Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6F39u2iPg71fKSJwDZyYXP6cC9RDPqSgsvpUn2V9CPnc/1/C401CC56A53B6BE293F35CDDD46093B73990392F.mft
File:                     C401CC56A53B6BE293F35CDDD46093B73990392F.mft (raw, json)
Hash identifier:          mxo2oHh3Ctu2vAdZ/HS8T8i21YLr3gU8gWvCbypZTIE=
Subject key identifier:   A7:8E:72:99:78:68:66:5B:2C:2C:C8:55:AF:15:AB:FA:9C:FA:BA:9A
Authority key identifier: C4:01:CC:56:A5:3B:6B:E2:93:F3:5C:DD:D4:60:93:B7:39:90:39:2F
Certificate issuer:       /CN=C401CC56A53B6BE293F35CDDD46093B73990392F
Certificate serial:       51B2EAF3EAA226B31DBB556EA117A44E1CA5777D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C401CC56A53B6BE293F35CDDD46093B73990392F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6F39u2iPg71fKSJwDZyYXP6cC9RDPqSgsvpUn2V9CPnc/1/C401CC56A53B6BE293F35CDDD46093B73990392F.mft
Manifest number:          01AB
Signing time:             Mon 15 Apr 2024 05:10:01 +0000
Manifest this update:     Mon 15 Apr 2024 05:05:01 +0000
Manifest next update:     Tue 16 Apr 2024 08:27:01 +0000
Files and hashes:         1: 3137392e3130382e32342e302f32312d3234203d3e20323633323637.roa (hash: D4YqnYIG1W6+CakF5B27RGt0nfIMVky/c00oVNricE4=)
                          2: C401CC56A53B6BE293F35CDDD46093B73990392F.crl (hash: SxH0wrpAztNRWhtRAgNLPGtyMm843IFVH/8gsZLjbG8=)
                          3: 323830343a313631383a3a2f33322d3536203d3e20323633323637.roa (hash: v+sqDSyAFfSZeD1dbRcAbAeR2okSWBBq4RspqRFPIes=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b2:ea:f3:ea:a2:26:b3:1d:bb:55:6e:a1:17:a4:4e:1c:a5:77:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C401CC56A53B6BE293F35CDDD46093B73990392F
        Validity
            Not Before: Apr 15 05:05:01 2024 GMT
            Not After : Apr 16 08:27:01 2024 GMT
        Subject: CN=A78E72997868665B2C2CC855AF15ABFA9CFABA9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e8:17:29:f0:5e:9e:b5:dd:c7:e9:0f:57:4a:
                    77:52:5a:86:5b:85:5e:bd:f8:bb:42:af:e1:df:5a:
                    14:b2:3f:74:46:eb:11:0d:7e:3b:a8:88:91:5d:ec:
                    86:5d:55:cc:c6:0f:b5:8c:38:94:e1:2e:ca:1d:f3:
                    64:d7:e3:2d:fb:44:35:81:7c:fc:b7:d7:49:cb:ca:
                    79:4a:63:9e:2d:76:c4:74:e9:fc:e0:55:7f:b3:03:
                    2a:17:3a:b2:52:db:0e:82:c2:32:8f:da:6e:d5:9c:
                    67:49:85:64:e9:2d:0b:b2:42:9b:50:ea:e3:fa:96:
                    30:cb:23:1b:4c:6b:c6:9f:db:44:3e:13:4c:bb:f0:
                    23:80:b1:86:ba:1c:af:90:d3:a4:1e:c0:8f:49:57:
                    49:c0:fc:2a:fe:97:d6:0b:c7:52:a8:0a:e2:c9:10:
                    b6:86:f1:98:39:99:b4:18:c9:4a:f6:7f:d7:dc:5c:
                    a4:04:83:9a:a8:1c:27:89:c9:e4:ba:a2:e5:50:d5:
                    17:fb:8e:90:d1:08:00:ac:74:e7:4c:be:f6:d3:29:
                    2f:01:a0:ad:16:59:06:e9:35:5f:5a:26:0a:14:67:
                    44:a8:60:77:12:5b:a4:08:1f:cb:85:0c:a2:c5:4b:
                    5e:82:a2:f5:99:c6:bf:66:12:09:46:9e:75:cd:3d:
                    1b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:8E:72:99:78:68:66:5B:2C:2C:C8:55:AF:15:AB:FA:9C:FA:BA:9A
            X509v3 Authority Key Identifier:
                keyid:C4:01:CC:56:A5:3B:6B:E2:93:F3:5C:DD:D4:60:93:B7:39:90:39:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6F39u2iPg71fKSJwDZyYXP6cC9RDPqSgsvpUn2V9CPnc/1/C401CC56A53B6BE293F35CDDD46093B73990392F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C401CC56A53B6BE293F35CDDD46093B73990392F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6F39u2iPg71fKSJwDZyYXP6cC9RDPqSgsvpUn2V9CPnc/1/C401CC56A53B6BE293F35CDDD46093B73990392F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:41:9a:df:cb:dd:8c:f2:20:67:02:1b:d8:29:3c:74:38:05:
         e3:0d:a3:71:b7:cb:6c:30:8d:31:87:6d:3e:29:fa:9b:d2:3a:
         63:5d:ba:f6:23:3e:67:2c:07:13:b0:4d:68:74:61:26:ad:40:
         3a:0e:a5:7e:92:ff:23:d8:f5:ff:21:ac:e5:e6:63:5b:35:03:
         2c:92:65:4b:00:4b:59:f9:03:e0:7e:85:10:42:a4:57:6d:40:
         e4:9a:b6:01:44:3b:ff:3e:97:f0:f6:92:60:56:76:53:e4:86:
         87:3d:46:5a:f9:ea:22:e9:e1:e0:ed:46:2f:e1:e7:4e:06:52:
         99:be:15:9f:7d:12:ff:0a:59:33:17:a4:0e:87:ae:fb:be:f5:
         c4:87:4d:a1:9b:d4:b7:20:0a:d4:ea:ce:ba:60:37:19:ac:28:
         ff:ee:26:42:f3:b2:14:15:0f:d1:45:8d:1c:b4:dd:dc:76:4f:
         25:a6:27:65:21:21:43:23:54:12:60:4a:1c:2f:e1:55:76:59:
         66:c6:6f:b7:f8:60:97:5a:83:91:0f:b2:41:d2:4d:e8:4e:fb:
         6d:5b:20:5a:cd:d4:39:41:04:6f:c5:a2:1b:ea:75:46:d1:7d:
         4b:e7:f3:61:2e:45:de:28:16:0e:80:0f:c2:9a:87:09:13:f0:
         d6:b0:87:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----