Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G95uSNd8BkHkySnrATJFJPReknHsWLmJiF9Ne6RLTe4U/0/901122F2D1C80D8CD2B84C52693263E57928B4CE.mft
File:                     901122F2D1C80D8CD2B84C52693263E57928B4CE.mft (raw, json)
Hash identifier:          EhCdRwAm/+hH9MLJo1yGyzelCuBSAn7a7sHdxKSQfE8=
Subject key identifier:   46:B6:16:D6:BF:03:73:FE:97:BC:B3:31:D2:08:79:1F:64:D3:99:29
Authority key identifier: 90:11:22:F2:D1:C8:0D:8C:D2:B8:4C:52:69:32:63:E5:79:28:B4:CE
Certificate issuer:       /CN=901122F2D1C80D8CD2B84C52693263E57928B4CE
Certificate serial:       11936AFFB48ED96A64A851D715AE4D8F80D93719
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/901122F2D1C80D8CD2B84C52693263E57928B4CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G95uSNd8BkHkySnrATJFJPReknHsWLmJiF9Ne6RLTe4U/0/901122F2D1C80D8CD2B84C52693263E57928B4CE.mft
Manifest number:          0289
Signing time:             Mon 15 Apr 2024 10:14:40 +0000
Manifest this update:     Mon 15 Apr 2024 10:09:40 +0000
Manifest next update:     Tue 16 Apr 2024 10:59:40 +0000
Files and hashes:         1: 34352e342e3231322e302f32322d3234203d3e20323636303631.roa (hash: DwMIy7XkMWdTmHiJSnbdlc4PvuF/kh5+64x2QvHZ6Fo=)
                          2: 901122F2D1C80D8CD2B84C52693263E57928B4CE.crl (hash: tikUTxtWJRRNDSvetwgntvTfxlWNCO4f1K0N7F9yViw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:93:6a:ff:b4:8e:d9:6a:64:a8:51:d7:15:ae:4d:8f:80:d9:37:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=901122F2D1C80D8CD2B84C52693263E57928B4CE
        Validity
            Not Before: Apr 15 10:09:40 2024 GMT
            Not After : Apr 16 10:59:40 2024 GMT
        Subject: CN=46B616D6BF0373FE97BCB331D208791F64D39929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:08:71:cd:08:8f:b1:68:9c:9f:84:4e:4d:01:
                    f6:e8:96:ad:ce:1c:be:8f:6e:9d:9e:8b:86:28:ad:
                    c1:16:f6:33:72:8a:4d:22:db:b5:8a:9c:61:1a:b8:
                    79:5f:38:0b:00:2c:d9:d6:b5:2a:47:da:40:da:83:
                    21:32:67:00:26:52:db:55:3d:cd:7a:64:9a:31:47:
                    2a:6e:ae:20:7a:6e:37:ae:79:e6:15:27:44:15:92:
                    47:5f:a5:50:20:a7:01:9e:d3:08:33:47:af:64:27:
                    85:e6:23:6f:6d:ea:e1:57:f9:09:9b:c3:56:f1:0b:
                    83:6d:48:e7:33:c3:24:99:07:47:4a:f1:27:df:e7:
                    51:88:67:55:25:c1:c4:3c:1f:ec:f4:c6:87:d1:27:
                    00:cb:79:a9:31:d5:98:f5:6e:ca:d0:d7:c7:56:9d:
                    78:a7:84:37:80:b4:a6:24:60:70:37:12:ac:d1:31:
                    47:f6:69:61:06:04:b4:9d:5d:e0:f2:0e:b5:b3:13:
                    1a:c6:d1:8e:5b:1f:1e:53:cd:66:ab:81:c7:47:1e:
                    a2:7a:44:10:cd:78:7b:48:3b:20:a2:da:aa:d5:d9:
                    4e:28:41:23:d7:67:25:d9:09:a7:8d:4e:2a:d4:6d:
                    21:34:4c:4e:84:40:e9:c7:59:fe:d4:ae:41:17:9a:
                    5a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B6:16:D6:BF:03:73:FE:97:BC:B3:31:D2:08:79:1F:64:D3:99:29
            X509v3 Authority Key Identifier:
                keyid:90:11:22:F2:D1:C8:0D:8C:D2:B8:4C:52:69:32:63:E5:79:28:B4:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G95uSNd8BkHkySnrATJFJPReknHsWLmJiF9Ne6RLTe4U/0/901122F2D1C80D8CD2B84C52693263E57928B4CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/901122F2D1C80D8CD2B84C52693263E57928B4CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G95uSNd8BkHkySnrATJFJPReknHsWLmJiF9Ne6RLTe4U/0/901122F2D1C80D8CD2B84C52693263E57928B4CE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:47:cc:ff:5c:a0:a1:65:cc:61:6b:64:e4:ef:d4:70:3f:d8:
         14:6f:dd:02:b1:e8:3f:7e:f9:82:16:04:bd:eb:7f:63:65:8d:
         c7:25:6b:e1:f8:5f:43:34:ce:46:a0:b9:46:92:2f:cb:f0:dd:
         18:0c:92:33:63:aa:ad:90:ba:39:a7:7e:24:32:ba:40:41:7e:
         c1:40:26:d3:e1:cb:29:ce:79:b0:83:57:e1:b6:55:45:96:d0:
         fd:67:a4:3a:3e:74:cb:c3:fc:fc:d4:d1:c1:b4:0e:b7:54:1a:
         1f:4b:12:20:4f:2e:ac:1f:18:74:0a:a1:6f:0a:40:61:ba:66:
         38:5d:e2:59:4b:e1:77:34:0c:85:80:61:0a:fe:05:f0:5e:43:
         0d:60:1b:52:75:80:4d:71:3a:66:83:dc:d9:d1:a4:67:ba:ef:
         25:b5:4c:da:3a:34:b3:0b:f3:63:65:c6:7d:aa:df:f5:5d:36:
         61:ff:c0:fd:33:8e:80:b2:07:d3:82:44:21:fc:86:3f:9e:24:
         18:90:b1:db:af:62:65:88:44:ed:6d:af:b2:72:5e:bf:89:e3:
         0d:27:c5:f6:99:9b:fa:bc:18:e4:f3:82:87:29:93:56:29:b6:
         41:d6:cf:ed:49:4e:14:79:27:fd:a0:6b:ec:ac:b8:20:70:f0:
         6e:af:35:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----