Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/0/9B669BA037F2C9A91B9F51A44BDDB67B2E23E6AB.mft
File:                     9B669BA037F2C9A91B9F51A44BDDB67B2E23E6AB.mft (raw, json)
Hash identifier:          zt/SrDKo068ZCtrHYo4qJXLGyzt853yiVRFUlj3sD4A=
Subject key identifier:   1B:A9:7F:C8:AC:6E:69:C7:68:90:3B:08:F9:69:5B:AD:60:26:7F:70
Authority key identifier: 9B:66:9B:A0:37:F2:C9:A9:1B:9F:51:A4:4B:DD:B6:7B:2E:23:E6:AB
Certificate issuer:       /CN=9B669BA037F2C9A91B9F51A44BDDB67B2E23E6AB
Certificate serial:       4B5966C6D7CEC063353AE6781F20B5AC868A71F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B669BA037F2C9A91B9F51A44BDDB67B2E23E6AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/0/9B669BA037F2C9A91B9F51A44BDDB67B2E23E6AB.mft
Manifest number:          024B
Signing time:             Sun 14 Apr 2024 23:03:07 +0000
Manifest this update:     Sun 14 Apr 2024 22:58:07 +0000
Manifest next update:     Mon 15 Apr 2024 23:54:07 +0000
Files and hashes:         1: 3138362e3231392e3132382e302f32302d3234203d3e203533313637.roa (hash: 9hSYvZBThq7uY1FFHBuIG3u/oNlI551l0cKjT/fA+ao=)
                          2: 323830343a326134633a3a2f33322d3332203d3e203533313637.roa (hash: SLB62nqay+tL4/XA16M9vuvLD6m2MOmVQtF14RGt9TY=)
                          3: 3134332e3230322e3133322e302f32322d3234203d3e203533313637.roa (hash: KJpHpw0RplSq2dQAF1PSPcgUJGLjUeWSwWFNRC/sZ50=)
                          4: 9B669BA037F2C9A91B9F51A44BDDB67B2E23E6AB.crl (hash: 6C2ia/i7nwGRFRjORrDHKPpAYP1x3fklAkbg5d5Pdug=)
                          5: 3137372e32322e3137362e302f32312d3234203d3e203533313637.roa (hash: j0E1mmrXN52x4sPVfPtmePZfpae/KPXh499zPkX9U2k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:59:66:c6:d7:ce:c0:63:35:3a:e6:78:1f:20:b5:ac:86:8a:71:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B669BA037F2C9A91B9F51A44BDDB67B2E23E6AB
        Validity
            Not Before: Apr 14 22:58:07 2024 GMT
            Not After : Apr 15 23:54:07 2024 GMT
        Subject: CN=1BA97FC8AC6E69C768903B08F9695BAD60267F70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d3:8f:87:69:f0:b1:bd:3d:62:6d:e2:04:a2:
                    70:b7:c8:ac:7a:3e:40:69:a6:c2:fa:42:82:67:3f:
                    f2:30:59:4f:b2:b6:c9:9a:8e:79:45:45:59:f2:ed:
                    e9:cc:a1:6d:74:75:f9:0d:71:8b:35:0f:fc:a5:8f:
                    13:ab:a8:bd:96:a9:84:f7:2f:54:33:f8:0f:a5:6e:
                    b9:c1:ec:46:c9:5a:d5:75:ce:14:d5:05:1e:d1:71:
                    82:1a:43:65:06:b1:7c:46:41:f4:8d:6d:47:61:b3:
                    0a:18:05:50:54:07:7e:05:0b:a9:de:45:7f:ea:aa:
                    ac:72:1f:ba:ca:f6:bf:95:9c:38:a9:1d:f4:27:31:
                    b1:07:85:24:b2:58:8a:67:2e:12:7f:a9:4f:43:e2:
                    1d:91:b3:b7:f2:bf:95:52:e0:f2:e1:5e:32:03:98:
                    e1:8f:74:1c:b3:d9:37:d6:86:80:1f:c9:6f:74:aa:
                    25:7d:06:d5:07:48:01:80:0d:61:fc:89:c8:34:b3:
                    4e:e0:d2:37:ad:ee:c9:de:fb:68:a8:05:c1:5a:a1:
                    e1:df:be:e8:69:7b:a4:01:73:79:a0:a9:c7:9a:08:
                    0a:43:47:67:50:db:88:85:72:90:55:a0:0b:af:53:
                    77:36:67:90:65:42:c7:7a:89:d7:8e:56:8e:8a:95:
                    bf:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A9:7F:C8:AC:6E:69:C7:68:90:3B:08:F9:69:5B:AD:60:26:7F:70
            X509v3 Authority Key Identifier:
                keyid:9B:66:9B:A0:37:F2:C9:A9:1B:9F:51:A4:4B:DD:B6:7B:2E:23:E6:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/0/9B669BA037F2C9A91B9F51A44BDDB67B2E23E6AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B669BA037F2C9A91B9F51A44BDDB67B2E23E6AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/0/9B669BA037F2C9A91B9F51A44BDDB67B2E23E6AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:f9:e5:2f:f6:8f:5c:ac:16:49:47:dd:d7:10:3d:aa:7e:e8:
         78:2a:74:54:41:e6:e0:d9:d0:3a:67:d3:11:dc:f0:c8:f5:80:
         25:3c:c1:eb:3c:51:a9:1e:df:71:bb:8c:7f:1d:ea:9d:5c:8e:
         ad:aa:09:56:3e:00:ea:f4:b3:d9:d2:eb:9b:7a:a8:8d:ac:2d:
         17:f7:66:85:1b:c4:0e:09:a0:11:64:39:98:70:64:d4:f6:e2:
         53:b6:a4:f9:c1:fb:b0:a8:59:81:8a:12:b4:b6:d7:04:5a:60:
         6c:35:1f:74:bb:2b:0d:1c:d3:4f:e7:64:de:80:60:f9:2d:45:
         8e:96:6b:b8:94:e3:d8:49:0d:da:64:cd:05:91:96:e6:75:cf:
         74:27:e2:3d:f3:1c:4d:42:e9:e8:af:ff:14:f1:8c:4e:d3:57:
         79:0c:5b:a3:f9:9b:10:da:e1:84:51:fa:ca:f6:55:5f:07:9a:
         61:42:12:8e:af:53:11:30:ab:03:dc:52:55:75:3b:2d:7b:f2:
         88:e4:0a:9a:74:dc:c7:19:e5:b1:19:47:cd:a3:79:46:da:d6:
         12:2d:10:8c:15:b2:a9:fc:ab:d1:c9:ee:d5:3e:3d:77:c8:66:
         47:cb:e7:c2:7b:8a:50:2f:13:80:f7:d8:73:e9:5b:cc:93:a3:
         cc:55:88:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----