Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/1/C9A14D4A938C75D13CCE50DD4B1E6B64A80A4153.mft
File:                     C9A14D4A938C75D13CCE50DD4B1E6B64A80A4153.mft (raw, json)
Hash identifier:          qrk8uvhnqMuK8r1Mzwl6b0pzCg+Epqt8KxCYGycG8rc=
Subject key identifier:   7D:AF:42:87:3E:00:E9:4F:AF:55:ED:61:18:21:38:D6:67:2F:19:29
Authority key identifier: C9:A1:4D:4A:93:8C:75:D1:3C:CE:50:DD:4B:1E:6B:64:A8:0A:41:53
Certificate issuer:       /CN=C9A14D4A938C75D13CCE50DD4B1E6B64A80A4153
Certificate serial:       7258BBBC49534CEB7E8605A8C946E14AC76F9B1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9A14D4A938C75D13CCE50DD4B1E6B64A80A4153.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/1/C9A14D4A938C75D13CCE50DD4B1E6B64A80A4153.mft
Manifest number:          0B
Signing time:             Sun 14 Apr 2024 20:20:45 +0000
Manifest this update:     Sun 14 Apr 2024 20:15:45 +0000
Manifest next update:     Mon 15 Apr 2024 20:23:45 +0000
Files and hashes:         1: C9A14D4A938C75D13CCE50DD4B1E6B64A80A4153.crl (hash: sszXldF8UBeamsCDcr8c9uASGKi8YQ/QkKDbmNOeY8M=)
                          2: 3133312e3130382e3232382e302f32322d3232203d3e20323634333532.roa (hash: /6tDKa08SK2PQR7EKEVfF5/yIalGb2pc4QCSIjSM0MM=)
                          3: 323830343a316432633a3a2f33322d3332203d3e20323634333532.roa (hash: eroKXjOHockyOL9bPUaOHr1WtB6bq/aMpHTBSb1tMjs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:58:bb:bc:49:53:4c:eb:7e:86:05:a8:c9:46:e1:4a:c7:6f:9b:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9A14D4A938C75D13CCE50DD4B1E6B64A80A4153
        Validity
            Not Before: Apr 14 20:15:45 2024 GMT
            Not After : Apr 15 20:23:45 2024 GMT
        Subject: CN=7DAF42873E00E94FAF55ED61182138D6672F1929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:be:14:50:21:2f:1d:f5:fc:5b:b7:07:d6:74:
                    58:0d:b2:df:f4:af:3a:75:aa:b6:29:a9:8c:cc:54:
                    5b:62:a7:34:c9:d1:8a:c4:82:d9:e0:7e:77:55:ad:
                    ec:85:4d:b4:b9:c8:54:70:0e:dd:01:b6:58:3f:5a:
                    da:90:28:35:a5:19:42:48:c9:ff:87:e7:d4:49:a6:
                    79:99:59:aa:78:da:29:39:22:51:5f:36:38:d8:80:
                    7c:f4:33:88:2d:94:56:d5:62:8e:9f:6b:b9:9c:e5:
                    d4:20:80:8b:cf:38:8c:1e:ec:1f:f3:13:7b:c3:9f:
                    96:8c:89:28:5a:7f:37:df:10:94:78:9f:91:a2:66:
                    a7:4d:97:a6:bc:3f:11:02:09:a1:82:c6:5f:f4:83:
                    90:ff:ff:69:ff:b2:04:fa:ca:9c:35:1d:e2:ca:eb:
                    6f:48:96:5a:92:5b:ae:48:11:19:3d:e4:7c:04:32:
                    a4:d3:6c:0f:8b:cf:70:d5:80:ca:83:68:a1:ab:4c:
                    ea:29:13:b1:56:b7:67:fe:d8:2b:72:3a:60:f3:5b:
                    8d:75:2c:20:04:b2:83:52:21:0f:ce:f5:79:a0:24:
                    2e:4c:b5:c3:12:7e:e2:b9:9c:0b:75:a2:1e:49:0c:
                    68:00:18:46:aa:3b:1d:fa:4e:2c:dd:a4:7d:92:44:
                    9a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:AF:42:87:3E:00:E9:4F:AF:55:ED:61:18:21:38:D6:67:2F:19:29
            X509v3 Authority Key Identifier:
                keyid:C9:A1:4D:4A:93:8C:75:D1:3C:CE:50:DD:4B:1E:6B:64:A8:0A:41:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/1/C9A14D4A938C75D13CCE50DD4B1E6B64A80A4153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9A14D4A938C75D13CCE50DD4B1E6B64A80A4153.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/1/C9A14D4A938C75D13CCE50DD4B1E6B64A80A4153.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:4e:62:52:ec:8f:40:4b:cd:4c:81:93:ec:ea:ff:f2:07:e7:
         a2:f0:5f:5a:e7:0a:81:7d:09:bd:48:d1:9b:d2:ad:95:fe:b2:
         d6:6a:8d:d5:78:e4:a9:49:41:67:cd:74:fb:9e:23:38:18:4d:
         14:7a:3d:ba:0a:5c:d8:cf:53:4d:3d:e4:39:5d:13:d2:9c:95:
         4d:55:47:ab:c7:68:cd:3d:94:cf:1b:9c:d4:f0:5f:86:ec:2e:
         fb:47:8a:3e:af:c4:88:43:61:4f:a2:a8:da:77:f9:5d:78:01:
         2d:50:fa:7e:61:4b:70:14:a1:08:e2:dd:b2:9a:46:86:7d:ad:
         4b:cc:02:c0:ad:8e:2a:9c:9a:73:2e:44:29:aa:57:b2:d7:e4:
         5a:fa:40:b5:97:07:77:53:94:ac:11:31:c7:53:83:b6:6e:3f:
         21:a5:6f:34:cd:77:ec:fa:c9:56:a5:7b:1a:c4:78:4a:ee:6f:
         c6:6a:cb:d7:7d:7f:be:48:56:0a:17:78:7d:13:3b:11:26:24:
         7c:72:79:dd:42:df:95:90:dd:33:18:79:8b:4d:f6:83:56:68:
         73:9b:34:28:a5:85:9e:d0:fe:a7:83:be:27:51:f3:cb:8a:e3:
         61:1a:c3:2e:19:d8:f9:0e:75:31:f7:73:68:53:fc:42:c9:c3:
         d0:44:10:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----