Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DFfUyifCgAi3vwqrUy6HHhYB4SsDjgCNcy8PAfyhhbaR/0/D9684E9F8F6DEC46D8CFD316D711BE02541C7B2E.mft
File:                     D9684E9F8F6DEC46D8CFD316D711BE02541C7B2E.mft (raw, json)
Hash identifier:          9HHd2zehFGG0USWyH9GXtidgtL9vcm2LaaEG1BQA8hk=
Subject key identifier:   4F:DC:4D:9C:70:5F:25:3D:19:F4:72:F2:C5:22:EB:5F:71:4A:D3:35
Authority key identifier: D9:68:4E:9F:8F:6D:EC:46:D8:CF:D3:16:D7:11:BE:02:54:1C:7B:2E
Certificate issuer:       /CN=D9684E9F8F6DEC46D8CFD316D711BE02541C7B2E
Certificate serial:       747604EC743FE2DC32C9B48C78A39D0E000460CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9684E9F8F6DEC46D8CFD316D711BE02541C7B2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFfUyifCgAi3vwqrUy6HHhYB4SsDjgCNcy8PAfyhhbaR/0/D9684E9F8F6DEC46D8CFD316D711BE02541C7B2E.mft
Manifest number:          0493
Signing time:             Mon 15 Apr 2024 05:48:06 +0000
Manifest this update:     Mon 15 Apr 2024 05:43:06 +0000
Manifest next update:     Tue 16 Apr 2024 07:15:06 +0000
Files and hashes:         1: 3133382e3138362e3135362e302f32322d3234203d3e20323633383638.roa (hash: WAO0V/qP3vsmzVyoN7ByH7pUL393zib3gk86Pnyjvic=)
                          2: D9684E9F8F6DEC46D8CFD316D711BE02541C7B2E.crl (hash: cRLBIvG10HX6GArwFR+pc3K7FPjmJDywlQHBQZDIGOw=)
                          3: 323830343a323666633a3a2f33322d3438203d3e20323633383638.roa (hash: EXaXfeioDTJ3S/75bYeHlFLoaAz2KhX7LeZu1yW1d7w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:76:04:ec:74:3f:e2:dc:32:c9:b4:8c:78:a3:9d:0e:00:04:60:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9684E9F8F6DEC46D8CFD316D711BE02541C7B2E
        Validity
            Not Before: Apr 15 05:43:06 2024 GMT
            Not After : Apr 16 07:15:06 2024 GMT
        Subject: CN=4FDC4D9C705F253D19F472F2C522EB5F714AD335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:48:2e:e3:1e:44:ac:f2:37:14:e2:c7:d8:d9:
                    69:53:c6:2c:17:37:d7:ee:fa:17:db:1d:1d:5e:b9:
                    a7:7d:ef:61:b2:e0:41:c2:db:90:ea:95:6b:30:f5:
                    c5:09:5b:e2:7a:ea:95:4c:97:b4:4f:5a:e9:d0:24:
                    84:3b:7f:4c:67:8b:45:b0:00:2e:65:5a:f1:48:02:
                    95:33:f8:13:d1:73:fa:bb:1d:70:3a:fd:cb:4b:a0:
                    e3:96:ce:47:7f:69:04:f4:57:8c:8f:ef:aa:01:5a:
                    91:8c:39:b0:69:53:00:41:c8:5a:ea:6b:cd:2f:46:
                    42:ed:bb:6a:52:a4:bf:03:49:45:0d:b8:65:d4:24:
                    4b:5e:69:4f:62:1c:df:9c:4a:f9:bd:4d:15:7f:35:
                    be:86:ce:f1:67:6d:05:37:ef:9d:aa:7c:84:67:23:
                    98:dc:fc:d6:bf:44:01:83:30:12:5d:df:ea:24:18:
                    75:2c:f2:99:f1:49:1a:c5:83:5b:88:37:f7:ee:d2:
                    75:29:1c:2d:e8:16:ab:39:95:52:9d:33:7c:a8:60:
                    c8:cc:24:57:13:ac:93:3e:42:71:28:04:74:63:73:
                    4c:13:83:9a:c7:75:a0:59:f8:1f:4c:51:c0:14:8c:
                    30:9e:09:ae:a8:88:f2:e6:c8:0c:08:d8:2b:1d:15:
                    df:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:DC:4D:9C:70:5F:25:3D:19:F4:72:F2:C5:22:EB:5F:71:4A:D3:35
            X509v3 Authority Key Identifier:
                keyid:D9:68:4E:9F:8F:6D:EC:46:D8:CF:D3:16:D7:11:BE:02:54:1C:7B:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFfUyifCgAi3vwqrUy6HHhYB4SsDjgCNcy8PAfyhhbaR/0/D9684E9F8F6DEC46D8CFD316D711BE02541C7B2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9684E9F8F6DEC46D8CFD316D711BE02541C7B2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFfUyifCgAi3vwqrUy6HHhYB4SsDjgCNcy8PAfyhhbaR/0/D9684E9F8F6DEC46D8CFD316D711BE02541C7B2E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:0b:46:40:f5:ca:af:41:20:cd:88:7d:fc:11:fe:c8:68:cf:
         9c:03:e4:8c:0f:76:1e:f6:25:a8:ac:19:05:1e:6c:a1:7e:7d:
         a5:ca:cd:b8:d3:41:1b:71:87:2c:cb:59:14:83:95:09:b1:13:
         29:85:f9:44:66:05:cf:49:d2:9a:1e:b5:36:6d:3b:f4:75:88:
         ce:49:4d:96:80:9f:09:ac:e5:b6:35:c7:e2:8c:31:47:fd:e4:
         88:5d:d7:23:37:43:d5:ea:17:b6:90:58:3d:eb:3c:fc:55:20:
         28:82:61:dc:f1:df:91:fe:bf:ae:00:f5:4e:90:82:8e:fd:30:
         34:6e:c3:f9:06:fd:09:21:d3:33:5b:ed:44:7f:77:76:c8:0c:
         80:bb:84:b7:5d:af:90:f6:e9:ae:de:f8:59:9b:c1:9f:fa:07:
         9f:5b:8e:7b:c8:8f:e9:70:44:31:90:b1:7c:ef:2d:f3:c9:c4:
         23:b7:74:7e:8b:d0:e3:23:f6:df:b4:ca:8a:d8:ea:5a:47:9a:
         3c:19:0d:da:f2:1b:12:78:88:2b:0b:9d:78:ed:c0:9e:14:90:
         30:a4:1a:11:8d:25:25:08:be:be:a1:c8:f7:b4:ff:b7:9e:8a:
         43:4e:95:b7:35:c9:24:44:38:67:87:52:f6:65:bc:2b:28:8c:
         66:5a:9a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----