Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/46F0DB4AB39CE59EFB5EFE6E24B111F00982C1D7.mft
File:                     46F0DB4AB39CE59EFB5EFE6E24B111F00982C1D7.mft (raw, json)
Hash identifier:          7LZomu+/rKuHcOkbyONNUMVXeDmc3XrAU5YUAMyqlLg=
Subject key identifier:   C8:D4:03:3B:B3:1B:8A:98:CC:22:BC:88:A1:75:BB:9A:3A:2D:52:5D
Authority key identifier: 46:F0:DB:4A:B3:9C:E5:9E:FB:5E:FE:6E:24:B1:11:F0:09:82:C1:D7
Certificate issuer:       /CN=46F0DB4AB39CE59EFB5EFE6E24B111F00982C1D7
Certificate serial:       638A1AEA5A86AFBA280A9C6B8D2DE1AD4EBE0E20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46F0DB4AB39CE59EFB5EFE6E24B111F00982C1D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/46F0DB4AB39CE59EFB5EFE6E24B111F00982C1D7.mft
Manifest number:          DC
Signing time:             Sun 14 Apr 2024 22:12:20 +0000
Manifest this update:     Sun 14 Apr 2024 22:07:20 +0000
Manifest next update:     Tue 16 Apr 2024 01:36:20 +0000
Files and hashes:         1: 46F0DB4AB39CE59EFB5EFE6E24B111F00982C1D7.crl (hash: ha5LTy+R7m/wKA0TSSNJeBDVHdHINxQbrK8jbMjkVVs=)
                          2: 3230302e37312e37362e302f32322d3234203d3e203631353939.roa (hash: w/CwQk+3lYWcSO0vmzUgPwm4YKUZB1iWTNNfw4UeivM=)
                          3: 323830343a336361303a3a2f33322d3438203d3e203631353939.roa (hash: nMDDiboW9yCquqkrTP8s/J/Sim5l3O/9T63WRaxV9LI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:8a:1a:ea:5a:86:af:ba:28:0a:9c:6b:8d:2d:e1:ad:4e:be:0e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46F0DB4AB39CE59EFB5EFE6E24B111F00982C1D7
        Validity
            Not Before: Apr 14 22:07:20 2024 GMT
            Not After : Apr 16 01:36:20 2024 GMT
        Subject: CN=C8D4033BB31B8A98CC22BC88A175BB9A3A2D525D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d0:04:05:34:5a:ee:e0:ef:ed:e6:fd:e6:b4:
                    b4:0b:c5:b1:f9:20:33:10:9c:6f:d0:d5:a9:36:c2:
                    56:31:f0:00:26:2f:38:aa:75:5e:63:c7:2a:0b:b2:
                    2f:ca:54:1d:90:87:aa:e6:cb:38:32:22:00:cf:ac:
                    fc:0b:cf:d5:85:a8:21:21:5f:55:be:94:b7:22:8d:
                    69:3f:ea:ec:ae:98:1c:a1:9d:9d:fa:f8:4f:c2:7f:
                    9a:2b:11:00:b9:41:2d:52:db:1f:65:90:28:8e:3a:
                    ad:e5:29:1a:a1:42:eb:79:a0:8e:90:0b:5c:23:60:
                    ec:e9:67:1c:97:be:1b:14:82:5a:f6:d5:96:94:4f:
                    10:a7:a4:38:97:df:ed:7d:98:39:0c:db:80:59:98:
                    f4:16:68:43:4b:19:12:33:1b:86:70:f1:da:e1:7b:
                    39:5a:b2:5b:6a:06:98:22:8d:57:cd:e4:19:b3:fd:
                    fb:6d:54:30:d6:12:65:94:37:02:fd:be:79:45:47:
                    8d:43:28:b2:67:fa:bd:9c:7b:51:b8:24:aa:10:37:
                    b0:88:ba:87:a7:8c:95:78:b3:44:29:39:56:ee:5c:
                    03:51:d1:3d:d9:b4:f5:0e:74:11:c8:a6:84:d0:14:
                    6f:7a:2a:95:3e:aa:e1:fa:71:fa:7f:4b:4e:6f:93:
                    40:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D4:03:3B:B3:1B:8A:98:CC:22:BC:88:A1:75:BB:9A:3A:2D:52:5D
            X509v3 Authority Key Identifier:
                keyid:46:F0:DB:4A:B3:9C:E5:9E:FB:5E:FE:6E:24:B1:11:F0:09:82:C1:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/46F0DB4AB39CE59EFB5EFE6E24B111F00982C1D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46F0DB4AB39CE59EFB5EFE6E24B111F00982C1D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/46F0DB4AB39CE59EFB5EFE6E24B111F00982C1D7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:56:f2:18:76:18:a3:0c:a4:37:1f:87:7b:93:ba:c8:a4:65:
         8f:15:2b:7e:55:ec:e3:78:60:74:22:ff:94:1c:e6:06:08:c4:
         0f:31:90:83:76:7c:ea:9c:d5:c5:51:c9:4d:47:52:99:e3:7d:
         40:d9:16:9c:f2:68:0b:b2:60:f5:a3:2d:34:72:03:2b:f6:72:
         26:73:fc:d5:fd:97:ed:7d:55:d3:1c:31:11:28:6d:2d:d8:38:
         11:8f:bb:29:10:46:0c:26:6b:46:7b:cd:c3:7a:b7:4f:e4:3e:
         cb:3f:d1:8a:d6:7a:24:aa:39:ba:79:eb:7f:38:d5:bd:50:54:
         65:35:87:33:20:7d:d0:b1:49:3a:ff:67:3b:03:9f:d0:8a:58:
         6b:39:72:34:f1:5b:1e:70:a4:23:d8:72:03:51:07:c2:5a:bb:
         e0:f4:57:17:1e:bd:ae:f8:a5:ec:e6:7c:41:1f:c3:f9:f2:99:
         47:bd:ba:48:66:65:3e:5a:d1:9c:66:a8:2b:76:f7:9a:32:e0:
         63:76:4b:1b:bc:e5:85:84:aa:c4:7e:80:b5:ea:dd:e7:8b:41:
         c4:13:76:03:4d:8f:60:bb:f8:79:05:38:ac:ff:84:3a:3d:b9:
         0e:4b:35:a7:98:7a:09:4a:63:7b:cf:c9:1e:b5:bc:5a:8e:60:
         10:32:3a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----