Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/1/56150982B5F1DEA43D1E039578ABFA6C5A01B479.mft
File:                     56150982B5F1DEA43D1E039578ABFA6C5A01B479.mft (raw, json)
Hash identifier:          2mR1swV8gn1S3K1m5Uww3RWdh1bjLrjbWVHgg/22puQ=
Subject key identifier:   CD:BA:46:CC:13:BA:CD:B0:37:B7:F0:0A:F1:72:E2:55:5F:E4:79:B9
Authority key identifier: 56:15:09:82:B5:F1:DE:A4:3D:1E:03:95:78:AB:FA:6C:5A:01:B4:79
Certificate issuer:       /CN=56150982B5F1DEA43D1E039578ABFA6C5A01B479
Certificate serial:       14FFC61C87B48C11BBAA957EF87AD928B4F07C15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56150982B5F1DEA43D1E039578ABFA6C5A01B479.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/1/56150982B5F1DEA43D1E039578ABFA6C5A01B479.mft
Manifest number:          D9
Signing time:             Mon 15 Apr 2024 01:37:52 +0000
Manifest this update:     Mon 15 Apr 2024 01:32:52 +0000
Manifest next update:     Tue 16 Apr 2024 04:16:52 +0000
Files and hashes:         1: 3137302e38332e38382e302f32322d3332203d3e20323636343831.roa (hash: UhLkUKQ0TYu6sxnw51bOViltOYlCYDNJ0N9QV0oQc2s=)
                          2: 323830343a333837633a3a2f33322d313238203d3e20323636343831.roa (hash: FzEs10dFybYPlN+NIjrVMjRvVRvSnhTaqKpZal8ts7M=)
                          3: 56150982B5F1DEA43D1E039578ABFA6C5A01B479.crl (hash: 4bsTnBHSaE+6ozvKY/xDwQ94nmArBeqWYvPGRvEvHwQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ff:c6:1c:87:b4:8c:11:bb:aa:95:7e:f8:7a:d9:28:b4:f0:7c:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56150982B5F1DEA43D1E039578ABFA6C5A01B479
        Validity
            Not Before: Apr 15 01:32:52 2024 GMT
            Not After : Apr 16 04:16:52 2024 GMT
        Subject: CN=CDBA46CC13BACDB037B7F00AF172E2555FE479B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e9:c3:f1:23:57:5a:21:f6:a6:7b:d5:a6:e4:
                    18:ee:96:12:ae:db:dd:d9:2b:5b:91:a4:8f:f8:ba:
                    9d:14:fd:c6:3a:56:86:d7:c6:d7:67:1f:e8:ed:61:
                    ab:e7:08:d9:fa:87:30:f1:60:87:ed:4f:23:1d:e9:
                    20:8c:41:73:4c:77:5e:ae:4c:b3:1e:d6:2f:bf:e4:
                    d1:7e:91:f5:a2:75:d0:35:cd:ac:73:53:ea:db:30:
                    4c:6a:01:0d:9b:7b:47:90:50:0c:09:6e:29:ce:c7:
                    d7:fa:0b:4e:8d:47:27:f8:76:dd:b1:ca:12:44:29:
                    f8:7a:40:a4:00:64:0e:53:5d:76:8c:15:05:73:59:
                    a4:19:5f:15:8a:34:2c:68:13:0c:c7:fc:66:73:ac:
                    52:2e:ee:f2:0f:21:a3:f2:71:ad:0c:f1:b0:bc:d9:
                    a7:0b:e7:f1:c5:ca:c1:61:d7:a0:5d:1d:1f:e1:7c:
                    e7:fe:b2:b6:26:b5:94:08:25:ed:bc:82:c4:a3:70:
                    66:a6:e9:65:34:9e:ab:3c:55:5e:e2:75:17:b1:61:
                    d9:2f:e8:59:71:f1:32:a6:61:ae:ba:a9:4c:53:09:
                    e7:93:e8:b2:fa:c5:f7:47:48:a1:f3:ac:06:d7:bb:
                    0c:38:fc:fb:98:5a:48:7a:eb:09:01:4d:e1:aa:88:
                    17:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:BA:46:CC:13:BA:CD:B0:37:B7:F0:0A:F1:72:E2:55:5F:E4:79:B9
            X509v3 Authority Key Identifier:
                keyid:56:15:09:82:B5:F1:DE:A4:3D:1E:03:95:78:AB:FA:6C:5A:01:B4:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/1/56150982B5F1DEA43D1E039578ABFA6C5A01B479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56150982B5F1DEA43D1E039578ABFA6C5A01B479.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/1/56150982B5F1DEA43D1E039578ABFA6C5A01B479.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:dd:49:cc:5f:1f:8c:b0:ce:8e:74:70:ca:29:88:0f:56:51:
         80:ff:68:5b:64:c5:28:2c:c5:49:17:fb:87:45:0b:47:62:e7:
         fb:b3:ca:22:b1:36:26:93:2b:3a:ce:00:25:34:8a:19:de:c6:
         b9:b8:75:1e:38:e9:90:57:ad:eb:20:5a:ab:b7:81:ea:43:07:
         dd:9a:c3:d3:09:7d:05:a6:47:e2:b0:1e:02:d1:f6:d4:38:e9:
         1a:a9:c0:29:fd:be:ed:a4:94:2b:73:08:5d:dd:c2:3b:06:3f:
         be:38:b3:0e:78:30:18:50:ad:40:d6:4b:b4:24:54:91:64:24:
         43:6a:3f:ca:80:51:04:e0:8a:62:60:f0:f0:86:45:4b:5a:82:
         28:88:f2:30:f0:b2:ab:1d:27:53:b0:39:68:73:3a:14:75:41:
         78:1f:d1:c7:b5:01:c9:77:2d:8b:fd:5e:dc:6e:70:be:a4:4b:
         5c:cb:64:98:28:fb:9e:ee:82:e9:0f:5f:8e:f4:e0:86:f8:82:
         00:47:8a:0b:d7:9f:a4:a4:40:0e:b7:ef:c6:dd:9c:9c:f8:41:
         80:a4:a3:31:b6:d1:62:1d:84:2e:69:5d:2d:82:d2:12:60:6e:
         89:eb:7f:d2:7d:1a:c2:3a:7a:d8:ae:a3:b0:de:1e:32:b4:09:
         35:d7:74:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----