Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4KPUCoxQgy7xk9PQ59vyzy4eJ5wGXibUeSEErkauq3Y1/0/7482D811F28FCAAE42D7FFB48B3248AFFCCDFB30.mft
File:                     7482D811F28FCAAE42D7FFB48B3248AFFCCDFB30.mft (raw, json)
Hash identifier:          gItfeaBK57NLPoVmZB8N6a42dWZj/QLxJUf/djj3u6c=
Subject key identifier:   69:C8:BA:7B:DF:BC:C8:96:CD:67:4A:64:80:99:4B:E5:A7:AD:74:D4
Authority key identifier: 74:82:D8:11:F2:8F:CA:AE:42:D7:FF:B4:8B:32:48:AF:FC:CD:FB:30
Certificate issuer:       /CN=7482D811F28FCAAE42D7FFB48B3248AFFCCDFB30
Certificate serial:       5701041E06DDF9B1DC8796C41E45E2978E00748F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7482D811F28FCAAE42D7FFB48B3248AFFCCDFB30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4KPUCoxQgy7xk9PQ59vyzy4eJ5wGXibUeSEErkauq3Y1/0/7482D811F28FCAAE42D7FFB48B3248AFFCCDFB30.mft
Manifest number:          03E3
Signing time:             Mon 15 Apr 2024 09:10:14 +0000
Manifest this update:     Mon 15 Apr 2024 09:05:14 +0000
Manifest next update:     Tue 16 Apr 2024 11:13:14 +0000
Files and hashes:         1: 7482D811F28FCAAE42D7FFB48B3248AFFCCDFB30.crl (hash: vFXP/L9pdo5gd5zDM8BVYtZYN2J5J5zZ7KY4NpFo3/A=)
                          2: 323830313a38303a316266303a3a2f34382d3438203d3e203532363038.roa (hash: xN4+zqhuePwVO+TrmIciwAY51YbS/1Oxn3tFZrps6gg=)
                          3: 3137372e38362e3134332e302f32342d3234203d3e203532363038.roa (hash: WppAgQ9ys2lk37sBKEZJ7paU3c4U5loVVtc1yrnMSUA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:01:04:1e:06:dd:f9:b1:dc:87:96:c4:1e:45:e2:97:8e:00:74:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7482D811F28FCAAE42D7FFB48B3248AFFCCDFB30
        Validity
            Not Before: Apr 15 09:05:14 2024 GMT
            Not After : Apr 16 11:13:14 2024 GMT
        Subject: CN=69C8BA7BDFBCC896CD674A6480994BE5A7AD74D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bb:8c:e4:02:06:c0:7e:25:71:e9:ce:05:b8:
                    c6:82:bf:1d:48:29:28:e7:e2:cc:4b:bb:ab:44:58:
                    33:4c:50:28:ef:bb:c8:9e:a7:6c:56:0f:60:2f:69:
                    46:4a:ed:0b:72:87:68:06:b7:2f:36:37:68:98:ed:
                    b9:2d:4f:74:c4:34:e3:ca:8c:6c:19:e5:9f:f2:81:
                    20:eb:0a:70:52:5b:ff:15:1a:84:01:ce:fa:94:40:
                    00:f7:30:fe:8d:97:13:46:9a:d9:3c:1c:bb:ed:82:
                    69:38:d4:c8:5d:b8:fc:7c:21:f5:20:b1:f9:7a:26:
                    9a:71:f0:27:b2:d6:e4:38:c3:fd:97:8b:6a:4e:12:
                    58:56:ca:01:08:b3:cc:d0:20:13:9e:78:ad:22:3f:
                    8f:95:8f:1d:90:a7:81:4b:4a:82:2e:53:8b:a6:a3:
                    d6:28:4a:04:32:de:66:4d:7a:79:d6:1e:83:10:e0:
                    92:be:fe:7e:f5:7f:b3:f0:0c:bd:bf:1b:1a:45:f5:
                    a1:94:fc:b3:47:42:75:65:c7:68:05:1c:66:f5:d9:
                    bc:4a:65:a6:c6:4c:f9:a5:9d:67:f3:8b:02:f4:2a:
                    02:34:34:cd:2b:8c:24:37:4c:3b:4e:91:05:b1:15:
                    38:ac:3f:62:cc:66:f0:f4:31:6d:d2:61:be:ae:47:
                    6a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C8:BA:7B:DF:BC:C8:96:CD:67:4A:64:80:99:4B:E5:A7:AD:74:D4
            X509v3 Authority Key Identifier:
                keyid:74:82:D8:11:F2:8F:CA:AE:42:D7:FF:B4:8B:32:48:AF:FC:CD:FB:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4KPUCoxQgy7xk9PQ59vyzy4eJ5wGXibUeSEErkauq3Y1/0/7482D811F28FCAAE42D7FFB48B3248AFFCCDFB30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7482D811F28FCAAE42D7FFB48B3248AFFCCDFB30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KPUCoxQgy7xk9PQ59vyzy4eJ5wGXibUeSEErkauq3Y1/0/7482D811F28FCAAE42D7FFB48B3248AFFCCDFB30.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:6d:b3:50:2f:9a:37:a8:fb:18:81:da:54:4a:ae:c3:f0:02:
         ac:d6:72:82:da:69:58:6f:c2:5d:5a:86:f9:49:34:bd:30:07:
         3c:f8:7a:e1:8f:97:bb:ea:f1:06:bb:bb:b9:09:9a:69:97:57:
         71:0e:32:cc:05:7a:ea:79:80:3c:25:a3:f6:b3:4d:ec:e5:3f:
         9a:11:08:99:08:05:0e:9f:66:e7:c9:07:88:ac:45:55:be:6e:
         08:34:aa:7d:77:f2:b4:14:47:23:f5:a4:75:1e:7c:a3:f6:4e:
         25:da:46:de:65:7d:f2:58:21:75:34:72:23:0a:5c:80:47:68:
         38:42:48:55:22:0b:24:32:c8:2c:3c:02:0b:61:7f:bf:09:d1:
         f8:4f:e1:db:37:e9:3b:cd:ea:6f:af:b2:56:e8:11:c5:77:e6:
         1f:51:4f:d3:ab:e0:30:72:87:d1:ce:35:c0:38:ff:d4:60:c4:
         d9:49:d3:d1:b6:8f:75:86:9c:2e:0a:ca:9a:f7:43:41:0a:46:
         dd:9d:e4:2f:6c:f8:82:69:ad:2e:c5:ef:01:11:4f:3f:17:5d:
         3f:f6:89:eb:5d:6e:fe:4d:5a:7c:e2:19:4c:79:ba:cc:c7:f4:
         66:0e:2a:18:bb:e6:36:35:08:e1:dc:28:46:49:0a:22:2f:6c:
         c7:d2:81:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----