Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4NeQRoMny6bLPPwwXtg4xzh3R3Eh2EXXH8kqLaCvXDr9/0/A1245EC98762AD84913719A50BE145ED5A82ADF1.mft
File:                     A1245EC98762AD84913719A50BE145ED5A82ADF1.mft (raw, json)
Hash identifier:          XMMKGHN8gKCPb1Um83wKX0DQVTQ4F7uBz4M0C1+4LbA=
Subject key identifier:   40:46:DE:C4:26:F1:AD:A4:45:61:F6:5C:1F:E3:2C:6B:FF:F6:84:90
Authority key identifier: A1:24:5E:C9:87:62:AD:84:91:37:19:A5:0B:E1:45:ED:5A:82:AD:F1
Certificate issuer:       /CN=A1245EC98762AD84913719A50BE145ED5A82ADF1
Certificate serial:       0B4AF144269E2DC7126522EB94C6B07CB093ED27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1245EC98762AD84913719A50BE145ED5A82ADF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NeQRoMny6bLPPwwXtg4xzh3R3Eh2EXXH8kqLaCvXDr9/0/A1245EC98762AD84913719A50BE145ED5A82ADF1.mft
Manifest number:          69
Signing time:             Mon 15 Apr 2024 07:39:57 +0000
Manifest this update:     Mon 15 Apr 2024 07:34:57 +0000
Manifest next update:     Tue 16 Apr 2024 10:56:57 +0000
Files and hashes:         1: 3230312e37362e3134342e302f32302d3234203d3e203237363536.roa (hash: rBb0Kr2X/j5cVt8oB6nmZ75eyHstSkD70eIqoFonqE0=)
                          2: 323830343a3961633a3a2f33322d3334203d3e203237363536.roa (hash: A85WWj/K5L4LaB8L9JL1eyPMYXj+Qdo4TKwHKpp50Ow=)
                          3: A1245EC98762AD84913719A50BE145ED5A82ADF1.crl (hash: 7B1EWQ3ahlWbs7tBSK/kMbDbD5DHZrOn/d7YJLbo16k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:4a:f1:44:26:9e:2d:c7:12:65:22:eb:94:c6:b0:7c:b0:93:ed:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1245EC98762AD84913719A50BE145ED5A82ADF1
        Validity
            Not Before: Apr 15 07:34:57 2024 GMT
            Not After : Apr 16 10:56:57 2024 GMT
        Subject: CN=4046DEC426F1ADA44561F65C1FE32C6BFFF68490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:19:15:89:7b:09:c4:7b:76:dc:e7:32:21:fb:
                    ef:44:4c:79:8c:55:4b:ef:77:53:78:38:c8:38:2c:
                    e2:15:f6:a7:0e:24:3f:d9:5e:12:e7:b4:00:12:46:
                    fe:43:c8:ce:f5:a6:f0:e4:e5:6a:59:94:0e:25:b9:
                    00:a6:2a:8e:c0:f1:de:76:8c:18:00:7c:7e:3e:c8:
                    12:90:60:a5:6e:4a:4f:f7:da:d7:53:d2:0e:1a:56:
                    4f:15:19:6b:7b:e4:b1:28:9f:7b:3a:bb:3f:23:87:
                    5f:ea:d2:50:cb:54:7d:16:85:e4:97:78:07:55:f2:
                    19:b9:8d:33:86:de:7e:b1:20:1c:8e:87:3d:1b:cc:
                    90:e6:c8:5a:79:64:7a:20:61:42:a0:78:ab:93:66:
                    6a:da:7a:59:2b:80:9f:f8:27:22:e2:db:f9:7e:d7:
                    d4:1d:7b:d5:c0:12:96:ce:68:16:cb:a0:d8:a8:69:
                    ec:e7:cb:ec:d9:90:e8:61:c1:7f:3b:9b:13:b8:fe:
                    0e:95:76:1c:0b:26:2b:6b:bf:66:fd:98:b0:86:36:
                    d1:7d:6c:0c:09:f5:00:a4:05:09:80:64:1e:65:e6:
                    bc:c8:28:2f:21:a0:03:22:d6:14:d5:7b:07:39:6d:
                    ab:8b:4d:f1:7c:10:e0:b4:c5:79:da:5c:e6:c5:df:
                    ca:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:46:DE:C4:26:F1:AD:A4:45:61:F6:5C:1F:E3:2C:6B:FF:F6:84:90
            X509v3 Authority Key Identifier:
                keyid:A1:24:5E:C9:87:62:AD:84:91:37:19:A5:0B:E1:45:ED:5A:82:AD:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NeQRoMny6bLPPwwXtg4xzh3R3Eh2EXXH8kqLaCvXDr9/0/A1245EC98762AD84913719A50BE145ED5A82ADF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1245EC98762AD84913719A50BE145ED5A82ADF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NeQRoMny6bLPPwwXtg4xzh3R3Eh2EXXH8kqLaCvXDr9/0/A1245EC98762AD84913719A50BE145ED5A82ADF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:e5:80:b3:bc:f0:3f:ae:81:07:30:52:71:79:6d:01:4a:4f:
         9d:88:65:ec:df:06:d3:7d:e2:2d:5d:fe:40:18:3b:ae:1d:d5:
         ee:f3:1a:fb:ef:83:7a:f7:04:1e:04:7b:6d:02:c2:52:09:e8:
         f3:fd:f1:59:ef:da:ed:7a:9b:62:2b:3a:ba:c7:36:7b:8a:e1:
         92:8f:62:b8:8d:45:bb:2a:83:8e:dc:e3:62:83:c9:c6:cf:be:
         1f:58:b3:19:d5:2c:4a:ed:4d:70:03:0f:75:cf:3c:db:b4:9f:
         33:79:8a:72:7a:3f:a3:ee:50:e4:6a:bc:9e:3f:a2:bd:e7:e5:
         24:ad:d2:7d:31:34:c7:3f:17:d9:a5:2a:45:b7:f9:31:92:f0:
         dc:7c:55:d9:f5:7c:2f:8f:53:c6:e8:1f:23:6b:a0:f4:c0:c2:
         4a:34:33:6a:c0:74:73:28:c9:03:02:7f:d5:48:ce:06:e6:aa:
         2f:a4:dd:0a:a6:b8:87:06:42:ff:2b:f3:c0:f5:a3:fa:e0:35:
         30:73:51:24:b5:98:bd:3d:f3:96:57:47:20:71:84:76:da:9a:
         10:68:b6:ca:1b:87:d9:bc:90:92:b9:fd:fa:c9:73:1c:6a:36:
         91:8f:44:5a:25:df:8b:64:54:56:b5:c6:2e:1b:07:f3:76:ae:
         ff:cc:59:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----