Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/1/E6FF495D0A4F0F74E959F3832234CB61EF9A5B41.mft
File:                     E6FF495D0A4F0F74E959F3832234CB61EF9A5B41.mft (raw, json)
Hash identifier:          6npm+BGTbSKohbX5fACiOmju7PXzwI6twV/cThONDh4=
Subject key identifier:   96:C3:40:29:04:48:79:7F:E3:AF:2F:DA:4F:92:ED:DE:65:72:DA:37
Authority key identifier: E6:FF:49:5D:0A:4F:0F:74:E9:59:F3:83:22:34:CB:61:EF:9A:5B:41
Certificate issuer:       /CN=E6FF495D0A4F0F74E959F3832234CB61EF9A5B41
Certificate serial:       327EAEF219A8ECF400C78B17469BD9F7DA679C22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FF495D0A4F0F74E959F3832234CB61EF9A5B41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/1/E6FF495D0A4F0F74E959F3832234CB61EF9A5B41.mft
Manifest number:          10
Signing time:             Wed 17 Apr 2024 17:39:08 +0000
Manifest this update:     Wed 17 Apr 2024 17:34:08 +0000
Manifest next update:     Thu 18 Apr 2024 19:18:08 +0000
Files and hashes:         1: 3134332e302e3132342e302f32322d3234203d3e20323634303030.roa (hash: UhiC35i4ArCPp1Y5dxNN5HBcLc6yk5qWyaWEoleHffI=)
                          2: 323830343a323932343a3a2f33322d3438203d3e20323634303030.roa (hash: BhgaXMF/tZOyvyR5pQA04o2y8fyVhYYhK8J8fJltvng=)
                          3: E6FF495D0A4F0F74E959F3832234CB61EF9A5B41.crl (hash: hh5Csy8ch1X3fzLuf/mUZI2Ul6c0dfByMjuHYqsvb6I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:7e:ae:f2:19:a8:ec:f4:00:c7:8b:17:46:9b:d9:f7:da:67:9c:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6FF495D0A4F0F74E959F3832234CB61EF9A5B41
        Validity
            Not Before: Apr 17 17:34:08 2024 GMT
            Not After : Apr 18 19:18:08 2024 GMT
        Subject: CN=96C340290448797FE3AF2FDA4F92EDDE6572DA37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:12:26:a4:e2:2a:58:d0:2e:03:89:7a:f0:cd:
                    40:ec:31:a9:dc:48:57:ee:0f:f7:e8:2f:3c:09:79:
                    d8:ff:76:3d:a4:96:9b:a0:f6:e6:24:8d:84:58:a8:
                    36:d7:e0:85:4b:ed:26:1b:c3:f0:9f:4f:9d:47:74:
                    a7:9d:0a:fd:96:c8:b8:44:93:bf:d8:99:1f:7f:c2:
                    cc:d1:d4:e9:28:a2:2b:f0:78:6b:61:28:36:95:56:
                    06:8d:30:1a:77:db:a7:4b:99:bb:3d:ed:3a:6e:01:
                    79:30:e8:64:6e:ca:b2:1e:dc:7a:a1:e6:23:33:d4:
                    bd:fc:13:7e:30:b5:d1:f5:a0:56:1c:12:65:cd:d8:
                    af:c7:45:63:fc:c8:e5:b7:d8:76:41:40:73:77:f1:
                    5f:0c:98:c4:aa:66:04:d8:57:52:a5:d9:7d:08:73:
                    4c:9f:b4:02:9e:ee:63:8e:3a:71:17:9b:21:7b:9b:
                    cc:79:58:af:51:d3:54:f6:16:19:9e:ee:d1:3f:a5:
                    1c:40:a4:9b:e2:1f:33:dc:2e:83:3d:d9:a0:35:26:
                    57:e0:d2:8c:66:fa:66:44:30:2e:1b:8c:0c:49:39:
                    7d:c5:3d:77:9a:f4:bb:40:27:0e:d4:d5:9f:96:6f:
                    6f:42:30:de:28:14:82:82:7e:ec:fa:1d:08:f8:65:
                    80:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C3:40:29:04:48:79:7F:E3:AF:2F:DA:4F:92:ED:DE:65:72:DA:37
            X509v3 Authority Key Identifier:
                keyid:E6:FF:49:5D:0A:4F:0F:74:E9:59:F3:83:22:34:CB:61:EF:9A:5B:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/1/E6FF495D0A4F0F74E959F3832234CB61EF9A5B41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FF495D0A4F0F74E959F3832234CB61EF9A5B41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/1/E6FF495D0A4F0F74E959F3832234CB61EF9A5B41.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:3a:94:5f:4d:e3:0d:a3:50:93:6a:ff:a9:74:a2:02:6b:ca:
         94:39:b3:30:9a:a9:68:e9:42:f3:84:3b:00:55:18:5b:c4:32:
         c9:0f:b2:47:3a:a4:4d:70:b8:14:b8:b7:50:e8:ec:60:f4:f5:
         2c:3d:d5:de:ce:a3:18:d9:6e:e1:5f:ff:88:e6:49:2e:05:2b:
         db:e0:d2:4c:20:b2:91:da:2d:0c:3d:32:e6:53:cf:4e:26:d4:
         87:d3:3b:8f:9b:c7:a9:a3:a2:a3:94:30:25:42:7f:21:8a:32:
         22:e3:31:d7:3b:49:96:0b:90:28:be:c2:47:f5:74:72:e5:02:
         d1:ce:65:5b:9b:57:87:55:16:86:45:03:cd:5f:21:4b:57:45:
         e1:7a:c0:f3:60:0a:68:06:27:38:3b:05:a3:ab:01:66:69:cd:
         a6:d0:bb:90:61:ab:ba:a1:bf:2e:87:3c:2a:89:bd:6b:be:f9:
         e0:23:d7:1a:09:4e:8a:f3:22:63:74:f0:ea:b2:ec:22:fa:44:
         0c:48:8d:9d:01:8f:e0:65:f0:28:f0:9f:7f:54:03:0b:7d:ca:
         26:cc:e2:65:63:59:29:a3:4f:d3:76:92:ea:09:76:32:70:88:
         9b:02:e3:52:06:86:3d:c0:ee:92:39:dc:37:08:ea:d7:dd:2d:
         6f:88:58:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----