Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/48DFE379FC64C3F50512033477F929291FC10CF2.mft
File:                     48DFE379FC64C3F50512033477F929291FC10CF2.mft (raw, json)
Hash identifier:          oq9tBxdNbv53SOd3QXJxclgf7Y+caMqYxkR8geFGM3A=
Subject key identifier:   34:B4:AF:75:F1:BC:01:C5:4D:C9:30:23:7D:9F:E4:0B:E0:95:F1:E7
Authority key identifier: 48:DF:E3:79:FC:64:C3:F5:05:12:03:34:77:F9:29:29:1F:C1:0C:F2
Certificate issuer:       /CN=48DFE379FC64C3F50512033477F929291FC10CF2
Certificate serial:       22A88A6CAE2817C60D616D2F22600E9686651CAA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/48DFE379FC64C3F50512033477F929291FC10CF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/48DFE379FC64C3F50512033477F929291FC10CF2.mft
Manifest number:          39
Signing time:             Mon 15 Apr 2024 11:39:58 +0000
Manifest this update:     Mon 15 Apr 2024 11:34:58 +0000
Manifest next update:     Tue 16 Apr 2024 12:41:58 +0000
Files and hashes:         1: 48DFE379FC64C3F50512033477F929291FC10CF2.crl (hash: oGAeD2SejIzIeKSUlEIURruDxtkhO2ZXPzkIJiAOZ10=)
                          2: 34352e3136392e3130382e302f32332d3234203d3e20323638313036.roa (hash: zZ4mI6pWzTjdKB4zyrIItwFVuymSbMCYbf+Sim7+uKU=)
                          3: 323830343a353831383a3a2f33332d3334203d3e20323638313036.roa (hash: x1au+IO9/0Dem6hXnkk1GJg6C/QGhifBBTlWYlk+REU=)
                          4: 323830343a353831383a383030303a3a2f33332d3334203d3e20323638313036.roa (hash: pA06u/GMWfD5LcJZv3/skkOBTb0nDRXu4CAyiLnfXhE=)
                          5: 34352e3136392e3130382e302f32322d3232203d3e20323638313036.roa (hash: 8YwG4U3Yp8JYnTF0CdlXWM1z4SCmFqHddES7JGjDywU=)
                          6: 323830343a353831383a3a2f33322d3332203d3e20323638313036.roa (hash: DK0ovn55H22QHq0thbBFk1uukCLI+KSKBry+KhjG+Do=)
                          7: 34352e3136392e3131302e302f32332d3234203d3e20323638313036.roa (hash: B54aSY6vwk/ydUUuZMHleV09cr8bcmldhH1Z3+eEh+Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a8:8a:6c:ae:28:17:c6:0d:61:6d:2f:22:60:0e:96:86:65:1c:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48DFE379FC64C3F50512033477F929291FC10CF2
        Validity
            Not Before: Apr 15 11:34:58 2024 GMT
            Not After : Apr 16 12:41:58 2024 GMT
        Subject: CN=34B4AF75F1BC01C54DC930237D9FE40BE095F1E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5b:0d:1f:9c:fd:43:cd:d8:ec:93:41:f9:87:
                    0e:e4:2b:d8:31:99:d1:cb:ab:e0:6a:06:2e:ee:22:
                    b7:5f:e8:2c:59:52:c9:d9:77:c5:70:0a:54:c0:be:
                    c3:e1:be:1a:9b:3a:1e:3e:91:7f:cc:9f:91:16:4c:
                    e0:76:da:34:ce:5e:86:9f:7c:60:cf:f8:41:e8:5c:
                    a2:61:8d:96:c4:40:62:c3:a8:e6:8f:74:d0:48:59:
                    07:a7:99:b8:83:74:af:b8:7d:47:5b:21:98:8b:92:
                    ff:c5:f7:3f:40:46:fa:25:2a:33:ca:54:e1:00:e9:
                    e1:16:ff:b8:ea:86:b7:6a:35:6d:85:75:07:62:ca:
                    16:a3:a2:4c:5a:cf:d2:c1:5a:85:ea:cb:58:8d:20:
                    0b:66:6c:8e:44:33:3f:65:2e:be:37:7f:b3:c2:ed:
                    da:b2:76:b4:c3:eb:ea:65:ba:c5:11:1a:b7:2e:b8:
                    7c:a7:dd:66:cf:67:25:da:0d:4c:2c:11:af:f8:0a:
                    30:b8:8d:f9:65:eb:1b:a8:94:33:64:07:69:a6:6c:
                    d9:6e:bc:12:87:19:3b:40:39:23:16:ea:29:3e:4d:
                    08:a6:6f:ff:0f:a8:64:ae:ca:a5:01:01:d1:1d:3f:
                    e2:7e:56:20:0d:c4:a4:93:e0:79:c9:d1:89:15:64:
                    55:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B4:AF:75:F1:BC:01:C5:4D:C9:30:23:7D:9F:E4:0B:E0:95:F1:E7
            X509v3 Authority Key Identifier:
                keyid:48:DF:E3:79:FC:64:C3:F5:05:12:03:34:77:F9:29:29:1F:C1:0C:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/48DFE379FC64C3F50512033477F929291FC10CF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/48DFE379FC64C3F50512033477F929291FC10CF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/48DFE379FC64C3F50512033477F929291FC10CF2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:53:5d:50:26:9a:da:0e:c7:73:11:6b:29:13:57:69:9f:b1:
         44:49:b4:83:ef:5c:88:d9:d8:d0:16:4f:e6:e6:db:20:eb:60:
         d7:54:a3:7d:73:bc:b6:1a:d4:af:b8:2f:46:e1:d2:f1:bf:ec:
         18:17:a8:fe:d9:e9:6f:f3:6a:36:b4:2e:72:bb:60:dd:31:a0:
         3b:ef:20:b6:2a:84:46:c7:e6:1e:cb:66:72:29:c8:21:8d:ec:
         67:55:a0:64:d3:38:57:58:a1:cb:fa:9f:2d:8f:62:1e:97:33:
         e7:54:ea:d0:e2:d5:6f:55:ae:6d:c9:bd:20:07:b3:75:34:5a:
         eb:fb:b8:66:a4:d3:5e:99:29:f7:a1:ca:0d:c0:dc:26:70:ab:
         4b:6d:18:a1:02:81:f1:cc:ff:37:52:9d:0a:9a:6f:1a:d2:7d:
         df:cb:71:1e:d1:a9:25:e2:9e:76:fb:12:0f:92:3b:7f:44:6b:
         73:0b:aa:bf:eb:c8:c3:88:31:64:a5:e1:62:20:3e:40:80:70:
         0a:8e:9f:79:92:9c:07:3a:2d:6c:d3:06:da:69:66:2f:cf:7d:
         9f:0a:65:91:94:4f:f0:52:00:ab:a7:40:14:4b:92:5c:d9:44:
         c7:b5:3a:be:74:04:80:5f:de:ef:b9:8c:a4:20:35:0d:71:9f:
         47:ab:e5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----