Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GKQuEGpQY9nKCbbZeZR6gBWEeYrGRBwNpfQNuf2yfLsy/0/E9F63E00E8EEDA7E9CA2762498EB0B8B8A4C74E2.mft
File:                     E9F63E00E8EEDA7E9CA2762498EB0B8B8A4C74E2.mft (raw, json)
Hash identifier:          kTEbKfupS1+et+SmBuvpom4QSR4zw4Ulg09aMI0MI14=
Subject key identifier:   F9:6E:43:E7:DF:45:D8:57:84:E2:23:F3:A5:4C:36:2B:EC:30:D6:31
Authority key identifier: E9:F6:3E:00:E8:EE:DA:7E:9C:A2:76:24:98:EB:0B:8B:8A:4C:74:E2
Certificate issuer:       /CN=E9F63E00E8EEDA7E9CA2762498EB0B8B8A4C74E2
Certificate serial:       701725EB6383298493D92CAD3E9FA9084AB8C8D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9F63E00E8EEDA7E9CA2762498EB0B8B8A4C74E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKQuEGpQY9nKCbbZeZR6gBWEeYrGRBwNpfQNuf2yfLsy/0/E9F63E00E8EEDA7E9CA2762498EB0B8B8A4C74E2.mft
Manifest number:          02DE
Signing time:             Mon 15 Apr 2024 03:25:05 +0000
Manifest this update:     Mon 15 Apr 2024 03:20:05 +0000
Manifest next update:     Tue 16 Apr 2024 04:03:05 +0000
Files and hashes:         1: E9F63E00E8EEDA7E9CA2762498EB0B8B8A4C74E2.crl (hash: UXnlNMP8PV6Fqnt/0ERYTsgnX2S2B8YJ5802MGAtDnQ=)
                          2: 3139302e39332e3138302e302f32332d3234203d3e20323730343739.roa (hash: RNORiVS3TWS34tjFuHAMYCIIYCFT0ZyrBNb6vKbV2w0=)
                          3: 323830343a366339383a3a2f33322d3338203d3e20323730343739.roa (hash: No/gpa3AWhxbmda0XpNTXdCakkxcNb06gbffVxMaiUA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:17:25:eb:63:83:29:84:93:d9:2c:ad:3e:9f:a9:08:4a:b8:c8:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9F63E00E8EEDA7E9CA2762498EB0B8B8A4C74E2
        Validity
            Not Before: Apr 15 03:20:05 2024 GMT
            Not After : Apr 16 04:03:05 2024 GMT
        Subject: CN=F96E43E7DF45D85784E223F3A54C362BEC30D631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6f:fc:11:81:2f:da:f2:ef:24:e9:b5:a3:1f:
                    16:63:c8:84:ab:f3:48:e1:be:72:eb:4e:dc:d9:96:
                    91:c3:1c:a2:10:4a:5a:5e:f6:02:eb:64:2d:e9:bf:
                    20:20:51:3e:58:18:36:22:b8:11:4b:80:51:6e:2c:
                    19:d6:0f:60:30:b1:cc:3d:68:33:6b:52:f5:37:5f:
                    d4:45:e2:9c:d2:4d:19:a3:a5:4b:27:c6:3d:a1:1d:
                    e1:0d:e5:ad:02:44:ff:ca:08:e1:b2:a2:da:a6:0c:
                    47:0e:03:ba:58:ad:41:9c:15:95:2c:32:dc:cb:6c:
                    07:5e:36:3c:76:18:8e:6d:1f:50:c3:ea:d4:56:a0:
                    a8:ed:c1:ab:28:64:e9:d4:5c:92:73:12:57:74:4d:
                    0a:c2:c3:6e:b4:94:4d:99:8a:01:92:f3:97:1f:52:
                    99:9a:72:cb:64:9a:0f:cf:e1:70:43:02:dc:90:ec:
                    59:2c:de:d3:39:8a:3d:26:8f:a2:0b:be:d0:3c:d9:
                    04:b2:d0:da:82:96:ca:43:5a:b7:2e:89:4c:fb:12:
                    7e:95:c5:25:aa:41:68:bb:27:37:18:89:83:77:08:
                    23:26:1d:e9:e2:6f:12:b1:e2:8e:67:4c:74:c6:93:
                    4e:96:08:9e:ac:cd:c1:1f:bb:f1:0a:85:42:84:c3:
                    64:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:6E:43:E7:DF:45:D8:57:84:E2:23:F3:A5:4C:36:2B:EC:30:D6:31
            X509v3 Authority Key Identifier:
                keyid:E9:F6:3E:00:E8:EE:DA:7E:9C:A2:76:24:98:EB:0B:8B:8A:4C:74:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKQuEGpQY9nKCbbZeZR6gBWEeYrGRBwNpfQNuf2yfLsy/0/E9F63E00E8EEDA7E9CA2762498EB0B8B8A4C74E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9F63E00E8EEDA7E9CA2762498EB0B8B8A4C74E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKQuEGpQY9nKCbbZeZR6gBWEeYrGRBwNpfQNuf2yfLsy/0/E9F63E00E8EEDA7E9CA2762498EB0B8B8A4C74E2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:6a:af:19:c2:fc:cc:76:2e:d2:4b:98:f3:c8:d1:cc:e4:71:
         d6:e7:38:9d:e6:b0:a8:93:4d:e4:42:7c:44:1d:55:cc:67:40:
         0c:90:3f:04:30:21:f9:89:09:a8:26:42:f3:d0:6d:65:ab:c6:
         03:2e:94:6f:1a:c8:ab:4e:a0:b7:33:99:21:50:7b:b7:1e:31:
         23:a9:50:b5:6a:74:e0:02:5e:a9:52:9f:1d:8f:5b:dd:b5:77:
         4a:01:a2:33:85:71:e7:d3:bd:ba:cf:ff:89:bc:42:78:51:85:
         7d:3e:ee:43:04:18:95:bc:e4:fd:82:3a:a8:95:41:45:54:de:
         b4:6d:52:16:d6:f1:1e:6e:c1:0e:52:f3:3c:31:8c:49:d7:c5:
         4c:66:c4:c6:13:3b:9d:3a:78:38:6e:d5:b3:70:3b:c5:4f:85:
         1b:a1:62:23:60:3b:2f:e8:41:d1:29:fc:cf:4e:9c:55:ac:58:
         b3:16:c1:59:27:52:33:0f:d8:00:c2:83:2c:2e:f0:92:1d:5f:
         ef:56:43:e9:e2:04:4d:05:c8:09:38:40:a5:08:04:2b:f6:3c:
         27:d7:ff:66:22:c2:af:d1:54:69:60:e3:dd:fe:0d:27:0a:23:
         e7:ab:81:29:6c:25:12:f3:bf:57:80:00:4c:1f:e4:71:34:62:
         ba:bd:9a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----