Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9bnKAzzDfhZELHMx3uTajdoiNZUnSBhRmMqjzKqkavCb/0/9DF20F0DE6FF579CBBDB345EC8984426D099267A.mft
File:                     9DF20F0DE6FF579CBBDB345EC8984426D099267A.mft (raw, json)
Hash identifier:          1EezE8IgEFqA/HHA3pqqyO3w/cszQY//iLoyfa8ptCQ=
Subject key identifier:   96:2E:0B:2C:76:13:15:A4:2E:84:53:CD:7E:E1:9F:F4:79:74:CD:46
Authority key identifier: 9D:F2:0F:0D:E6:FF:57:9C:BB:DB:34:5E:C8:98:44:26:D0:99:26:7A
Certificate issuer:       /CN=9DF20F0DE6FF579CBBDB345EC8984426D099267A
Certificate serial:       5F2AF56CB5E09ACE075D227297F9E15B2258FF5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DF20F0DE6FF579CBBDB345EC8984426D099267A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bnKAzzDfhZELHMx3uTajdoiNZUnSBhRmMqjzKqkavCb/0/9DF20F0DE6FF579CBBDB345EC8984426D099267A.mft
Manifest number:          020C
Signing time:             Sun 14 Apr 2024 22:14:04 +0000
Manifest this update:     Sun 14 Apr 2024 22:09:04 +0000
Manifest next update:     Mon 15 Apr 2024 23:20:04 +0000
Files and hashes:         1: 9DF20F0DE6FF579CBBDB345EC8984426D099267A.crl (hash: Dt6v0TjKA8x3/QPuEFSupPTB80raksvKWxp88YQ8jYc=)
                          2: 3138372e3130332e38302e302f32302d3234203d3e20323632373032.roa (hash: VshDTHs8sLFbc27StbrcxGcojh12V0BW5Q4RNJQT9og=)
                          3: 323830343a383565383a3a2f33322d3438203d3e20323632373032.roa (hash: IO0vyju+IVbAmTiUucfttvS/U8m30bEeFePTfHiLifY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:2a:f5:6c:b5:e0:9a:ce:07:5d:22:72:97:f9:e1:5b:22:58:ff:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DF20F0DE6FF579CBBDB345EC8984426D099267A
        Validity
            Not Before: Apr 14 22:09:04 2024 GMT
            Not After : Apr 15 23:20:04 2024 GMT
        Subject: CN=962E0B2C761315A42E8453CD7EE19FF47974CD46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:eb:ac:3f:96:5d:c4:32:14:8e:d4:ba:5d:a0:
                    93:d0:47:65:6f:a1:db:9c:4c:c2:d5:ec:ec:a7:0c:
                    4b:0d:08:4c:1d:dc:4a:52:ec:7f:fd:78:82:45:23:
                    af:cc:08:04:c6:fd:83:8a:0f:29:99:d5:70:bd:93:
                    2b:5a:3d:c1:ec:cc:d8:77:87:83:b0:47:14:65:bd:
                    5b:b2:d3:2b:d3:35:30:65:68:98:85:79:5b:00:4a:
                    a1:43:45:e9:38:0b:5d:9c:98:af:49:f3:f7:98:d1:
                    c4:c6:03:da:6c:b4:03:2b:4f:4f:46:00:2e:24:5e:
                    35:3b:61:4d:07:67:42:d2:5f:12:e9:5a:88:97:cd:
                    d6:36:1d:8d:d0:8e:a9:3b:5f:e0:c3:45:c7:00:7f:
                    29:0e:93:e0:c0:25:c9:eb:64:01:6c:79:a2:c6:85:
                    9f:2d:60:15:98:30:b3:df:b2:7d:32:51:09:bc:b4:
                    5d:19:00:93:13:4f:df:b3:6f:90:e5:c4:89:99:5d:
                    1a:7f:4f:bf:e1:37:54:e7:a0:f2:64:4a:0b:ab:b0:
                    22:9c:cf:a5:13:4f:ff:7e:ed:9d:ca:18:66:1f:b0:
                    50:da:b5:a7:43:08:9d:a9:d6:8b:ec:fc:ad:6a:25:
                    6b:4d:26:95:09:27:42:60:34:69:be:d0:08:b7:5d:
                    54:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:2E:0B:2C:76:13:15:A4:2E:84:53:CD:7E:E1:9F:F4:79:74:CD:46
            X509v3 Authority Key Identifier:
                keyid:9D:F2:0F:0D:E6:FF:57:9C:BB:DB:34:5E:C8:98:44:26:D0:99:26:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bnKAzzDfhZELHMx3uTajdoiNZUnSBhRmMqjzKqkavCb/0/9DF20F0DE6FF579CBBDB345EC8984426D099267A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DF20F0DE6FF579CBBDB345EC8984426D099267A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bnKAzzDfhZELHMx3uTajdoiNZUnSBhRmMqjzKqkavCb/0/9DF20F0DE6FF579CBBDB345EC8984426D099267A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:0d:d1:b6:72:77:d0:ad:02:05:04:20:24:48:67:0b:34:19:
         63:53:96:d3:b8:11:b7:27:c0:eb:4d:84:84:19:64:fa:39:ac:
         d7:76:f1:c8:5a:28:cc:d3:46:c2:c1:70:5b:e3:c5:bc:19:f8:
         43:b1:ae:ae:90:3e:63:ab:27:b5:ae:3d:e4:5b:e9:01:a2:27:
         d9:7c:e4:cf:dc:fe:62:57:f4:57:b0:f4:30:34:90:bb:fb:70:
         93:6e:3a:0a:05:9b:d1:c7:d4:57:ef:67:75:36:5b:76:e8:02:
         df:45:e3:25:da:cc:23:35:60:7c:e8:db:21:24:cf:7d:83:c3:
         1b:af:8b:f3:67:6a:e3:cc:6f:f2:94:a5:aa:d5:e6:1d:8a:dc:
         35:15:dd:5c:e2:81:ad:66:d3:ea:38:d6:52:66:f1:40:77:fa:
         ef:b2:26:c8:cd:4a:31:2a:c2:39:a9:ce:03:c1:ee:41:b3:0c:
         78:46:c6:de:ee:0a:0a:31:c3:9d:17:a7:56:ad:9a:c1:48:c6:
         a9:6a:06:5f:2f:9a:0a:b4:98:01:7c:a6:ba:b0:2f:14:1c:8a:
         79:95:44:f9:73:9d:44:0b:ce:44:da:da:93:9a:61:69:4b:62:
         55:ad:cc:51:6c:fb:65:a2:96:12:79:a5:62:11:ab:14:06:d8:
         36:d2:6b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----