Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/0/D64B89CB91E52BC9365EA489D394DB5AFCF428DA.mft
File:                     D64B89CB91E52BC9365EA489D394DB5AFCF428DA.mft (raw, json)
Hash identifier:          l+pZ5shTcmFZs1OYDWqTdGffUp5dgTT+lEDc+v1+eos=
Subject key identifier:   B2:2D:4C:E9:0A:E0:DD:A7:F0:C6:7C:E0:CF:6C:F9:B1:0E:35:EF:77
Authority key identifier: D6:4B:89:CB:91:E5:2B:C9:36:5E:A4:89:D3:94:DB:5A:FC:F4:28:DA
Certificate issuer:       /CN=D64B89CB91E52BC9365EA489D394DB5AFCF428DA
Certificate serial:       5AC2DAB39B29E96F366AEF2958CC1CFA8FD589B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D64B89CB91E52BC9365EA489D394DB5AFCF428DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/0/D64B89CB91E52BC9365EA489D394DB5AFCF428DA.mft
Manifest number:          E2
Signing time:             Mon 15 Apr 2024 05:42:12 +0000
Manifest this update:     Mon 15 Apr 2024 05:37:12 +0000
Manifest next update:     Tue 16 Apr 2024 06:55:12 +0000
Files and hashes:         1: 323830343a333639303a3a2f33322d3438203d3e20323636333536.roa (hash: WKgshAZaAUOCGlt5379dTi5ULvFGIdCvHCUVGHID5dM=)
                          2: 3137302e3233392e3232342e302f32322d3234203d3e20323636333536.roa (hash: cov2500sYsMoXbWQwRTCCCzdwdsW413daCTCConIIis=)
                          3: D64B89CB91E52BC9365EA489D394DB5AFCF428DA.crl (hash: mMlh4R/9Tdj1wXBTgy8kgXvzWkZytzyxJNxOymPijwI=)
                          4: 34352e3233342e3133362e302f32322d3234203d3e20323636333536.roa (hash: NgvOP9FEt6LWGwozElaaaQBh0o9NhAR8xQbLr537Ra8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:c2:da:b3:9b:29:e9:6f:36:6a:ef:29:58:cc:1c:fa:8f:d5:89:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D64B89CB91E52BC9365EA489D394DB5AFCF428DA
        Validity
            Not Before: Apr 15 05:37:12 2024 GMT
            Not After : Apr 16 06:55:12 2024 GMT
        Subject: CN=B22D4CE90AE0DDA7F0C67CE0CF6CF9B10E35EF77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:74:9c:f2:8f:c6:b9:2e:61:52:ca:87:a1:f0:
                    4b:f8:95:23:06:a0:3c:13:6f:c1:e8:de:ba:c6:51:
                    9d:4a:1b:04:0a:aa:a2:2a:01:e5:f4:0a:f8:f8:1b:
                    80:df:c0:e6:81:43:e1:9a:43:f7:82:0d:78:3c:26:
                    55:83:a9:be:7f:61:93:3c:aa:4d:6e:d8:51:cc:94:
                    20:91:35:a2:7b:22:be:ac:9a:72:fe:30:f2:e5:76:
                    f4:de:7d:d7:eb:7f:17:92:1b:71:26:10:dc:a5:58:
                    3f:d9:0c:9c:79:16:c2:c4:d7:95:15:3b:ee:02:43:
                    dc:1c:16:3c:5e:08:dd:00:a3:b0:64:0a:c6:64:1d:
                    93:6f:b0:23:d0:6b:ec:5d:8b:c1:1b:7a:89:cf:9f:
                    63:6d:28:b2:4c:be:74:85:af:31:d9:e4:da:94:c2:
                    b8:bb:e5:f2:0c:2d:f7:10:14:a2:c8:e5:c0:f2:be:
                    d5:4e:17:52:85:d3:d9:87:ad:89:a4:d3:62:9f:fa:
                    fe:be:41:ff:2a:4e:ed:ee:79:2f:3a:14:4d:66:db:
                    ec:28:0c:f8:fb:91:d5:d0:89:03:ee:e2:e2:80:0d:
                    aa:57:33:00:c7:ca:4c:80:cf:b6:40:2a:2c:cb:ed:
                    a4:2c:bd:d3:c2:b5:14:bb:fa:00:09:7e:f2:3c:2a:
                    58:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:2D:4C:E9:0A:E0:DD:A7:F0:C6:7C:E0:CF:6C:F9:B1:0E:35:EF:77
            X509v3 Authority Key Identifier:
                keyid:D6:4B:89:CB:91:E5:2B:C9:36:5E:A4:89:D3:94:DB:5A:FC:F4:28:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/0/D64B89CB91E52BC9365EA489D394DB5AFCF428DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D64B89CB91E52BC9365EA489D394DB5AFCF428DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/0/D64B89CB91E52BC9365EA489D394DB5AFCF428DA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:07:3b:85:f3:67:bf:a5:79:85:f6:f9:d0:23:0b:12:41:5d:
         36:4e:b4:da:84:67:78:41:54:ea:81:3f:7f:b4:cf:f3:d3:62:
         78:15:ef:bf:a2:09:78:5c:d2:bb:95:f4:48:76:12:c9:92:77:
         86:20:3a:15:34:79:fc:03:95:85:b3:eb:b5:f8:54:b5:af:1a:
         42:f6:b1:ee:a2:7a:55:05:20:63:3f:f4:b3:05:8e:0a:f0:fe:
         6a:15:a7:45:a8:66:f3:00:aa:a8:ee:59:ba:26:b7:a1:7b:62:
         42:96:03:a3:e7:8c:8c:e4:a4:cc:de:7e:35:ff:b2:c0:41:20:
         50:68:74:42:e1:1c:ae:e0:d2:cc:5d:5d:c6:52:cc:d5:d7:b4:
         a1:b9:25:a6:ba:27:14:a7:10:27:a1:cd:12:f9:cb:b2:f6:4e:
         31:88:19:3b:9b:b3:32:c6:4f:44:73:53:5b:49:a6:46:15:ce:
         7a:29:18:3e:8a:56:ae:03:12:bd:48:6b:2d:5f:1c:4f:0c:01:
         f0:bc:ea:fd:24:6d:23:78:36:f8:00:0e:87:4b:06:c0:d4:b3:
         3a:a9:86:0f:2d:b7:1d:1c:a8:f5:12:55:86:bd:64:f0:3a:d4:
         c6:34:1c:15:a3:0d:68:94:42:97:e8:15:8a:0e:03:ff:84:e7:
         90:ec:e8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----