Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/0/97DC73C1A77476398E6D6D372160DDABE4E6CCBF.mft
File:                     97DC73C1A77476398E6D6D372160DDABE4E6CCBF.mft (raw, json)
Hash identifier:          RreIF7qUvZEq8OGRyeGC+yr6B+qDkdhJjKC946qtiIc=
Subject key identifier:   CE:B6:2E:C9:18:94:E7:03:FC:40:52:A6:5C:20:70:62:52:2F:EA:2B
Authority key identifier: 97:DC:73:C1:A7:74:76:39:8E:6D:6D:37:21:60:DD:AB:E4:E6:CC:BF
Certificate issuer:       /CN=97DC73C1A77476398E6D6D372160DDABE4E6CCBF
Certificate serial:       2F96219EA885E2E5C87E59579B40EB2FC7819BAC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97DC73C1A77476398E6D6D372160DDABE4E6CCBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/0/97DC73C1A77476398E6D6D372160DDABE4E6CCBF.mft
Manifest number:          2E
Signing time:             Sun 14 Apr 2024 21:54:57 +0000
Manifest this update:     Sun 14 Apr 2024 21:49:57 +0000
Manifest next update:     Mon 15 Apr 2024 21:55:57 +0000
Files and hashes:         1: 323830343a363331343a3a2f33322d3438203d3e20323639333337.roa (hash: NsyhtVlArahhOi7nQ1cgechYl26l/ziROhp5u1wWiRE=)
                          2: 97DC73C1A77476398E6D6D372160DDABE4E6CCBF.crl (hash: w4weIELVSdTjhyo3A9OSK4aGB0dfK7Pf+BUvdfSO2u0=)
                          3: 34352e3138332e3138302e302f32322d3234203d3e20323639333337.roa (hash: QoGtgY40BFNE6REun9hXV3mHyae0noskKuyq2RPwkfI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:96:21:9e:a8:85:e2:e5:c8:7e:59:57:9b:40:eb:2f:c7:81:9b:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97DC73C1A77476398E6D6D372160DDABE4E6CCBF
        Validity
            Not Before: Apr 14 21:49:57 2024 GMT
            Not After : Apr 15 21:55:57 2024 GMT
        Subject: CN=CEB62EC91894E703FC4052A65C207062522FEA2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b3:f0:c9:f1:bf:60:0a:c5:e8:62:f2:2f:6b:
                    bc:8e:34:81:c1:de:21:5f:ea:b3:7c:60:ff:36:22:
                    db:cd:c5:35:34:82:39:97:6f:83:c4:c8:85:af:be:
                    c7:bd:26:cd:71:bd:25:da:af:08:65:fc:57:ed:a1:
                    38:1e:ca:f1:87:e6:9c:77:62:2a:c9:aa:f0:70:33:
                    46:5c:dd:cc:9e:bd:10:11:89:fc:88:8c:c0:e7:4c:
                    f1:a4:da:bc:0c:1b:68:9f:c8:0c:d8:43:a4:14:ef:
                    ac:85:ea:01:ae:77:69:7e:46:f4:36:5a:d6:3c:bf:
                    a3:bf:c3:16:88:26:8d:7c:e8:d4:df:03:fc:d0:ed:
                    28:00:0c:12:36:d5:5a:5a:d6:26:cd:fc:df:f7:7a:
                    35:17:0e:ca:79:3e:ed:ca:6b:01:c8:e4:8a:05:d8:
                    16:36:aa:f3:0f:02:e4:77:fb:53:6d:78:41:b0:17:
                    05:d3:b3:49:9e:71:6b:b6:5a:a8:78:65:45:77:34:
                    e3:f9:6c:86:07:a2:c8:30:78:5b:c4:1d:55:69:ea:
                    a9:07:c6:4f:c4:31:4e:e6:6f:58:d7:ad:0d:f8:66:
                    f6:36:d2:66:57:29:33:01:91:8b:22:20:1f:04:98:
                    7d:18:d1:2d:1f:71:65:fc:41:8d:b9:a0:63:66:fe:
                    43:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B6:2E:C9:18:94:E7:03:FC:40:52:A6:5C:20:70:62:52:2F:EA:2B
            X509v3 Authority Key Identifier:
                keyid:97:DC:73:C1:A7:74:76:39:8E:6D:6D:37:21:60:DD:AB:E4:E6:CC:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/0/97DC73C1A77476398E6D6D372160DDABE4E6CCBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97DC73C1A77476398E6D6D372160DDABE4E6CCBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/0/97DC73C1A77476398E6D6D372160DDABE4E6CCBF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:70:c1:7f:bb:a2:1e:71:b8:3d:ee:6e:01:6a:6f:74:9c:c4:
         22:18:ba:42:94:bf:4b:87:82:58:65:61:09:05:0c:f5:99:2e:
         ac:29:d9:df:b9:b3:32:05:41:4a:e5:0d:42:6e:78:04:54:d3:
         e7:90:b5:d3:cf:23:5a:db:83:7c:11:f6:f2:ac:52:8c:53:41:
         82:8f:da:c3:c4:5a:15:36:f1:4b:a7:25:7c:5f:82:5f:6b:68:
         3c:4f:b4:0a:a0:8d:3f:73:7c:f5:88:bb:14:26:bb:ba:71:85:
         80:36:29:5c:5d:4f:ab:7f:76:8a:b1:80:36:ec:78:a0:31:dd:
         04:88:58:aa:c1:18:68:1f:98:cc:f2:40:19:ac:17:de:7c:d3:
         48:98:6c:58:9f:ae:ee:17:f4:69:ef:b6:da:6b:f0:d2:c5:3c:
         48:02:29:e8:c1:4a:ac:2e:e4:8d:2e:1a:f1:a3:d2:74:11:21:
         34:c7:51:cc:ae:56:d5:34:a9:c4:b6:85:59:e8:b5:ad:dd:45:
         f4:57:20:de:4b:be:b3:9a:fc:4f:a0:59:9f:d6:d1:ad:da:18:
         27:b2:40:e3:24:ae:82:bc:30:0f:6e:10:10:8d:ca:50:bd:60:
         5f:e4:18:f6:a7:19:84:87:ff:7f:7c:58:3b:b8:50:04:0a:87:
         4c:d3:1d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----