Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GAvVRDuEX7Kff8t8CWmkDny9Wy9WpxBDE9NxcUSBKXBV/0/4F981104ADBA2CFF53B3D12A607771EC8089FFAB.mft
File:                     4F981104ADBA2CFF53B3D12A607771EC8089FFAB.mft (raw, json)
Hash identifier:          IglUattZggKED+ONRZjC+H03s/Xmt4d4RKYDKcaGVxc=
Subject key identifier:   CA:40:81:81:42:EE:AE:2E:90:57:DB:9D:66:08:61:9B:00:6E:11:7A
Authority key identifier: 4F:98:11:04:AD:BA:2C:FF:53:B3:D1:2A:60:77:71:EC:80:89:FF:AB
Certificate issuer:       /CN=4F981104ADBA2CFF53B3D12A607771EC8089FFAB
Certificate serial:       3C69CAB260B488A790D0CA916AFA5E3883764D74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F981104ADBA2CFF53B3D12A607771EC8089FFAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GAvVRDuEX7Kff8t8CWmkDny9Wy9WpxBDE9NxcUSBKXBV/0/4F981104ADBA2CFF53B3D12A607771EC8089FFAB.mft
Manifest number:          069F
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
Manifest this update:     Sun 14 Apr 2024 23:55:00 +0000
Manifest next update:     Tue 16 Apr 2024 00:46:00 +0000
Files and hashes:         1: 323830343a376235303a3a2f33322d3438203d3e20323731343234.roa (hash: eP/cJ26eb5ZLJijSOKuEURQjKtdyMLhU+li+oUV2+8g=)
                          2: 4F981104ADBA2CFF53B3D12A607771EC8089FFAB.crl (hash: fxrJznM767en+6hfiDMUiRWIV/TJpmSBvu/iwXI4X3U=)
                          3: 3138312e3232342e382e302f32322d3234203d3e20323731343234.roa (hash: NU9KfvXjAdUkVVOARdz2juPDOMFoTkyec1NfEzrZZ/U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:69:ca:b2:60:b4:88:a7:90:d0:ca:91:6a:fa:5e:38:83:76:4d:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F981104ADBA2CFF53B3D12A607771EC8089FFAB
        Validity
            Not Before: Apr 14 23:55:00 2024 GMT
            Not After : Apr 16 00:46:00 2024 GMT
        Subject: CN=CA40818142EEAE2E9057DB9D6608619B006E117A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6a:a5:4d:4f:f4:14:fb:1f:be:e6:69:02:33:
                    fd:ec:7f:fc:40:97:54:2b:3f:4c:c7:0b:35:8f:2f:
                    f0:d2:97:50:8e:dc:69:e1:61:a6:f5:18:b9:50:4f:
                    87:e8:17:53:54:1d:97:fb:43:f1:98:a7:88:52:9b:
                    0d:9c:d6:25:b5:5d:92:e4:34:2d:48:5c:a6:1c:f1:
                    ff:0e:7a:70:ee:72:23:d8:de:e1:97:53:18:c0:93:
                    80:6c:75:e1:60:ed:11:34:12:ed:22:e6:f6:0c:ab:
                    98:4b:49:a3:73:52:95:70:fe:77:21:1f:2e:e8:ca:
                    d7:82:ec:dd:82:12:fb:f1:53:7f:e6:e3:12:2d:7a:
                    7c:6a:f7:c7:f7:09:90:7f:20:3d:0f:e6:d4:c9:4c:
                    a4:1f:8c:7f:e5:ec:e6:65:b2:ee:16:f2:bf:7c:c9:
                    63:59:79:15:6a:92:96:2c:91:d3:2b:9d:05:a3:98:
                    9c:2d:93:4b:17:5d:6c:37:a7:6f:01:f1:44:01:9e:
                    34:54:b9:d2:00:75:67:0e:27:8c:84:2f:4c:1c:17:
                    e3:9e:ac:92:fa:fa:64:eb:a2:e5:98:bf:cd:7f:ee:
                    70:d5:05:b6:04:fd:3f:d7:79:b8:2c:7e:19:01:a6:
                    25:53:25:38:e7:00:e7:e0:e4:24:57:37:9b:ff:c9:
                    6c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:40:81:81:42:EE:AE:2E:90:57:DB:9D:66:08:61:9B:00:6E:11:7A
            X509v3 Authority Key Identifier:
                keyid:4F:98:11:04:AD:BA:2C:FF:53:B3:D1:2A:60:77:71:EC:80:89:FF:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GAvVRDuEX7Kff8t8CWmkDny9Wy9WpxBDE9NxcUSBKXBV/0/4F981104ADBA2CFF53B3D12A607771EC8089FFAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F981104ADBA2CFF53B3D12A607771EC8089FFAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GAvVRDuEX7Kff8t8CWmkDny9Wy9WpxBDE9NxcUSBKXBV/0/4F981104ADBA2CFF53B3D12A607771EC8089FFAB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:62:18:61:61:d5:13:7b:49:b8:f5:0b:e9:08:18:31:b5:15:
         be:ea:c8:09:e1:a4:ff:8d:59:95:6f:65:d9:f9:28:2f:63:b4:
         dd:a1:5a:b2:29:ff:50:9f:f7:42:42:5c:79:35:b4:a6:6d:af:
         1b:29:c4:6e:47:00:20:9b:95:ad:9f:b4:eb:06:2a:42:62:f6:
         db:1f:27:00:30:49:b4:ba:ca:df:fa:f0:e7:be:e2:c5:11:0c:
         40:0f:88:3a:2d:36:3b:89:91:fe:51:2e:30:25:06:88:40:15:
         06:fe:29:7c:f0:ac:03:cf:66:08:a0:66:d9:c5:e9:81:df:b2:
         c2:69:59:bf:a0:8c:fd:63:03:bb:2a:53:fb:0b:6a:de:42:af:
         a8:f8:2c:6f:7d:64:64:8a:f7:a4:34:e9:9a:28:88:06:10:5a:
         0c:63:73:c5:2b:4e:9e:cb:84:09:9d:1d:0e:4b:89:b6:14:60:
         eb:dd:b0:cc:c3:95:97:2c:e6:29:45:de:7e:51:a0:d2:af:72:
         7c:6d:fb:6e:33:b8:4e:eb:6f:b3:f1:ef:1a:e6:bb:52:67:e2:
         82:6a:1f:c7:92:23:77:6c:fb:12:4d:b1:46:43:18:d0:29:e4:
         29:e0:f9:dd:42:f7:19:5e:5d:89:0d:29:aa:36:0d:a4:0a:e4:
         a5:52:94:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----