Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/9A4A71695B3E24A3DBD6ED9021804A0403604555.mft
File:                     9A4A71695B3E24A3DBD6ED9021804A0403604555.mft (raw, json)
Hash identifier:          L76L/xjernol/xnGlaOkNB6psqSeDO77vGHCLK4asv0=
Subject key identifier:   70:1B:99:03:67:51:26:81:63:C9:84:9A:BD:40:D5:DB:91:47:0F:99
Authority key identifier: 9A:4A:71:69:5B:3E:24:A3:DB:D6:ED:90:21:80:4A:04:03:60:45:55
Certificate issuer:       /CN=9A4A71695B3E24A3DBD6ED9021804A0403604555
Certificate serial:       0E58AF13782D0163664218A0E0BD08224B017D1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A4A71695B3E24A3DBD6ED9021804A0403604555.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/9A4A71695B3E24A3DBD6ED9021804A0403604555.mft
Manifest number:          95
Signing time:             Sat 23 Mar 2024 08:07:06 +0000
Manifest this update:     Sat 23 Mar 2024 08:02:06 +0000
Manifest next update:     Sun 24 Mar 2024 10:20:06 +0000
Files and hashes:         1: 323830343a333734303a3a2f33322d313238203d3e20323636333939.roa (hash: lBhKS9cbX6QThDnwWq4YiaRP+iMZrdUYYzyXve0hEU0=)
                          2: 3137302e38312e39322e302f32322d3332203d3e20323636333939.roa (hash: KnWOYEnjFhnJXKPRsMO7JwQS4Dh/GkpiSBi/guLMqKc=)
                          3: 9A4A71695B3E24A3DBD6ED9021804A0403604555.crl (hash: LNbdWGjBKbyj08wDDdHwugE8p2JkA78Vgfu1pM2hu80=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:58:af:13:78:2d:01:63:66:42:18:a0:e0:bd:08:22:4b:01:7d:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A4A71695B3E24A3DBD6ED9021804A0403604555
        Validity
            Not Before: Mar 23 08:02:06 2024 GMT
            Not After : Mar 24 10:20:06 2024 GMT
        Subject: CN=701B99036751268163C9849ABD40D5DB91470F99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c8:2c:47:2a:29:39:30:87:cb:08:41:2a:f1:
                    92:b8:4c:35:4b:31:16:1a:7c:3e:6a:e5:66:cc:c1:
                    16:4f:42:3c:99:be:f0:a0:3a:26:45:06:f3:cc:7a:
                    9a:59:49:53:0a:5e:62:84:d1:b7:f6:e1:90:e0:3a:
                    13:7e:a7:00:5e:35:24:26:6a:76:96:d1:20:82:3b:
                    e3:e6:6a:87:70:db:89:1b:89:73:57:76:76:7b:bc:
                    4a:0c:1b:49:d2:a5:77:0f:43:f3:3d:53:77:f6:15:
                    b9:c0:8d:8c:89:2c:82:b9:4c:69:34:5c:b0:15:d3:
                    24:34:e4:67:5d:a2:85:48:f9:8b:90:fb:55:e4:14:
                    17:eb:48:70:da:8e:60:e2:ee:43:59:51:32:9a:f8:
                    97:77:36:2e:35:7f:da:b8:bd:4e:f1:d2:d8:06:07:
                    8b:4a:3f:6c:6d:c6:48:60:fe:8b:19:32:f5:29:bf:
                    79:97:52:22:a7:01:61:15:c1:3a:39:cf:4a:8b:63:
                    ba:3d:0b:7e:41:7b:4a:79:8e:6b:5a:38:95:50:b4:
                    f5:8e:13:7f:d5:21:1e:ae:1d:a0:6b:53:2c:13:33:
                    59:b4:b5:55:5f:1f:43:04:75:f8:7f:9b:00:3e:f9:
                    0a:d6:cc:e7:c0:07:5f:3b:b7:39:0f:20:68:97:79:
                    08:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:1B:99:03:67:51:26:81:63:C9:84:9A:BD:40:D5:DB:91:47:0F:99
            X509v3 Authority Key Identifier:
                keyid:9A:4A:71:69:5B:3E:24:A3:DB:D6:ED:90:21:80:4A:04:03:60:45:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/9A4A71695B3E24A3DBD6ED9021804A0403604555.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A4A71695B3E24A3DBD6ED9021804A0403604555.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/9A4A71695B3E24A3DBD6ED9021804A0403604555.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:ad:a4:82:e0:bc:cd:2d:d0:6d:cd:ee:96:29:5f:45:8c:ca:
         1a:d1:c8:a1:4a:31:ee:b5:fa:f0:1f:bb:c2:d4:95:ef:38:ec:
         d8:5b:53:1b:9a:75:a9:f4:b8:18:9f:63:0f:74:d3:d8:56:a0:
         99:0e:71:54:49:e4:bc:6a:04:1e:32:d7:80:29:5a:d9:60:a6:
         40:44:03:bf:76:5d:d4:f9:ff:c2:f2:a4:ae:6f:db:72:7c:8e:
         7f:e7:4b:2a:81:fd:d4:ac:b6:95:9d:43:69:40:0a:8c:37:a4:
         36:ac:b7:37:65:be:0e:ae:41:58:c9:dc:29:3a:84:40:08:96:
         9d:b8:75:eb:f4:90:f7:2a:f5:fa:e0:e1:93:9e:83:33:2a:a2:
         cd:86:38:fb:e3:7c:da:13:ce:5b:a4:8c:52:95:72:b3:8c:85:
         2b:e2:87:7f:cf:71:10:e0:21:34:3b:03:26:1d:ab:cd:26:42:
         53:74:91:38:dd:6f:fa:92:65:83:8f:99:79:8f:74:33:4c:2d:
         1a:8f:8e:6a:36:96:07:0b:d5:d6:ea:b1:c7:d4:00:1d:84:2a:
         9a:aa:03:71:92:21:a6:ae:0c:b8:f4:61:c7:1c:ba:ab:8b:8d:
         5b:5f:38:4a:8d:c9:7b:55:3a:be:04:6e:c5:d0:22:3e:48:ce:
         4f:46:da:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----