Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/90487C5691390B1D7F5E129EBFEA377AA41D94C0.mft
File:                     90487C5691390B1D7F5E129EBFEA377AA41D94C0.mft (raw, json)
Hash identifier:          /Wsv/kh0i8mcpT6eu/nmC1ZMpp0NsBlhNm0g5ihZX6g=
Subject key identifier:   49:0E:85:8D:58:BC:16:FC:29:CF:5F:5D:CF:9F:B3:20:98:86:C5:38
Authority key identifier: 90:48:7C:56:91:39:0B:1D:7F:5E:12:9E:BF:EA:37:7A:A4:1D:94:C0
Certificate issuer:       /CN=90487C5691390B1D7F5E129EBFEA377AA41D94C0
Certificate serial:       3D7687C329DB09DBD9E9B397FCDF5C265375A3F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90487C5691390B1D7F5E129EBFEA377AA41D94C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/90487C5691390B1D7F5E129EBFEA377AA41D94C0.mft
Manifest number:          01FD
Signing time:             Wed 17 Jan 2024 21:40:33 +0000
Manifest this update:     Wed 17 Jan 2024 21:35:33 +0000
Manifest next update:     Fri 19 Jan 2024 01:36:33 +0000
Files and hashes:         1: 34352e3233372e3234382e302f32322d3234203d3e20323638323937.roa (hash: 1vDE6lGPVTkaVJSzw8FviJkqFZRpSBVwojG1duXuCnE=)
                          2: 90487C5691390B1D7F5E129EBFEA377AA41D94C0.crl (hash: 3a5kWfP8+98BeIV9bWpCtE3c0CgzPuqk7Dde/oKKHnk=)
                          3: 323830343a346630303a3a2f33322d3438203d3e20323638323937.roa (hash: I+qf4wMJ7bNPULD3C6XppvGhwLt0YioLpelH5Z6ZF8E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:76:87:c3:29:db:09:db:d9:e9:b3:97:fc:df:5c:26:53:75:a3:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90487C5691390B1D7F5E129EBFEA377AA41D94C0
        Validity
            Not Before: Jan 17 21:35:33 2024 GMT
            Not After : Jan 19 01:36:33 2024 GMT
        Subject: CN=490E858D58BC16FC29CF5F5DCF9FB3209886C538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:33:6c:5f:a3:ae:96:43:9f:e5:9e:78:d5:34:
                    03:e0:7f:1b:2f:92:1e:01:ef:3f:ef:2f:38:6a:83:
                    15:ce:97:a7:85:d8:7f:e8:12:ec:0c:dd:7a:4b:c9:
                    4c:09:f1:e1:de:75:08:ea:27:1c:e6:66:6e:34:68:
                    7a:78:f3:80:2a:2b:6b:00:ba:2a:12:8d:5f:3d:c4:
                    16:df:7c:18:63:76:6a:52:f9:12:81:1b:16:39:af:
                    49:10:2c:0e:be:3f:b1:f4:52:73:8c:25:fd:c0:f6:
                    29:29:b7:cb:e8:4b:84:7f:11:65:be:68:71:99:a0:
                    69:f2:ba:a2:02:74:01:69:5d:45:dc:1e:95:14:9b:
                    d0:f7:e3:0a:64:9c:74:1a:18:fa:e0:d4:e6:17:76:
                    18:6f:88:ee:a9:0f:a2:c1:d4:a9:a0:9a:7f:cd:2f:
                    1c:94:e1:94:83:e0:83:54:4a:80:77:7b:77:a4:9c:
                    4c:52:56:b5:63:8f:f1:59:a3:33:e6:bc:4e:f5:19:
                    d4:a6:50:ff:a7:b7:20:e1:f8:b6:71:91:76:09:90:
                    27:b6:3a:ee:5d:62:73:d5:ce:66:bc:a0:0d:55:5e:
                    48:6c:aa:c8:ae:ff:82:2f:18:04:4a:a3:ca:7e:56:
                    d4:47:ca:3c:26:4f:2c:fb:cc:f3:96:d2:c5:a5:92:
                    58:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:0E:85:8D:58:BC:16:FC:29:CF:5F:5D:CF:9F:B3:20:98:86:C5:38
            X509v3 Authority Key Identifier:
                keyid:90:48:7C:56:91:39:0B:1D:7F:5E:12:9E:BF:EA:37:7A:A4:1D:94:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/90487C5691390B1D7F5E129EBFEA377AA41D94C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90487C5691390B1D7F5E129EBFEA377AA41D94C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/90487C5691390B1D7F5E129EBFEA377AA41D94C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:7d:1c:84:eb:e3:2b:6b:18:4e:4f:d8:20:0b:0a:ba:dc:ca:
         ab:e9:80:df:8e:e9:26:d7:51:5e:55:fb:42:0b:90:ce:94:30:
         ce:95:1f:d6:14:c5:01:81:de:96:8e:a5:2c:b7:fd:c1:2a:38:
         ed:a6:f2:a0:b0:af:fe:9b:aa:3f:3b:1c:f5:f8:21:27:39:19:
         fb:31:18:97:75:f1:92:b3:4d:7e:2d:de:5d:2f:d3:d2:d6:c4:
         31:fd:32:78:81:e4:36:9d:53:e8:23:85:b1:a0:88:f9:4f:4a:
         bc:cc:f9:c0:b8:8d:3e:e8:98:ad:aa:d1:56:4c:e2:5b:74:d4:
         fd:97:9c:75:a8:f9:1e:0e:39:59:30:f4:60:51:e3:13:b2:9e:
         cd:5d:fb:95:56:74:9e:e7:b9:b8:c1:56:b9:d5:48:cf:24:6c:
         96:ee:1f:f9:e9:f0:ed:d8:58:a3:5c:e0:8c:88:ac:30:6b:a4:
         4b:8f:fa:46:13:0e:7e:30:ae:cf:b8:33:1b:46:9d:75:96:f3:
         e3:b1:81:a5:20:81:8a:07:7e:39:d0:7a:f9:fc:5b:ff:c5:19:
         1d:d9:06:c3:8a:0c:1a:cb:9f:71:4a:36:d0:c0:38:fd:42:d9:
         91:6d:54:33:e3:d0:35:49:7c:26:97:b5:72:38:e0:96:26:74:
         8b:ea:f8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----