Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/0/C40EE4EB2AE87DED80AE9646F18D1D0E9E56CBE6.mft
File:                     C40EE4EB2AE87DED80AE9646F18D1D0E9E56CBE6.mft (raw, json)
Hash identifier:          OEkCdEbQ/YJkO9VzhSTfghF0ttV7VZ4DPO8Pemvay4k=
Subject key identifier:   F1:E0:8B:CC:F4:86:2E:07:43:FF:E4:F1:8D:6B:5F:2D:26:D6:78:8E
Authority key identifier: C4:0E:E4:EB:2A:E8:7D:ED:80:AE:96:46:F1:8D:1D:0E:9E:56:CB:E6
Certificate issuer:       /CN=C40EE4EB2AE87DED80AE9646F18D1D0E9E56CBE6
Certificate serial:       5DE97F1C6F4A33CD84054B71112760A282E204EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C40EE4EB2AE87DED80AE9646F18D1D0E9E56CBE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/0/C40EE4EB2AE87DED80AE9646F18D1D0E9E56CBE6.mft
Manifest number:          0271
Signing time:             Mon 15 Apr 2024 08:42:16 +0000
Manifest this update:     Mon 15 Apr 2024 08:37:16 +0000
Manifest next update:     Tue 16 Apr 2024 10:38:16 +0000
Files and hashes:         1: C40EE4EB2AE87DED80AE9646F18D1D0E9E56CBE6.crl (hash: Qd0Q5vwWCILQBkGUsxb1vMKvKUTXaBidBrECmEdrjvY=)
                          2: 34352e3137362e31322e302f32322d3234203d3e20323638393238.roa (hash: u+h5G9aYA/q3Jwx35QTDJVa20bc4uDPL+u0bJF7klsw=)
                          3: 323830343a356363303a3a2f33322d3438203d3e20323638393238.roa (hash: sb+Rj3QLbRoGjZNECju6RoK5jRsZsBg2gzIf/6Q2008=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e9:7f:1c:6f:4a:33:cd:84:05:4b:71:11:27:60:a2:82:e2:04:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C40EE4EB2AE87DED80AE9646F18D1D0E9E56CBE6
        Validity
            Not Before: Apr 15 08:37:16 2024 GMT
            Not After : Apr 16 10:38:16 2024 GMT
        Subject: CN=F1E08BCCF4862E0743FFE4F18D6B5F2D26D6788E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ca:e4:8e:e2:28:c2:fe:c7:45:4d:b9:46:67:
                    85:5e:fc:a2:b8:2d:c2:2b:d4:27:24:3e:76:20:54:
                    33:d5:6d:56:dd:52:69:04:d4:aa:42:fb:bf:11:91:
                    39:39:bf:88:0f:79:90:2d:1e:eb:10:cc:52:f2:17:
                    6b:3f:fe:cc:4b:f8:53:d0:ec:4e:f8:11:d2:53:db:
                    ee:82:8d:dd:68:52:0d:3d:5b:ed:fc:ec:a2:ee:6f:
                    a1:78:69:0d:f0:7b:62:23:7e:ba:08:c8:b1:a5:8a:
                    d8:f2:c2:de:79:c6:00:dd:75:4a:c4:76:8b:5e:da:
                    7e:7c:fb:7f:1d:72:9a:e4:52:84:fe:f0:75:dd:4e:
                    1a:3c:fd:3a:d7:93:e3:06:51:75:a7:de:d3:f2:25:
                    84:8b:f2:6b:38:59:a5:8c:b4:97:86:37:1a:91:1e:
                    fa:02:8a:93:06:27:19:4d:89:af:9d:31:4a:f1:3a:
                    a9:9c:fc:60:78:6b:70:c7:4d:84:38:1d:6f:c6:f4:
                    84:df:09:65:02:a3:79:da:75:4f:30:db:81:51:96:
                    86:04:1c:85:38:32:2c:2e:fa:4c:92:55:21:4f:67:
                    67:8a:8e:c2:2b:bc:f5:bb:b5:8d:a0:7d:82:6d:96:
                    03:98:8c:82:55:0a:ce:32:43:7e:4f:f1:65:81:21:
                    df:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E0:8B:CC:F4:86:2E:07:43:FF:E4:F1:8D:6B:5F:2D:26:D6:78:8E
            X509v3 Authority Key Identifier:
                keyid:C4:0E:E4:EB:2A:E8:7D:ED:80:AE:96:46:F1:8D:1D:0E:9E:56:CB:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/0/C40EE4EB2AE87DED80AE9646F18D1D0E9E56CBE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C40EE4EB2AE87DED80AE9646F18D1D0E9E56CBE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/0/C40EE4EB2AE87DED80AE9646F18D1D0E9E56CBE6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:99:88:e7:2f:c3:45:d0:f8:9d:6e:78:bc:d5:50:8e:71:0c:
         e4:93:62:2d:72:38:d5:f5:b0:c4:00:46:cc:d4:57:e8:0f:4c:
         f8:e2:cc:ae:42:d1:32:68:30:d2:a4:43:8f:80:10:dd:65:52:
         50:3a:36:b6:b4:dc:d6:9f:6c:77:02:ae:e2:de:49:54:57:65:
         0c:fa:f5:c7:c0:5a:dc:ac:68:f0:f9:37:7d:35:78:2b:32:ab:
         e0:04:d1:d6:2c:7e:fa:91:f9:ba:1a:50:50:43:85:75:45:ec:
         b6:35:27:f6:d2:a5:e6:94:df:4f:3e:7d:93:f5:85:dc:ff:f8:
         03:21:9a:74:23:54:32:79:6c:42:83:1d:df:aa:0c:74:80:74:
         1e:bd:e6:49:e2:08:1f:e0:ba:92:90:33:82:db:df:ca:77:e8:
         17:4c:02:f2:e6:f3:63:93:4e:45:1e:2e:70:d2:bb:3e:3b:a0:
         de:12:f5:d1:4b:ed:cc:28:1a:d2:6e:68:77:dd:78:79:ef:c6:
         a7:fe:f4:ef:4f:3f:a0:91:7f:a4:2e:6c:14:a5:f7:73:75:35:
         d6:44:0a:91:1e:bb:3e:a5:3a:92:74:16:da:54:10:94:db:ea:
         71:10:07:d4:4d:ff:8e:21:65:d7:78:8f:09:b3:53:e6:52:af:
         80:62:49:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----