Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/099D454CA67998593B525B84314AEF2E1AFCFD58.mft
File:                     099D454CA67998593B525B84314AEF2E1AFCFD58.mft (raw, json)
Hash identifier:          zaQOz9TnfSurJ/bsEHi4T2ODhe1YTpHqO4oviSSM/Dg=
Subject key identifier:   11:5D:CE:A0:64:91:16:48:5D:10:AC:30:37:C7:2F:63:A9:E4:A8:0B
Authority key identifier: 09:9D:45:4C:A6:79:98:59:3B:52:5B:84:31:4A:EF:2E:1A:FC:FD:58
Certificate issuer:       /CN=099D454CA67998593B525B84314AEF2E1AFCFD58
Certificate serial:       1FC6206D4C02E3FD5CF11D3C9F7E9E91CA9669F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/099D454CA67998593B525B84314AEF2E1AFCFD58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/099D454CA67998593B525B84314AEF2E1AFCFD58.mft
Manifest number:          7B
Signing time:             Mon 15 Apr 2024 11:28:39 +0000
Manifest this update:     Mon 15 Apr 2024 11:23:39 +0000
Manifest next update:     Tue 16 Apr 2024 13:12:39 +0000
Files and hashes:         1: 099D454CA67998593B525B84314AEF2E1AFCFD58.crl (hash: HXIMF2qas6SGj83u4fbHSeAL0reSNd+bHQkuv5VM6Ik=)
                          2: 323830343a386539383a3a2f33322d3438203d3e20323733343336.roa (hash: Ms6id2HDuDmxNQubdC5LRW+h11cLmjw1/2dnjzgr/sE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:c6:20:6d:4c:02:e3:fd:5c:f1:1d:3c:9f:7e:9e:91:ca:96:69:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=099D454CA67998593B525B84314AEF2E1AFCFD58
        Validity
            Not Before: Apr 15 11:23:39 2024 GMT
            Not After : Apr 16 13:12:39 2024 GMT
        Subject: CN=115DCEA0649116485D10AC3037C72F63A9E4A80B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6d:b6:02:51:90:af:c4:17:fd:3e:98:fe:5a:
                    17:a8:76:a1:7f:28:7d:c1:4a:39:11:8a:18:c2:f8:
                    c0:8c:1c:2a:b5:69:f5:76:36:01:72:7d:50:b8:e0:
                    d0:f3:ad:a2:c4:94:a1:02:17:09:14:12:86:bc:4a:
                    db:06:8a:bb:8b:44:30:f8:f9:45:94:99:ab:49:7c:
                    3a:35:e8:27:68:15:51:fc:18:c6:37:a8:d4:74:74:
                    0c:0a:2a:b1:2f:46:cf:1e:d8:2b:dc:8f:94:fc:b7:
                    d4:db:01:0c:d3:f5:cd:3b:2d:35:92:ec:03:7f:81:
                    d0:f5:b6:a4:58:1e:ec:70:72:63:af:74:ed:44:62:
                    30:60:e8:ed:a7:ff:ac:b2:17:5d:a3:88:cf:32:49:
                    ff:e3:fe:f5:d2:47:cb:93:1f:b8:37:30:65:22:d6:
                    c8:a2:fc:e7:64:d5:c1:0f:e3:32:01:f8:ed:9b:6d:
                    bf:31:d2:a4:68:c9:e3:ca:2e:32:70:2a:12:44:e6:
                    89:4a:68:52:9f:a6:5b:61:b7:37:a6:05:96:e6:26:
                    41:9b:04:91:c4:63:b1:92:65:0f:6e:d1:d2:ff:79:
                    be:f0:0c:96:01:4e:92:dd:e6:87:88:2f:2b:f8:0a:
                    69:f1:e2:3c:c7:f9:5e:ea:2d:1d:29:48:37:e5:13:
                    42:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:5D:CE:A0:64:91:16:48:5D:10:AC:30:37:C7:2F:63:A9:E4:A8:0B
            X509v3 Authority Key Identifier:
                keyid:09:9D:45:4C:A6:79:98:59:3B:52:5B:84:31:4A:EF:2E:1A:FC:FD:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/099D454CA67998593B525B84314AEF2E1AFCFD58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/099D454CA67998593B525B84314AEF2E1AFCFD58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/099D454CA67998593B525B84314AEF2E1AFCFD58.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:b9:aa:a4:9f:13:90:8d:9c:ff:67:95:2a:ec:49:1c:e1:c7:
         e3:3b:1d:cd:df:58:5b:06:8a:bf:6f:9e:ae:39:8c:6d:ed:6c:
         08:ef:fe:88:5c:0f:b2:85:2a:ad:61:f7:e8:5b:9c:f6:01:7c:
         c1:5c:32:da:1a:17:eb:cd:fd:1d:13:09:f0:1c:6f:51:28:f5:
         b1:dd:e8:6e:70:a2:86:f8:9b:29:6c:de:29:00:b0:04:d1:b3:
         65:08:12:26:0a:2b:99:d3:fa:8e:bd:e8:90:7f:88:d7:1a:88:
         4e:d5:a9:b5:0a:ef:62:3e:02:ea:44:a7:cd:5a:2c:94:8a:c8:
         7f:d0:ba:44:e3:eb:6d:c7:8c:fa:17:ef:d0:a2:e8:ff:bf:1e:
         22:f3:f6:53:74:6b:a9:eb:5a:b6:11:4d:01:90:76:6f:c9:ad:
         0e:5f:fe:e1:43:24:e5:1a:84:ac:74:6a:46:07:0d:fc:e6:6e:
         6e:38:ca:75:07:d2:16:75:62:c1:b6:8f:6e:5f:27:70:a2:a7:
         32:53:80:c7:88:08:3c:ad:dc:8a:a6:2b:ef:c5:ad:db:eb:2f:
         ac:40:81:4c:31:f6:66:6b:29:e8:cc:1c:18:31:02:b4:92:e3:
         28:aa:29:8f:fd:86:40:5e:c5:4d:f2:0a:0c:26:d9:f6:31:06:
         85:dc:a8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----