Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/1/9E11B7426A8445D56C5FD41BEF6DE1638454BED0.mft
File:                     9E11B7426A8445D56C5FD41BEF6DE1638454BED0.mft (raw, json)
Hash identifier:          6surkabRSZaBocb1sHsD9UJWRzcRxC8HgniIKOP9PF0=
Subject key identifier:   60:B7:C4:E6:BE:C4:3D:17:BD:61:A1:5D:B5:2C:E2:55:E9:A4:DC:54
Authority key identifier: 9E:11:B7:42:6A:84:45:D5:6C:5F:D4:1B:EF:6D:E1:63:84:54:BE:D0
Certificate issuer:       /CN=9E11B7426A8445D56C5FD41BEF6DE1638454BED0
Certificate serial:       2F229E7DC83A2E025BA2AE098EB33E8CABD0BC82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E11B7426A8445D56C5FD41BEF6DE1638454BED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/1/9E11B7426A8445D56C5FD41BEF6DE1638454BED0.mft
Manifest number:          16
Signing time:             Fri 23 Feb 2024 13:24:28 +0000
Manifest this update:     Fri 23 Feb 2024 13:19:28 +0000
Manifest next update:     Sat 24 Feb 2024 17:14:28 +0000
Files and hashes:         1: 34352e37302e3135362e302f32322d3234203d3e20323637363534.roa (hash: 1dMPz8g1l5kbdZydEj8kqGdl0RJy3qFSeAt3TB9YQio=)
                          2: 323830343a343463633a3a2f33322d3335203d3e20323637363534.roa (hash: RpGT6dYQnsJ175S+V0LuM7wurXMpCwDEfcXDUwmX4Hg=)
                          3: 9E11B7426A8445D56C5FD41BEF6DE1638454BED0.crl (hash: R5EqNhZ9t7sQY/u3GS+zRVbMVrJco7wC83fjmlHeq2s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:22:9e:7d:c8:3a:2e:02:5b:a2:ae:09:8e:b3:3e:8c:ab:d0:bc:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E11B7426A8445D56C5FD41BEF6DE1638454BED0
        Validity
            Not Before: Feb 23 13:19:28 2024 GMT
            Not After : Feb 24 17:14:28 2024 GMT
        Subject: CN=60B7C4E6BEC43D17BD61A15DB52CE255E9A4DC54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3a:c2:6f:c2:d8:e5:23:13:37:64:a9:ed:ff:
                    c0:1b:9f:4e:00:b3:59:a4:4a:c5:30:e2:da:46:d9:
                    be:64:0b:ef:a7:e5:bb:0b:5b:53:94:31:ab:08:bb:
                    da:75:50:1d:73:fe:aa:cd:50:8f:17:d9:a6:7b:4a:
                    76:25:35:c1:0c:da:c8:ee:32:c1:20:78:bb:5e:7c:
                    c1:57:97:ac:4b:7b:8e:1c:36:18:28:2f:72:86:93:
                    31:7c:b4:74:93:79:92:44:69:b5:68:1a:5d:04:ba:
                    cb:03:53:2a:58:a3:09:65:33:a9:9a:2d:e1:d6:5a:
                    de:f2:51:30:47:26:dd:2c:46:ab:d3:c5:15:0b:66:
                    21:a4:03:c3:9e:68:8f:0f:c2:dc:a1:10:5c:58:54:
                    dd:f0:46:44:48:4b:cb:e6:c7:c4:eb:e7:0d:e3:78:
                    7e:f4:98:59:c1:33:c2:d5:cf:6c:4e:09:f3:f9:89:
                    fe:6b:19:bb:e8:29:f3:7d:95:a1:86:f5:b4:e1:31:
                    8f:f2:20:02:da:80:c4:88:8e:60:58:ad:65:f8:23:
                    67:7f:92:c2:d7:86:23:6c:f9:2f:fc:ee:e1:19:ae:
                    7d:f2:46:e7:32:a6:8f:87:df:81:32:6f:91:85:da:
                    8b:c7:de:15:70:b5:0f:6d:b8:b3:29:db:28:f9:44:
                    43:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B7:C4:E6:BE:C4:3D:17:BD:61:A1:5D:B5:2C:E2:55:E9:A4:DC:54
            X509v3 Authority Key Identifier:
                keyid:9E:11:B7:42:6A:84:45:D5:6C:5F:D4:1B:EF:6D:E1:63:84:54:BE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/1/9E11B7426A8445D56C5FD41BEF6DE1638454BED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E11B7426A8445D56C5FD41BEF6DE1638454BED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/1/9E11B7426A8445D56C5FD41BEF6DE1638454BED0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:ed:eb:33:ab:ce:75:44:4b:61:e6:04:2d:1d:9b:f5:e1:03:
         2d:a2:cc:69:9e:da:1c:28:d3:e8:d1:06:1e:7e:9d:6b:77:7d:
         cf:13:64:f7:2f:92:b9:96:dd:10:39:d7:0d:9c:65:cd:18:a9:
         3c:a6:9b:7e:28:e3:c7:82:03:41:f2:e7:68:e1:0d:62:bd:2c:
         b7:2e:53:ad:29:0e:0c:80:eb:71:97:ee:f7:9b:0a:b4:b2:3f:
         94:6b:e0:dd:8f:6b:7f:17:64:6a:b4:d9:e5:14:9e:51:d3:b1:
         4c:45:72:df:2c:58:40:4d:35:a8:d4:f7:b6:f0:f7:df:2b:65:
         07:6a:32:95:3e:80:80:80:6d:12:e1:04:3e:8e:31:05:22:9e:
         99:c0:97:9d:b4:5a:8b:60:1d:a5:6c:a5:53:11:a5:df:bb:fd:
         ec:26:4e:7f:35:9c:77:8f:e1:49:41:2d:c5:37:90:90:09:51:
         1d:1e:cd:55:89:3f:bd:e2:59:e5:bd:3a:2d:46:78:06:e0:88:
         37:b3:a2:6e:ce:01:b1:64:23:d1:09:be:77:93:6f:76:42:63:
         1e:a3:6a:3e:b2:ee:99:4f:2a:e4:04:14:2a:85:e4:e9:39:19:
         01:8f:f0:11:68:ec:5b:05:63:49:ff:06:60:c2:b3:4f:41:00:
         f1:8c:01:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----