Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6W3kFbvnDR5bRQMACWft4zuqXaAX1Y4wc8vJttmd5zsH/0/4246FED7A1637B87C0A22E2F037D639E98216B05.mft
File:                     4246FED7A1637B87C0A22E2F037D639E98216B05.mft (raw, json)
Hash identifier:          KHdgflr3jdlUYzYa9N+oDJQNgEAfypyK16fh2nkQspo=
Subject key identifier:   E7:F4:7C:10:55:EF:ED:90:22:EA:07:26:26:8D:5B:39:06:76:85:DE
Authority key identifier: 42:46:FE:D7:A1:63:7B:87:C0:A2:2E:2F:03:7D:63:9E:98:21:6B:05
Certificate issuer:       /CN=4246FED7A1637B87C0A22E2F037D639E98216B05
Certificate serial:       7AB2C4F47A54E5291C522C234A5ED50CEBF0ECBD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4246FED7A1637B87C0A22E2F037D639E98216B05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6W3kFbvnDR5bRQMACWft4zuqXaAX1Y4wc8vJttmd5zsH/0/4246FED7A1637B87C0A22E2F037D639E98216B05.mft
Manifest number:          0288
Signing time:             Mon 15 Apr 2024 04:37:55 +0000
Manifest this update:     Mon 15 Apr 2024 04:32:55 +0000
Manifest next update:     Tue 16 Apr 2024 08:01:55 +0000
Files and hashes:         1: 4246FED7A1637B87C0A22E2F037D639E98216B05.crl (hash: yZSUzdcg6NXU2DQ8dq6GpxYJDFDoyLZkckdXve8ybZ8=)
                          2: 323830343a373932303a3a2f33322d3438203d3e20323731323836.roa (hash: eczpHMUFA2I4TwvLCR+BeY+1GZta4YjrgfRwbtXey9Q=)
                          3: 3139302e3130392e39322e302f32322d3234203d3e20323731323836.roa (hash: 0JOTBNh9cR2GPP6tSWj5RhahSY4akklSgrG2cJlwBUQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b2:c4:f4:7a:54:e5:29:1c:52:2c:23:4a:5e:d5:0c:eb:f0:ec:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4246FED7A1637B87C0A22E2F037D639E98216B05
        Validity
            Not Before: Apr 15 04:32:55 2024 GMT
            Not After : Apr 16 08:01:55 2024 GMT
        Subject: CN=E7F47C1055EFED9022EA0726268D5B39067685DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:55:c9:bc:fd:97:a8:9a:b4:b5:ed:02:4a:8e:
                    51:40:81:02:1b:ec:ec:4d:bf:ea:13:5d:0d:2a:25:
                    ea:c7:96:d3:71:21:45:6f:23:f7:00:5b:d3:ee:bc:
                    08:d1:bd:7b:d0:3b:c0:ff:af:a3:55:a1:fc:ab:88:
                    1b:ce:b1:9e:df:af:7f:c2:48:f4:2f:9b:64:e6:31:
                    6e:79:9d:c0:4c:a1:8a:a9:7b:a2:77:19:72:8b:47:
                    ef:f8:e1:5e:a0:fc:28:1f:82:03:5e:49:1d:7a:f4:
                    4c:45:4a:63:5a:c6:b4:b6:2c:34:2c:6e:59:ee:18:
                    f3:31:b3:91:10:58:b7:c4:67:6f:bb:f1:24:4a:bc:
                    ad:2f:99:78:46:63:f3:5b:68:00:cf:8a:96:e7:31:
                    09:8e:8c:be:3e:01:3f:6a:e8:e8:5e:0a:3e:b3:96:
                    20:62:8c:c2:f9:95:9f:f4:7a:11:b9:a7:04:b9:fa:
                    43:b6:95:a1:a0:e7:83:1b:80:e8:a0:7e:fa:6c:8d:
                    67:d3:92:3d:eb:e8:9b:10:82:a2:21:9c:9d:80:83:
                    6d:d1:ed:b0:7b:13:0b:b1:c7:ae:58:23:bc:20:55:
                    33:7b:f2:32:28:ff:0d:12:f5:1e:9c:40:61:cf:00:
                    4b:87:04:a7:7d:44:71:76:2c:e9:1c:54:e4:90:96:
                    a5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F4:7C:10:55:EF:ED:90:22:EA:07:26:26:8D:5B:39:06:76:85:DE
            X509v3 Authority Key Identifier:
                keyid:42:46:FE:D7:A1:63:7B:87:C0:A2:2E:2F:03:7D:63:9E:98:21:6B:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6W3kFbvnDR5bRQMACWft4zuqXaAX1Y4wc8vJttmd5zsH/0/4246FED7A1637B87C0A22E2F037D639E98216B05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4246FED7A1637B87C0A22E2F037D639E98216B05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6W3kFbvnDR5bRQMACWft4zuqXaAX1Y4wc8vJttmd5zsH/0/4246FED7A1637B87C0A22E2F037D639E98216B05.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:05:2c:d8:64:2f:7a:59:48:93:59:cd:d1:af:83:c6:7a:7d:
         4d:f8:03:22:b2:18:ed:e0:41:1b:a1:e7:8e:b1:70:72:4f:d3:
         63:9e:64:7c:c9:fa:bf:1d:ed:f9:8a:c1:05:6a:a9:62:aa:a8:
         cd:ed:c4:44:35:7c:70:04:da:2c:eb:ea:7d:94:f7:c9:0c:80:
         dd:74:67:29:a2:8e:53:f8:0d:c1:21:b8:a1:c7:ff:44:d2:30:
         1c:4d:3e:c7:d8:24:f3:d5:57:7f:8f:37:d2:65:87:63:ff:a9:
         16:d5:c5:1e:e8:c4:d0:0b:6a:f9:ef:25:89:d6:2e:7d:cd:07:
         c7:a7:37:f2:4a:cf:df:50:7e:e8:1b:54:e6:ce:fa:1e:2b:93:
         e2:e8:2f:b7:53:24:04:39:7a:db:5b:26:1e:d8:ed:bb:7b:24:
         ed:70:1a:c5:b7:af:b8:ce:c3:66:c9:cd:72:fa:9b:50:76:d7:
         c5:73:03:28:0f:a2:b0:45:e8:55:e1:b3:90:17:c6:09:c9:96:
         c6:fc:56:85:7c:0d:63:e9:f2:93:12:a7:ed:8c:e1:e3:81:a2:
         5d:7d:9d:de:60:9c:28:1e:12:5b:11:4d:ad:36:d5:c9:16:37:
         0b:92:06:6f:29:53:45:45:c5:1b:11:18:7d:0c:80:1c:8b:73:
         29:81:e6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----