Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/73KS4cDAGEzoGtScvyhxYVVqPXCZfBhEyPrzGW7HsWHE/0/9C10661843B8940941B0942E92BE662CB14B2D68.mft
File:                     9C10661843B8940941B0942E92BE662CB14B2D68.mft (raw, json)
Hash identifier:          Bfd3sLF4ux+bdxVwfTnN0XD7bL/nMBQ4KeaZ9k4CFUY=
Subject key identifier:   42:68:61:A1:9F:73:E5:B8:70:F3:87:F2:76:63:C1:0F:DB:9F:87:61
Authority key identifier: 9C:10:66:18:43:B8:94:09:41:B0:94:2E:92:BE:66:2C:B1:4B:2D:68
Certificate issuer:       /CN=9C10661843B8940941B0942E92BE662CB14B2D68
Certificate serial:       4A6817F97EEF2E1C97251B5647CA1D30F930D15D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C10661843B8940941B0942E92BE662CB14B2D68.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73KS4cDAGEzoGtScvyhxYVVqPXCZfBhEyPrzGW7HsWHE/0/9C10661843B8940941B0942E92BE662CB14B2D68.mft
Manifest number:          0442
Signing time:             Mon 15 Apr 2024 00:00:28 +0000
Manifest this update:     Sun 14 Apr 2024 23:55:28 +0000
Manifest next update:     Tue 16 Apr 2024 02:16:28 +0000
Files and hashes:         1: 9C10661843B8940941B0942E92BE662CB14B2D68.crl (hash: /DeM9024CUcvRZtTrXD2QbQ9okJ7wJmm9mw5PactcEk=)
                          2: 323830343a373535303a3a2f33322d3332203d3e20323731303338.roa (hash: Gd47DnS0qKC+3NQLUasxdqlHPeLGU0b8D0bBfb599To=)
                          3: 3137372e3132392e3232382e302f32322d3234203d3e20323731303338.roa (hash: t26Vyg25tcbgouX+aMPL4ld1Rek0wWStmsKP07QTItE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:68:17:f9:7e:ef:2e:1c:97:25:1b:56:47:ca:1d:30:f9:30:d1:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C10661843B8940941B0942E92BE662CB14B2D68
        Validity
            Not Before: Apr 14 23:55:28 2024 GMT
            Not After : Apr 16 02:16:28 2024 GMT
        Subject: CN=426861A19F73E5B870F387F27663C10FDB9F8761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5e:fa:b9:9d:c2:10:9f:a3:8b:46:0f:c7:e6:
                    6b:7a:d1:23:2c:6f:c1:1b:8b:b6:17:9e:ed:ce:d8:
                    92:fc:bc:a4:76:5b:d1:50:4c:f8:90:b8:dd:53:f0:
                    0e:35:0c:a1:da:48:3f:86:92:81:9e:73:f7:64:2b:
                    09:24:d0:e3:10:e4:0f:ab:c7:f7:16:d0:c5:d9:fb:
                    16:89:74:d0:a2:d3:93:14:e1:81:15:d7:e9:89:49:
                    3f:b2:22:75:6d:d2:ca:29:76:4e:22:7c:8e:56:50:
                    86:56:c2:72:48:06:d6:65:c0:91:66:da:3d:0a:bc:
                    19:a9:97:ac:0b:6e:40:2b:c0:16:26:bc:d7:28:f7:
                    2e:d0:49:b2:d1:a4:16:f3:ae:7c:da:d0:ab:0c:a1:
                    ce:b2:6a:c4:07:11:99:3c:a2:ec:31:98:44:4d:0f:
                    b8:d0:92:b3:ce:42:c8:db:fc:7d:15:2c:bd:c9:3a:
                    5b:14:91:d2:cc:f7:51:a7:e7:a5:ca:98:02:92:92:
                    e4:6b:f9:d4:19:de:ab:93:fa:c2:2f:48:e4:8f:c3:
                    75:d8:6f:97:51:75:84:21:41:cc:d9:88:71:a4:5c:
                    c5:7f:9f:fa:fe:9a:e3:f8:d7:2d:0b:a8:8b:1a:af:
                    73:27:4d:21:11:eb:34:b2:37:9f:be:49:8c:f0:fd:
                    90:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:68:61:A1:9F:73:E5:B8:70:F3:87:F2:76:63:C1:0F:DB:9F:87:61
            X509v3 Authority Key Identifier:
                keyid:9C:10:66:18:43:B8:94:09:41:B0:94:2E:92:BE:66:2C:B1:4B:2D:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73KS4cDAGEzoGtScvyhxYVVqPXCZfBhEyPrzGW7HsWHE/0/9C10661843B8940941B0942E92BE662CB14B2D68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C10661843B8940941B0942E92BE662CB14B2D68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73KS4cDAGEzoGtScvyhxYVVqPXCZfBhEyPrzGW7HsWHE/0/9C10661843B8940941B0942E92BE662CB14B2D68.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:d9:e6:df:84:27:3e:ef:a5:f9:0b:e8:a4:73:ea:9a:f7:57:
         07:ae:67:60:ea:4e:9c:00:ce:0e:cf:31:76:f0:f0:83:16:4a:
         8b:0f:69:ec:27:e8:78:21:dc:1e:de:e1:e9:03:c5:41:3f:bf:
         0f:db:32:d0:74:72:0a:96:b4:57:3a:00:98:a9:1e:b2:54:a0:
         4e:b3:d0:3a:28:c5:41:df:27:3d:d8:d7:a1:46:a3:0b:07:62:
         9b:d0:11:57:ec:5a:f5:de:45:2b:0f:97:3a:12:6e:52:42:1d:
         f0:08:79:3b:81:57:f8:3a:84:08:b8:73:d7:c6:08:e9:06:58:
         21:03:6b:e9:39:bb:61:e8:06:84:70:fa:76:32:a6:b4:3d:31:
         32:67:f6:c0:bb:76:d9:20:05:ed:5d:c2:00:53:6b:d9:0b:30:
         98:d2:8c:de:08:fc:78:17:ce:4b:ef:63:9e:c7:4d:eb:2b:1e:
         83:6c:ae:61:06:9a:58:e3:90:b0:a1:68:3b:1c:54:36:a4:6f:
         1a:4f:27:24:5b:17:29:e8:e2:90:36:20:46:b3:d7:76:ea:4d:
         73:9d:0b:d5:75:9c:eb:b4:06:5f:c4:da:e4:9c:47:25:7d:5d:
         09:0d:8b:6a:60:3b:11:3b:64:1a:de:cb:c8:f8:4f:e2:07:f9:
         94:4c:95:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----