Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/D5404D3C46CA2684173E7ADB871E79F544D8EBBC.mft
File:                     D5404D3C46CA2684173E7ADB871E79F544D8EBBC.mft (raw, json)
Hash identifier:          DhubSLM6FO3YQsjPkHx5X0E1W8nimvdGh7NN9E6w6gc=
Subject key identifier:   D4:C8:45:72:FF:BA:45:74:59:7C:70:0C:18:1D:A2:7C:3B:C9:6D:9B
Authority key identifier: D5:40:4D:3C:46:CA:26:84:17:3E:7A:DB:87:1E:79:F5:44:D8:EB:BC
Certificate issuer:       /CN=D5404D3C46CA2684173E7ADB871E79F544D8EBBC
Certificate serial:       5EC5EEDF218F00003EB1BD747FB1B82FFF6EE8D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5404D3C46CA2684173E7ADB871E79F544D8EBBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/D5404D3C46CA2684173E7ADB871E79F544D8EBBC.mft
Manifest number:          E9
Signing time:             Sun 14 Apr 2024 20:56:26 +0000
Manifest this update:     Sun 14 Apr 2024 20:51:26 +0000
Manifest next update:     Mon 15 Apr 2024 21:00:26 +0000
Files and hashes:         1: D5404D3C46CA2684173E7ADB871E79F544D8EBBC.crl (hash: AZOUV9O0+6LXKi7FLpJPWZYqNSjRqjWfJqBYzEiPkFM=)
                          2: 34352e3138392e38382e302f32322d3234203d3e20323639353734.roa (hash: v0eH1PUW9q2yrlchRjL79atxi1dNlFuvXhXErj3lDAo=)
                          3: 323830343a363661383a3a2f33322d3335203d3e20323639353734.roa (hash: pxKjs//wqRu4UOSL4i8B6lYboriz+KPdxnucYR+TToo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:c5:ee:df:21:8f:00:00:3e:b1:bd:74:7f:b1:b8:2f:ff:6e:e8:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5404D3C46CA2684173E7ADB871E79F544D8EBBC
        Validity
            Not Before: Apr 14 20:51:26 2024 GMT
            Not After : Apr 15 21:00:26 2024 GMT
        Subject: CN=D4C84572FFBA4574597C700C181DA27C3BC96D9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:07:fb:25:b9:49:d9:fd:1c:a2:74:c6:da:4c:
                    56:1a:15:8a:4c:f0:16:e8:99:da:92:7f:53:be:38:
                    ed:ed:c8:cf:89:1a:ab:22:36:91:9a:e4:77:84:a8:
                    b5:8c:be:4f:e1:93:22:59:ff:cb:bb:3b:a2:c3:57:
                    b0:74:0d:f5:e0:8a:98:b2:f0:cc:82:94:67:1b:99:
                    cb:03:ee:75:9e:a9:ba:87:e3:41:c8:ba:24:e8:41:
                    ee:b5:cf:8d:67:6b:0a:29:f1:34:b0:e1:49:96:eb:
                    34:a2:1a:5f:7c:1e:95:db:34:3e:6b:d3:67:b2:d4:
                    f8:5a:db:35:80:fe:71:37:93:cf:52:20:3a:f7:dd:
                    0f:cb:e8:1a:64:b9:22:2a:ff:52:05:09:7a:98:28:
                    cd:3e:04:f7:b0:73:39:c9:92:7f:ab:ff:9e:47:69:
                    0c:cd:9c:b8:7a:dc:1a:39:c7:9d:bf:bc:ed:79:ce:
                    08:97:28:2d:b9:07:9f:57:26:56:e9:12:c2:dd:c3:
                    c7:cf:88:0b:0d:3d:bc:6b:f5:e1:23:87:6f:a5:69:
                    d1:53:bb:12:8b:a0:e7:f7:0c:bb:dd:6e:05:5c:8a:
                    97:80:e7:fb:36:cb:e5:70:b1:b0:56:3d:24:aa:b6:
                    08:64:df:29:3f:7f:1e:f5:6e:43:0b:5d:3b:95:68:
                    c3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C8:45:72:FF:BA:45:74:59:7C:70:0C:18:1D:A2:7C:3B:C9:6D:9B
            X509v3 Authority Key Identifier:
                keyid:D5:40:4D:3C:46:CA:26:84:17:3E:7A:DB:87:1E:79:F5:44:D8:EB:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/D5404D3C46CA2684173E7ADB871E79F544D8EBBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5404D3C46CA2684173E7ADB871E79F544D8EBBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/D5404D3C46CA2684173E7ADB871E79F544D8EBBC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:99:7d:05:07:e6:67:7e:7a:f2:85:d7:e2:ae:ae:a4:e7:f0:
         8a:69:d0:28:6a:e9:43:f3:e9:c0:54:e6:51:d1:69:19:1b:03:
         01:6d:ee:d1:1e:68:b7:15:b5:23:85:8e:0a:fc:f9:93:78:69:
         d6:4a:3a:fa:67:69:37:1f:02:9b:86:61:a4:6a:61:96:c9:c4:
         b1:8d:bf:1c:d1:38:4a:3a:8c:b5:39:fc:28:7c:7b:88:f3:c1:
         b2:87:22:cb:0c:6a:51:1c:86:e3:18:9f:33:0c:1a:2b:96:df:
         cf:1a:f2:4a:7c:68:10:06:3f:88:1b:3b:0d:cc:b6:69:8f:53:
         d1:50:34:59:43:de:fa:5f:61:58:6f:ad:a9:6c:04:c4:ad:be:
         4a:75:7c:93:32:29:19:55:3e:73:bb:0b:df:5c:0f:7e:53:c5:
         de:71:5d:fe:57:ed:0e:c7:b0:e5:5a:8f:03:5f:23:f0:cb:c7:
         61:1d:c9:3a:92:a4:68:06:61:d7:70:84:43:b5:52:70:cf:be:
         fb:4a:ba:b3:3b:5f:45:a9:a0:c3:8a:49:37:0a:c5:49:a1:f4:
         29:d6:9b:ef:5b:2a:20:87:61:ca:f5:d6:15:64:8b:43:68:a4:
         09:e0:dc:72:47:f7:b6:54:59:e4:dd:bd:c8:98:cb:f2:4a:12:
         b8:d5:b7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----