Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6CkyE4m3WEX8of93tECC3QN875XnJtEHd4BUEtATXUnw/0/04C14437D9722F796B525D058F95D060CC99E457.mft
File:                     04C14437D9722F796B525D058F95D060CC99E457.mft (raw, json)
Hash identifier:          UTnqx+ZfpDkiXV8V1WYw2hnthT1hVSN27yE2cfXyOxc=
Subject key identifier:   6F:DB:45:7D:60:F8:F3:55:1B:F8:4A:B0:A3:5C:6B:F2:29:76:6E:88
Authority key identifier: 04:C1:44:37:D9:72:2F:79:6B:52:5D:05:8F:95:D0:60:CC:99:E4:57
Certificate issuer:       /CN=04C14437D9722F796B525D058F95D060CC99E457
Certificate serial:       2B0926B323EC2492E341239DF5B5E98B0300A31A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04C14437D9722F796B525D058F95D060CC99E457.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CkyE4m3WEX8of93tECC3QN875XnJtEHd4BUEtATXUnw/0/04C14437D9722F796B525D058F95D060CC99E457.mft
Manifest number:          0204
Signing time:             Sun 14 Apr 2024 23:54:54 +0000
Manifest this update:     Sun 14 Apr 2024 23:49:54 +0000
Manifest next update:     Tue 16 Apr 2024 00:42:54 +0000
Files and hashes:         1: 04C14437D9722F796B525D058F95D060CC99E457.crl (hash: VKc9CeNHHxR3PBYxiX1PayAUPlxCMgmEIzbVzzG2O4o=)
                          2: 34352e3139312e39322e302f32322d3234203d3e20323639373033.roa (hash: PJZM+q/6D0EzDUsdjcoND8VCXaIYhshPSC38kDQh7MQ=)
                          3: 323830343a363839383a3a2f33322d3336203d3e20323639373033.roa (hash: B84na1gp1hTevua+KFS1hwBjvshMc3tz3j/tAXdO0/A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:09:26:b3:23:ec:24:92:e3:41:23:9d:f5:b5:e9:8b:03:00:a3:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C14437D9722F796B525D058F95D060CC99E457
        Validity
            Not Before: Apr 14 23:49:54 2024 GMT
            Not After : Apr 16 00:42:54 2024 GMT
        Subject: CN=6FDB457D60F8F3551BF84AB0A35C6BF229766E88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c8:86:92:c4:10:c2:21:ee:24:e0:e1:aa:f7:
                    9a:27:db:d2:0d:a8:8f:20:04:21:22:70:d1:02:24:
                    18:f8:fa:68:16:04:4c:a2:fc:27:92:f2:2c:2d:2a:
                    50:b1:bf:e6:66:b4:70:79:9e:ee:ce:33:84:92:e6:
                    2f:df:e5:1a:eb:9c:13:f5:c4:64:e9:bd:18:36:04:
                    69:4e:eb:36:cd:a9:76:f0:4a:e8:d7:d4:70:50:fa:
                    a2:18:a7:07:ee:10:31:1d:ac:e5:d4:b1:1c:32:a7:
                    48:52:07:43:7e:af:85:a3:be:ac:d5:be:c1:28:7c:
                    6e:34:4b:fd:ac:56:65:19:2b:8b:fa:3d:56:b0:af:
                    db:f5:ce:c7:bb:97:19:d8:0c:fd:98:39:3e:d1:59:
                    a8:3c:03:c7:00:e1:d9:bd:70:3f:06:71:54:86:d5:
                    e2:cd:69:aa:51:55:2c:8f:17:b4:c7:a5:8f:57:7c:
                    18:fc:9e:47:b7:05:33:f3:b6:89:96:26:0c:14:9a:
                    f4:a8:36:1d:1c:15:99:4d:61:56:86:6e:b8:06:95:
                    95:db:8f:5d:6e:39:75:3d:ef:17:5b:72:67:57:7f:
                    f0:b3:1c:ce:9a:f6:0f:42:b3:13:00:76:76:f5:60:
                    e9:eb:c5:1b:c2:01:97:aa:0a:47:ae:8b:51:b6:8d:
                    dc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:DB:45:7D:60:F8:F3:55:1B:F8:4A:B0:A3:5C:6B:F2:29:76:6E:88
            X509v3 Authority Key Identifier:
                keyid:04:C1:44:37:D9:72:2F:79:6B:52:5D:05:8F:95:D0:60:CC:99:E4:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CkyE4m3WEX8of93tECC3QN875XnJtEHd4BUEtATXUnw/0/04C14437D9722F796B525D058F95D060CC99E457.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04C14437D9722F796B525D058F95D060CC99E457.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CkyE4m3WEX8of93tECC3QN875XnJtEHd4BUEtATXUnw/0/04C14437D9722F796B525D058F95D060CC99E457.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:50:c1:a6:45:fd:df:dc:60:a0:bd:41:36:e2:1e:34:f8:68:
         d5:bc:e0:49:c0:ad:83:0f:28:a3:75:f6:d1:8e:b7:ce:36:30:
         fa:08:53:45:36:c6:91:66:95:41:67:4f:6e:a4:47:9e:5e:ec:
         62:aa:1c:13:0f:da:49:ee:6e:85:93:a9:de:3d:0c:ca:41:3c:
         b3:bd:43:5a:80:4e:99:61:5b:bd:d5:16:1f:04:fd:09:d7:4e:
         37:c2:96:37:8b:79:ed:78:eb:7f:c9:b1:3e:61:10:b3:0e:37:
         6e:95:85:4f:38:e8:96:20:ae:5e:d8:16:17:5f:6d:45:79:65:
         5b:79:dd:9d:1e:c0:46:17:fc:cd:c0:a2:3c:82:eb:c1:91:cb:
         cc:38:05:01:22:ff:68:76:61:39:58:7d:8d:49:dc:ce:b3:05:
         c8:b4:be:83:60:b5:6b:f4:7b:8e:09:a9:d7:bf:83:8e:00:5d:
         e1:12:8b:ca:1a:dc:81:4b:16:94:35:70:c2:7d:b9:a8:0d:74:
         8d:e3:71:f7:98:ac:45:43:de:9b:fb:fc:ab:d9:dc:81:27:ef:
         bd:e6:e0:be:17:9e:b4:30:33:fd:d0:88:a4:ae:d7:2b:af:e0:
         8d:3a:42:3c:25:e2:14:6b:cc:63:81:be:82:c5:d1:74:e8:fa:
         c3:c0:43:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----