Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/1/69B63BF9487BCADD2E9FC37921B9F274ECFEBA7B.mft
File:                     69B63BF9487BCADD2E9FC37921B9F274ECFEBA7B.mft (raw, json)
Hash identifier:          HohPlca0erBxSbr24mslmMot0nqBCFpZTL7d6dFfLbY=
Subject key identifier:   F9:C8:D0:27:0D:79:D6:40:83:8B:48:DA:EB:FC:B1:7E:E7:7A:0C:BE
Authority key identifier: 69:B6:3B:F9:48:7B:CA:DD:2E:9F:C3:79:21:B9:F2:74:EC:FE:BA:7B
Certificate issuer:       /CN=69B63BF9487BCADD2E9FC37921B9F274ECFEBA7B
Certificate serial:       30563EC0AC91E1492EE071DC59744D21921ED358
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/69B63BF9487BCADD2E9FC37921B9F274ECFEBA7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/1/69B63BF9487BCADD2E9FC37921B9F274ECFEBA7B.mft
Manifest number:          01C3
Signing time:             Mon 15 Apr 2024 08:05:02 +0000
Manifest this update:     Mon 15 Apr 2024 08:00:02 +0000
Manifest next update:     Tue 16 Apr 2024 09:14:02 +0000
Files and hashes:         1: 69B63BF9487BCADD2E9FC37921B9F274ECFEBA7B.crl (hash: NrfuXT2jgHYw/y4dYl8vuUSKhROB9LsUhritDUH9D9g=)
                          2: 3139302e392e3132302e302f32322d3234203d3e20323731353932.roa (hash: HCmLA/qR54UcXAtcCf4Yu3mcBUM06JXoCX3P2hM1NkU=)
                          3: 323830343a376466303a3a2f33322d3438203d3e20323731353932.roa (hash: FTeyzRwnDh9Ybd0GLo7dc7AlaS878cQR977EQLLi7Eo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:56:3e:c0:ac:91:e1:49:2e:e0:71:dc:59:74:4d:21:92:1e:d3:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69B63BF9487BCADD2E9FC37921B9F274ECFEBA7B
        Validity
            Not Before: Apr 15 08:00:02 2024 GMT
            Not After : Apr 16 09:14:02 2024 GMT
        Subject: CN=F9C8D0270D79D640838B48DAEBFCB17EE77A0CBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:74:e8:f3:9d:a4:a7:77:17:4c:6b:31:82:12:
                    63:c4:2d:44:0c:37:bc:13:73:71:cb:bf:ae:f6:f6:
                    67:28:dd:cc:41:cd:19:48:9e:41:86:c4:25:96:bd:
                    47:c3:c0:5c:32:dd:c8:32:bd:36:87:d8:f9:11:a4:
                    63:57:2f:f3:51:0a:97:4a:1c:a6:79:5d:03:7d:2a:
                    db:7a:af:70:56:28:2e:e6:85:ce:f4:03:e1:e9:e4:
                    f3:c6:96:dc:28:96:2a:44:9e:5f:5b:19:33:b4:c1:
                    96:ef:ec:ca:88:a4:51:62:3a:44:d4:81:39:b1:60:
                    90:5d:c0:5d:ad:2d:44:e9:46:62:a7:fb:71:8a:65:
                    57:54:d1:4b:bd:52:ea:20:a5:35:77:18:95:bf:47:
                    1e:97:25:d9:b6:16:33:9a:b7:91:f6:8a:55:3c:3f:
                    a5:07:70:27:cf:83:73:21:8f:13:2e:e7:a2:a7:e8:
                    f8:67:87:b0:43:52:6e:ab:cf:d2:cf:70:d3:3f:72:
                    1b:e3:3a:31:74:0c:84:70:bb:7a:0c:27:9c:ea:cb:
                    4e:a2:89:c3:44:77:19:76:ca:c7:d9:8c:9c:43:1a:
                    ad:d4:0c:89:e7:fd:a8:72:23:95:14:1d:3e:fc:74:
                    7f:ca:ad:1d:68:0b:af:9e:2d:24:31:b6:1f:4c:61:
                    34:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C8:D0:27:0D:79:D6:40:83:8B:48:DA:EB:FC:B1:7E:E7:7A:0C:BE
            X509v3 Authority Key Identifier:
                keyid:69:B6:3B:F9:48:7B:CA:DD:2E:9F:C3:79:21:B9:F2:74:EC:FE:BA:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/1/69B63BF9487BCADD2E9FC37921B9F274ECFEBA7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/69B63BF9487BCADD2E9FC37921B9F274ECFEBA7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/1/69B63BF9487BCADD2E9FC37921B9F274ECFEBA7B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:2c:05:84:d1:33:f6:7d:e9:7a:3f:4b:7d:7f:43:4b:df:3e:
         68:43:8d:fa:75:da:fb:17:18:0b:10:cb:50:bf:1a:4f:73:d8:
         33:89:60:cf:66:d8:35:7c:c0:b4:b5:f6:01:93:cf:b9:48:dc:
         7c:e2:8c:4c:b3:b7:78:94:d6:28:be:bc:fd:07:86:3b:b0:d7:
         6e:49:ba:bc:00:da:05:3c:5b:d0:46:4f:b1:8c:24:6f:34:6f:
         d7:f9:c9:4e:bc:4b:13:d3:b8:00:ba:d1:9b:ce:91:e4:32:90:
         35:cf:69:c3:43:0c:1d:68:91:9e:84:7d:4b:b7:42:d1:7c:4d:
         f0:8b:e1:67:c6:30:ec:c1:92:6d:e5:ba:30:bf:fc:6d:47:d8:
         4f:1d:9a:82:79:16:b2:ba:55:14:ce:a4:52:0b:3a:83:65:d8:
         9b:de:0e:99:01:81:50:17:60:59:09:76:6c:40:08:a1:d3:d8:
         f3:a5:63:24:c6:dc:25:8a:5d:25:55:3e:a1:0c:3d:c0:ee:38:
         ec:17:94:a9:a1:a5:21:40:f0:32:19:c7:2b:18:aa:ad:e0:d3:
         e7:4b:14:5b:c5:ea:cf:02:b4:e7:46:d3:f7:6e:e7:b3:1b:01:
         da:67:17:3a:95:62:97:87:e1:19:d3:83:fc:3f:c6:9e:d4:83:
         45:62:c6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----