Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FHNsGYhEF1unP8E4NgohPEcfmwcuCkM8bJBV6sfc4Rnt/0/92191D0CD8E107AB4BCE5C6FE7A7FCC23D323472.mft
File:                     92191D0CD8E107AB4BCE5C6FE7A7FCC23D323472.mft (raw, json)
Hash identifier:          QGURkt1yqrt/nF0Q1VtgNkag3bntAUSrQrq6L3uFH9U=
Subject key identifier:   D9:D3:48:64:F8:C9:7D:0A:FD:46:8A:12:55:FC:CD:E2:C6:2B:44:1B
Authority key identifier: 92:19:1D:0C:D8:E1:07:AB:4B:CE:5C:6F:E7:A7:FC:C2:3D:32:34:72
Certificate issuer:       /CN=92191D0CD8E107AB4BCE5C6FE7A7FCC23D323472
Certificate serial:       6DA28BDEEE43324B35476B453CD852E3321ACB03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/92191D0CD8E107AB4BCE5C6FE7A7FCC23D323472.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHNsGYhEF1unP8E4NgohPEcfmwcuCkM8bJBV6sfc4Rnt/0/92191D0CD8E107AB4BCE5C6FE7A7FCC23D323472.mft
Manifest number:          0325
Signing time:             Mon 15 Apr 2024 02:23:54 +0000
Manifest this update:     Mon 15 Apr 2024 02:18:54 +0000
Manifest next update:     Tue 16 Apr 2024 02:33:54 +0000
Files and hashes:         1: 92191D0CD8E107AB4BCE5C6FE7A7FCC23D323472.crl (hash: Qf5ky7g3HrZ03vPKEA6h7WLSc7w6P8xpPWI3kogqPII=)
                          2: 3137302e3233312e3130382e302f32322d3234203d3e20323635303533.roa (hash: FgUMMLbWZ7D63tHfGYQHUhySizSJXRBhf1p+FUFzVVc=)
                          3: 323830343a333230633a3a2f33322d3438203d3e20323635303533.roa (hash: +ytRdGJk4FWA2C5nT2ZB4u3q79BSXSSp60L68Qk6Lrk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:a2:8b:de:ee:43:32:4b:35:47:6b:45:3c:d8:52:e3:32:1a:cb:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92191D0CD8E107AB4BCE5C6FE7A7FCC23D323472
        Validity
            Not Before: Apr 15 02:18:54 2024 GMT
            Not After : Apr 16 02:33:54 2024 GMT
        Subject: CN=D9D34864F8C97D0AFD468A1255FCCDE2C62B441B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7a:ad:37:1c:b9:d3:f4:b0:c8:70:f3:6a:63:
                    bb:ae:39:60:84:e7:e3:68:92:7a:c2:15:37:71:75:
                    ed:aa:35:96:a1:e6:3a:05:48:32:f8:ed:03:c2:df:
                    52:27:96:80:c2:13:f1:04:80:25:ad:30:82:d1:14:
                    77:43:37:c9:e6:72:79:a6:de:1e:e6:53:10:4b:e6:
                    07:79:84:1f:a1:cc:94:f8:ca:66:18:09:38:f8:be:
                    c0:01:73:1e:f8:df:23:f2:7a:d0:cc:a1:e1:de:58:
                    48:b9:76:d6:06:48:3f:11:35:e9:02:a4:97:46:76:
                    01:5a:07:f6:aa:e9:2a:0b:04:f9:30:c3:7e:5e:fe:
                    32:cb:f1:2d:df:26:bc:df:db:05:53:8a:3a:5b:b2:
                    00:47:43:84:ca:a6:89:8f:c3:15:cb:3e:82:3f:78:
                    ef:d4:89:a9:9e:f9:0f:72:11:41:65:d4:35:f2:cb:
                    4d:c2:72:a0:69:f3:59:d1:ae:d5:37:d5:03:36:eb:
                    7a:20:02:de:86:02:39:da:a6:f4:2f:da:3c:76:63:
                    ab:5c:cd:42:aa:8c:ac:72:8e:0d:f6:bb:6c:70:87:
                    60:bf:9d:57:de:b6:ca:f3:48:12:03:df:63:08:54:
                    1d:f8:b3:cb:63:10:18:59:e4:62:08:d1:e2:c6:a8:
                    49:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D3:48:64:F8:C9:7D:0A:FD:46:8A:12:55:FC:CD:E2:C6:2B:44:1B
            X509v3 Authority Key Identifier:
                keyid:92:19:1D:0C:D8:E1:07:AB:4B:CE:5C:6F:E7:A7:FC:C2:3D:32:34:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHNsGYhEF1unP8E4NgohPEcfmwcuCkM8bJBV6sfc4Rnt/0/92191D0CD8E107AB4BCE5C6FE7A7FCC23D323472.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/92191D0CD8E107AB4BCE5C6FE7A7FCC23D323472.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHNsGYhEF1unP8E4NgohPEcfmwcuCkM8bJBV6sfc4Rnt/0/92191D0CD8E107AB4BCE5C6FE7A7FCC23D323472.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:b1:59:8e:ef:29:e9:a6:47:01:af:03:81:35:b0:11:ec:55:
         5d:64:ee:a9:29:c9:b2:3e:b4:5f:1f:e3:c5:47:58:36:84:89:
         59:c8:f3:ff:b1:c7:d0:c4:93:ed:79:02:45:ec:c1:ea:bf:03:
         2e:48:75:44:66:a6:0c:8e:8c:cd:2b:3c:b0:69:e6:13:78:08:
         51:6e:28:63:f9:ff:45:95:8d:68:25:c5:e6:42:a9:9e:d7:f5:
         06:57:e0:f6:27:e9:df:35:fd:fb:8f:9c:95:23:5b:b6:f2:3d:
         37:c9:12:c5:90:9c:cc:04:06:77:64:42:8a:11:33:69:e9:14:
         87:dc:b8:20:cd:9e:65:89:73:d5:4f:89:ca:e3:d2:fb:ad:8a:
         f7:dc:b0:c4:60:7b:94:fb:9f:20:59:d2:16:84:0c:79:af:c8:
         46:8b:f6:72:61:4b:0d:e8:a4:8d:8b:d3:d9:54:83:66:f0:a9:
         97:5c:7f:db:96:85:c2:02:68:61:73:d2:e6:63:35:cb:eb:5d:
         d6:6d:e2:bd:55:34:fe:d5:9a:41:ce:5f:83:0e:c7:77:a6:d7:
         05:9b:cb:b1:50:ae:54:34:e8:e4:99:9e:23:fc:e1:a5:c5:56:
         3a:12:45:11:b5:43:71:b2:f8:89:32:76:99:5b:c4:16:d8:4d:
         80:5a:1d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----