Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/1/9BDE455A8390B48AC436773E700196629C99675E.mft
File:                     9BDE455A8390B48AC436773E700196629C99675E.mft (raw, json)
Hash identifier:          hhhCigkuRth6sfMZuvu60zcarw6I1n/QIAX9FlJhzvQ=
Subject key identifier:   D9:41:33:5D:6D:B3:4D:9A:95:53:A3:B1:57:20:09:AE:52:FC:7F:91
Authority key identifier: 9B:DE:45:5A:83:90:B4:8A:C4:36:77:3E:70:01:96:62:9C:99:67:5E
Certificate issuer:       /CN=9BDE455A8390B48AC436773E700196629C99675E
Certificate serial:       0121ECAFAEC596BE9076C2FE0F7DC4AA29C0083B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BDE455A8390B48AC436773E700196629C99675E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/1/9BDE455A8390B48AC436773E700196629C99675E.mft
Manifest number:          1D
Signing time:             Wed 24 Apr 2024 07:46:48 +0000
Manifest this update:     Wed 24 Apr 2024 07:41:48 +0000
Manifest next update:     Thu 25 Apr 2024 11:32:48 +0000
Files and hashes:         1: 9BDE455A8390B48AC436773E700196629C99675E.crl (hash: zXC14WMqw+0uOfOj4GmkZlmMbz5G42OD3XSQros7vT8=)
                          2: 323830343a356634633a3a2f33322d3334203d3e20323639303930.roa (hash: RH6YNLmxGUhp1r9ggsAAS2RUQS1ej/2++aioEoWzioo=)
                          3: 34352e3137382e37362e302f32322d3234203d3e20323639303930.roa (hash: yEOA3ih6SmdwuEi1UK2fP4noKUmqJSC2bsUczX5pkrQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:21:ec:af:ae:c5:96:be:90:76:c2:fe:0f:7d:c4:aa:29:c0:08:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BDE455A8390B48AC436773E700196629C99675E
        Validity
            Not Before: Apr 24 07:41:48 2024 GMT
            Not After : Apr 25 11:32:48 2024 GMT
        Subject: CN=D941335D6DB34D9A9553A3B1572009AE52FC7F91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7c:49:29:ee:1d:a1:87:01:97:b1:a3:cf:be:
                    4c:81:a6:89:b3:55:10:29:42:fc:73:dd:ef:6b:4a:
                    78:48:fa:7e:fb:3f:8d:8a:66:63:c0:a0:6f:5e:42:
                    e5:83:b8:71:28:e7:b1:d9:59:bd:d1:e7:20:7a:1f:
                    e4:63:e2:83:b9:d6:38:e5:b7:2e:8f:50:0f:64:5f:
                    07:7d:47:bb:49:73:51:6b:64:0a:6d:1e:33:ee:d9:
                    c2:0f:94:5e:67:66:ae:ea:f0:cd:d5:d1:50:9b:45:
                    54:a6:82:62:ad:0c:f3:87:87:c8:f9:27:34:0c:2d:
                    a9:4b:62:53:ea:95:0e:d7:ca:0b:1c:b2:36:0e:0f:
                    de:8a:e1:79:ad:65:56:f4:dd:1c:86:16:28:88:b6:
                    80:86:43:1c:fa:15:60:2a:4d:a9:3c:ed:1d:25:20:
                    ab:71:0d:2f:9a:4e:a0:2c:44:cf:37:5a:6b:df:da:
                    99:74:62:7c:08:29:95:ea:6a:48:00:ff:9d:14:1c:
                    c0:95:87:2a:73:9a:10:39:d2:f8:53:e2:49:08:9b:
                    5c:84:66:74:c4:a4:24:56:5f:05:84:39:b9:20:41:
                    98:49:14:ea:a5:cf:b9:71:2e:f1:cb:aa:b7:fa:b5:
                    f3:f8:44:c1:f9:0e:1e:cd:09:77:b3:84:b4:13:b7:
                    07:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:41:33:5D:6D:B3:4D:9A:95:53:A3:B1:57:20:09:AE:52:FC:7F:91
            X509v3 Authority Key Identifier:
                keyid:9B:DE:45:5A:83:90:B4:8A:C4:36:77:3E:70:01:96:62:9C:99:67:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/1/9BDE455A8390B48AC436773E700196629C99675E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BDE455A8390B48AC436773E700196629C99675E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/1/9BDE455A8390B48AC436773E700196629C99675E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:7a:66:07:6c:d7:97:87:00:d9:ff:ac:b7:c8:67:58:6d:05:
         94:40:e7:cd:a7:a4:a5:d2:7f:da:d9:18:4c:40:13:2c:89:58:
         37:b0:5d:b6:ef:15:66:e3:20:fc:8c:ae:8b:ee:35:eb:30:b6:
         de:a1:9a:bc:c7:0a:c8:ea:84:0a:df:03:86:8d:4b:4f:c1:41:
         0c:53:a3:22:5d:73:1a:63:48:51:f9:ee:cc:61:5d:15:62:49:
         fa:12:53:71:bd:de:e3:96:4b:69:b0:ca:5c:82:0e:f5:37:e9:
         e1:bd:87:db:00:49:d9:01:3f:09:8d:e4:11:2e:89:f7:f2:df:
         27:6c:bf:5e:87:a9:f3:50:dd:9d:5f:8d:2b:64:73:28:44:56:
         bc:1f:af:3e:c5:b1:75:13:5c:74:ae:a0:f5:e7:37:33:50:e0:
         9f:02:94:15:76:d9:f8:d7:18:ab:de:29:42:ef:4e:5b:ff:e6:
         79:5d:0c:7e:1d:93:e9:8b:f9:8c:4c:5f:6f:ee:e2:05:1e:44:
         9c:82:3a:bc:dd:d1:d6:04:b7:88:f3:9d:b3:c5:b1:b4:e1:07:
         61:24:14:7e:5e:5f:97:a0:89:dd:54:48:da:21:9e:31:eb:dc:
         65:14:2f:45:29:28:75:a3:7f:f1:07:48:cf:2a:ac:b0:7b:c6:
         40:e6:58:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----