Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9PpDQWjoVWtHeB2HP8Fm2szrNYrHZGTrUBPfsbtb3Zwh/0/4DC88A28EFE47FB2B2999366E87B846B978795F6.mft
File:                     4DC88A28EFE47FB2B2999366E87B846B978795F6.mft (raw, json)
Hash identifier:          5o2s19XdVMA+BK+zftzROxGdbaiEqSY1m/15DwN+R4g=
Subject key identifier:   30:EE:D4:57:88:BA:5C:F7:27:DA:BF:B2:13:7D:C8:3C:4F:4E:81:29
Authority key identifier: 4D:C8:8A:28:EF:E4:7F:B2:B2:99:93:66:E8:7B:84:6B:97:87:95:F6
Certificate issuer:       /CN=4DC88A28EFE47FB2B2999366E87B846B978795F6
Certificate serial:       4D77D6868B371332E194410310B4407EA206F9B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DC88A28EFE47FB2B2999366E87B846B978795F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9PpDQWjoVWtHeB2HP8Fm2szrNYrHZGTrUBPfsbtb3Zwh/0/4DC88A28EFE47FB2B2999366E87B846B978795F6.mft
Manifest number:          0346
Signing time:             Mon 15 Apr 2024 07:14:08 +0000
Manifest this update:     Mon 15 Apr 2024 07:09:08 +0000
Manifest next update:     Tue 16 Apr 2024 08:04:08 +0000
Files and hashes:         1: 4DC88A28EFE47FB2B2999366E87B846B978795F6.crl (hash: xzqLAIMmPHnQu0fdd4mO7cvLeQx3KXsIqbzKhtS7Irc=)
                          2: 323830343a346436303a3a2f33322d3334203d3e20323633303936.roa (hash: hYbdSRCyrCt+YQBWDLvnPilSH8+gh+1h7j7P4fGfmkI=)
                          3: 3138362e3233352e34382e302f32312d3233203d3e20323633303936.roa (hash: amXBoiP8rSFGv+7Gl4As8ugD6uMbBfWTiA+PUFzkvFQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:77:d6:86:8b:37:13:32:e1:94:41:03:10:b4:40:7e:a2:06:f9:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DC88A28EFE47FB2B2999366E87B846B978795F6
        Validity
            Not Before: Apr 15 07:09:08 2024 GMT
            Not After : Apr 16 08:04:08 2024 GMT
        Subject: CN=30EED45788BA5CF727DABFB2137DC83C4F4E8129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6e:37:8c:60:09:9c:cf:d5:36:ab:ff:0d:36:
                    28:4d:bc:30:4c:92:1f:1d:0c:3f:b0:aa:0b:ed:75:
                    d0:d6:85:2f:86:7f:93:5e:93:f7:f4:30:cf:91:4e:
                    3a:5d:84:bb:87:5c:56:1c:9d:8b:fb:dc:25:30:0a:
                    24:ba:5b:47:21:f2:57:5f:11:26:91:2d:af:c8:93:
                    58:23:08:d7:51:50:72:ec:44:8c:d9:58:f5:ff:94:
                    ec:55:84:d3:27:39:73:ca:4b:8a:e5:c2:bc:79:93:
                    d0:c1:3e:5a:d8:94:16:9d:ab:01:86:62:b0:47:e3:
                    ce:d8:1b:a9:90:ed:39:5c:5b:13:84:6a:ac:3d:28:
                    22:84:2f:e5:43:7a:c2:4a:1e:10:1a:79:0f:1d:06:
                    11:20:95:f9:50:a6:1d:90:9f:80:35:5d:9c:d5:de:
                    2d:09:8f:e6:a8:ca:c5:06:a4:a1:1a:33:bc:b1:46:
                    64:8b:f0:89:ef:5e:54:6c:a6:a4:3d:6b:9d:38:d3:
                    80:fc:fb:25:98:24:ff:cc:30:4b:42:73:d4:ea:a2:
                    b9:05:b1:35:3e:65:92:9c:ca:27:73:71:a8:53:4e:
                    07:9f:80:eb:4a:d1:3d:65:8e:02:20:8d:70:a4:00:
                    4e:33:57:0b:f1:6b:eb:d4:86:be:ac:69:08:b8:88:
                    84:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:EE:D4:57:88:BA:5C:F7:27:DA:BF:B2:13:7D:C8:3C:4F:4E:81:29
            X509v3 Authority Key Identifier:
                keyid:4D:C8:8A:28:EF:E4:7F:B2:B2:99:93:66:E8:7B:84:6B:97:87:95:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9PpDQWjoVWtHeB2HP8Fm2szrNYrHZGTrUBPfsbtb3Zwh/0/4DC88A28EFE47FB2B2999366E87B846B978795F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DC88A28EFE47FB2B2999366E87B846B978795F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9PpDQWjoVWtHeB2HP8Fm2szrNYrHZGTrUBPfsbtb3Zwh/0/4DC88A28EFE47FB2B2999366E87B846B978795F6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:ca:27:e0:13:39:c5:74:51:19:da:c0:d4:af:b6:4c:30:bc:
         67:63:e1:e8:91:6b:80:c1:18:4a:c3:19:96:c9:9b:02:36:6d:
         b7:57:de:5e:ee:c4:89:39:bc:be:63:fe:52:84:50:d5:b1:b8:
         77:e5:1c:33:f0:24:cd:f8:cf:21:fc:a7:93:d9:b3:f7:f3:59:
         0c:46:9c:9e:36:c7:17:4b:b8:2f:26:96:0e:bc:e0:6b:c6:56:
         6b:4e:fd:67:0e:82:aa:8f:e5:ca:15:1b:21:61:bf:6a:9f:1b:
         35:f0:5a:47:1c:3f:a9:97:ec:bf:63:f6:de:04:7c:4b:93:3a:
         c4:e4:c1:e0:4a:64:f1:5e:07:a6:fc:f6:6e:d8:12:de:b2:5f:
         cf:16:c6:22:9b:2d:20:7d:bd:85:78:02:bd:65:95:b4:d9:4b:
         a0:a0:0e:cc:2e:b6:7f:06:f8:e3:f5:62:2b:81:d5:93:fa:ee:
         21:d1:ea:f2:21:dc:50:10:33:c6:6d:19:0a:bf:0e:82:9f:92:
         2d:52:b6:38:21:ef:01:eb:cc:51:72:22:ec:39:f3:80:7a:59:
         f6:b7:a3:4f:48:38:84:ca:2f:90:9f:b1:df:2f:69:c4:49:4f:
         82:4d:97:d0:64:52:40:a6:c3:75:e4:57:b2:8a:e1:b3:57:3e:
         45:1a:7c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----