Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9Ff1J97VmJJdc5Wc51j1K5BBuwURa5de1SqJC9KLSWRY/0/489C8F0A8EBB2E30A24E0EC91B9BB83117F5F640.mft
File:                     489C8F0A8EBB2E30A24E0EC91B9BB83117F5F640.mft (raw, json)
Hash identifier:          /E1xXu5FIu46jqw139E+LTcTBVtn4RjbTutWKAltzOM=
Subject key identifier:   C9:32:CF:36:A8:41:7C:F6:E4:D6:DE:59:9A:58:BA:7E:E8:6A:3B:B2
Authority key identifier: 48:9C:8F:0A:8E:BB:2E:30:A2:4E:0E:C9:1B:9B:B8:31:17:F5:F6:40
Certificate issuer:       /CN=489C8F0A8EBB2E30A24E0EC91B9BB83117F5F640
Certificate serial:       4F41BE105D78DCB0FFA63912F3084A2F69321CCC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/489C8F0A8EBB2E30A24E0EC91B9BB83117F5F640.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Ff1J97VmJJdc5Wc51j1K5BBuwURa5de1SqJC9KLSWRY/0/489C8F0A8EBB2E30A24E0EC91B9BB83117F5F640.mft
Manifest number:          E6
Signing time:             Sat 23 Dec 2023 18:56:00 +0000
Manifest this update:     Sat 23 Dec 2023 18:51:00 +0000
Manifest next update:     Sun 24 Dec 2023 21:38:00 +0000
Files and hashes:         1: 489C8F0A8EBB2E30A24E0EC91B9BB83117F5F640.crl (hash: P7g6ap6sjg3pfIuI5DMzoxE8loG+ZUOpwOzIJFtKLvg=)
                          2: 3138392e35312e33322e302f32322d3232203d3e20323730373234.roa (hash: SOkqWDNhnmjnyJOI8TI18x/SFz1vKun0rXsp5oZJdTo=)
                          3: 323830343a373036343a3a2f33322d3332203d3e20323730373234.roa (hash: jWKgfaOt0mYI2xMoeOZV9U2T2jdq5RgR20yy6zKjQ0M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:41:be:10:5d:78:dc:b0:ff:a6:39:12:f3:08:4a:2f:69:32:1c:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=489C8F0A8EBB2E30A24E0EC91B9BB83117F5F640
        Validity
            Not Before: Dec 23 18:51:00 2023 GMT
            Not After : Dec 24 21:38:00 2023 GMT
        Subject: CN=C932CF36A8417CF6E4D6DE599A58BA7EE86A3BB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5e:15:8c:d3:89:99:12:48:4e:1b:a6:27:2f:
                    89:e4:d5:0a:48:e2:b8:c2:cc:f3:e9:77:8e:b1:2e:
                    92:4f:17:69:6e:d0:a3:8e:b4:b9:fe:d0:f2:ab:6a:
                    6f:0f:ab:b6:50:50:8a:fc:48:bc:b4:99:a1:3f:cc:
                    ae:e2:d3:36:e7:81:c6:ae:2a:10:b5:7a:76:72:51:
                    17:5a:b0:73:c9:5f:e2:33:c0:91:e9:53:7b:ca:b8:
                    1f:c3:fc:fc:a2:80:dd:89:79:c0:a0:be:dc:f9:46:
                    01:b2:f7:dd:1a:73:4c:87:f2:53:c4:78:d3:66:34:
                    11:63:e4:3f:fd:0f:2f:23:77:cb:65:72:13:64:4a:
                    c9:22:d4:de:90:ad:10:a6:f5:e5:28:8a:30:d7:5b:
                    aa:69:96:88:c7:78:5f:0f:39:de:3d:7c:ec:a0:f5:
                    94:ed:8d:7e:68:79:e0:ee:34:62:97:af:80:d4:27:
                    27:b6:9b:43:ff:e7:33:ef:86:81:b0:71:1d:6d:7b:
                    83:d8:f7:cf:6a:cb:74:db:ad:9c:f4:6d:ea:ce:52:
                    b3:9e:0d:7a:4c:a5:66:7f:91:37:b3:e7:ad:e4:76:
                    db:80:8f:40:ce:9e:42:41:f3:c7:a0:40:7b:0d:d0:
                    18:71:f6:07:7b:75:e1:31:6a:ad:5e:fb:17:c1:cc:
                    e1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:32:CF:36:A8:41:7C:F6:E4:D6:DE:59:9A:58:BA:7E:E8:6A:3B:B2
            X509v3 Authority Key Identifier:
                keyid:48:9C:8F:0A:8E:BB:2E:30:A2:4E:0E:C9:1B:9B:B8:31:17:F5:F6:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Ff1J97VmJJdc5Wc51j1K5BBuwURa5de1SqJC9KLSWRY/0/489C8F0A8EBB2E30A24E0EC91B9BB83117F5F640.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/489C8F0A8EBB2E30A24E0EC91B9BB83117F5F640.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Ff1J97VmJJdc5Wc51j1K5BBuwURa5de1SqJC9KLSWRY/0/489C8F0A8EBB2E30A24E0EC91B9BB83117F5F640.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:2d:e5:f8:cf:8b:89:78:40:9a:2c:31:eb:af:60:4c:6d:bb:
         d8:5e:15:20:a4:6a:59:72:aa:d7:fe:cb:84:bc:12:b3:60:37:
         40:eb:87:e7:30:53:d1:3b:4c:33:39:20:e4:8b:f7:8e:29:7a:
         55:5e:6c:77:f5:9a:85:4a:b0:a0:c3:5f:61:0f:21:e3:95:0a:
         d4:a4:4a:45:38:16:8d:47:10:7a:4e:1a:94:8b:84:46:ee:23:
         cd:d9:16:af:dd:23:ae:f4:3c:8c:e9:6f:e5:57:29:6f:d4:19:
         d6:d9:5e:79:68:52:72:74:45:61:17:c8:af:f5:39:2b:ec:f2:
         b7:af:08:70:d5:63:4a:48:bb:01:06:70:fc:46:54:42:ff:67:
         bb:00:42:7c:15:b8:a4:a0:72:4b:ba:8a:f6:4b:f1:3d:e4:90:
         d4:39:9e:5c:8b:3a:02:e8:59:37:12:f7:a9:a5:50:05:5c:89:
         af:99:e5:f1:06:10:02:91:9f:6c:82:0d:03:2f:dd:83:82:d5:
         2d:67:87:01:e8:bb:a9:ea:e8:9a:19:bd:4b:11:11:13:b8:b5:
         1b:9d:b6:28:b5:2d:08:61:66:59:79:6b:c4:b6:9a:a0:53:fa:
         05:d6:ed:16:24:33:e9:db:1b:91:bf:7d:28:dd:d3:e2:89:34:
         79:fa:e9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----