxrVhdynbyu0Zq9YdY=)
                          2: 323830343a333439343a3a2f33322d3332203d3e20323635343636.roa (hash: F99lhRwt6OqI9zvI0mT7S+AkD86XLqoo25o/R785Pak=)
                          3: 21AD11813E5933796A90E41AAF2BB30C2579D0DA.crl (hash: Lm7VeEdhnumP8mBpVF2OX1JEhrboyCQCVQEnxxcn8Rg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:2f:59:80:ac:12:a7:f1:d4:08:21:08:50:59:0e:a3:fd:dc:8c:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21AD11813E5933796A90E41AAF2BB30C2579D0DA
        Validity
            Not Before: Sep 19 08:24:23 2023 GMT
            Not After : Sep 20 11:37:23 2023 GMT
        Subject: CN=8B1F9B62B08FCF2354A52D64831EDCA43C141465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:de:0e:1e:2a:94:b0:a2:c8:cb:73:1f:09:17:
                    04:c3:a4:25:ca:cc:09:f9:49:51:3b:39:d1:df:21:
                    41:bb:be:c7:ba:41:bd:e9:b2:36:b5:07:d1:a1:d7:
                    b7:05:05:92:ba:ae:a9:8c:0d:36:68:1e:0c:04:c2:
                    cd:e6:4d:30:e6:35:2e:c6:48:f4:bd:1e:07:1f:45:
                    ad:7b:4c:92:88:f2:45:18:3d:72:47:03:20:f3:2c:
                    0e:b8:e3:79:b4:e9:a1:b3:1f:f4:48:3a:c4:af:f5:
                    43:4b:69:8e:76:a7:15:f6:cd:06:94:8a:8f:1d:f3:
                    75:6a:6e:96:c6:a8:5c:67:56:23:46:0c:5a:6d:0f:
                    87:45:69:98:c4:e4:7c:89:f1:24:5e:58:f1:89:ad:
                    b3:b3:a4:92:af:dd:f3:d1:ed:74:58:a2:57:47:97:
                    88:af:95:a0:f8:cf:bb:ea:36:3d:68:87:a4:be:b2:
                    80:cf:cc:c9:c7:15:6d:ae:73:d7:b6:16:ee:dd:39:
                    32:c8:8a:0e:38:96:1f:12:ed:71:50:fd:57:ad:3c:
                    1a:92:3c:2f:14:70:57:19:7f:5f:d5:e2:a6:b0:b1:
                    1a:8c:ef:65:54:d0:97:e5:b7:fe:9c:5e:16:63:41:
                    58:b3:34:2f:92:97:db:74:1d:89:ca:6e:59:88:09:
                    50:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1F:9B:62:B0:8F:CF:23:54:A5:2D:64:83:1E:DC:A4:3C:14:14:65
            X509v3 Authority Key Identifier:
                keyid:21:AD:11:81:3E:59:33:79:6A:90:E4:1A:AF:2B:B3:0C:25:79:D0:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/21AD11813E5933796A90E41AAF2BB30C2579D0DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21AD11813E5933796A90E41AAF2BB30C2579D0DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/21AD11813E5933796A90E41AAF2BB30C2579D0DA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:f3:4c:6d:60:44:36:e6:2e:82:15:51:43:ca:bf:8e:11:11:
         9c:56:b0:ef:1d:91:23:cd:ad:fa:58:49:92:4a:27:d3:3d:1d:
         20:a4:54:74:df:0a:b0:ad:5d:93:c2:8d:6d:36:3d:72:a5:84:
         d9:47:1f:ab:0f:99:0d:8a:47:12:46:b1:9c:dc:45:ec:9d:c7:
         d6:23:18:05:3d:f5:d2:4d:c4:a7:66:d9:f4:ea:ba:14:85:64:
         22:b6:df:f1:2a:ce:4f:a0:e0:36:14:d2:85:58:f2:52:89:e1:
         32:07:54:9e:83:6f:ea:a2:e8:a0:fb:05:c8:2d:77:53:67:b6:
         7a:77:a7:94:fd:0a:10:75:20:22:ca:e4:8d:fa:e4:27:45:51:
         1e:3f:32:96:3b:7b:b2:2c:89:3c:16:8e:3c:2c:fb:ed:7e:39:
         08:95:4c:5e:62:ff:ff:c3:ef:d5:b9:0b:83:f3:19:75:aa:a9:
         61:4b:ba:3a:ae:d9:a0:fe:60:9a:65:f5:7d:86:d2:3d:85:07:
         5e:d2:f0:14:f7:68:d3:3c:13:71:db:e4:0e:5f:ec:fd:ba:8b:
         4b:e3:d4:75:07:fa:60:cc:71:7d:33:94:5f:6a:cd:42:97:fd:
         9d:7c:ce:b9:a2:30:6a:bf:46:b1:46:d6:97:4d:32:5c:a3:14:
         03:ae:ae:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----