Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/0/D9E9FED4F7C00847DC06901C384D2C908C0095A1.mft
File:                     D9E9FED4F7C00847DC06901C384D2C908C0095A1.mft (raw, json)
Hash identifier:          +GVeg70p43DuOgfQmXzcbDGeuIilb5nqrrxDBgf2M9w=
Subject key identifier:   85:24:D2:3D:61:0E:AA:71:D0:0D:83:E1:BC:4A:31:BA:B1:25:4C:2B
Authority key identifier: D9:E9:FE:D4:F7:C0:08:47:DC:06:90:1C:38:4D:2C:90:8C:00:95:A1
Certificate issuer:       /CN=D9E9FED4F7C00847DC06901C384D2C908C0095A1
Certificate serial:       28C5A86776833F585828BC9F53DD0ED6E4FE295F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9E9FED4F7C00847DC06901C384D2C908C0095A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/0/D9E9FED4F7C00847DC06901C384D2C908C0095A1.mft
Manifest number:          0244
Signing time:             Mon 15 Apr 2024 07:34:30 +0000
Manifest this update:     Mon 15 Apr 2024 07:29:30 +0000
Manifest next update:     Tue 16 Apr 2024 11:28:30 +0000
Files and hashes:         1: 3137392e3132372e33322e302f32312d3235203d3e20323633363337.roa (hash: 0g69mtjadPhBsh69ONA9sChtdCRs1+2z1/2zz7Os9g4=)
                          2: D9E9FED4F7C00847DC06901C384D2C908C0095A1.crl (hash: lLH15ackwwPYcHTyGfydgqVOVk3my+pSlRpz+fqVAyM=)
                          3: 323830343a313037383a3a2f33322d3438203d3e20323633363337.roa (hash: 5nlDnUveeTsnmPMGz5gaQxOu5igBITIM73rcBeqaSFs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:c5:a8:67:76:83:3f:58:58:28:bc:9f:53:dd:0e:d6:e4:fe:29:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9E9FED4F7C00847DC06901C384D2C908C0095A1
        Validity
            Not Before: Apr 15 07:29:30 2024 GMT
            Not After : Apr 16 11:28:30 2024 GMT
        Subject: CN=8524D23D610EAA71D00D83E1BC4A31BAB1254C2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a0:79:81:62:ab:e0:8f:15:40:99:2f:2a:11:
                    e4:dd:04:b0:92:ae:44:37:99:a9:be:e1:7f:bb:fd:
                    4f:8a:5a:cc:47:07:f1:ef:a6:85:44:2e:d8:0c:c1:
                    14:b2:f5:b3:45:c6:3e:3d:2f:27:e4:87:3a:16:24:
                    c6:d5:e4:67:98:a1:92:8b:35:67:5a:b9:7d:9c:71:
                    87:1f:08:43:ea:58:2e:c8:0d:ee:5a:fb:25:d8:42:
                    91:15:e1:b4:ff:30:56:22:43:c0:d8:9e:ae:e5:33:
                    35:03:73:f4:1a:74:c7:1c:e7:33:21:8b:2f:10:4b:
                    b3:70:04:6e:fc:ef:26:1f:95:9b:1b:58:1e:15:7d:
                    da:ac:42:25:b0:51:df:ca:9a:a8:cc:b7:6d:04:b1:
                    db:97:60:da:da:d3:6b:43:be:5f:14:75:b3:27:2a:
                    bc:a7:85:e6:40:87:b2:5d:cd:16:76:12:5f:61:f9:
                    c2:94:34:81:54:89:7b:99:2f:8f:3d:7b:6e:a0:4f:
                    13:e1:c3:7a:e7:de:5d:72:21:44:c9:ae:81:80:ab:
                    7c:4b:1b:74:4a:14:ea:4e:e7:91:8f:43:de:a7:e7:
                    15:12:f6:01:1b:80:fe:83:55:9a:28:bf:3e:b3:00:
                    be:8b:e0:39:06:46:aa:ea:be:b1:02:7e:10:78:ad:
                    02:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:24:D2:3D:61:0E:AA:71:D0:0D:83:E1:BC:4A:31:BA:B1:25:4C:2B
            X509v3 Authority Key Identifier:
                keyid:D9:E9:FE:D4:F7:C0:08:47:DC:06:90:1C:38:4D:2C:90:8C:00:95:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/0/D9E9FED4F7C00847DC06901C384D2C908C0095A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9E9FED4F7C00847DC06901C384D2C908C0095A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/0/D9E9FED4F7C00847DC06901C384D2C908C0095A1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:a1:90:a2:c8:ca:4d:60:06:af:e6:a4:8c:f1:b4:46:b6:55:
         8b:51:ea:1f:35:88:19:3e:bf:d0:a7:72:4b:f9:a3:e3:17:52:
         d7:36:df:c7:de:f2:ab:e7:d0:34:bf:17:9a:95:fc:02:58:f1:
         38:88:73:1c:4b:7b:09:16:ab:78:bb:1b:59:72:29:ac:9b:23:
         7e:e2:7c:3b:75:75:66:ac:e9:55:c6:65:08:bd:66:b7:c8:10:
         7b:f2:cf:e2:fe:77:37:19:f9:f2:0f:c8:5d:b4:0a:8a:9e:67:
         90:21:64:13:7b:ff:4e:f3:6c:8e:8d:b8:9b:7c:ce:9e:20:4c:
         ca:c3:62:ab:16:2d:b8:58:6d:4a:60:74:27:cc:8c:62:79:f4:
         d7:e9:2f:c2:7f:7d:7d:18:41:43:16:ac:82:0d:cb:e2:60:af:
         49:8a:19:47:53:52:89:63:9f:03:43:f1:b5:ce:b5:30:a7:3b:
         de:04:6d:03:7f:64:65:06:5b:b6:90:d3:cb:5d:41:0d:4e:07:
         b8:82:49:a3:00:d7:13:6b:91:ec:b2:97:5d:9b:99:64:63:68:
         8a:dc:8a:0b:6c:12:b5:f1:80:3d:89:cb:07:e8:9f:50:c8:38:
         b1:da:2a:ce:be:45:fc:13:9b:5f:3c:0a:cb:0a:85:09:aa:33:
         db:a2:39:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----