Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/BB9365DEF2F89561A2197EE7A90A22E2FE9D724D.mft
File:                     BB9365DEF2F89561A2197EE7A90A22E2FE9D724D.mft (raw, json)
Hash identifier:          cjEPAPzn3UPVWEwP6k6A++nlvT49F1ehC5nmEfysfd4=
Subject key identifier:   CE:32:A3:AD:71:CF:3F:90:22:B7:84:B6:3B:94:CF:64:E4:C2:11:1A
Authority key identifier: BB:93:65:DE:F2:F8:95:61:A2:19:7E:E7:A9:0A:22:E2:FE:9D:72:4D
Certificate issuer:       /CN=BB9365DEF2F89561A2197EE7A90A22E2FE9D724D
Certificate serial:       6E5474F686AAFC87C523520B35C599151B4E3381
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB9365DEF2F89561A2197EE7A90A22E2FE9D724D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/BB9365DEF2F89561A2197EE7A90A22E2FE9D724D.mft
Manifest number:          0523
Signing time:             Mon 15 Apr 2024 01:08:16 +0000
Manifest this update:     Mon 15 Apr 2024 01:03:16 +0000
Manifest next update:     Tue 16 Apr 2024 01:21:16 +0000
Files and hashes:         1: 323830343a383039383a3a2f33322d3438203d3e20323731373631.roa (hash: bz3APfecP2gmpOZsoCTU5g3MqCl8XrL4jCl6MDFHKNM=)
                          2: BB9365DEF2F89561A2197EE7A90A22E2FE9D724D.crl (hash: sd4bPqwvMaAQClvRWTY13BiAm3ug12SvN2RJCNWiRn0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:54:74:f6:86:aa:fc:87:c5:23:52:0b:35:c5:99:15:1b:4e:33:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB9365DEF2F89561A2197EE7A90A22E2FE9D724D
        Validity
            Not Before: Apr 15 01:03:16 2024 GMT
            Not After : Apr 16 01:21:16 2024 GMT
        Subject: CN=CE32A3AD71CF3F9022B784B63B94CF64E4C2111A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ed:f8:2b:73:f8:83:57:c2:50:59:84:17:ea:
                    94:3b:07:f5:71:61:3b:4f:40:74:f4:f9:3b:60:50:
                    a5:07:1d:e2:d4:f2:53:73:e2:15:e7:8a:9a:07:5d:
                    34:a8:2a:d6:d2:d9:33:59:13:d8:27:71:6e:78:53:
                    ab:35:ca:4c:63:21:88:a6:b5:40:37:2d:66:b4:68:
                    66:12:cb:80:34:b9:26:79:04:d3:cb:9f:92:78:94:
                    e0:c1:26:4b:73:74:fb:d0:73:0c:4e:0a:e2:14:75:
                    b2:be:f4:2e:f6:02:80:0c:a9:7d:8f:d9:e2:65:d1:
                    31:28:da:16:2e:af:2b:da:69:b6:cf:cd:ca:47:53:
                    00:22:67:64:7f:ba:ed:3d:ae:e3:23:62:2a:0a:a6:
                    13:e5:6c:83:2f:2f:b8:eb:44:b8:5b:29:bb:ce:dc:
                    ee:8c:b5:af:fc:c7:00:95:5d:02:e2:ee:55:e4:08:
                    ed:c8:ee:0b:1e:00:e3:46:66:81:db:5d:37:dc:b6:
                    ec:5b:3d:e8:56:38:a0:a9:e3:cb:a5:c9:e6:fd:b8:
                    b8:d9:48:ff:70:f6:95:06:15:46:fb:40:a4:fc:4f:
                    85:c3:08:50:38:7d:e4:d2:4b:28:02:bd:6c:03:c9:
                    ab:c8:21:2d:0e:03:41:10:cc:b4:11:36:6d:44:4a:
                    86:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:32:A3:AD:71:CF:3F:90:22:B7:84:B6:3B:94:CF:64:E4:C2:11:1A
            X509v3 Authority Key Identifier:
                keyid:BB:93:65:DE:F2:F8:95:61:A2:19:7E:E7:A9:0A:22:E2:FE:9D:72:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/BB9365DEF2F89561A2197EE7A90A22E2FE9D724D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB9365DEF2F89561A2197EE7A90A22E2FE9D724D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/BB9365DEF2F89561A2197EE7A90A22E2FE9D724D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:5c:33:ce:7a:51:81:77:fb:ae:a8:dc:ca:26:9f:c8:b8:f8:
         2b:1c:1a:7a:ca:4c:37:01:33:c3:5b:a9:9d:6b:93:3a:56:68:
         c0:6e:c7:67:92:fc:01:8e:2b:0a:e3:a0:19:df:08:60:d6:87:
         06:8c:71:1c:3a:81:be:1c:78:57:0f:9e:13:2b:7a:32:ec:91:
         ca:bb:e7:6e:20:ea:4b:30:7c:d0:e6:61:d2:b5:3d:80:b8:e9:
         d4:93:1a:71:be:82:a8:96:93:5d:9a:28:70:f6:92:81:a0:c2:
         a2:8f:fc:b5:a5:dd:26:1c:92:f2:ae:17:c6:18:44:a2:a2:21:
         66:54:b6:4e:1d:8f:6b:65:f8:e2:94:1b:de:61:d5:b5:65:e7:
         9e:cc:b5:22:21:29:2c:68:fa:34:b8:f2:fb:4a:c6:2b:17:46:
         53:57:99:ee:bf:32:98:4b:1e:06:81:f9:a5:20:bb:02:18:43:
         57:55:9c:8c:6b:c4:20:4a:49:6c:83:58:b5:c8:c8:3d:1a:73:
         c0:0f:fd:c0:b5:af:61:6a:7c:8c:29:ee:29:a2:aa:62:09:1a:
         76:80:65:ed:8f:a2:46:6b:0b:9b:95:d6:92:f7:d5:dd:32:8f:
         b2:e2:a6:e0:e0:da:2d:a4:bc:67:23:13:57:52:d0:b0:37:1d:
         36:9f:51:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----