Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/4936D3D33202532B27ADCD7B44359BCF8ABCBC38.mft
File:                     4936D3D33202532B27ADCD7B44359BCF8ABCBC38.mft (raw, json)
Hash identifier:          MC09Xk6bIrp/3Zvu4+DGuA8VT8xdW7Tg6gTwvDdWcb4=
Subject key identifier:   9E:05:AF:B9:A0:96:C3:28:4B:04:10:54:19:44:35:49:B7:B1:48:07
Authority key identifier: 49:36:D3:D3:32:02:53:2B:27:AD:CD:7B:44:35:9B:CF:8A:BC:BC:38
Certificate issuer:       /CN=4936D3D33202532B27ADCD7B44359BCF8ABCBC38
Certificate serial:       5F1E2290A10F1C93CDE75A8DEBE386A690480EF3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4936D3D33202532B27ADCD7B44359BCF8ABCBC38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/4936D3D33202532B27ADCD7B44359BCF8ABCBC38.mft
Manifest number:          BA
Signing time:             Tue 15 Oct 2024 02:57:18 +0000
Manifest this update:     Tue 15 Oct 2024 02:52:18 +0000
Manifest next update:     Wed 16 Oct 2024 05:23:18 +0000
Files and hashes:         1: 323830343a343032633a3a2f33322d3332203d3e20323635393432.roa (hash: Fv+9R4vTGHb6Vw5T1dA3Qw+UYZY1eeyamorMGyQZPvU=)
                          2: 4936D3D33202532B27ADCD7B44359BCF8ABCBC38.crl (hash: DR9Bt7mLO6Z2jae6CIEMlXcRHpf/kLe28Rn2wZ+iE6I=)
                          3: 3133312e3139362e3135322e302f32322d3234203d3e20323635393432.roa (hash: JWPeuPgLPU8SOVg58XREookkPQ3canhZCW2vtF64H48=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:1e:22:90:a1:0f:1c:93:cd:e7:5a:8d:eb:e3:86:a6:90:48:0e:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4936D3D33202532B27ADCD7B44359BCF8ABCBC38
        Validity
            Not Before: Oct 15 02:52:18 2024 GMT
            Not After : Oct 16 05:23:18 2024 GMT
        Subject: CN=9E05AFB9A096C3284B04105419443549B7B14807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8d:47:a5:1f:cd:24:b3:da:ab:82:30:fd:ef:
                    8f:33:15:54:94:e1:24:2e:8d:e5:8c:db:fc:dd:b4:
                    6b:79:7b:15:3a:77:ba:54:60:31:27:7b:dd:e5:fe:
                    58:7a:80:1f:c8:3f:cc:ad:0f:f8:0d:fd:3c:f1:51:
                    f3:7b:4a:36:dc:27:d1:ba:f8:14:71:c8:ed:42:34:
                    f2:15:f6:bf:c4:7a:b1:b0:9c:6f:f1:bc:bd:38:43:
                    c2:3e:c0:0a:42:cb:8d:85:ee:04:e0:d5:9e:e4:8c:
                    71:05:cb:ec:e1:86:94:dd:a2:33:bc:4e:2e:ce:4f:
                    fe:75:96:f1:08:ea:52:26:89:b7:68:7d:ef:d7:a1:
                    79:70:85:48:23:93:57:47:43:d3:a7:4f:41:b8:41:
                    f7:71:78:ac:5c:1a:aa:b7:c9:9e:9d:97:53:fd:8a:
                    f0:e8:bc:3d:36:67:83:de:4e:24:ba:fd:32:9f:1f:
                    64:c1:df:94:61:93:3b:b7:33:14:67:bc:41:ef:ea:
                    ea:20:06:7a:1c:e3:71:d4:67:6f:fb:e8:46:5c:84:
                    53:1a:40:df:a4:8f:61:d2:47:c0:a0:80:14:90:2c:
                    81:8d:29:ac:54:56:d2:87:36:b2:6a:6c:57:0f:64:
                    2e:4e:b6:d4:b9:21:8b:f1:e4:6f:d0:91:df:6d:40:
                    bd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:05:AF:B9:A0:96:C3:28:4B:04:10:54:19:44:35:49:B7:B1:48:07
            X509v3 Authority Key Identifier:
                keyid:49:36:D3:D3:32:02:53:2B:27:AD:CD:7B:44:35:9B:CF:8A:BC:BC:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/4936D3D33202532B27ADCD7B44359BCF8ABCBC38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4936D3D33202532B27ADCD7B44359BCF8ABCBC38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/4936D3D33202532B27ADCD7B44359BCF8ABCBC38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:52:ab:64:6f:78:f5:f4:71:20:94:a0:04:11:a4:0d:45:7d:
         db:3d:98:e3:19:2d:7c:02:9b:e7:0e:59:c9:53:e5:b4:95:d8:
         99:3c:fa:05:45:a6:7f:2a:7f:9d:f1:8f:a4:30:d7:a3:82:07:
         1d:d0:24:cc:2d:fa:f4:22:7f:c7:a0:cc:b7:9f:c2:8b:af:d3:
         83:0b:5b:77:4b:68:bd:9e:dc:c2:46:e3:d1:54:87:84:31:ec:
         c6:9a:3c:37:7c:d9:ae:54:e1:b5:b0:d3:bd:12:2c:16:0e:17:
         ea:24:3e:6b:26:72:73:b4:d6:db:92:55:3e:d8:05:41:bb:79:
         4c:91:a2:50:ec:99:a7:16:a4:ae:b8:51:8a:6e:51:b5:08:20:
         7e:ea:66:44:76:68:89:b7:9e:a2:63:7a:b4:57:f8:37:29:bd:
         7f:a7:48:32:69:3b:9d:58:b9:e5:41:22:a0:a0:71:c5:6f:90:
         77:56:70:f0:31:b1:ce:11:ab:16:a5:41:c9:21:8b:e4:ca:60:
         1a:64:8b:b4:18:e3:49:73:36:02:17:62:0e:33:ba:32:41:3e:
         9e:ed:f2:64:0c:f0:5e:c3:25:22:bc:0c:a0:73:4e:ff:92:ac:
         29:89:c4:36:f3:28:ea:43:80:3a:38:9d:08:64:20:76:10:24:
         49:f2:d7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----