Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/1/67C9B36E52F1BDDD88B130F32B29E9230A0FAD43.mft
File:                     67C9B36E52F1BDDD88B130F32B29E9230A0FAD43.mft (raw, json)
Hash identifier:          Vn76WFmggEq9CdSmvKsUkm3xboxzk8Wfd55u7f06xYs=
Subject key identifier:   FA:4C:E0:EB:8C:B5:29:C2:BB:55:1D:D1:0C:2B:AC:64:5F:C6:F5:D2
Authority key identifier: 67:C9:B3:6E:52:F1:BD:DD:88:B1:30:F3:2B:29:E9:23:0A:0F:AD:43
Certificate issuer:       /CN=67C9B36E52F1BDDD88B130F32B29E9230A0FAD43
Certificate serial:       58240619B217F797006DAAD0A68D95C83A4C45AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67C9B36E52F1BDDD88B130F32B29E9230A0FAD43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/1/67C9B36E52F1BDDD88B130F32B29E9230A0FAD43.mft
Manifest number:          0B
Signing time:             Mon 15 Apr 2024 10:48:31 +0000
Manifest this update:     Mon 15 Apr 2024 10:43:31 +0000
Manifest next update:     Tue 16 Apr 2024 14:31:31 +0000
Files and hashes:         1: 67C9B36E52F1BDDD88B130F32B29E9230A0FAD43.crl (hash: LewAip3a8wh8swMBIc0mQXVxKGEKBZJD6wLe8xptn7w=)
                          2: 34352e3232352e3235322e302f32322d3232203d3e20323636393532.roa (hash: O76XtvRP+Old+JGFqhHkVWwH6A3Gn7bs0TT3+P6hGIs=)
                          3: 34352e3232352e3235342e302f32332d3233203d3e20323636393532.roa (hash: FpPh6NU4KWhoWKo62gm5BmAeC78C5effmwMhJkfu1hg=)
                          4: 34352e3232352e3235322e302f32332d3233203d3e20323636393532.roa (hash: gMmkJYDsXpfIcj2fv2yhRNp9HVlq76noMtznIkdYUiI=)
                          5: 323830343a343564343a3a2f33322d3332203d3e20323636393532.roa (hash: AeE0p0DFzJE7j8+zrRtcxiJWgjDmuKiMM3fhcOO5fsI=)
                          6: 323830343a343564343a3a2f33332d3333203d3e20323636393532.roa (hash: oJSqA4xBlySwQe7OPvK8eHIpBURE2/0g9nAe+Dt2Tp0=)
                          7: 323830343a343564343a383030303a3a2f33332d3333203d3e20323636393532.roa (hash: SCAr5POvxidpePN9gb0bbIR91Prx23LE9bzDtAyF0jo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:24:06:19:b2:17:f7:97:00:6d:aa:d0:a6:8d:95:c8:3a:4c:45:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67C9B36E52F1BDDD88B130F32B29E9230A0FAD43
        Validity
            Not Before: Apr 15 10:43:31 2024 GMT
            Not After : Apr 16 14:31:31 2024 GMT
        Subject: CN=FA4CE0EB8CB529C2BB551DD10C2BAC645FC6F5D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e7:f4:48:cf:34:cf:c0:c6:66:5b:2c:36:03:
                    85:d3:45:97:49:e7:36:d8:a3:0c:16:e7:d2:71:af:
                    9e:48:2d:a6:e8:0c:33:6e:12:b2:30:3f:f4:bc:a9:
                    2c:a0:ac:65:d5:75:d2:21:06:e2:f8:66:1c:d7:73:
                    0a:51:26:98:5e:2c:f2:ef:22:0a:26:5f:e1:b4:57:
                    79:57:61:91:e2:16:a7:ec:bc:59:42:e8:e3:c0:ee:
                    3f:a1:d6:75:28:e3:da:a1:79:2f:ad:2c:42:cd:2a:
                    65:e5:ab:d1:c5:28:dd:34:35:bf:16:38:2c:9a:5e:
                    17:e2:51:d9:85:e4:e0:f6:e6:c1:65:0c:51:92:50:
                    6e:78:3d:d8:1d:44:4c:33:3a:a7:4f:7c:08:f7:3c:
                    8b:bf:4f:5e:03:7c:01:77:ec:a4:ce:99:dc:cd:1b:
                    b0:a4:83:71:e4:82:d2:1d:35:16:3f:1b:54:30:52:
                    13:7f:61:1d:1b:c3:df:f5:f4:47:84:1f:04:59:11:
                    25:6a:e0:f9:bc:ee:b4:bf:83:df:89:54:31:06:af:
                    d8:27:d9:a8:b8:06:d6:72:19:f1:c7:53:ad:2d:10:
                    d7:49:66:d1:e8:bf:d6:b9:8c:c1:d2:2a:d5:16:d8:
                    08:9b:75:53:9d:e9:01:be:ae:0c:7a:b6:26:96:2f:
                    f2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:4C:E0:EB:8C:B5:29:C2:BB:55:1D:D1:0C:2B:AC:64:5F:C6:F5:D2
            X509v3 Authority Key Identifier:
                keyid:67:C9:B3:6E:52:F1:BD:DD:88:B1:30:F3:2B:29:E9:23:0A:0F:AD:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/1/67C9B36E52F1BDDD88B130F32B29E9230A0FAD43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67C9B36E52F1BDDD88B130F32B29E9230A0FAD43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/1/67C9B36E52F1BDDD88B130F32B29E9230A0FAD43.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:a1:70:76:fd:a6:e1:ec:f0:d9:a7:3d:12:d4:da:78:85:4c:
         73:57:6c:4a:92:70:23:fb:f7:29:92:f0:3b:9c:7c:6b:3d:2d:
         5c:eb:57:ee:65:5f:80:28:f0:d1:ec:38:4e:5a:cd:ba:34:88:
         26:a5:ec:b3:83:c3:2d:a5:13:2c:db:c3:9c:f4:29:1f:3e:94:
         08:e4:10:00:f6:85:5b:1b:8b:7b:a7:41:e3:d0:06:f5:b3:bd:
         05:55:50:c8:64:1a:2f:8f:29:49:a4:1a:42:3a:cd:b3:75:09:
         92:20:d8:0d:95:ca:2c:79:55:ca:7f:dd:cf:fc:1b:b0:af:11:
         3a:06:bc:25:a2:e4:d1:64:ae:5f:0a:a5:55:52:45:ca:19:95:
         af:b7:54:14:15:d0:d2:67:bd:d9:12:9d:7e:aa:89:02:2f:1e:
         37:00:85:6d:2f:b3:f3:c7:35:6d:46:0a:d9:c8:39:b7:7d:ca:
         ee:d3:41:63:ff:7a:f8:3f:f2:c6:71:c9:7b:65:67:e0:95:2d:
         9b:c3:09:75:f9:0f:5f:16:45:27:d9:22:43:49:ff:87:cb:8e:
         cc:73:70:52:c8:37:f3:3e:0b:93:c5:39:7a:f7:1b:62:b8:91:
         d3:9c:4c:92:2e:36:4d:22:37:e9:d7:f5:5e:7c:23:9e:c9:8a:
         bf:6f:48:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----