Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/0/09347E4F9CBA8C744856F25E49BFAB804E739CCE.mft
File:                     09347E4F9CBA8C744856F25E49BFAB804E739CCE.mft (raw, json)
Hash identifier:          ez+Q3aTB3DBZ3bnW4hmunU7nsmY8EYepeiPYfJ+lCqk=
Subject key identifier:   4B:FD:AD:25:52:EF:84:58:59:82:96:C4:A4:38:3E:37:6D:82:64:5A
Authority key identifier: 09:34:7E:4F:9C:BA:8C:74:48:56:F2:5E:49:BF:AB:80:4E:73:9C:CE
Certificate issuer:       /CN=09347E4F9CBA8C744856F25E49BFAB804E739CCE
Certificate serial:       5EFB7B936ACA0F550FB150C6C72FE7C234E35822
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09347E4F9CBA8C744856F25E49BFAB804E739CCE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/0/09347E4F9CBA8C744856F25E49BFAB804E739CCE.mft
Manifest number:          02D1
Signing time:             Mon 15 Apr 2024 05:38:45 +0000
Manifest this update:     Mon 15 Apr 2024 05:33:45 +0000
Manifest next update:     Tue 16 Apr 2024 05:55:45 +0000
Files and hashes:         1: 09347E4F9CBA8C744856F25E49BFAB804E739CCE.crl (hash: 29U/GDdOjZrSnoslkD1pJKoPraeVkPVOpL4LFaSRAec=)
                          2: 323830343a363964303a3a2f33322d3438203d3e20323730323933.roa (hash: 3P0vesTb3k16WsMEX40snE3zAjMdfVv0zdfGYsqPjnc=)
                          3: 3230312e37312e3139362e302f32322d3234203d3e20323730323933.roa (hash: 3QQ29mZInqV+w615C1LcM4GhH5MP1vovCiSI5WYErZc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:fb:7b:93:6a:ca:0f:55:0f:b1:50:c6:c7:2f:e7:c2:34:e3:58:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09347E4F9CBA8C744856F25E49BFAB804E739CCE
        Validity
            Not Before: Apr 15 05:33:45 2024 GMT
            Not After : Apr 16 05:55:45 2024 GMT
        Subject: CN=4BFDAD2552EF8458598296C4A4383E376D82645A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:28:06:00:d1:5e:f0:0a:88:64:c0:66:c8:3c:
                    d8:54:4f:95:c1:c8:cf:10:57:f9:dc:af:04:a1:b6:
                    07:96:f3:9f:6f:36:3e:8f:c3:f0:5f:41:90:64:05:
                    0d:bf:d3:ec:6a:51:43:85:66:a9:98:f9:f0:f9:0f:
                    92:4f:ca:fe:bb:a5:b2:73:72:93:73:ed:6b:32:81:
                    ab:33:28:59:fb:78:f0:6a:72:fb:05:98:f1:b8:fa:
                    8d:02:4e:db:5b:1c:af:ed:c2:4b:20:ae:62:15:af:
                    d3:79:da:d1:96:e6:b0:ad:f6:ae:73:4d:e2:48:ec:
                    a5:6f:4e:ff:11:e4:49:ba:bc:1e:74:94:65:f0:f1:
                    ab:72:9f:ee:40:8c:ae:53:27:b1:04:b7:ac:41:8f:
                    75:46:70:a0:3f:59:25:b6:8a:77:3d:12:cd:94:0f:
                    b5:49:7f:c5:59:ca:52:2c:ca:f2:f2:f9:0e:c5:24:
                    5a:15:6e:69:77:5f:94:0d:11:32:a1:5f:c2:2d:14:
                    a7:7a:bc:f0:2e:93:28:bf:01:8c:f7:d6:f7:35:0a:
                    4a:8d:cf:af:59:9d:e0:a6:1b:49:ce:90:71:7d:51:
                    8a:a4:aa:f4:51:7f:53:1b:36:d2:52:bb:3a:1a:4d:
                    1c:7c:22:f2:5e:e2:b7:11:d3:60:4d:68:5b:60:47:
                    0b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:FD:AD:25:52:EF:84:58:59:82:96:C4:A4:38:3E:37:6D:82:64:5A
            X509v3 Authority Key Identifier:
                keyid:09:34:7E:4F:9C:BA:8C:74:48:56:F2:5E:49:BF:AB:80:4E:73:9C:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/0/09347E4F9CBA8C744856F25E49BFAB804E739CCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09347E4F9CBA8C744856F25E49BFAB804E739CCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/0/09347E4F9CBA8C744856F25E49BFAB804E739CCE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:40:3e:5e:8c:0a:75:8a:b1:99:01:7a:db:20:6b:0f:c9:2c:
         e3:a2:db:bd:79:fc:d7:94:4d:b8:7f:08:62:7a:b6:ef:55:a2:
         e3:ee:6e:da:90:c6:ce:04:c5:0a:ba:65:7e:ad:c5:09:2e:89:
         81:38:e3:d7:55:85:ae:5f:cd:de:df:92:52:4d:c8:61:35:61:
         15:03:aa:2f:12:fa:e9:64:42:75:f7:57:ba:8d:23:03:a5:57:
         d0:c5:4e:bb:cd:90:3a:a1:ec:40:06:1f:ff:46:8c:7f:96:c8:
         25:7f:08:8a:e8:8c:b5:d2:ac:4f:8b:21:bc:5b:4a:de:1a:53:
         da:37:d6:33:93:86:d4:6a:b6:46:9e:e7:75:36:f5:e9:0b:e5:
         8c:48:be:47:86:81:e4:f2:95:f8:10:cd:84:93:46:b7:50:e0:
         b0:2a:86:60:0b:69:e3:16:a0:1d:b6:fe:ea:ac:35:fb:e5:40:
         7b:a4:65:73:83:97:a4:da:3c:36:b3:65:56:84:0d:ed:f1:3f:
         91:5c:a0:62:d0:48:cc:65:cf:0a:5a:1e:0b:88:ee:54:93:74:
         68:33:d3:ad:51:53:ce:4a:18:98:52:ef:22:22:ff:14:15:07:
         fd:86:82:92:9c:55:bb:60:62:e9:e7:3f:11:d9:74:ed:9e:e9:
         cb:a6:a1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----