Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/9BFFFB305308D99BB71B629A52021D536AF8164D.mft
File:                     9BFFFB305308D99BB71B629A52021D536AF8164D.mft (raw, json)
Hash identifier:          GQwK7yjRTF9x+aM8PkHOtCOcE2qt6wmehPsoqdOPYg0=
Subject key identifier:   D5:B5:13:5A:F7:88:3E:09:D3:85:40:04:11:C6:03:D2:92:0F:FD:C4
Authority key identifier: 9B:FF:FB:30:53:08:D9:9B:B7:1B:62:9A:52:02:1D:53:6A:F8:16:4D
Certificate issuer:       /CN=9BFFFB305308D99BB71B629A52021D536AF8164D
Certificate serial:       431BDED1700F5AC7B27E940633DA2865082757D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9BFFFB305308D99BB71B629A52021D536AF8164D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/9BFFFB305308D99BB71B629A52021D536AF8164D.mft
Manifest number:          32
Signing time:             Mon 15 Apr 2024 09:49:58 +0000
Manifest this update:     Mon 15 Apr 2024 09:44:58 +0000
Manifest next update:     Tue 16 Apr 2024 11:33:58 +0000
Files and hashes:         1: 9BFFFB305308D99BB71B629A52021D536AF8164D.crl (hash: uYwTLnwyqxTPjmM6ZucV/OaKY3JArpp0BX5s2hss+VA=)
                          2: 3137372e33382e3133362e302f32312d3234203d3e203532393437.roa (hash: +6KCUTtWtvVgNgsZbu4AMmwuu302c2jAO+kG6i/8NXg=)
                          3: 3136382e3139372e31362e302f32322d3234203d3e203532393437.roa (hash: 6xX1NVlX+1y8oVSAQz+k5Ny4VCTUltWPdw2CjLmQwx8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:1b:de:d1:70:0f:5a:c7:b2:7e:94:06:33:da:28:65:08:27:57:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BFFFB305308D99BB71B629A52021D536AF8164D
        Validity
            Not Before: Apr 15 09:44:58 2024 GMT
            Not After : Apr 16 11:33:58 2024 GMT
        Subject: CN=D5B5135AF7883E09D385400411C603D2920FFDC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:36:12:96:79:01:1c:09:ed:d1:5e:9b:9e:e1:
                    ee:de:93:15:78:c9:22:55:f8:eb:26:e1:7a:e9:61:
                    45:f1:93:c8:89:28:ac:14:95:93:dd:b2:07:6c:61:
                    44:99:82:b2:0c:dc:f8:41:ff:70:23:8d:02:42:9d:
                    47:18:49:8c:30:00:46:b1:89:85:8d:d5:8f:3f:d7:
                    5e:a2:94:b3:be:a1:cc:0b:b0:12:fa:24:a5:5c:23:
                    0f:e6:05:ad:c6:25:db:f3:b5:56:fe:d2:4d:1a:85:
                    2f:6f:7a:35:51:e6:70:aa:0f:1e:18:ad:a7:de:0e:
                    42:ac:69:53:f3:29:30:7a:41:6a:60:e2:57:94:ec:
                    0f:db:f8:19:2d:3b:58:ed:74:61:d3:35:2c:23:73:
                    55:83:8d:10:0e:67:9d:17:c6:38:ca:9e:67:29:1e:
                    42:4a:7e:8d:a7:e0:01:fc:21:8b:9e:0f:a6:09:42:
                    10:a5:8d:17:ff:25:76:23:9d:f4:bf:4b:b5:ce:2f:
                    6b:6e:28:b6:25:b5:78:63:30:37:76:c9:6a:6c:e6:
                    37:70:84:09:89:ee:ab:e4:6e:03:d0:50:ee:1f:3d:
                    fd:29:84:2c:31:e8:b8:87:b2:a6:e9:f7:fc:81:6d:
                    b3:f8:a6:ca:9b:75:fa:71:cd:7f:90:2a:55:a5:d6:
                    a4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B5:13:5A:F7:88:3E:09:D3:85:40:04:11:C6:03:D2:92:0F:FD:C4
            X509v3 Authority Key Identifier:
                keyid:9B:FF:FB:30:53:08:D9:9B:B7:1B:62:9A:52:02:1D:53:6A:F8:16:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/9BFFFB305308D99BB71B629A52021D536AF8164D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9BFFFB305308D99BB71B629A52021D536AF8164D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/9BFFFB305308D99BB71B629A52021D536AF8164D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:ea:8d:16:f8:f6:2b:a9:61:6a:a0:aa:57:33:b5:d0:47:a3:
         5d:4a:52:be:4f:8f:62:3d:54:e5:0c:49:50:4c:12:a0:3e:53:
         f7:3f:42:1c:03:8b:3c:7b:35:7b:20:ba:7c:43:37:3e:9b:6d:
         6e:bf:af:ef:40:4c:66:2d:80:6d:69:5f:eb:67:9c:a4:18:cf:
         a7:c1:56:68:cf:dc:6c:2a:8b:50:25:e7:38:74:7f:74:dc:16:
         b7:95:8c:69:9c:2e:8a:49:3b:a7:f6:6c:75:8d:f2:a2:bf:96:
         6b:e1:f8:4e:f3:b8:fa:ef:55:72:c5:01:58:19:ea:2f:77:3e:
         d3:91:86:74:ac:9b:d0:f9:1d:e9:6b:bc:54:64:cc:2d:c4:ae:
         c2:1d:06:27:ab:fb:52:52:76:52:40:03:fa:e9:19:44:ca:1f:
         e4:74:85:16:bf:63:9c:ee:4b:d2:1b:a1:56:b7:c2:39:ae:9a:
         f6:c7:a2:ba:fb:96:43:4b:54:69:19:0b:c0:67:56:c2:fa:2d:
         72:a1:cf:cd:53:b5:53:f4:05:4f:f5:e1:1e:d6:f0:b9:1c:76:
         60:b7:5c:a4:dc:5a:17:c3:0d:cb:d4:ef:82:3f:17:b0:a3:ab:
         4d:bd:ad:81:d3:41:c6:1b:d1:12:54:d6:3f:10:57:9f:d8:02:
         9f:4e:4f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----