Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/E8JZbs1V7f3pQmhZnjs3nfZqZp3ZeHtYtQiDToyF16qR/0/D4C8F646F1ADB9F0D84282A75C65B603DDDE8365.mft
File:                     D4C8F646F1ADB9F0D84282A75C65B603DDDE8365.mft (raw, json)
Hash identifier:          akB/nxR6b6WIXu7UkOYyBa7rGEqHJ8zTVEmokDM2YyI=
Subject key identifier:   CD:AB:68:AD:6D:9A:25:9C:1D:EC:19:2A:F0:26:B2:3C:6A:27:96:B8
Authority key identifier: D4:C8:F6:46:F1:AD:B9:F0:D8:42:82:A7:5C:65:B6:03:DD:DE:83:65
Certificate issuer:       /CN=D4C8F646F1ADB9F0D84282A75C65B603DDDE8365
Certificate serial:       1284793CC56E9C6D8F1B06AC6CD8CBB6F0F736F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4C8F646F1ADB9F0D84282A75C65B603DDDE8365.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E8JZbs1V7f3pQmhZnjs3nfZqZp3ZeHtYtQiDToyF16qR/0/D4C8F646F1ADB9F0D84282A75C65B603DDDE8365.mft
Manifest number:          015D
Signing time:             Mon 15 Apr 2024 02:51:23 +0000
Manifest this update:     Mon 15 Apr 2024 02:46:23 +0000
Manifest next update:     Tue 16 Apr 2024 04:21:23 +0000
Files and hashes:         1: D4C8F646F1ADB9F0D84282A75C65B603DDDE8365.crl (hash: m6lXq/N9/OjyCAxj1IHrbk9h+Ds5xmzrn/VBWjmsYPI=)
                          2: 323830343a326633383a3a2f33322d3438203d3e20323634383738.roa (hash: FYi1rbeYw3cSvBNdP8MKvIuAy1mNYdsfq3dh4r44HbY=)
                          3: 3136382e3232372e3132302e302f32322d3234203d3e20323634383738.roa (hash: /ES1nlpEiGFm1KUV7rGnWlKMt18tPx5dBlIN6oa/7MY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:84:79:3c:c5:6e:9c:6d:8f:1b:06:ac:6c:d8:cb:b6:f0:f7:36:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4C8F646F1ADB9F0D84282A75C65B603DDDE8365
        Validity
            Not Before: Apr 15 02:46:23 2024 GMT
            Not After : Apr 16 04:21:23 2024 GMT
        Subject: CN=CDAB68AD6D9A259C1DEC192AF026B23C6A2796B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:23:01:fb:f7:7a:af:c1:f1:9c:e1:3e:ee:19:
                    e2:b6:63:fa:56:e3:9e:26:c1:2b:47:7e:7e:2b:85:
                    2c:84:a5:54:19:34:9e:7e:1f:8f:c7:8d:de:f4:11:
                    b4:c9:da:f1:4c:82:9c:8a:74:c2:07:c5:47:6b:ec:
                    a3:c2:17:50:6f:9c:3e:66:37:3f:18:3b:e9:9a:f8:
                    63:cc:d8:c9:6f:ec:d0:e6:3d:23:72:cf:98:93:39:
                    72:a2:32:a3:b0:67:f6:0b:dc:2a:49:fb:96:bc:4f:
                    ce:d5:63:98:be:6d:d1:ac:97:d0:86:84:83:65:a9:
                    66:de:1e:48:4d:9c:43:1c:aa:59:19:7f:5e:5b:6c:
                    64:2a:45:eb:26:1f:8e:2b:5a:33:11:7d:46:f9:bb:
                    23:22:86:d9:59:3b:a9:a7:e3:1b:f5:13:b4:94:98:
                    e3:15:aa:d7:3b:81:b5:05:a4:c5:40:98:5a:18:ba:
                    65:2c:43:27:1f:33:60:8f:cc:ae:6d:01:6a:f5:a0:
                    cd:ec:a7:7d:fa:2f:88:60:37:aa:20:d9:56:63:be:
                    15:16:6d:26:36:d1:be:77:8c:d6:38:eb:3c:2c:43:
                    0f:82:11:c3:50:91:0f:c2:9c:47:c7:6f:ef:b6:67:
                    bd:4b:f7:bf:fa:0f:7a:75:60:5b:41:8e:c0:30:dd:
                    26:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:AB:68:AD:6D:9A:25:9C:1D:EC:19:2A:F0:26:B2:3C:6A:27:96:B8
            X509v3 Authority Key Identifier:
                keyid:D4:C8:F6:46:F1:AD:B9:F0:D8:42:82:A7:5C:65:B6:03:DD:DE:83:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E8JZbs1V7f3pQmhZnjs3nfZqZp3ZeHtYtQiDToyF16qR/0/D4C8F646F1ADB9F0D84282A75C65B603DDDE8365.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4C8F646F1ADB9F0D84282A75C65B603DDDE8365.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E8JZbs1V7f3pQmhZnjs3nfZqZp3ZeHtYtQiDToyF16qR/0/D4C8F646F1ADB9F0D84282A75C65B603DDDE8365.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:c2:e5:f2:93:e7:e9:95:13:33:06:8e:59:98:9b:cd:ec:be:
         cb:5e:95:0a:b9:c7:d8:46:25:fd:95:85:62:51:98:fe:02:29:
         04:3b:73:9d:1e:92:4d:84:d9:4d:49:35:29:ad:6d:85:a1:96:
         06:d8:a7:77:b0:db:29:6c:77:86:95:47:c1:5d:99:3a:fe:23:
         a3:b7:08:57:ec:c3:4d:49:38:8f:e9:31:ef:d9:ff:b5:0d:a9:
         07:9b:b1:39:f0:67:4c:4c:f4:3d:43:88:19:bc:d1:de:6e:8b:
         5f:58:ef:66:9d:41:80:6e:5b:a7:ec:a1:6b:c3:c1:d6:69:27:
         fe:99:27:10:a9:66:dc:c6:55:dd:79:9e:25:38:66:4f:5e:d8:
         10:84:52:1a:f1:d3:ed:f7:b1:58:a0:74:66:3c:f3:a3:46:b5:
         75:49:5a:a9:e3:72:5b:b8:5f:38:51:b8:bb:91:95:78:10:cb:
         0e:e0:c7:6f:c9:6d:18:03:cc:62:fa:ad:49:6c:31:cc:70:81:
         7f:cf:df:ee:9d:82:7f:ae:ce:70:c8:dd:65:3d:eb:06:2d:94:
         03:71:5b:25:0f:06:64:3d:66:22:8b:83:d1:2d:eb:09:f0:71:
         70:1e:aa:57:7e:1b:66:9b:ae:95:4a:a4:44:29:15:93:7c:d5:
         9e:fe:ff:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----