Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/41E1968B09E2AD0B6F8C59FA1E099FDE913D829C.mft
File:                     41E1968B09E2AD0B6F8C59FA1E099FDE913D829C.mft (raw, json)
Hash identifier:          krJzL+TJgr6PcNk02jbOc7At9V1vFIHLkq/eLDZNZJg=
Subject key identifier:   62:92:B6:26:B3:3A:0D:C1:C5:6C:63:C4:72:83:8E:63:02:79:21:4B
Authority key identifier: 41:E1:96:8B:09:E2:AD:0B:6F:8C:59:FA:1E:09:9F:DE:91:3D:82:9C
Certificate issuer:       /CN=41E1968B09E2AD0B6F8C59FA1E099FDE913D829C
Certificate serial:       612838832FE66343A4D0E03FB4C4791CBB887B69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41E1968B09E2AD0B6F8C59FA1E099FDE913D829C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/41E1968B09E2AD0B6F8C59FA1E099FDE913D829C.mft
Manifest number:          0186
Signing time:             Mon 29 Jan 2024 09:32:03 +0000
Manifest this update:     Mon 29 Jan 2024 09:27:03 +0000
Manifest next update:     Tue 30 Jan 2024 13:16:03 +0000
Files and hashes:         1: 323830343a343463633a3a2f33322d3335203d3e20323637363534.roa (hash: i2RsQz75rfwTFReyHmItBrvLVu1u/KklEMLw1y+6zss=)
                          2: 34352e37302e3135362e302f32322d3234203d3e20323637363534.roa (hash: tkk8JLhTinwVd/q0z/9uRRXTfu7QPFzc6paY+W+/pmI=)
                          3: 41E1968B09E2AD0B6F8C59FA1E099FDE913D829C.crl (hash: iFncy0vRQproWCf92rCKlc12YpRFyuETSrvalKPmUIc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:28:38:83:2f:e6:63:43:a4:d0:e0:3f:b4:c4:79:1c:bb:88:7b:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41E1968B09E2AD0B6F8C59FA1E099FDE913D829C
        Validity
            Not Before: Jan 29 09:27:03 2024 GMT
            Not After : Jan 30 13:16:03 2024 GMT
        Subject: CN=6292B626B33A0DC1C56C63C472838E630279214B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d8:89:c9:30:34:6b:2b:59:c2:95:24:39:19:
                    1d:59:68:06:96:ff:f9:85:18:e2:e0:48:aa:50:6a:
                    20:e7:52:2e:66:21:24:08:38:e6:35:77:b0:ec:62:
                    f2:17:55:0e:18:cf:0b:5c:cc:59:5a:59:04:d1:84:
                    11:cb:bc:0c:97:c4:c1:99:8a:ee:84:0a:70:f6:b0:
                    a6:ac:69:4f:0d:e3:49:9a:37:89:88:24:94:e6:0f:
                    11:79:d8:21:7e:e7:ba:4d:fd:59:12:a8:6d:19:71:
                    9e:ee:30:95:83:0f:d3:5d:41:1c:4e:fd:0e:d4:45:
                    8b:a4:b2:59:39:97:2f:6a:b1:b9:e9:bd:70:dc:62:
                    81:d7:5c:ee:7b:7a:5b:ed:08:55:d6:b9:da:07:de:
                    03:78:27:a6:62:f5:8b:ed:32:19:fd:5f:51:a7:91:
                    1e:33:2c:9c:1c:16:01:5a:b0:74:dc:90:dc:f8:ab:
                    1f:14:56:75:e1:dc:97:0a:5e:a1:c5:25:d8:31:6a:
                    34:5f:91:ec:e9:6b:af:22:e7:a7:8b:70:04:5f:b4:
                    75:d4:87:25:78:97:d0:81:c5:ce:db:b6:a7:f0:43:
                    d9:93:c8:46:44:30:1a:e9:57:53:ed:b2:26:e3:28:
                    30:bd:8e:d7:b0:b8:8c:f9:46:68:ca:f8:c0:20:3b:
                    ef:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:92:B6:26:B3:3A:0D:C1:C5:6C:63:C4:72:83:8E:63:02:79:21:4B
            X509v3 Authority Key Identifier:
                keyid:41:E1:96:8B:09:E2:AD:0B:6F:8C:59:FA:1E:09:9F:DE:91:3D:82:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/41E1968B09E2AD0B6F8C59FA1E099FDE913D829C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41E1968B09E2AD0B6F8C59FA1E099FDE913D829C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/41E1968B09E2AD0B6F8C59FA1E099FDE913D829C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:c3:70:3f:e2:10:72:cd:39:7b:a9:17:ef:71:82:cf:ea:5b:
         e6:07:19:29:f7:43:9b:8e:22:87:d1:72:bf:54:ae:6d:1f:89:
         0b:23:6e:da:3f:c0:41:17:9d:43:8f:db:a5:1c:a9:50:1a:06:
         a0:a8:02:44:c7:0a:3a:dc:47:bf:7d:d1:81:f8:2b:bd:31:a0:
         35:0f:01:75:dd:bc:70:9d:9f:16:2e:3f:8d:34:04:a0:02:9f:
         f1:d5:a3:2c:a9:c1:65:7a:6b:2c:dc:30:38:35:3e:08:17:47:
         48:e5:1a:a3:2d:1c:ab:8b:06:32:39:4c:24:0f:78:fd:c1:d7:
         f1:34:06:22:0f:0a:10:bb:e0:ed:4f:f8:71:77:9e:6c:ec:03:
         3b:65:45:c5:3c:8a:93:4b:5c:85:c0:60:b2:a0:39:97:5f:d6:
         35:87:3a:0f:59:4b:46:c5:30:5e:05:40:91:aa:78:d2:9b:7e:
         cc:78:49:85:2f:31:ed:77:5a:fb:be:7d:fc:00:73:7c:d7:bb:
         91:d0:b9:9e:11:e1:57:db:e2:a6:c1:ec:df:6e:a7:76:5a:cf:
         95:f4:ea:bb:46:b0:c7:4d:dc:31:19:34:98:21:be:31:0d:95:
         1b:c9:3a:4c:53:42:be:c3:85:8b:4c:54:12:d9:8c:bf:b6:3c:
         6d:a6:de:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----