Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/9A6C850A6CFC6280C718D75F48315458AEB33DB5.mft
File:                     9A6C850A6CFC6280C718D75F48315458AEB33DB5.mft (raw, json)
Hash identifier:          pWex8YalYV8ZrqyX97m0tpcg9hUayPsn9yHn+zaqVeQ=
Subject key identifier:   AB:8F:F9:65:18:56:5C:11:E0:17:77:3D:36:FB:2E:61:9E:9F:5E:49
Authority key identifier: 9A:6C:85:0A:6C:FC:62:80:C7:18:D7:5F:48:31:54:58:AE:B3:3D:B5
Certificate issuer:       /CN=9A6C850A6CFC6280C718D75F48315458AEB33DB5
Certificate serial:       44D0560F133219E203BAC3E8486987B124AC3991
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A6C850A6CFC6280C718D75F48315458AEB33DB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/9A6C850A6CFC6280C718D75F48315458AEB33DB5.mft
Manifest number:          0115
Signing time:             Sun 14 Apr 2024 18:50:52 +0000
Manifest this update:     Sun 14 Apr 2024 18:45:52 +0000
Manifest next update:     Mon 15 Apr 2024 22:38:52 +0000
Files and hashes:         1: 9A6C850A6CFC6280C718D75F48315458AEB33DB5.crl (hash: 5X78W3SKXOtl+clzlDwJM0PsktqOs1bjQH5amMdOdmo=)
                          2: 323830343a376564383a3a2f33322d3438203d3e203238323332.roa (hash: BpYtwoOPwPM8HzJfZKiTErayuBdVPEDXgVUXyxfh8J4=)
                          3: 3138392e3132372e33322e302f32302d3234203d3e203238323332.roa (hash: vMBHUkyJ5hHT2EC3PdW2EzoAEDLwjPm5khC0RC6NCnM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:d0:56:0f:13:32:19:e2:03:ba:c3:e8:48:69:87:b1:24:ac:39:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A6C850A6CFC6280C718D75F48315458AEB33DB5
        Validity
            Not Before: Apr 14 18:45:52 2024 GMT
            Not After : Apr 15 22:38:52 2024 GMT
        Subject: CN=AB8FF96518565C11E017773D36FB2E619E9F5E49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f1:5a:45:5d:d3:43:be:5a:ea:e8:7e:c5:4e:
                    f8:95:02:66:12:cb:8c:1e:79:21:0d:3a:60:4b:23:
                    20:77:3c:20:82:4d:12:40:3c:03:a9:84:8a:b7:22:
                    2c:3f:78:8d:c5:f2:60:55:75:ff:5a:02:58:16:2a:
                    7d:74:d6:1a:76:e1:40:e1:3c:a8:be:4d:17:fe:16:
                    75:c9:67:b9:f3:02:2a:14:ad:b0:26:bf:b4:bb:67:
                    ff:d5:77:64:fe:30:1a:ad:cb:51:2b:1d:16:08:21:
                    ea:f5:69:56:dd:d4:a7:95:c9:e1:8f:df:e9:52:42:
                    02:d6:78:02:95:24:ed:76:49:07:95:21:ee:c5:f7:
                    40:92:cb:bd:6b:d7:0e:c9:71:b6:2c:39:72:38:d0:
                    38:f9:33:81:99:7d:bd:02:9e:ef:de:aa:d8:5f:72:
                    e3:d3:1f:b3:73:ec:cb:87:24:3c:71:44:10:6e:35:
                    01:6f:e0:9c:be:54:6c:86:fd:bf:3f:57:58:96:45:
                    02:79:f3:17:44:1c:02:9c:77:5e:9e:be:b5:c9:77:
                    48:0f:dd:8b:ab:93:07:3b:c7:af:99:81:38:2c:05:
                    e2:07:2e:44:95:67:a0:59:24:e9:95:6b:68:d9:05:
                    a0:f7:62:e9:6e:4c:33:f2:a6:1e:37:4c:df:ca:06:
                    68:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:8F:F9:65:18:56:5C:11:E0:17:77:3D:36:FB:2E:61:9E:9F:5E:49
            X509v3 Authority Key Identifier:
                keyid:9A:6C:85:0A:6C:FC:62:80:C7:18:D7:5F:48:31:54:58:AE:B3:3D:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/9A6C850A6CFC6280C718D75F48315458AEB33DB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A6C850A6CFC6280C718D75F48315458AEB33DB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/9A6C850A6CFC6280C718D75F48315458AEB33DB5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:cc:b1:30:c8:f0:8e:46:22:c3:40:bd:cc:7c:34:d3:35:1f:
         bd:87:42:3d:cf:dc:29:86:bc:37:e1:ff:de:f1:5c:b2:50:65:
         28:3e:b6:62:78:74:45:0a:73:71:75:45:dd:3b:a2:ea:88:2c:
         7f:de:97:7c:19:aa:cf:bc:38:e5:62:94:ee:75:fa:7f:1a:cb:
         62:41:eb:5d:5f:38:e6:bd:9d:1b:2a:a7:b4:e7:78:de:72:c1:
         28:76:81:9c:62:41:96:6e:d2:b3:3d:8e:0c:36:c6:be:58:2e:
         42:1c:8d:74:1c:74:d8:6d:c0:d7:db:e1:15:6c:db:87:b5:b8:
         f9:ca:54:9b:2a:67:df:5b:3f:55:5e:26:03:07:59:46:64:05:
         33:e6:6c:ba:07:e9:50:2c:61:9f:e7:1c:da:d2:fe:41:d3:93:
         1e:44:0c:b4:f3:c0:c1:22:0b:4f:04:d7:e3:6b:61:aa:c2:8d:
         20:77:ba:e9:32:90:58:a1:77:93:cb:0b:f1:5a:42:a0:b2:e6:
         f5:96:c3:9f:7f:39:a8:9b:b4:f8:76:d1:f4:6b:03:6a:b1:99:
         a2:c7:d9:a2:0c:91:a4:18:b5:ae:cd:f9:ed:22:27:39:7b:a9:
         48:e4:ab:20:c8:87:3f:c2:22:45:43:87:37:2b:ca:f0:87:e7:
         1d:99:ef:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----