Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/1/4CC5E9D9BE24E3B0EFA417C53E7123E56B6F0BD9.mft
File:                     4CC5E9D9BE24E3B0EFA417C53E7123E56B6F0BD9.mft (raw, json)
Hash identifier:          Qhk7gErPF5DyYFhRB9rGKQs2maYeuQdTMyvieMlsn2o=
Subject key identifier:   C0:6C:9B:7F:6C:4A:93:13:F9:50:F9:47:D4:3F:10:5D:65:E1:EB:17
Authority key identifier: 4C:C5:E9:D9:BE:24:E3:B0:EF:A4:17:C5:3E:71:23:E5:6B:6F:0B:D9
Certificate issuer:       /CN=4CC5E9D9BE24E3B0EFA417C53E7123E56B6F0BD9
Certificate serial:       01F557A6A26BD95C3F0A23C7324A147446FE1E42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CC5E9D9BE24E3B0EFA417C53E7123E56B6F0BD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/1/4CC5E9D9BE24E3B0EFA417C53E7123E56B6F0BD9.mft
Manifest number:          EA
Signing time:             Mon 12 Feb 2024 14:45:34 +0000
Manifest this update:     Mon 12 Feb 2024 14:40:34 +0000
Manifest next update:     Tue 13 Feb 2024 18:09:34 +0000
Files and hashes:         1: 4CC5E9D9BE24E3B0EFA417C53E7123E56B6F0BD9.crl (hash: PYLKSWII0GASsWfcFB6pqTBGPDwLLXu0l0+4CXWVg3A=)
                          2: 323830343a343061383a3a2f33322d3438203d3e20323635393733.roa (hash: O0N/HfMjANJSGUZ7Io2Iqx/LAUUBWAd+C1y+ewx0wh8=)
                          3: 3136342e3136332e3230342e302f32322d3234203d3e20323635393733.roa (hash: 2PvTVQjKgG0tomg/fBqABeKY3rVY7nhACrhTYF+0fq4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f5:57:a6:a2:6b:d9:5c:3f:0a:23:c7:32:4a:14:74:46:fe:1e:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC5E9D9BE24E3B0EFA417C53E7123E56B6F0BD9
        Validity
            Not Before: Feb 12 14:40:34 2024 GMT
            Not After : Feb 13 18:09:34 2024 GMT
        Subject: CN=C06C9B7F6C4A9313F950F947D43F105D65E1EB17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:93:b3:01:53:11:60:19:c4:37:60:3d:62:a9:
                    f0:6c:6a:11:fd:dc:41:68:3f:cf:1a:64:67:8c:9d:
                    39:4e:cb:d1:ac:e6:cf:c1:b9:60:18:78:e2:c8:01:
                    73:a5:4b:88:31:70:de:ce:f4:64:ef:ab:48:d5:92:
                    04:a8:08:8d:b9:bd:f5:5e:97:df:a9:ef:26:31:89:
                    a8:83:78:78:11:ed:a0:a5:21:fc:da:15:43:f5:62:
                    98:ed:47:fb:e7:e7:aa:cb:2d:17:be:00:b4:e0:6b:
                    72:b3:b0:57:67:bb:f1:e2:03:fd:fa:d2:fb:91:20:
                    72:8a:a3:ce:07:df:5a:e0:a8:84:a2:35:da:89:c2:
                    a8:97:a5:a9:be:66:14:1d:5c:7d:3c:2c:2b:b6:77:
                    21:55:10:5c:2d:c3:20:43:65:b7:64:33:0a:a8:44:
                    71:aa:0b:87:5d:f3:58:95:7d:01:1f:33:14:13:05:
                    db:64:a8:50:d1:69:bb:ec:b0:13:95:5d:61:94:a5:
                    8c:05:59:c1:c9:dc:de:14:2c:43:c1:d4:ec:29:98:
                    c7:cc:dd:cc:3b:8d:55:ae:ac:3b:65:8c:ad:5b:0d:
                    4d:87:78:bb:49:01:9b:09:58:f0:6b:0a:52:0e:d6:
                    21:66:d6:44:46:fb:28:b2:52:e2:15:0c:0c:1b:58:
                    dc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:6C:9B:7F:6C:4A:93:13:F9:50:F9:47:D4:3F:10:5D:65:E1:EB:17
            X509v3 Authority Key Identifier:
                keyid:4C:C5:E9:D9:BE:24:E3:B0:EF:A4:17:C5:3E:71:23:E5:6B:6F:0B:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/1/4CC5E9D9BE24E3B0EFA417C53E7123E56B6F0BD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CC5E9D9BE24E3B0EFA417C53E7123E56B6F0BD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/1/4CC5E9D9BE24E3B0EFA417C53E7123E56B6F0BD9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:0b:22:e0:84:5b:4d:c6:81:1a:b5:2e:e8:d8:26:5c:4e:b1:
         1d:2a:ad:db:72:be:a5:69:ff:f5:21:9c:a6:9e:cd:37:3c:d0:
         11:2e:d2:ed:b6:98:7a:ed:33:36:89:0c:1d:96:45:31:75:8c:
         99:eb:9d:ae:85:df:98:de:4b:1c:e5:43:8a:7e:28:67:13:ec:
         dc:d6:c9:ac:07:2f:41:e5:d6:91:84:0d:db:55:e8:97:24:48:
         43:21:dd:3b:8d:36:2e:16:84:7c:75:34:3d:35:8d:bc:52:3e:
         ff:82:d1:72:19:55:2a:83:fe:75:14:8e:6a:44:c8:34:18:aa:
         78:ba:10:cd:93:83:ae:8d:df:4e:a0:fa:5e:d9:97:9a:c8:9e:
         a9:de:7f:db:6a:f4:0a:d9:e2:59:1c:a9:8b:41:d8:38:98:51:
         00:7d:95:87:e1:30:fa:93:f1:85:13:0e:4f:40:4c:78:47:e0:
         9c:25:61:b4:69:66:8d:ef:d5:63:d1:fd:37:b3:3a:85:81:54:
         87:f1:f7:ad:db:eb:65:a1:08:da:f0:7e:29:6c:68:a4:85:30:
         14:0e:d4:01:39:58:f9:66:fc:40:90:72:44:6e:4e:f2:79:d1:
         67:65:03:97:1a:e8:5f:57:d1:2a:11:8c:36:95:e1:73:b7:ab:
         ac:c3:c4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----