Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/0/42009413094777E86D462A87543681113F5E42E8.mft
File:                     42009413094777E86D462A87543681113F5E42E8.mft (raw, json)
Hash identifier:          So2mHbwG33J5TXBSfqjM8EG8l9ll18Ub4qZHMrn4yz8=
Subject key identifier:   09:74:6A:AD:AA:5E:E0:1F:35:2A:CE:A8:0F:09:F6:C5:19:4B:54:58
Authority key identifier: 42:00:94:13:09:47:77:E8:6D:46:2A:87:54:36:81:11:3F:5E:42:E8
Certificate issuer:       /CN=42009413094777E86D462A87543681113F5E42E8
Certificate serial:       570413DB91086A3DB63E8D84F6A803F84139081E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42009413094777E86D462A87543681113F5E42E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/0/42009413094777E86D462A87543681113F5E42E8.mft
Manifest number:          0627
Signing time:             Mon 15 Apr 2024 08:00:00 +0000
Manifest this update:     Mon 15 Apr 2024 07:55:00 +0000
Manifest next update:     Tue 16 Apr 2024 08:00:00 +0000
Files and hashes:         1: 42009413094777E86D462A87543681113F5E42E8.crl (hash: NzC6TThXAmv1EDlKI7pJNRtGYJVIz5yglwAWoLXEmI4=)
                          2: 3138392e3132372e3133382e302f32332d3234203d3e20323730373730.roa (hash: dJTL2BRL5IZTKWP++wBhggaTJrpmkCsXJeoGCSyyqtY=)
                          3: 323830313a38303a333938303a3a2f34382d3438203d3e20323730373730.roa (hash: qJlGjP2Lot0Gxjah4ho4vbbngLHzdqRQdAXjoZZBwQ4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:04:13:db:91:08:6a:3d:b6:3e:8d:84:f6:a8:03:f8:41:39:08:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42009413094777E86D462A87543681113F5E42E8
        Validity
            Not Before: Apr 15 07:55:00 2024 GMT
            Not After : Apr 22 08:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:66:e9:7a:2b:9a:e4:ae:c7:58:27:41:77:a3:
                    c7:6b:0e:3e:15:2d:be:6d:3f:3f:c7:76:89:b4:5e:
                    c0:47:d5:dd:58:e5:d7:29:af:2b:1c:01:26:ab:45:
                    a4:a6:e0:a2:48:fe:59:43:27:9a:a1:4f:05:53:c6:
                    f5:7d:1d:71:33:3e:52:7f:49:31:db:1b:b4:f1:cd:
                    94:51:a5:20:51:93:18:cd:2a:64:d0:2f:95:6f:08:
                    c7:ed:b2:ed:8b:8f:5a:ab:a5:7a:12:a5:4c:3d:36:
                    ab:8c:a1:88:3d:07:8e:18:23:8f:12:53:4d:22:b3:
                    e7:fb:0e:64:bd:54:47:f7:d2:ee:f7:5b:27:03:b0:
                    e5:94:ff:00:84:06:27:e1:5a:f6:df:71:54:82:1f:
                    72:17:d4:ee:e3:5d:a7:d3:3a:1d:0a:c0:f9:89:93:
                    00:9a:00:62:4e:ed:11:28:05:05:fe:11:f7:70:25:
                    69:77:68:ff:16:2c:62:fb:00:9f:96:08:58:3c:89:
                    03:02:76:1f:a4:ec:45:8d:eb:dc:fa:30:d8:04:6b:
                    fc:70:22:6f:ea:e3:b2:e7:07:c0:a5:fb:a4:ef:16:
                    97:72:98:3a:d7:27:0b:3a:55:c7:98:54:07:e3:94:
                    25:b5:ec:99:ef:ae:a6:e4:cd:03:61:09:4e:19:04:
                    40:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:74:6A:AD:AA:5E:E0:1F:35:2A:CE:A8:0F:09:F6:C5:19:4B:54:58
            X509v3 Authority Key Identifier:
                keyid:42:00:94:13:09:47:77:E8:6D:46:2A:87:54:36:81:11:3F:5E:42:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/0/42009413094777E86D462A87543681113F5E42E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42009413094777E86D462A87543681113F5E42E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/0/42009413094777E86D462A87543681113F5E42E8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:de:a8:97:a8:18:a5:1e:11:a1:cb:5f:72:f0:de:4b:4b:39:
         f9:b9:b1:1e:95:6b:1a:bf:f4:e1:1c:40:6c:08:ae:57:3a:14:
         6a:ac:69:eb:5f:8d:0e:bf:68:95:e6:85:70:9d:8b:55:43:11:
         ba:97:29:37:00:37:3e:c7:1d:d4:cc:49:45:6a:be:07:52:06:
         5a:53:5b:cc:c8:5a:5f:ea:d4:98:4a:83:62:ff:7f:e1:29:4a:
         e7:87:f3:6f:dc:55:4d:ac:46:48:b9:3f:31:e5:85:b6:0a:28:
         fb:51:4c:6c:32:ac:c3:0c:49:8f:42:21:59:72:1a:ec:53:1f:
         0a:75:f2:2f:7d:9c:84:c3:cf:12:2a:e9:6e:94:25:eb:8f:70:
         9e:26:3a:01:26:03:04:32:96:95:a1:e0:56:4d:48:a5:29:dc:
         75:02:75:21:4a:67:46:52:54:a7:ee:6f:6f:0f:77:e3:b3:4c:
         c7:f5:2f:5d:4f:5f:99:1e:fa:5c:ab:5e:a4:a5:bf:a1:32:51:
         bf:4d:23:f5:d4:ac:b0:6b:a7:1f:17:c0:44:51:ba:73:5b:4e:
         d3:bd:f2:f1:81:cb:d4:fb:e3:ec:d6:9e:2b:d0:4c:ab:09:16:
         cc:07:0e:29:0b:ed:97:be:c3:38:fc:94:07:68:67:c0:f1:a6:
         9c:8d:29:89
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----