Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5egQvFFF6zsUysSfK3fVmGhg7g4HSB1vfJCdsKMxwTQQ/0/C9928AF40EC3F301ABFA6B43CCA84542B1BD22C5.mft
File:                     C9928AF40EC3F301ABFA6B43CCA84542B1BD22C5.mft (raw, json)
Hash identifier:          RGBnTgnMqsISwTKgsr5tTVofiO9yyJIa2nwY830sY2s=
Subject key identifier:   34:41:A1:81:28:81:D7:C5:75:77:68:34:B9:A1:53:80:88:E5:C2:7E
Authority key identifier: C9:92:8A:F4:0E:C3:F3:01:AB:FA:6B:43:CC:A8:45:42:B1:BD:22:C5
Certificate issuer:       /CN=C9928AF40EC3F301ABFA6B43CCA84542B1BD22C5
Certificate serial:       148D4B99CCC372A26C5804F73FFD1AE00C812F79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9928AF40EC3F301ABFA6B43CCA84542B1BD22C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5egQvFFF6zsUysSfK3fVmGhg7g4HSB1vfJCdsKMxwTQQ/0/C9928AF40EC3F301ABFA6B43CCA84542B1BD22C5.mft
Manifest number:          020B
Signing time:             Mon 15 Apr 2024 00:23:08 +0000
Manifest this update:     Mon 15 Apr 2024 00:18:08 +0000
Manifest next update:     Tue 16 Apr 2024 02:46:08 +0000
Files and hashes:         1: 3137372e3135352e3233382e302f32342d3234203d3e20323633363230.roa (hash: Hhd1+26NfEYO92uVuLqTHuMOCsciP4xZ4aAmgRnUqk4=)
                          2: C9928AF40EC3F301ABFA6B43CCA84542B1BD22C5.crl (hash: Hni10aDoMT4O+eWkZwNWjbVMtnH0zXMmMRTyM5cQiD8=)
                          3: 3137372e3135352e3233382e302f32332d3233203d3e20323633363230.roa (hash: OHjvzfjMKaoXmZYIl8VUVQ5WAobjqgqdnWk1CLJdlhU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:8d:4b:99:cc:c3:72:a2:6c:58:04:f7:3f:fd:1a:e0:0c:81:2f:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9928AF40EC3F301ABFA6B43CCA84542B1BD22C5
        Validity
            Not Before: Apr 15 00:18:08 2024 GMT
            Not After : Apr 16 02:46:08 2024 GMT
        Subject: CN=3441A1812881D7C575776834B9A1538088E5C27E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f2:5a:e9:af:dc:0f:0c:88:86:be:36:49:03:
                    01:dc:c9:b1:73:1c:ee:08:83:44:db:aa:4f:22:30:
                    a7:d7:42:6a:97:3a:a0:b0:b4:b4:6a:f3:9e:31:2a:
                    d7:f8:d1:15:9c:83:02:f6:c4:13:2a:f4:79:86:39:
                    5c:fa:e3:6e:64:1c:ec:c8:d3:e5:8e:71:04:db:4d:
                    f8:9d:24:5e:a3:b3:e2:37:84:6f:4f:92:95:54:83:
                    3b:79:fe:cd:b8:8f:13:a4:32:a8:f9:88:8b:83:63:
                    5b:25:3e:68:fa:f4:cc:e5:4e:05:30:1a:a1:26:54:
                    63:c8:24:9e:35:77:90:8c:f4:51:e5:3f:84:64:4a:
                    eb:63:8b:d0:9a:67:78:dd:d5:61:f2:f5:ef:f3:53:
                    4d:05:a3:e1:f9:93:c0:b1:2a:70:ec:17:4a:69:60:
                    14:96:ac:03:73:7d:2b:7a:27:1b:03:28:49:ef:18:
                    58:58:ff:00:a4:68:aa:14:ad:75:1b:8e:7d:4f:03:
                    de:6c:91:be:7b:c5:b8:3f:7f:1d:7c:8c:51:b5:19:
                    30:32:72:a5:39:1a:15:b1:2c:83:5d:ee:64:16:b0:
                    e8:5f:5a:1a:3f:71:53:14:ad:e8:c3:f1:5b:e3:32:
                    fe:ba:b6:26:97:99:4a:f4:f6:d0:39:b4:f0:00:92:
                    a8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:41:A1:81:28:81:D7:C5:75:77:68:34:B9:A1:53:80:88:E5:C2:7E
            X509v3 Authority Key Identifier:
                keyid:C9:92:8A:F4:0E:C3:F3:01:AB:FA:6B:43:CC:A8:45:42:B1:BD:22:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5egQvFFF6zsUysSfK3fVmGhg7g4HSB1vfJCdsKMxwTQQ/0/C9928AF40EC3F301ABFA6B43CCA84542B1BD22C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9928AF40EC3F301ABFA6B43CCA84542B1BD22C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5egQvFFF6zsUysSfK3fVmGhg7g4HSB1vfJCdsKMxwTQQ/0/C9928AF40EC3F301ABFA6B43CCA84542B1BD22C5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:3f:45:cd:f7:f2:83:98:0e:17:17:62:10:dc:1e:18:cd:f9:
         b1:2e:ca:00:72:03:76:f2:38:9f:e2:42:89:1e:56:2b:ed:60:
         35:7d:03:90:6c:f5:8e:82:e9:93:fa:60:e6:2b:b7:f1:ec:61:
         dd:ee:e3:5e:a3:58:f9:a6:ed:78:fd:ef:b1:e9:f2:8a:39:89:
         b3:a3:81:c9:05:85:69:7a:27:bc:f1:1c:4e:6d:62:92:b5:30:
         1c:be:f8:c4:b8:b9:c2:ad:ab:a8:cb:26:70:b5:21:c9:fe:dc:
         8c:8f:61:ea:83:1a:a9:09:6e:ac:a7:59:1e:95:ec:a0:5f:59:
         ab:c0:a4:f5:30:1e:01:a3:cf:84:5b:2a:92:2d:cd:c0:69:29:
         24:6f:cc:b9:17:21:57:64:3d:27:26:94:a8:b0:60:88:a7:43:
         3c:3b:42:3a:00:d2:05:ed:a6:18:4a:f7:f1:f5:1f:af:9a:71:
         5b:5b:b1:71:d8:c2:6c:00:29:e1:e6:d2:a6:5f:97:1a:28:dd:
         34:79:21:ef:7b:56:27:b2:5c:7b:c0:6f:dd:c6:fc:93:9d:9a:
         cc:f8:44:15:68:4d:36:69:32:50:30:da:94:a0:8c:94:e1:6f:
         83:fa:4c:c0:1b:b7:6e:09:f2:39:58:75:3e:59:99:68:0a:dd:
         15:5b:1c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----