Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/0/D01091DE5882CE0E4BA5DA7DFEC094B514608A6D.mft
File:                     D01091DE5882CE0E4BA5DA7DFEC094B514608A6D.mft (raw, json)
Hash identifier:          Geeb/KyXGX9a8+zWprIYBlcz9kuRy5ptFPJKzENQLAM=
Subject key identifier:   D4:8D:FE:18:42:E6:F3:69:59:FD:A9:9B:CD:8E:F4:36:01:9D:EA:7F
Authority key identifier: D0:10:91:DE:58:82:CE:0E:4B:A5:DA:7D:FE:C0:94:B5:14:60:8A:6D
Certificate issuer:       /CN=D01091DE5882CE0E4BA5DA7DFEC094B514608A6D
Certificate serial:       747B230BB9F1088DBB48C986A04178F323600F5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D01091DE5882CE0E4BA5DA7DFEC094B514608A6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/0/D01091DE5882CE0E4BA5DA7DFEC094B514608A6D.mft
Manifest number:          0172
Signing time:             Mon 15 Apr 2024 04:02:16 +0000
Manifest this update:     Mon 15 Apr 2024 03:57:16 +0000
Manifest next update:     Tue 16 Apr 2024 06:49:16 +0000
Files and hashes:         1: 323830343a353139633a3a2f33322d313238203d3e20323638343635.roa (hash: 3jt6Sa8Nwx9GZkXxWBxGKazbg+Uuk2RGB8BoutQfmkI=)
                          2: 34352e3136312e3132342e302f32322d3332203d3e20323638343635.roa (hash: Tk4jM/bWN9Hyyn4mdUB2KDxozRu4mz4b7RIJvKRsrj8=)
                          3: D01091DE5882CE0E4BA5DA7DFEC094B514608A6D.crl (hash: +4y0Ybzxn2+l0xn0Etbmes8V0q12riMX5s6njrxPJ/s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:7b:23:0b:b9:f1:08:8d:bb:48:c9:86:a0:41:78:f3:23:60:0f:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D01091DE5882CE0E4BA5DA7DFEC094B514608A6D
        Validity
            Not Before: Apr 15 03:57:16 2024 GMT
            Not After : Apr 16 06:49:16 2024 GMT
        Subject: CN=D48DFE1842E6F36959FDA99BCD8EF436019DEA7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:49:28:10:cb:f5:82:2b:b4:dc:b5:f5:7d:a1:
                    73:39:52:81:57:be:31:03:23:aa:cb:37:10:8b:25:
                    3d:ac:9e:71:51:5b:1f:aa:66:c9:e2:54:52:f0:f6:
                    ae:fe:9b:b5:41:c9:fd:2a:82:4d:c3:16:3c:54:3f:
                    42:57:4c:6b:31:be:8f:1f:24:ca:e7:cd:9e:f5:b5:
                    cb:5e:cd:f7:ff:03:71:9b:d4:fc:86:99:a1:f4:c0:
                    f0:fd:ae:3c:de:84:16:b1:64:f1:02:9e:1e:c5:de:
                    61:c9:33:6d:d7:b1:ad:5d:3f:da:2e:d8:7e:a3:40:
                    79:d7:ff:c1:c7:04:64:de:19:71:0f:96:19:4d:75:
                    a6:27:92:74:cc:ae:97:17:a1:fc:f0:4d:56:3b:0f:
                    5a:af:15:2a:b5:52:0e:b9:41:c1:fa:48:fb:1c:40:
                    c4:92:0d:ed:a2:eb:c6:3a:1a:90:7f:04:4d:64:2d:
                    8d:03:20:52:95:66:bd:39:94:df:fd:8c:b4:8d:2c:
                    ed:ff:fd:f0:24:5d:c0:7e:c8:69:04:e7:48:b0:c8:
                    ab:8b:ca:9f:e5:33:81:28:46:24:45:4c:ae:13:8f:
                    88:de:2f:ba:31:61:64:80:64:8e:95:46:1c:01:a7:
                    ab:17:ce:ed:73:aa:37:92:10:2b:e8:61:58:01:be:
                    ac:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:8D:FE:18:42:E6:F3:69:59:FD:A9:9B:CD:8E:F4:36:01:9D:EA:7F
            X509v3 Authority Key Identifier:
                keyid:D0:10:91:DE:58:82:CE:0E:4B:A5:DA:7D:FE:C0:94:B5:14:60:8A:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/0/D01091DE5882CE0E4BA5DA7DFEC094B514608A6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D01091DE5882CE0E4BA5DA7DFEC094B514608A6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/0/D01091DE5882CE0E4BA5DA7DFEC094B514608A6D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:d8:4a:e5:47:9b:49:0b:8b:75:f0:30:1a:42:37:cf:be:6a:
         28:14:59:f7:f3:ee:6a:75:70:ed:92:28:4d:db:78:38:1f:8e:
         09:93:21:5c:b1:a5:4a:7e:1e:08:40:10:49:18:d7:7b:da:ba:
         7b:7c:f2:c3:ef:d4:57:f5:e2:74:bd:1e:02:f3:4d:7d:f9:6d:
         eb:16:76:06:51:ae:48:49:2b:55:1d:f1:b6:a1:b3:26:74:cd:
         cc:41:0f:ed:ee:09:46:75:2f:62:c6:1e:5a:01:69:a7:11:f1:
         66:d3:7f:00:c3:ad:95:2b:0a:c2:a2:ca:cb:09:c7:27:24:f8:
         b0:41:38:ef:1e:a8:46:24:3a:5a:a8:a8:5a:cc:14:59:4f:5f:
         35:cd:2c:e8:6e:ec:0d:2f:6a:03:37:e5:0f:1c:25:65:f8:f2:
         e3:b2:7f:e1:0e:c5:d2:8c:27:e4:96:08:53:5b:3e:ef:c6:e1:
         4d:ca:f3:0b:bd:60:1c:6f:6e:fe:a7:b4:c2:71:c7:43:1d:54:
         d9:68:b0:2f:2e:f4:39:78:05:7b:a3:60:7b:cf:e5:ab:b6:e0:
         cf:24:f7:ca:39:21:f6:d8:c1:f2:23:bd:5f:c8:8a:50:dd:f3:
         a4:87:2b:f6:e5:5f:24:1a:5b:38:cf:60:fe:b3:22:b0:d4:ad:
         da:89:3e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----