Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/1/09B85FA7726BDDF717827F3B06CC5A3113D7D202.mft
File:                     09B85FA7726BDDF717827F3B06CC5A3113D7D202.mft (raw, json)
Hash identifier:          ltnHmMbuqCjkdELHnxh4Smb0Y5gGI0RGRYXqVpLlxqs=
Subject key identifier:   90:7F:61:5F:20:2B:B1:F2:AD:AA:21:F8:B7:2A:AD:1E:3C:9A:C9:6A
Authority key identifier: 09:B8:5F:A7:72:6B:DD:F7:17:82:7F:3B:06:CC:5A:31:13:D7:D2:02
Certificate issuer:       /CN=09B85FA7726BDDF717827F3B06CC5A3113D7D202
Certificate serial:       3F04C97DEFFE81719385F5C52C8A36A7FBC30314
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B85FA7726BDDF717827F3B06CC5A3113D7D202.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/1/09B85FA7726BDDF717827F3B06CC5A3113D7D202.mft
Manifest number:          1D
Signing time:             Wed 24 Apr 2024 14:15:14 +0000
Manifest this update:     Wed 24 Apr 2024 14:10:14 +0000
Manifest next update:     Thu 25 Apr 2024 14:45:14 +0000
Files and hashes:         1: 34352e3137302e3135322e302f32322d3234203d3e20323638313535.roa (hash: MZ/CopjtHQxSkwPMYNzbHaTeTWIOKOwPV5YECWUvWF4=)
                          2: 09B85FA7726BDDF717827F3B06CC5A3113D7D202.crl (hash: wx8i2TH2GXeitpAR5WXhnXbvvcnlwFiMgQISjO9evfM=)
                          3: 323830343a353865303a3a2f33322d3334203d3e20323638313535.roa (hash: N/9E2CMvcKUaqbs7EoBP5TDnPm+9Eese09d6X2bjYdA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:04:c9:7d:ef:fe:81:71:93:85:f5:c5:2c:8a:36:a7:fb:c3:03:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09B85FA7726BDDF717827F3B06CC5A3113D7D202
        Validity
            Not Before: Apr 24 14:10:14 2024 GMT
            Not After : Apr 25 14:45:14 2024 GMT
        Subject: CN=907F615F202BB1F2ADAA21F8B72AAD1E3C9AC96A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:24:55:d5:e4:f9:2b:03:de:a4:46:61:79:ae:
                    d2:2b:a9:10:05:c9:78:05:4f:1e:3a:57:9c:2c:68:
                    9d:35:b1:2b:89:0c:94:84:cd:e0:7c:e0:54:1f:66:
                    cd:04:5f:fe:c3:95:96:15:48:32:23:61:ad:fe:7d:
                    75:05:56:3a:c5:5d:a0:07:f4:6f:df:ce:a3:a1:c7:
                    a6:0b:fa:e9:13:0a:bf:44:85:10:4d:a6:71:7e:46:
                    d4:b8:5d:24:3e:5f:b3:5c:a1:0c:aa:31:81:f1:70:
                    2e:df:91:43:2f:f0:46:d1:33:60:eb:c4:31:7f:e7:
                    84:8c:9a:57:a9:ad:dc:da:e2:e4:56:64:7f:b4:ca:
                    1b:f9:c1:fb:64:e8:7e:4d:e8:44:65:9c:ae:1b:27:
                    38:aa:df:82:64:ae:da:45:31:4d:37:45:3e:81:ad:
                    6b:1c:d3:0f:df:9d:ae:11:e4:28:85:64:be:ef:8a:
                    89:41:4c:7c:b8:a1:09:84:8f:69:b3:a7:3b:a1:4b:
                    32:64:ed:c1:ff:6c:e6:e8:4e:b5:dc:3c:c9:78:51:
                    63:d4:8b:33:5f:83:70:28:be:f7:43:c8:f5:b5:86:
                    1a:5e:18:a7:f3:d7:4e:df:1c:e3:20:79:ae:7b:c7:
                    1d:76:27:e0:12:42:30:07:eb:d5:b7:5f:e7:81:e9:
                    1d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:7F:61:5F:20:2B:B1:F2:AD:AA:21:F8:B7:2A:AD:1E:3C:9A:C9:6A
            X509v3 Authority Key Identifier:
                keyid:09:B8:5F:A7:72:6B:DD:F7:17:82:7F:3B:06:CC:5A:31:13:D7:D2:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/1/09B85FA7726BDDF717827F3B06CC5A3113D7D202.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B85FA7726BDDF717827F3B06CC5A3113D7D202.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/1/09B85FA7726BDDF717827F3B06CC5A3113D7D202.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:09:9c:d8:0f:49:c5:1f:39:b6:d8:c8:94:83:08:a3:1f:a6:
         05:09:3b:61:f1:21:2b:a2:3d:cb:be:af:b1:73:82:18:97:a4:
         cf:59:1a:c2:9f:92:bb:c4:d7:b8:7f:6e:cc:5c:be:e9:d9:a4:
         29:5f:16:fc:9a:f4:e0:02:3a:4c:0b:bb:0d:92:7e:e9:09:57:
         d3:ab:3e:4b:53:70:ef:77:ba:58:64:71:51:36:92:f1:d8:19:
         75:7c:e2:f0:b5:9b:2c:16:20:fb:14:c9:ef:8b:0e:45:20:17:
         ee:92:46:6b:0b:6a:58:17:cf:59:ef:45:92:b9:82:0c:86:41:
         54:3c:21:ae:77:5c:da:e5:9b:5e:0a:25:26:f2:f4:f2:82:2a:
         af:35:34:40:a2:f6:45:73:c1:b4:4b:42:ce:9a:ea:dc:93:57:
         2f:58:53:c9:b0:82:97:fc:27:0e:74:31:09:0f:e8:5d:0d:c0:
         7b:49:5d:2f:b0:63:32:e1:3a:92:c1:6c:b2:40:55:c3:9d:7c:
         b1:fb:4d:53:04:f6:5a:f6:be:6a:95:28:9f:9c:2b:d9:de:79:
         71:8c:99:12:9d:cd:23:66:f0:5d:b8:51:cd:d1:f0:f3:22:9d:
         66:02:c9:ba:4a:a3:92:b7:97:63:d7:ef:dd:aa:1e:1e:23:cb:
         c5:c5:44:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----