Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4rEhye7EPJToSwn5YPuFUhPM7236669sgmBEJjjtiyS6/0/B9DAE95F39B54B48DC399BCDF6930D13C6AEC22F.mft
File:                     B9DAE95F39B54B48DC399BCDF6930D13C6AEC22F.mft (raw, json)
Hash identifier:          +MuWh02QunwqO/q0HFiwYOPVlPqh7e+PIH97mOio+Qk=
Subject key identifier:   0D:4B:66:0A:60:B1:7C:30:CF:B9:2F:68:3B:F4:84:DA:EF:1C:66:F0
Authority key identifier: B9:DA:E9:5F:39:B5:4B:48:DC:39:9B:CD:F6:93:0D:13:C6:AE:C2:2F
Certificate issuer:       /CN=B9DAE95F39B54B48DC399BCDF6930D13C6AEC22F
Certificate serial:       481A48B6FF5C59A79364990F67D8113CC81E7DD3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9DAE95F39B54B48DC399BCDF6930D13C6AEC22F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4rEhye7EPJToSwn5YPuFUhPM7236669sgmBEJjjtiyS6/0/B9DAE95F39B54B48DC399BCDF6930D13C6AEC22F.mft
Manifest number:          07
Signing time:             Fri 22 Mar 2024 03:34:56 +0000
Manifest this update:     Fri 22 Mar 2024 03:29:56 +0000
Manifest next update:     Sat 23 Mar 2024 03:51:56 +0000
Files and hashes:         1: 323830343a386566343a3a2f33322d313238203d3e20323733343538.roa (hash: fhmP7d+OKNe4xNPebPovBXbbwdc92w8aCa53CIRm+wo=)
                          2: B9DAE95F39B54B48DC399BCDF6930D13C6AEC22F.crl (hash: oYMHpwUWMK8eBvdYrUfJ4KwtJ2jcuiaoXpb0cO/qMjo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:1a:48:b6:ff:5c:59:a7:93:64:99:0f:67:d8:11:3c:c8:1e:7d:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DAE95F39B54B48DC399BCDF6930D13C6AEC22F
        Validity
            Not Before: Mar 22 03:29:56 2024 GMT
            Not After : Mar 23 03:51:56 2024 GMT
        Subject: CN=0D4B660A60B17C30CFB92F683BF484DAEF1C66F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a0:e8:74:0b:97:6c:a1:0b:1f:1b:29:44:ca:
                    35:82:48:b9:cc:d6:63:f2:e8:db:9d:19:b1:b0:a8:
                    fb:70:48:0b:5f:2f:c7:5d:a9:41:e2:1a:cb:e4:56:
                    db:98:3a:a7:3f:a7:43:f5:8e:6d:8c:cb:ff:76:69:
                    4a:49:73:49:20:a4:81:2c:67:56:19:b5:48:73:d5:
                    14:c1:43:ee:a7:2f:75:6e:42:c5:76:82:19:1e:4b:
                    9d:78:38:c7:8e:78:e0:44:cc:4f:67:89:31:64:25:
                    62:40:d7:7d:b5:d5:b3:71:0d:86:0f:33:2b:24:a0:
                    26:d3:cf:84:6b:f5:b0:4b:05:b1:39:6b:0d:1b:35:
                    d0:61:17:8b:28:86:9f:cd:a3:af:98:a0:0a:58:4a:
                    69:c7:bd:9d:55:84:d7:27:47:79:05:86:f5:a1:67:
                    40:52:3d:04:bc:6a:be:5b:e3:7b:23:9c:ec:02:b7:
                    47:93:7b:43:c6:97:44:76:29:03:88:3a:0c:63:56:
                    f5:09:cb:d6:e7:b0:f8:a7:46:88:70:aa:0c:6d:ad:
                    46:4f:be:e4:b0:5a:16:b8:0f:68:a6:ed:e2:b0:12:
                    fd:65:bb:c6:b1:ae:a4:11:69:2c:60:20:05:f1:96:
                    f2:8e:0e:e2:ff:99:94:dc:fc:42:e2:cf:e7:b8:96:
                    02:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:4B:66:0A:60:B1:7C:30:CF:B9:2F:68:3B:F4:84:DA:EF:1C:66:F0
            X509v3 Authority Key Identifier:
                keyid:B9:DA:E9:5F:39:B5:4B:48:DC:39:9B:CD:F6:93:0D:13:C6:AE:C2:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4rEhye7EPJToSwn5YPuFUhPM7236669sgmBEJjjtiyS6/0/B9DAE95F39B54B48DC399BCDF6930D13C6AEC22F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9DAE95F39B54B48DC399BCDF6930D13C6AEC22F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4rEhye7EPJToSwn5YPuFUhPM7236669sgmBEJjjtiyS6/0/B9DAE95F39B54B48DC399BCDF6930D13C6AEC22F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:2d:14:d4:83:79:07:9b:23:14:a9:81:35:91:02:5f:91:29:
         ad:8f:66:43:42:f7:55:f2:cf:3a:ec:22:c0:7a:83:7c:2c:96:
         12:77:69:a6:56:e2:33:8e:83:3f:b1:e4:55:6a:08:bf:d9:c3:
         d5:cc:5b:f5:e7:b4:98:3e:96:34:b6:d0:12:79:8f:2b:10:fa:
         e6:63:62:0c:d2:2d:f9:2b:cc:07:9d:03:b7:bd:06:c2:b1:e3:
         34:19:57:9d:17:d6:9f:ef:83:02:d8:32:5e:90:88:ea:b0:62:
         4e:3d:34:c3:37:aa:4a:b6:24:53:29:e4:44:a6:3d:85:c8:a4:
         35:8c:5a:50:73:4f:a4:0a:61:47:e8:15:26:b1:c8:54:aa:1f:
         97:01:05:ca:f9:03:fd:4f:5f:4f:76:fd:77:5d:f8:1f:2f:6e:
         fd:99:09:de:01:cc:54:42:b1:38:10:50:68:9e:55:c9:38:2d:
         f6:04:23:15:4d:8b:db:29:ff:3a:77:01:4c:52:b0:b1:fa:31:
         e5:20:61:d3:f1:95:5a:7a:e4:9d:37:88:76:22:fa:c9:16:1c:
         ce:b4:a0:d3:55:d0:68:53:b0:cc:ca:06:94:c9:bb:29:df:e9:
         76:38:30:6d:23:26:ab:6b:10:e5:33:0c:17:a9:3d:d4:72:5c:
         e0:31:09:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----