Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/97CnphQnCpLq1RBJqUeRtj5Lzwx1r8FFtimaUdtdyWZU/0/636412FBD9D29DFCC4665CD312A2163F6A148C82.mft
File:                     636412FBD9D29DFCC4665CD312A2163F6A148C82.mft (raw, json)
Hash identifier:          ATFYyiuKsreMfPYhzsjBGvRdtAXaoxOSAbAoPGF+rkM=
Subject key identifier:   9D:CB:36:76:6A:68:AC:97:A8:F6:7E:DC:F1:05:53:CC:F7:E2:15:88
Authority key identifier: 63:64:12:FB:D9:D2:9D:FC:C4:66:5C:D3:12:A2:16:3F:6A:14:8C:82
Certificate issuer:       /CN=636412FBD9D29DFCC4665CD312A2163F6A148C82
Certificate serial:       2AB80E2934B19E9F0300FC80C9CF57F403A7C578
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/636412FBD9D29DFCC4665CD312A2163F6A148C82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97CnphQnCpLq1RBJqUeRtj5Lzwx1r8FFtimaUdtdyWZU/0/636412FBD9D29DFCC4665CD312A2163F6A148C82.mft
Manifest number:          0283
Signing time:             Mon 15 Apr 2024 00:40:00 +0000
Manifest this update:     Mon 15 Apr 2024 00:35:00 +0000
Manifest next update:     Tue 16 Apr 2024 00:40:00 +0000
Files and hashes:         1: 636412FBD9D29DFCC4665CD312A2163F6A148C82.crl (hash: RbjgM8lcJHsCxwowhXTz7FekRaKDUqot+4Z3Wi6ks8Q=)
                          2: 34352e3233342e31312e302f32342d3234203d3e20323636323639.roa (hash: O0hk/YEfsRhesYCnEu6FxyPPZG5XKVCDQAdmF5U73cA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b8:0e:29:34:b1:9e:9f:03:00:fc:80:c9:cf:57:f4:03:a7:c5:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=636412FBD9D29DFCC4665CD312A2163F6A148C82
        Validity
            Not Before: Apr 15 00:35:00 2024 GMT
            Not After : Apr 22 00:40:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a2:76:97:34:2e:e9:c9:e1:ea:f0:24:2a:7a:
                    06:87:7a:f7:62:6e:66:45:ce:45:35:94:ba:18:f9:
                    51:0d:1b:eb:21:48:91:9c:3d:3c:93:52:15:74:c6:
                    5e:8f:f0:fe:55:bb:ca:40:5c:ce:f4:8a:80:44:d5:
                    10:3f:fd:d4:c2:2c:1f:e4:f9:71:11:52:e2:ea:a0:
                    65:6c:cf:7d:dc:9d:ec:9e:1b:98:d9:91:35:9f:e9:
                    76:ca:e3:b8:c8:4d:c3:93:39:ff:f9:10:13:01:ae:
                    63:42:89:46:6e:ff:db:0b:93:2a:96:3b:22:2f:df:
                    bf:bc:e2:4f:f3:00:09:e5:6e:6a:97:9e:37:8d:5f:
                    8b:c4:f3:c6:78:5d:36:5f:1d:b7:67:53:93:2c:fa:
                    eb:8e:6d:60:b9:8e:d4:e1:24:6f:d6:68:d5:6f:8f:
                    ce:c5:44:eb:5a:05:9c:5d:ba:70:47:eb:e9:88:10:
                    ef:61:8e:cd:cb:75:e6:f3:b6:77:09:84:33:cd:e6:
                    90:69:35:6f:c1:bf:28:5b:b0:30:59:67:ee:ac:be:
                    d5:3a:21:7f:3b:37:b5:83:3e:2b:95:34:4e:d4:42:
                    3c:f1:c2:b1:6b:a9:96:d6:61:d5:7c:25:77:c2:79:
                    cf:4e:33:a8:4e:7d:8c:2b:d3:43:c0:d3:d3:31:91:
                    cd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:CB:36:76:6A:68:AC:97:A8:F6:7E:DC:F1:05:53:CC:F7:E2:15:88
            X509v3 Authority Key Identifier:
                keyid:63:64:12:FB:D9:D2:9D:FC:C4:66:5C:D3:12:A2:16:3F:6A:14:8C:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97CnphQnCpLq1RBJqUeRtj5Lzwx1r8FFtimaUdtdyWZU/0/636412FBD9D29DFCC4665CD312A2163F6A148C82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/636412FBD9D29DFCC4665CD312A2163F6A148C82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97CnphQnCpLq1RBJqUeRtj5Lzwx1r8FFtimaUdtdyWZU/0/636412FBD9D29DFCC4665CD312A2163F6A148C82.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:82:ae:ba:e4:2c:82:ec:76:d3:e3:0a:41:fc:d4:03:95:9d:
         2c:c2:e6:0f:ac:9e:ae:74:19:ca:81:6c:cd:39:78:c9:ce:83:
         c0:c3:e8:88:b2:22:db:9f:26:c3:a3:1b:db:3b:1f:b5:7d:ae:
         b3:93:d9:3c:e2:4a:32:0a:01:6c:08:9b:e3:eb:1f:bf:06:3d:
         f9:17:9e:58:3a:06:4a:3d:79:8b:1f:c8:d8:00:cb:9c:f5:f9:
         80:67:ea:f2:81:6b:78:86:59:89:da:44:fc:e5:0a:92:bd:a1:
         43:7f:bf:6f:8d:ef:b3:eb:a1:c2:86:0b:c3:c9:5d:c3:ea:f1:
         2e:7a:cd:82:89:35:60:e3:12:d6:e6:07:a1:fa:9b:31:12:33:
         7f:71:da:01:5a:15:22:24:aa:91:6a:d0:21:0c:de:5a:99:70:
         f7:c2:04:7e:94:c1:f8:2b:c8:8c:c1:b2:30:ee:94:96:7e:81:
         2c:5a:5a:ee:01:20:de:10:9c:19:25:08:f7:1f:f7:b7:56:a8:
         e7:08:5d:fa:c4:92:11:e2:17:ac:6f:40:c6:64:c8:65:91:c8:
         c8:09:dc:96:11:c4:e9:d0:5e:40:4f:18:b5:c8:6d:ea:20:ee:
         67:2d:d8:ec:fa:72:c2:76:1a:56:f6:d7:37:b3:8c:b9:38:00:
         42:9f:85:01
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----