Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7wWUpSWkkVyjFvTR3vxSrjJUJm3rNAGh5hXB2TDfHipX/0/41A1360A0E560035778E89ED306F3286FD7C4235.mft
File:                     41A1360A0E560035778E89ED306F3286FD7C4235.mft (raw, json)
Hash identifier:          ql3jzFa9a4eAWuJFwG60oxfnQcZo7Np9bHresz3ALgM=
Subject key identifier:   21:46:C7:61:C8:9B:74:E0:18:71:79:D8:67:AE:F0:DD:08:FB:DA:F6
Authority key identifier: 41:A1:36:0A:0E:56:00:35:77:8E:89:ED:30:6F:32:86:FD:7C:42:35
Certificate issuer:       /CN=41A1360A0E560035778E89ED306F3286FD7C4235
Certificate serial:       74D62CCF902CFDCDC86F53509B7F8B6D9DD84BDE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41A1360A0E560035778E89ED306F3286FD7C4235.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wWUpSWkkVyjFvTR3vxSrjJUJm3rNAGh5hXB2TDfHipX/0/41A1360A0E560035778E89ED306F3286FD7C4235.mft
Manifest number:          0206
Signing time:             Mon 15 Apr 2024 09:21:40 +0000
Manifest this update:     Mon 15 Apr 2024 09:16:40 +0000
Manifest next update:     Tue 16 Apr 2024 10:23:40 +0000
Files and hashes:         1: 41A1360A0E560035778E89ED306F3286FD7C4235.crl (hash: X9ru/rvcC+U6Pgp5B9YV9fWulZHPQtpQdut+35fCtgg=)
                          2: 34352e3138332e3132342e302f32322d3332203d3e20323639333330.roa (hash: SdDGv98IbJQP04eEq7oDkOHgOTW1qMriniBSmsQq7kE=)
                          3: 323830343a363266343a3a2f33322d313238203d3e20323639333330.roa (hash: eK+2slNjWj9yUy1AhkPumndVVZdIVVpIe7NlQzFdhnU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d6:2c:cf:90:2c:fd:cd:c8:6f:53:50:9b:7f:8b:6d:9d:d8:4b:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41A1360A0E560035778E89ED306F3286FD7C4235
        Validity
            Not Before: Apr 15 09:16:40 2024 GMT
            Not After : Apr 16 10:23:40 2024 GMT
        Subject: CN=2146C761C89B74E0187179D867AEF0DD08FBDAF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:73:34:27:1a:8d:6c:ca:f9:33:58:80:52:c0:
                    b1:1a:3e:e2:16:1a:9a:11:7b:b3:19:61:bc:d2:dc:
                    d3:84:c3:5c:13:02:f8:59:24:a1:5f:31:4f:79:d2:
                    f8:bf:fc:14:5a:09:87:61:81:62:ef:16:40:3d:0b:
                    c8:67:8c:63:f4:3d:92:29:1d:4e:05:88:11:3e:56:
                    e9:55:e6:00:e2:69:82:0c:97:56:f6:a9:64:82:11:
                    34:87:51:5e:8c:08:4c:d2:54:d9:ee:a2:75:7f:74:
                    e9:d3:7e:a6:0a:00:d5:79:56:ce:77:c5:3f:9c:e5:
                    d4:cf:ad:2d:3a:5b:5b:6c:90:30:ec:5b:63:9e:be:
                    b8:8f:45:ec:55:94:2a:1e:fe:4a:b4:05:93:6d:76:
                    a8:ed:26:14:16:3e:e0:44:f9:d5:e1:5d:ac:a1:bb:
                    ba:73:33:fc:3d:b3:a8:68:12:08:94:84:87:bd:fa:
                    1e:65:3e:ec:f5:e1:ae:06:9b:f4:ee:91:71:b3:63:
                    ec:1b:ab:33:48:73:45:0c:b9:ce:f3:37:b6:86:74:
                    67:f2:cf:9e:a0:79:f9:02:6c:4c:3f:58:0e:4e:76:
                    d8:63:71:cf:16:b8:ee:e5:6f:28:2a:08:3f:3d:c8:
                    e7:7c:f4:42:dd:24:cf:50:79:c5:97:a3:c2:ee:97:
                    5b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:46:C7:61:C8:9B:74:E0:18:71:79:D8:67:AE:F0:DD:08:FB:DA:F6
            X509v3 Authority Key Identifier:
                keyid:41:A1:36:0A:0E:56:00:35:77:8E:89:ED:30:6F:32:86:FD:7C:42:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wWUpSWkkVyjFvTR3vxSrjJUJm3rNAGh5hXB2TDfHipX/0/41A1360A0E560035778E89ED306F3286FD7C4235.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41A1360A0E560035778E89ED306F3286FD7C4235.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wWUpSWkkVyjFvTR3vxSrjJUJm3rNAGh5hXB2TDfHipX/0/41A1360A0E560035778E89ED306F3286FD7C4235.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:2d:5d:cb:28:af:18:49:e9:9d:70:a4:86:21:d2:e4:5c:97:
         14:ad:ab:f6:a1:6b:f5:c3:ba:d8:a4:dd:47:76:95:0f:d8:3d:
         1f:c3:24:0c:fa:84:41:e3:c3:b9:86:0e:30:9a:bb:e2:1d:00:
         b9:4d:d3:d4:4b:d9:50:31:71:af:0e:26:18:fc:06:11:73:28:
         64:70:49:87:d6:d8:26:96:3a:56:fc:67:b0:53:85:27:b9:be:
         06:ab:4f:8c:9f:e1:49:5a:b1:62:2a:34:dc:6f:96:95:7f:be:
         53:fe:b8:93:f1:ed:57:d7:a2:5c:de:1b:33:0b:b9:ea:72:98:
         2b:46:5d:f2:18:b4:9f:d5:16:cb:a3:93:7a:e5:ce:a6:f4:e8:
         97:31:16:d7:9a:f1:76:81:cd:bd:b3:80:98:74:62:e5:a8:e4:
         d1:66:22:3a:0d:6a:3a:f9:51:86:c9:4d:5f:0d:ca:cb:63:32:
         a4:aa:c1:07:e7:57:18:29:5f:f0:d6:15:63:23:68:78:18:95:
         23:5a:9f:a5:e9:d7:29:e7:23:97:4d:e2:0e:bd:49:e3:65:0f:
         f5:93:2e:19:b3:52:4a:a4:3a:57:a8:d6:11:08:e6:4b:de:c2:
         8f:85:70:15:e4:65:cf:c5:d3:88:c3:9b:ee:ed:aa:a7:39:e2:
         cf:f7:76:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----