Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/0/4B24C412F27C6B22447FF7BEB656C9DAD7D27678.mft
File:                     4B24C412F27C6B22447FF7BEB656C9DAD7D27678.mft (raw, json)
Hash identifier:          CCtRwCIjCPDTjjpHOCZh3+1ITs2LTetpaEcfi+aTqGA=
Subject key identifier:   61:E9:40:2C:38:96:69:DC:FC:CB:22:3A:D1:DD:81:53:BB:B7:2A:6F
Authority key identifier: 4B:24:C4:12:F2:7C:6B:22:44:7F:F7:BE:B6:56:C9:DA:D7:D2:76:78
Certificate issuer:       /CN=4B24C412F27C6B22447FF7BEB656C9DAD7D27678
Certificate serial:       431DDA3B19323082FC25ADB32BFFFED2B0F11A7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B24C412F27C6B22447FF7BEB656C9DAD7D27678.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/0/4B24C412F27C6B22447FF7BEB656C9DAD7D27678.mft
Manifest number:          01D8
Signing time:             Mon 15 Apr 2024 06:37:47 +0000
Manifest this update:     Mon 15 Apr 2024 06:32:47 +0000
Manifest next update:     Tue 16 Apr 2024 09:41:47 +0000
Files and hashes:         1: 3137302e37392e3134382e302f32322d3332203d3e20323636323939.roa (hash: feZymr2SZnUiV/NeShPjG8w3tgDZgR4ibGKWVjoRwHk=)
                          2: 323830343a333561383a3a2f33322d313238203d3e20323636323939.roa (hash: Qxc78DQxDfYziQs7C29wmUHownResSPX6pFLYPGHSNM=)
                          3: 4B24C412F27C6B22447FF7BEB656C9DAD7D27678.crl (hash: w2otLMdzTQB6awFbR9+TW98+iC+AjciyfCvfBw3pn2A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:1d:da:3b:19:32:30:82:fc:25:ad:b3:2b:ff:fe:d2:b0:f1:1a:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B24C412F27C6B22447FF7BEB656C9DAD7D27678
        Validity
            Not Before: Apr 15 06:32:47 2024 GMT
            Not After : Apr 16 09:41:47 2024 GMT
        Subject: CN=61E9402C389669DCFCCB223AD1DD8153BBB72A6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:47:28:ff:dc:43:81:67:1a:21:c4:27:7a:ee:
                    b8:f7:9e:6e:d4:88:67:84:1d:a8:93:8a:21:4e:28:
                    50:bf:e6:02:96:bd:60:f3:7a:71:2b:08:46:af:b9:
                    92:fa:79:30:0c:b2:f9:43:21:61:ca:a1:4f:b8:1f:
                    25:f3:2e:88:30:d1:69:c4:2b:cf:62:4c:83:ce:d2:
                    2d:5b:9e:b1:f5:57:af:f9:22:de:f3:1b:3f:50:af:
                    78:71:ea:7f:fb:91:b1:61:58:6a:8e:d8:c0:c8:89:
                    06:22:bb:c6:8a:12:e9:fa:a8:45:3d:de:78:57:b8:
                    7d:ec:41:7a:d8:f4:3b:15:3f:f9:dc:78:03:7d:e6:
                    4f:f6:48:8b:21:89:17:42:a7:44:46:7e:c9:9d:98:
                    61:69:e5:4a:b7:8f:10:0d:82:56:4c:9d:bc:f4:5b:
                    33:5d:54:6d:85:9d:38:57:eb:fd:1f:0d:2b:38:03:
                    d8:7d:ae:f3:a5:43:c6:b6:a4:9d:b7:b9:c2:2f:d4:
                    20:af:a8:f1:d4:01:b7:96:f0:76:24:2b:3a:ba:92:
                    6d:e2:f4:98:3b:98:82:c4:de:74:1c:31:e5:68:88:
                    31:ed:d3:a8:d4:31:fa:bc:3b:29:15:8b:a5:b3:a2:
                    b8:f8:0d:78:2b:5b:d6:6f:40:51:c9:46:a9:b5:16:
                    64:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E9:40:2C:38:96:69:DC:FC:CB:22:3A:D1:DD:81:53:BB:B7:2A:6F
            X509v3 Authority Key Identifier:
                keyid:4B:24:C4:12:F2:7C:6B:22:44:7F:F7:BE:B6:56:C9:DA:D7:D2:76:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/0/4B24C412F27C6B22447FF7BEB656C9DAD7D27678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B24C412F27C6B22447FF7BEB656C9DAD7D27678.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/0/4B24C412F27C6B22447FF7BEB656C9DAD7D27678.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:9f:01:de:5e:8d:2f:67:b3:17:e1:f0:88:fe:fd:a7:1f:90:
         4b:cb:8d:ab:44:87:7a:58:67:93:fd:8b:83:81:7b:13:f4:56:
         88:7c:3d:28:39:f7:07:a2:ee:fd:a2:59:2a:90:d8:e9:ed:20:
         68:af:f2:48:2a:cb:3c:54:a9:bb:a3:b8:7b:69:a3:fe:68:b1:
         96:3b:8c:e4:22:a7:20:a6:34:3f:a0:e1:2a:cd:fb:d7:48:c7:
         de:1f:0a:96:26:93:e9:c6:aa:ee:fe:46:fb:9c:fc:11:c6:6b:
         e2:28:da:19:c5:7d:ed:7f:1f:c7:19:12:d1:f7:aa:d5:29:db:
         ac:0b:45:46:85:4f:ca:35:bb:d5:03:81:ee:e5:45:28:b8:57:
         b4:07:a9:bf:e2:24:14:03:62:0f:62:e3:77:42:df:81:11:8e:
         ba:f0:5b:a3:b5:55:75:f7:e3:36:f0:0c:e5:9e:c3:78:8e:ab:
         8c:2d:bb:46:a1:62:ea:30:ad:53:57:a2:88:0c:d0:17:f1:ad:
         3c:bc:61:7f:bb:26:82:38:cc:14:37:70:ec:0d:93:23:47:2f:
         92:d8:a7:52:fd:d0:2e:02:2a:21:d1:75:21:f8:42:18:83:ee:
         fb:78:02:4f:7f:6e:5d:77:3d:1c:47:6b:14:6b:93:98:51:ae:
         8d:30:93:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----