Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/F9DCFE18A323910BC0ECFC653163E431C1161F3B.mft
File:                     F9DCFE18A323910BC0ECFC653163E431C1161F3B.mft (raw, json)
Hash identifier:          Dl28CCobz2VZngCznNudGjSDT+P9jSGg2EMhjJBMVso=
Subject key identifier:   35:8D:5E:F1:ED:74:0C:26:72:F1:91:7F:03:28:86:09:A7:61:A9:B5
Authority key identifier: F9:DC:FE:18:A3:23:91:0B:C0:EC:FC:65:31:63:E4:31:C1:16:1F:3B
Certificate issuer:       /CN=F9DCFE18A323910BC0ECFC653163E431C1161F3B
Certificate serial:       6382C4F3061A0A57901194ACC47071F64F40130B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9DCFE18A323910BC0ECFC653163E431C1161F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/F9DCFE18A323910BC0ECFC653163E431C1161F3B.mft
Manifest number:          01D8
Signing time:             Mon 15 Apr 2024 10:33:36 +0000
Manifest this update:     Mon 15 Apr 2024 10:28:36 +0000
Manifest next update:     Tue 16 Apr 2024 10:50:36 +0000
Files and hashes:         1: 323830343a323936303a3a2f33322d3332203d3e20323634303131.roa (hash: IYVwCJ/aIaGI/NOCFljLxu+qBpUl3oIjOeesfyb+A+c=)
                          2: 3134332e302e3133372e302f32342d3234203d3e20323634303131.roa (hash: CdbfCgdrXJTfjPtsveqjlsB22N17HgRSBoPq1t39E9Y=)
                          3: F9DCFE18A323910BC0ECFC653163E431C1161F3B.crl (hash: mNG5tB7LwnfCr9nwVFKen2ReSvOGdgdb0bNAYZAHG6I=)
                          4: 3134332e302e3133362e302f32322d3233203d3e20323634303131.roa (hash: p+y257pNUb1u17yXribxOwEJrZi/OR7p7b1xLby+qOY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:82:c4:f3:06:1a:0a:57:90:11:94:ac:c4:70:71:f6:4f:40:13:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9DCFE18A323910BC0ECFC653163E431C1161F3B
        Validity
            Not Before: Apr 15 10:28:36 2024 GMT
            Not After : Apr 16 10:50:36 2024 GMT
        Subject: CN=358D5EF1ED740C2672F1917F03288609A761A9B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f7:72:dd:b2:1b:90:f1:e0:8d:65:46:3a:b4:
                    d6:1d:ba:29:e5:1a:1f:39:e1:55:40:99:d5:2c:46:
                    82:94:a5:fa:94:fa:c9:66:d4:65:5b:7b:e5:a7:96:
                    42:e8:11:a8:66:a5:9a:5c:a5:c8:da:e3:be:ff:8a:
                    79:91:5f:ff:45:ba:37:98:dd:30:90:17:31:d9:91:
                    9d:a9:48:61:f3:2a:91:8d:b7:f3:3b:f8:cb:a3:c0:
                    7b:f5:02:ff:7c:f6:04:fd:ed:6a:b5:a4:05:53:22:
                    7a:1e:dd:11:06:95:5e:ac:b6:cc:42:04:99:3c:6a:
                    a1:67:a2:4d:fc:05:da:11:43:b3:dc:6f:fc:bf:0e:
                    98:9d:07:06:8b:93:b6:0d:06:a3:24:71:e4:e4:cd:
                    2b:4e:7a:96:8f:d5:d6:fa:d5:64:33:5d:36:fb:be:
                    67:cc:fa:d0:8e:0c:64:89:d5:6d:95:fc:9b:00:41:
                    50:31:b8:04:77:ed:79:f1:57:f9:a2:17:38:6a:7d:
                    97:12:bf:26:df:54:58:f2:f5:c0:22:f3:98:da:69:
                    d0:16:9a:d2:c2:28:f9:89:de:28:7d:a7:d7:fc:81:
                    b1:af:74:8a:1e:d8:70:c8:4e:a4:b5:f3:7f:b7:25:
                    86:c0:34:f3:ac:56:6d:56:dc:27:32:e5:d7:09:1f:
                    8f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:8D:5E:F1:ED:74:0C:26:72:F1:91:7F:03:28:86:09:A7:61:A9:B5
            X509v3 Authority Key Identifier:
                keyid:F9:DC:FE:18:A3:23:91:0B:C0:EC:FC:65:31:63:E4:31:C1:16:1F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/F9DCFE18A323910BC0ECFC653163E431C1161F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9DCFE18A323910BC0ECFC653163E431C1161F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/F9DCFE18A323910BC0ECFC653163E431C1161F3B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:32:7f:09:47:a3:66:9e:ba:3b:f0:71:06:83:11:6f:77:52:
         24:30:17:8e:d9:c4:d3:1a:11:26:6d:93:29:cd:8b:51:f6:e9:
         77:4c:ac:43:eb:11:2a:d8:0e:76:1e:d9:0f:73:cc:74:05:0e:
         d9:e1:8e:c0:80:20:bb:e7:21:13:d3:1f:23:f9:b5:ca:85:0f:
         3d:1a:0d:6f:dc:4b:2b:16:46:01:b4:ba:56:bc:63:80:8d:b4:
         e4:68:78:b5:e3:c8:1c:e5:e0:46:8a:72:49:93:ba:97:e3:ad:
         84:18:e5:2c:a5:e4:a0:bd:fc:2f:6b:76:aa:aa:79:ea:2e:18:
         3b:3b:a8:28:8e:d7:84:fe:03:00:71:90:a8:a4:7a:cd:f5:1f:
         ec:70:89:63:af:8c:9d:ac:1e:3e:2c:31:cd:43:e1:41:30:53:
         f9:f8:84:02:5c:bc:03:d7:db:6e:15:1d:d3:88:ee:3e:95:32:
         c4:eb:64:e7:f6:ec:b3:26:a4:28:7d:da:54:8f:45:cf:4a:e5:
         ed:80:58:7b:c6:13:af:e9:9f:6a:f1:e7:f2:97:b7:3f:e7:8d:
         ce:7b:19:48:e9:e9:a0:b4:ce:6f:c7:16:e7:29:db:a8:2e:a5:
         d1:75:4c:90:22:82:e4:a7:a0:69:b7:d3:3d:7d:03:b8:41:b6:
         0d:08:d7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----