Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5H1FT2my4MpiREG6xUNNuLKvFEVZvx51gz3JhGurhYWi/1/BA9646257906A6D1ECDD6F200CB215B5C5E01F07.mft
File:                     BA9646257906A6D1ECDD6F200CB215B5C5E01F07.mft (raw, json)
Hash identifier:          1HW6XFGiusG0cYB+yEjm+IQgSanrXJYPIJgEsGK5biE=
Subject key identifier:   F9:0D:23:AF:E8:5F:00:E9:4E:13:BE:A0:FF:3A:61:D8:47:45:87:71
Authority key identifier: BA:96:46:25:79:06:A6:D1:EC:DD:6F:20:0C:B2:15:B5:C5:E0:1F:07
Certificate issuer:       /CN=BA9646257906A6D1ECDD6F200CB215B5C5E01F07
Certificate serial:       549B0A0A4D0EA73869B670A2D51EEB500482EA87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA9646257906A6D1ECDD6F200CB215B5C5E01F07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5H1FT2my4MpiREG6xUNNuLKvFEVZvx51gz3JhGurhYWi/1/BA9646257906A6D1ECDD6F200CB215B5C5E01F07.mft
Manifest number:          1C
Signing time:             Tue 23 Apr 2024 14:53:43 +0000
Manifest this update:     Tue 23 Apr 2024 14:48:43 +0000
Manifest next update:     Wed 24 Apr 2024 15:28:43 +0000
Files and hashes:         1: BA9646257906A6D1ECDD6F200CB215B5C5E01F07.crl (hash: VjrTR42Q5bB7MyRqY2AjI6vN/EB6e/0t3EuRgAIEo1s=)
                          2: 3133382e39372e38382e302f32332d3234203d3e20323634313436.roa (hash: S1qaCKI0vtK4CzGuiKO1PYpfHBbCef06p5p599CHkWQ=)
                          3: 323830343a323332633a3a2f33322d3438203d3e20323634313436.roa (hash: Be6Pcr/CjLSQHSghywc02q754u97HqlTdF87zazzP8s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:9b:0a:0a:4d:0e:a7:38:69:b6:70:a2:d5:1e:eb:50:04:82:ea:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA9646257906A6D1ECDD6F200CB215B5C5E01F07
        Validity
            Not Before: Apr 23 14:48:43 2024 GMT
            Not After : Apr 24 15:28:43 2024 GMT
        Subject: CN=F90D23AFE85F00E94E13BEA0FF3A61D847458771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:64:b5:72:1a:5a:3d:31:34:f0:19:0f:8b:80:
                    38:e4:62:85:d4:1f:d2:69:cc:d0:32:55:54:ce:a2:
                    a5:7e:e1:32:7f:25:0c:fc:49:49:3a:f8:ca:15:a6:
                    9d:7e:62:5a:ea:0e:ac:63:c8:4c:26:c5:21:67:c1:
                    b1:00:ab:e1:18:69:59:b6:1f:85:24:51:70:3a:5e:
                    48:95:f5:74:e5:09:e4:b8:b7:83:a2:74:90:34:2c:
                    da:18:d1:52:f0:3e:ca:8b:6e:c5:0c:73:cc:4d:68:
                    af:17:c0:39:a3:b1:49:92:9c:4a:58:83:35:b3:e2:
                    00:d4:f7:71:fe:99:cf:76:e1:09:92:cb:1a:c6:9e:
                    5e:d1:f5:ac:62:aa:32:5c:90:95:43:92:2e:6f:e2:
                    95:98:a1:5f:53:10:97:a2:8c:ae:39:c8:8e:9f:37:
                    d3:bd:b6:6e:d1:dd:4e:5f:fe:85:07:9e:98:c4:2d:
                    18:3a:66:18:6c:1f:6c:32:e1:b8:08:a3:7c:2b:a1:
                    52:3f:07:f8:61:a5:f4:ce:15:32:56:e6:0e:b3:de:
                    94:f9:77:a9:8f:78:39:bc:92:1f:93:cd:dd:72:ed:
                    72:58:b1:62:d6:e9:48:79:1e:d3:1d:cd:4d:a8:ef:
                    c8:e4:cc:fa:e6:2d:e6:b2:a0:59:8c:44:c5:e7:49:
                    f0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:0D:23:AF:E8:5F:00:E9:4E:13:BE:A0:FF:3A:61:D8:47:45:87:71
            X509v3 Authority Key Identifier:
                keyid:BA:96:46:25:79:06:A6:D1:EC:DD:6F:20:0C:B2:15:B5:C5:E0:1F:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5H1FT2my4MpiREG6xUNNuLKvFEVZvx51gz3JhGurhYWi/1/BA9646257906A6D1ECDD6F200CB215B5C5E01F07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA9646257906A6D1ECDD6F200CB215B5C5E01F07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5H1FT2my4MpiREG6xUNNuLKvFEVZvx51gz3JhGurhYWi/1/BA9646257906A6D1ECDD6F200CB215B5C5E01F07.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:6f:5d:72:29:cd:fa:b4:fe:be:8f:36:44:30:09:4d:2e:20:
         61:2e:f1:eb:0a:65:57:c5:df:fd:cd:b4:5b:ac:a7:cf:3e:6a:
         31:e8:97:24:b8:da:27:02:27:73:7b:48:1e:02:45:23:74:88:
         a2:04:6b:e6:43:80:5f:0a:36:49:f0:ea:53:12:e0:13:1f:f3:
         85:8b:61:80:ac:78:41:5a:e3:e4:1c:62:a0:9b:1c:70:e3:eb:
         8f:ee:94:ea:09:95:49:ca:7b:4d:ad:47:17:d8:4f:7d:25:4f:
         35:05:0b:99:35:c7:5c:3b:51:bb:9d:db:3f:41:87:3d:0d:31:
         08:2d:df:fb:61:57:0d:88:c4:e4:5e:0e:10:76:85:59:ec:f4:
         75:69:a3:71:65:a5:5a:6f:b9:b5:85:1d:0c:1f:33:7d:55:e0:
         8b:b6:93:d9:cf:73:82:80:b8:cf:d0:11:07:19:2a:2d:ce:54:
         dd:40:2b:9d:10:81:7b:a9:ba:02:97:c0:8d:6b:35:ff:21:b2:
         2a:68:55:61:28:ff:de:8a:6d:f4:01:af:7f:d0:4e:62:a3:40:
         ac:d1:55:6a:59:f7:ab:8d:65:88:6c:24:f1:23:87:84:35:d7:
         93:71:e9:76:31:dd:f4:47:86:aa:ee:2f:af:40:e5:85:0e:ee:
         0d:d5:0b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----