Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DdDuZqZkBJPmn2kzyLiFFQDbBEUiBbbhGHqGdJ2UtbhC/0/4BA7962563F2AD2885E80A088A50C5E789664E55.mft
File:                     4BA7962563F2AD2885E80A088A50C5E789664E55.mft (raw, json)
Hash identifier:          F/Fx/Pu7116h2Ssu/eayV0VLTJEjOLC1IBS83Vh9GHw=
Subject key identifier:   D8:66:0F:64:08:D5:3E:34:73:B3:24:B7:C7:DD:5F:3D:7F:C9:1B:4E
Authority key identifier: 4B:A7:96:25:63:F2:AD:28:85:E8:0A:08:8A:50:C5:E7:89:66:4E:55
Certificate issuer:       /CN=4BA7962563F2AD2885E80A088A50C5E789664E55
Certificate serial:       73438B781E934061F8EC3B71ADCB641E061D2684
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BA7962563F2AD2885E80A088A50C5E789664E55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdDuZqZkBJPmn2kzyLiFFQDbBEUiBbbhGHqGdJ2UtbhC/0/4BA7962563F2AD2885E80A088A50C5E789664E55.mft
Manifest number:          28
Signing time:             Mon 27 Nov 2023 22:08:12 +0000
Manifest this update:     Mon 27 Nov 2023 22:03:12 +0000
Manifest next update:     Wed 29 Nov 2023 01:32:12 +0000
Files and hashes:         1: 4BA7962563F2AD2885E80A088A50C5E789664E55.crl (hash: wSrBnl3P+nu09JVc3nobC09dUe0NR/xnqANE3MdfrIM=)
                          2: 34352e372e3231322e302f32322d3234203d3e20323636363232.roa (hash: +NNv5ijIm7IvGZnRcbB5FKgzZXdEnJUZsV+x9IUDU4Y=)
                          3: 323830343a336564303a3a2f33322d3438203d3e20323636363232.roa (hash: XLcRt6CYBhIk2BI0vNLTPqNcnGXq31q2ds6ySAhs6ac=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:43:8b:78:1e:93:40:61:f8:ec:3b:71:ad:cb:64:1e:06:1d:26:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BA7962563F2AD2885E80A088A50C5E789664E55
        Validity
            Not Before: Nov 27 22:03:12 2023 GMT
            Not After : Nov 29 01:32:12 2023 GMT
        Subject: CN=D8660F6408D53E3473B324B7C7DD5F3D7FC91B4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:83:86:00:bb:2c:3b:48:61:c5:99:a7:88:26:
                    fd:47:27:0a:3c:c2:f3:8e:1b:87:6b:98:75:b6:d8:
                    d1:40:9f:ae:74:71:64:0c:6e:26:20:2b:3c:d9:dc:
                    3e:1a:c9:f0:da:44:ab:15:92:9e:21:11:98:19:2b:
                    2e:f4:a0:68:5d:02:dc:4e:e5:49:e6:91:06:19:28:
                    aa:9c:94:d9:2d:d0:ec:c3:d5:e6:3d:01:08:b6:21:
                    0f:e3:fc:47:ee:c7:a7:9d:f2:f0:b4:bc:ee:5b:9e:
                    8b:25:18:3e:26:24:49:77:51:6c:9b:0a:e8:57:5f:
                    5e:73:c7:40:08:85:88:ca:dc:34:81:39:90:90:9c:
                    27:0a:bc:cc:60:69:23:85:08:91:5a:62:98:25:02:
                    bd:1e:a7:15:08:e2:d8:a0:d7:cf:52:7d:f4:a6:05:
                    bc:cc:3d:87:57:f4:af:f6:9b:12:b5:1a:f1:f6:9c:
                    5f:5c:d9:20:c6:ef:9e:ca:21:01:a9:4e:aa:f4:24:
                    31:6a:1e:31:3c:67:4e:2b:59:42:b3:a4:60:ca:de:
                    80:cd:de:47:5f:ed:33:45:ff:b0:83:d3:2b:8f:ef:
                    50:a5:0b:91:f7:92:0c:35:7c:d3:cd:00:0b:5b:b1:
                    78:5a:29:b5:b4:22:8a:94:dd:da:af:81:63:6e:02:
                    89:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:66:0F:64:08:D5:3E:34:73:B3:24:B7:C7:DD:5F:3D:7F:C9:1B:4E
            X509v3 Authority Key Identifier:
                keyid:4B:A7:96:25:63:F2:AD:28:85:E8:0A:08:8A:50:C5:E7:89:66:4E:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdDuZqZkBJPmn2kzyLiFFQDbBEUiBbbhGHqGdJ2UtbhC/0/4BA7962563F2AD2885E80A088A50C5E789664E55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BA7962563F2AD2885E80A088A50C5E789664E55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdDuZqZkBJPmn2kzyLiFFQDbBEUiBbbhGHqGdJ2UtbhC/0/4BA7962563F2AD2885E80A088A50C5E789664E55.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:26:d3:e9:ae:d6:16:f8:8c:af:8e:72:60:5b:7a:72:bc:d2:
         df:4b:ea:03:98:ba:2c:47:51:f6:be:13:11:60:cd:44:a8:00:
         0f:ae:16:6f:f6:dd:f1:3c:ab:8d:6e:f4:67:e5:c1:ff:4b:05:
         c3:c7:56:ad:87:50:d2:30:29:ec:ee:e7:12:4e:cf:6e:58:b9:
         da:49:40:17:6d:cb:8f:7b:1d:1e:44:72:66:62:a4:7b:1c:72:
         a6:0d:fe:63:f3:2a:09:41:06:ef:82:fe:4f:cf:48:f1:2c:2c:
         09:36:9a:b2:ca:f5:cb:72:59:18:a4:71:bd:d4:47:a1:d3:23:
         37:0a:29:1a:6c:4b:a5:51:d8:c0:4d:d4:41:ce:f3:5e:5b:1c:
         f4:30:4f:62:ff:cf:5d:f6:56:69:3b:88:b8:63:1a:9c:d2:f2:
         85:42:e5:c7:e2:3a:aa:cb:aa:3c:cb:bf:95:bb:a0:6c:ac:77:
         9c:31:87:67:4f:84:74:9e:26:10:9b:a1:32:ba:f2:5a:8d:e0:
         dd:0b:df:57:dc:77:07:a2:54:d2:ea:46:b2:17:85:d5:39:94:
         f0:76:cc:c6:cd:5f:e8:1e:c3:16:bb:a1:c5:e2:44:f6:3a:1e:
         82:bd:b8:c7:be:b5:52:8f:84:b1:cb:a3:b0:16:88:8a:41:59:
         e3:26:5e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----