Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DncsGsK9hBUCuD1ezCfpw5hGTgShaJYBfSDNRk7LFUZc/0/49B7446F60C4089A75A346EAD9D246F02C994ED2.mft
File:                     49B7446F60C4089A75A346EAD9D246F02C994ED2.mft (raw, json)
Hash identifier:          KE+hISn+7u7EcN1zcaABPRz0jy86GWje4D0BnJQibqw=
Subject key identifier:   9B:C0:11:53:01:D0:0A:41:7F:5B:66:5F:7D:CE:3E:36:00:53:EE:D2
Authority key identifier: 49:B7:44:6F:60:C4:08:9A:75:A3:46:EA:D9:D2:46:F0:2C:99:4E:D2
Certificate issuer:       /CN=49B7446F60C4089A75A346EAD9D246F02C994ED2
Certificate serial:       02501AC63D53968456F6BC797A2EEAC1563D6691
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49B7446F60C4089A75A346EAD9D246F02C994ED2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DncsGsK9hBUCuD1ezCfpw5hGTgShaJYBfSDNRk7LFUZc/0/49B7446F60C4089A75A346EAD9D246F02C994ED2.mft
Manifest number:          5F
Signing time:             Sun 11 Feb 2024 14:54:31 +0000
Manifest this update:     Sun 11 Feb 2024 14:49:31 +0000
Manifest next update:     Mon 12 Feb 2024 15:03:31 +0000
Files and hashes:         1: 323830343a386333383a3a2f33322d3438203d3e20323733373838.roa (hash: RdrYx8RMzyvxQwsXijRhKPanpPZPd9p3rRIbc/n6vuc=)
                          2: 49B7446F60C4089A75A346EAD9D246F02C994ED2.crl (hash: cHmxNYhMkBraOgasKFd0VuTqFjSqWdDNJmhZmq3z4Ao=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:50:1a:c6:3d:53:96:84:56:f6:bc:79:7a:2e:ea:c1:56:3d:66:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49B7446F60C4089A75A346EAD9D246F02C994ED2
        Validity
            Not Before: Feb 11 14:49:31 2024 GMT
            Not After : Feb 12 15:03:31 2024 GMT
        Subject: CN=9BC0115301D00A417F5B665F7DCE3E360053EED2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:94:41:f1:92:8d:9e:bd:e3:98:ae:8c:cf:35:
                    4d:ba:b4:94:32:1c:46:a0:9b:d5:19:ef:92:03:6a:
                    76:b7:bf:e5:34:43:92:58:48:9a:d8:a5:5a:55:51:
                    1c:ff:9e:3e:11:1b:25:a2:34:dd:76:19:95:0e:ee:
                    16:f0:b4:23:b2:f6:64:94:87:e0:8b:3f:60:83:0d:
                    65:3e:52:e0:0b:7e:67:dd:97:47:0f:f9:1b:78:d3:
                    de:b0:ad:48:c5:6a:af:16:73:50:71:4b:a6:62:53:
                    31:09:7d:dc:34:c9:5a:f2:57:6f:a3:b9:d2:90:90:
                    ff:43:a8:13:ba:6f:b8:7d:f6:ba:8e:d2:7b:ce:b3:
                    3e:4d:5f:86:c4:0c:95:be:e9:79:24:f8:25:98:55:
                    b3:9a:7a:ce:50:9e:5f:e5:f5:67:86:b4:76:71:8c:
                    84:7a:85:af:3f:a0:18:99:bf:3f:70:b3:4a:07:9f:
                    19:75:3d:78:93:98:a9:42:8d:85:dc:af:6d:07:09:
                    15:fd:32:08:f4:c7:b5:35:10:76:13:bc:73:8f:2d:
                    fb:f1:88:19:3c:72:26:38:64:87:63:f2:31:fb:45:
                    0a:f1:b5:53:bf:36:4f:d6:8c:bb:84:f6:8c:64:82:
                    45:d2:5e:ef:5d:8c:d2:9f:59:cf:be:2b:ac:5a:05:
                    e2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C0:11:53:01:D0:0A:41:7F:5B:66:5F:7D:CE:3E:36:00:53:EE:D2
            X509v3 Authority Key Identifier:
                keyid:49:B7:44:6F:60:C4:08:9A:75:A3:46:EA:D9:D2:46:F0:2C:99:4E:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DncsGsK9hBUCuD1ezCfpw5hGTgShaJYBfSDNRk7LFUZc/0/49B7446F60C4089A75A346EAD9D246F02C994ED2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49B7446F60C4089A75A346EAD9D246F02C994ED2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DncsGsK9hBUCuD1ezCfpw5hGTgShaJYBfSDNRk7LFUZc/0/49B7446F60C4089A75A346EAD9D246F02C994ED2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:27:b4:79:84:2e:47:4e:be:01:0c:28:de:81:cd:6f:b0:fb:
         0c:ae:90:b2:ed:d9:ee:fb:85:dc:f6:a0:66:ea:b7:02:26:27:
         e4:ca:85:b5:65:33:4c:81:5b:21:6b:b6:ef:9a:f9:6c:3c:f6:
         09:42:00:9a:9a:e9:02:b4:ad:a0:e3:8c:6c:8e:e6:85:17:0b:
         c9:ee:7b:56:fd:45:85:45:1a:84:84:e9:e7:bc:d1:98:aa:38:
         c3:63:75:29:a6:76:35:b4:00:52:62:b8:1b:73:2a:29:5f:69:
         43:e9:4a:c9:57:63:fc:b5:9e:5d:cd:c2:21:b9:4d:e1:47:c7:
         d2:d7:6f:5a:33:d9:dc:5e:d1:c5:aa:dd:3a:c6:37:bc:cd:1c:
         cd:17:22:d4:a5:8b:05:75:6f:4f:41:0c:85:58:c7:dd:3a:4e:
         a0:4f:cc:cc:cd:ea:ad:5c:13:e4:8f:2f:dd:90:1a:77:92:a9:
         b6:db:59:8d:6d:2c:7c:e5:b0:e0:cb:eb:3d:2f:ad:80:97:bd:
         b5:67:96:70:22:6f:6f:49:0a:a7:23:9c:f4:ec:b2:20:8e:4a:
         21:d5:0d:87:9e:80:67:98:1f:70:00:d0:99:6b:ba:ae:7a:2e:
         e3:5a:c3:ef:21:89:f7:b4:dd:a3:9d:b1:32:31:62:b3:2d:9b:
         92:1a:64:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----