Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/1/495E049C49C0140EB2B92F912CA704E624C6FC48.mft
File:                     495E049C49C0140EB2B92F912CA704E624C6FC48.mft (raw, json)
Hash identifier:          r4DedXB6aIhxVO9CIveD/dOtHAKnc2KN74ORnjqA4+w=
Subject key identifier:   5C:DF:13:DC:51:8C:E4:E9:4E:F9:86:EA:6E:11:2E:F3:CA:D2:96:6E
Authority key identifier: 49:5E:04:9C:49:C0:14:0E:B2:B9:2F:91:2C:A7:04:E6:24:C6:FC:48
Certificate issuer:       /CN=495E049C49C0140EB2B92F912CA704E624C6FC48
Certificate serial:       6F8DBE4265FDCE0D28293A5B0F9DDA43BA418D60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/495E049C49C0140EB2B92F912CA704E624C6FC48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/1/495E049C49C0140EB2B92F912CA704E624C6FC48.mft
Manifest number:          02
Signing time:             Sat 20 Apr 2024 01:55:12 +0000
Manifest this update:     Sat 20 Apr 2024 01:50:12 +0000
Manifest next update:     Sun 21 Apr 2024 05:39:12 +0000
Files and hashes:         1: 495E049C49C0140EB2B92F912CA704E624C6FC48.crl (hash: jwH9gykW/0jYkiO1inT7jwfmeteV4JX07Zt7QtsCXjA=)
                          2: 323830343a363964303a3a2f33322d3438203d3e20323730323933.roa (hash: Ws2KE63cFbBHN8XKqdbyWV12AP71TGdbi3T/FOHbL7w=)
                          3: 3230312e37312e3139362e302f32322d3234203d3e20323730323933.roa (hash: 4VinFgPD1Ab4e82K92CBTVF/gSv7i1Z5WA1f9cIgHyE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:8d:be:42:65:fd:ce:0d:28:29:3a:5b:0f:9d:da:43:ba:41:8d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=495E049C49C0140EB2B92F912CA704E624C6FC48
        Validity
            Not Before: Apr 20 01:50:12 2024 GMT
            Not After : Apr 21 05:39:12 2024 GMT
        Subject: CN=5CDF13DC518CE4E94EF986EA6E112EF3CAD2966E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:30:ac:31:12:62:e7:9b:5e:8d:fc:da:b6:83:
                    31:21:ca:47:7d:fd:94:76:27:4f:e5:04:d8:bb:51:
                    3b:c7:79:cd:4e:4d:7f:e8:57:d9:e1:fa:aa:9c:f3:
                    01:b8:a6:77:05:b8:32:97:70:b2:88:ae:ea:56:8e:
                    b8:8e:36:34:bf:c6:2f:65:01:20:d1:8f:39:fa:a4:
                    15:8d:c3:0f:30:ee:81:50:4e:25:77:47:50:ed:cb:
                    12:ea:30:b6:d9:3f:86:8d:ab:c5:19:94:a2:57:ca:
                    24:65:1a:5b:69:d9:e3:96:2c:8b:37:e3:75:77:20:
                    66:08:4c:1e:d3:ec:4f:2d:66:fa:89:00:c8:fb:ea:
                    09:22:1e:e2:82:26:57:0f:c1:60:6b:5c:cd:90:a3:
                    4a:07:a9:b8:9f:fa:9d:d4:af:00:5a:41:ec:f0:4d:
                    e9:8b:f7:fa:79:6b:ca:ad:11:7d:2b:4a:60:d7:22:
                    63:13:d7:bb:c3:7f:ef:44:6c:95:d3:c3:20:3d:f4:
                    ba:6f:65:32:d4:44:f9:ae:19:52:e7:01:18:a8:b5:
                    a1:de:86:2f:e5:51:3a:5c:9c:7d:4c:68:ee:50:73:
                    4f:36:23:e3:34:07:70:3f:de:15:fd:57:e9:8c:4d:
                    9d:33:b2:40:60:22:90:ee:be:0d:40:ed:58:51:9c:
                    3a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:DF:13:DC:51:8C:E4:E9:4E:F9:86:EA:6E:11:2E:F3:CA:D2:96:6E
            X509v3 Authority Key Identifier:
                keyid:49:5E:04:9C:49:C0:14:0E:B2:B9:2F:91:2C:A7:04:E6:24:C6:FC:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/1/495E049C49C0140EB2B92F912CA704E624C6FC48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/495E049C49C0140EB2B92F912CA704E624C6FC48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/1/495E049C49C0140EB2B92F912CA704E624C6FC48.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:3c:b7:c4:a8:b8:70:41:b8:dd:89:6b:6a:02:6f:83:f3:4a:
         89:da:d5:0d:0b:72:f4:da:f5:43:30:42:43:d4:77:11:c4:3c:
         d0:95:d7:2f:9b:ca:60:f5:37:c3:87:fb:da:c5:54:ef:b2:32:
         81:85:c2:47:e5:85:18:dc:6d:0d:9d:3d:24:b9:a6:da:8f:f8:
         53:bb:0a:e3:dd:50:db:73:d5:de:bb:b1:0a:8d:c8:2d:24:26:
         83:80:6c:01:5f:12:14:b7:46:d8:a8:ee:af:5a:82:b4:37:bc:
         0f:87:82:bf:f0:c2:42:50:6b:12:78:ec:7d:26:73:a9:5e:84:
         c2:53:bd:3e:5c:ab:c6:cc:1c:5a:f7:2f:e4:86:0c:74:78:83:
         3c:df:4f:d4:c1:fc:a8:41:ca:53:2f:6a:c9:d3:22:a5:bb:15:
         f6:67:d0:98:36:0f:24:fb:1e:f6:16:3e:87:a9:82:d8:f4:c1:
         5f:b0:76:d9:1e:ea:d5:1c:10:2a:35:b5:9a:15:94:9b:bd:65:
         3d:38:49:c9:be:c9:ff:b8:70:50:3d:3b:6b:eb:53:33:df:66:
         e3:28:7f:a2:79:20:20:bd:36:a0:ff:c6:e7:52:e3:17:36:d1:
         4e:62:ec:08:13:e3:91:64:ef:f5:58:2f:36:b4:5d:8d:57:72:
         2b:73:d2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----