Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/65SxmhTQ79puL2ny9Wf4jwebr9iAeoT6zwtPxQcZWRFb/0/9962126DEF2432BE442D9A04B4049871B8BD2BD9.mft
File:                     9962126DEF2432BE442D9A04B4049871B8BD2BD9.mft (raw, json)
Hash identifier:          v2OoxCng8qRdb/4gxj0lWXGUZ2O8wHRYWgjHYSrWa14=
Subject key identifier:   CA:14:51:04:16:51:8B:37:F8:BF:0B:C7:05:09:84:BF:7F:D1:41:CC
Authority key identifier: 99:62:12:6D:EF:24:32:BE:44:2D:9A:04:B4:04:98:71:B8:BD:2B:D9
Certificate issuer:       /CN=9962126DEF2432BE442D9A04B4049871B8BD2BD9
Certificate serial:       04E8C76D91F1BF6FFE468A181B5C8B25D4C6E93B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9962126DEF2432BE442D9A04B4049871B8BD2BD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/65SxmhTQ79puL2ny9Wf4jwebr9iAeoT6zwtPxQcZWRFb/0/9962126DEF2432BE442D9A04B4049871B8BD2BD9.mft
Manifest number:          0327
Signing time:             Mon 15 Apr 2024 01:28:04 +0000
Manifest this update:     Mon 15 Apr 2024 01:23:04 +0000
Manifest next update:     Tue 16 Apr 2024 02:28:04 +0000
Files and hashes:         1: 3136372e3234392e3130382e302f32322d3233203d3e20323635313630.roa (hash: Yi0JA6Fll1Rr13L9bgOJ3Dr9U2rcmQJLdXBvYWT0hh4=)
                          2: 323830343a326239303a3a2f33322d3333203d3e20323635313630.roa (hash: FVW5c2wdzjbvb15K9NtAJ6SUrrIOKFji+o7gda2Rp7E=)
                          3: 9962126DEF2432BE442D9A04B4049871B8BD2BD9.crl (hash: 0PE1iSJH1ZSY39Iz03fQh9LFPny7naCmuuU1GGIMr28=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e8:c7:6d:91:f1:bf:6f:fe:46:8a:18:1b:5c:8b:25:d4:c6:e9:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9962126DEF2432BE442D9A04B4049871B8BD2BD9
        Validity
            Not Before: Apr 15 01:23:04 2024 GMT
            Not After : Apr 16 02:28:04 2024 GMT
        Subject: CN=CA14510416518B37F8BF0BC7050984BF7FD141CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:eb:19:c4:83:ce:a2:be:7c:98:cb:60:0a:d9:
                    9d:e4:0b:64:26:02:40:c9:0a:2b:46:89:ff:03:32:
                    e4:dc:e5:cf:c6:6b:65:f8:c5:fe:ad:94:62:ea:50:
                    cb:20:42:fe:f6:39:00:a3:a2:24:4e:fd:06:f6:0f:
                    31:7a:9e:c6:6e:58:f1:0a:76:07:61:9b:ea:cb:63:
                    13:22:d6:cc:ef:4b:98:03:c5:c9:e9:99:90:c3:33:
                    0e:9a:6d:5a:46:4d:b1:ab:ac:08:ff:a7:ac:17:b3:
                    47:38:2b:51:23:c5:e7:1b:90:67:b4:67:b2:a9:77:
                    e4:0e:03:4b:31:6b:3c:12:10:74:a6:ee:6f:05:9c:
                    e9:3e:87:1f:82:cf:27:34:fd:2d:94:ba:1a:de:21:
                    8a:eb:ec:f0:d9:32:44:1b:f4:21:b5:ed:40:94:16:
                    8a:ca:4d:34:b1:80:10:27:6c:0e:56:41:22:dd:43:
                    e2:5f:0f:93:88:be:30:60:e4:5b:08:3a:f8:2b:e0:
                    db:97:07:a6:c9:0d:55:04:4f:45:9e:eb:bc:59:5f:
                    0f:36:02:05:d7:0d:9e:3f:7d:7d:3f:78:1c:0a:5e:
                    f7:e8:4a:a9:8b:ec:65:04:b5:3d:b3:c1:12:ba:c5:
                    5f:fa:41:c3:05:78:ac:07:77:d6:68:1c:4c:80:6f:
                    38:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:14:51:04:16:51:8B:37:F8:BF:0B:C7:05:09:84:BF:7F:D1:41:CC
            X509v3 Authority Key Identifier:
                keyid:99:62:12:6D:EF:24:32:BE:44:2D:9A:04:B4:04:98:71:B8:BD:2B:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/65SxmhTQ79puL2ny9Wf4jwebr9iAeoT6zwtPxQcZWRFb/0/9962126DEF2432BE442D9A04B4049871B8BD2BD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9962126DEF2432BE442D9A04B4049871B8BD2BD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/65SxmhTQ79puL2ny9Wf4jwebr9iAeoT6zwtPxQcZWRFb/0/9962126DEF2432BE442D9A04B4049871B8BD2BD9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:a5:53:e0:71:9b:65:a7:5c:8e:4c:45:03:e2:62:2e:bb:60:
         df:da:48:d0:13:1b:86:7c:09:0a:45:af:c5:d7:32:96:1c:69:
         4a:b6:d3:c8:e3:87:9e:50:85:a8:ac:08:09:dc:d5:a4:65:63:
         bc:d4:9f:b6:14:45:0b:99:32:d3:89:e4:d8:ef:5b:ff:5d:ba:
         6c:7d:63:74:fe:63:6c:1b:f1:d7:3c:74:87:6f:6f:e7:89:97:
         02:a8:62:da:90:bf:57:ef:2c:53:b3:a8:4b:82:ea:b6:de:a6:
         89:98:d8:59:88:4b:8c:40:9d:a2:d6:a6:f3:80:64:60:ab:77:
         39:cb:6c:4a:0f:75:be:6e:4e:ce:ec:09:2d:64:7f:04:35:29:
         bd:13:db:76:93:ff:39:22:1d:d4:e4:36:30:ae:65:b8:2b:15:
         b3:ad:c1:31:fb:97:22:b4:12:4d:00:f2:7a:75:95:be:54:19:
         4b:07:4f:0e:41:bf:60:96:79:88:2b:b7:00:7f:b6:56:7b:b3:
         b5:8c:a4:0d:be:3f:97:8a:83:60:ca:18:b2:ec:b3:a2:0c:49:
         4d:6e:b4:f5:35:69:55:38:1c:78:c0:98:bb:97:99:0d:34:83:
         7a:ad:18:89:c5:f9:fd:b7:6a:eb:42:7c:2f:f9:48:90:24:21:
         53:15:9f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----