Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/20635662A8A5867029EC359E96E65DF88B91AA83.mft
File:                     20635662A8A5867029EC359E96E65DF88B91AA83.mft (raw, json)
Hash identifier:          rEm44AhTQHpnhYc5ykhvaBDnDf0Zz1IlB5xaT7D/W1g=
Subject key identifier:   47:68:48:B9:52:5E:AC:A7:5B:51:32:E1:7E:8C:4F:9C:60:D1:65:B4
Authority key identifier: 20:63:56:62:A8:A5:86:70:29:EC:35:9E:96:E6:5D:F8:8B:91:AA:83
Certificate issuer:       /CN=20635662A8A5867029EC359E96E65DF88B91AA83
Certificate serial:       0688435070EB21C52C11E0F5E54F7AC43AA24903
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20635662A8A5867029EC359E96E65DF88B91AA83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/20635662A8A5867029EC359E96E65DF88B91AA83.mft
Manifest number:          4B
Signing time:             Tue 17 Sep 2024 15:12:50 +0000
Manifest this update:     Tue 17 Sep 2024 15:07:50 +0000
Manifest next update:     Wed 18 Sep 2024 18:22:50 +0000
Files and hashes:         1: 34352e3136362e3134382e302f32322d3234203d3e20323637393633.roa (hash: ZEzZD9gmeacvCu8GG6hH88L2Q2vbkiF3KSkHrvdXmfs=)
                          2: 20635662A8A5867029EC359E96E65DF88B91AA83.crl (hash: xiKHILSkyYcNYi2wxk9alCWX9iz6ZRtzlGGjKMI0egU=)
                          3: 323830343a353565343a3a2f33322d3438203d3e20323637393633.roa (hash: 0JwdklC+mkCvqJJs9QRynQ05lGGCL1bt7sUuEG+al6s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:88:43:50:70:eb:21:c5:2c:11:e0:f5:e5:4f:7a:c4:3a:a2:49:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20635662A8A5867029EC359E96E65DF88B91AA83
        Validity
            Not Before: Sep 17 15:07:50 2024 GMT
            Not After : Sep 18 18:22:50 2024 GMT
        Subject: CN=476848B9525EACA75B5132E17E8C4F9C60D165B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:04:4c:45:69:f4:45:8d:e3:46:3b:d0:cb:0a:
                    e8:d7:92:84:15:fb:11:f3:fa:28:5f:6e:8e:ac:be:
                    e9:15:57:2e:57:7d:d9:52:4b:25:52:a0:2c:22:ef:
                    0f:82:64:74:c0:10:c3:de:ac:7d:bd:85:4e:d8:c4:
                    de:c4:84:1d:d7:19:a4:a8:75:ee:89:d0:67:bf:09:
                    6a:70:11:58:27:af:2b:44:8c:61:58:b6:c1:e0:8a:
                    45:d7:86:6b:05:24:57:b3:81:e3:87:f7:1f:c6:6b:
                    7d:c7:7b:71:64:d2:80:68:fa:76:3b:20:de:41:4f:
                    82:67:a7:d9:a5:ec:c9:eb:ca:f3:55:47:5a:13:97:
                    f8:14:10:c8:bb:ba:cb:b4:60:ba:72:2b:7f:83:cb:
                    3a:3d:60:f3:09:ae:c1:1c:22:c5:71:22:26:6e:73:
                    c7:12:e3:d4:37:99:8f:d5:e4:d4:9b:17:e8:ca:19:
                    ab:27:74:2f:e3:5a:58:11:8b:79:ea:0d:f6:bd:1b:
                    6a:7a:9a:21:a6:ce:06:b4:5f:de:e8:22:f0:2c:1c:
                    7d:1a:a8:ca:91:dd:7b:e2:20:80:96:a8:15:37:26:
                    c2:e2:ce:c4:0d:f5:07:6a:8d:99:24:c4:fd:ce:ef:
                    53:e1:b2:1c:24:11:e5:b3:7e:99:f1:df:99:d2:c5:
                    81:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:68:48:B9:52:5E:AC:A7:5B:51:32:E1:7E:8C:4F:9C:60:D1:65:B4
            X509v3 Authority Key Identifier:
                keyid:20:63:56:62:A8:A5:86:70:29:EC:35:9E:96:E6:5D:F8:8B:91:AA:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/20635662A8A5867029EC359E96E65DF88B91AA83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20635662A8A5867029EC359E96E65DF88B91AA83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/20635662A8A5867029EC359E96E65DF88B91AA83.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:ee:bd:13:33:95:17:37:3c:7d:65:da:d3:73:3a:5a:16:59:
         8f:20:79:51:50:0e:89:80:f8:13:ff:5a:b7:52:2a:36:c0:26:
         c3:8c:98:8d:cc:55:78:65:0c:76:79:31:67:6d:28:b1:a5:1b:
         dc:5e:a8:6c:90:25:c2:6f:7a:3e:ab:54:4f:4e:0e:98:14:62:
         00:74:16:ef:d2:3f:ea:aa:44:ed:e3:00:c0:34:f2:f0:63:73:
         7b:1d:5c:e8:26:17:a9:1e:2b:b6:74:19:c1:0e:07:bc:92:b2:
         e1:e9:60:3d:d6:a6:b5:58:6c:2f:7c:74:d8:38:68:24:8a:9e:
         06:0f:1e:16:46:de:7f:23:5a:35:09:7a:cb:a0:87:8a:45:af:
         13:1a:54:f6:5d:2f:5f:0a:7b:91:af:78:02:1b:d4:93:1f:32:
         3c:e5:dd:32:3c:60:92:86:f2:97:05:a2:7d:70:15:56:78:ba:
         8b:34:df:6d:f1:94:7a:d7:b0:63:0b:30:22:68:f2:ca:5e:db:
         38:56:2b:b0:4b:6a:11:c7:eb:12:6c:42:b8:d9:a2:89:f3:cc:
         cc:7d:3f:99:09:da:db:38:be:c6:c6:6e:9e:fb:c4:95:a6:aa:
         e0:94:56:0e:6e:05:3d:70:01:91:be:aa:5f:71:0d:66:9a:1f:
         23:d3:ef:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----