Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GokwEBRdfBcQQPqhKs9ebETEa8i3NbwsWCGTY4PnB9p4/0/A9B362399EC0C760B9B9D2F3CE7F93D24694DBE1.mft
File:                     A9B362399EC0C760B9B9D2F3CE7F93D24694DBE1.mft (raw, json)
Hash identifier:          5ofSraBiK1zAlEy5e6gB6ThsPZT/O82YSgwlPnqZ8LY=
Subject key identifier:   B1:93:2D:97:96:D3:F0:8D:F0:4B:6F:FA:FE:C3:F7:AC:05:B8:E2:96
Authority key identifier: A9:B3:62:39:9E:C0:C7:60:B9:B9:D2:F3:CE:7F:93:D2:46:94:DB:E1
Certificate issuer:       /CN=A9B362399EC0C760B9B9D2F3CE7F93D24694DBE1
Certificate serial:       1B00DE20945EF2F21F5079347A2B7C0393ACB792
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A9B362399EC0C760B9B9D2F3CE7F93D24694DBE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GokwEBRdfBcQQPqhKs9ebETEa8i3NbwsWCGTY4PnB9p4/0/A9B362399EC0C760B9B9D2F3CE7F93D24694DBE1.mft
Manifest number:          011E
Signing time:             Mon 15 Apr 2024 10:57:33 +0000
Manifest this update:     Mon 15 Apr 2024 10:52:33 +0000
Manifest next update:     Tue 16 Apr 2024 11:13:33 +0000
Files and hashes:         1: 323830343a373136343a3a2f33322d3332203d3e20323730373836.roa (hash: Ft7vzWP5jV5kD9YOzj36AYAx5+FcXUGUS3r9Vjm+uz8=)
                          2: A9B362399EC0C760B9B9D2F3CE7F93D24694DBE1.crl (hash: FWCPxLstU4b6TAm/E9aUTPENxpAThPfQCnRkLLLVaqg=)
                          3: 3230302e33392e3135302e302f32332d3234203d3e20323730373836.roa (hash: 081ltWWbhURhz+gnQRVClGYBPwYTx/yjzb2Bd9Mtwek=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:00:de:20:94:5e:f2:f2:1f:50:79:34:7a:2b:7c:03:93:ac:b7:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9B362399EC0C760B9B9D2F3CE7F93D24694DBE1
        Validity
            Not Before: Apr 15 10:52:33 2024 GMT
            Not After : Apr 16 11:13:33 2024 GMT
        Subject: CN=B1932D9796D3F08DF04B6FFAFEC3F7AC05B8E296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:88:05:bf:1b:65:f0:34:8a:13:8b:9e:0f:8e:
                    76:90:f7:2f:e3:0c:54:50:56:da:78:e9:5d:12:6c:
                    e1:6a:82:fa:dd:41:b0:11:ad:01:df:67:d3:ca:66:
                    fe:4c:d1:8b:70:d7:67:90:06:17:7d:2f:ab:82:01:
                    2c:38:be:92:bb:a0:a0:bf:77:f0:07:89:1d:4f:10:
                    c7:e9:18:d8:08:6b:9f:f9:e5:35:6f:06:f0:60:e4:
                    da:a8:f8:5b:8f:65:46:8f:d4:31:bc:a1:3e:c8:d5:
                    5a:82:a3:fe:95:7e:0d:28:11:6a:9e:03:21:56:d1:
                    fb:fc:8b:98:ba:e9:07:59:99:c7:81:6c:a6:0c:03:
                    89:6a:73:4a:db:b0:65:af:fe:fe:98:bd:8e:16:80:
                    a5:cf:91:a5:ef:3c:2a:3e:e0:bf:f1:1e:73:75:15:
                    b3:81:b1:5b:9b:af:a6:5b:c1:ca:e0:ef:c6:1e:30:
                    c8:c0:18:31:14:a5:bf:54:04:40:0e:a3:e5:20:f7:
                    5f:d1:a0:84:50:df:0f:75:7d:46:ef:5f:56:aa:a5:
                    21:60:b4:16:42:53:3b:34:62:76:45:cb:47:8c:3f:
                    76:3b:1b:7c:af:a7:f9:e1:75:70:c9:97:1c:8e:e5:
                    20:a2:9c:da:ca:8f:f9:aa:ca:31:e5:ac:9f:3f:ae:
                    4d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:93:2D:97:96:D3:F0:8D:F0:4B:6F:FA:FE:C3:F7:AC:05:B8:E2:96
            X509v3 Authority Key Identifier:
                keyid:A9:B3:62:39:9E:C0:C7:60:B9:B9:D2:F3:CE:7F:93:D2:46:94:DB:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GokwEBRdfBcQQPqhKs9ebETEa8i3NbwsWCGTY4PnB9p4/0/A9B362399EC0C760B9B9D2F3CE7F93D24694DBE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A9B362399EC0C760B9B9D2F3CE7F93D24694DBE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GokwEBRdfBcQQPqhKs9ebETEa8i3NbwsWCGTY4PnB9p4/0/A9B362399EC0C760B9B9D2F3CE7F93D24694DBE1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:3d:d2:a6:f4:f9:41:c5:58:fe:07:8c:2e:eb:d8:5c:4c:18:
         03:16:08:a4:4a:1a:af:14:91:ea:9a:a6:9d:55:57:20:05:92:
         d1:8b:44:b4:1a:08:cd:b0:13:21:1b:cb:c2:26:10:9d:da:73:
         58:d7:95:3a:93:a3:33:7d:eb:3a:c8:f5:63:b5:e9:56:eb:60:
         ab:16:e8:bb:18:f4:a0:e7:f2:37:31:39:6c:00:56:38:ce:af:
         2c:2b:59:74:78:97:40:1b:55:b8:ce:10:54:8d:75:88:2f:87:
         da:e1:d1:36:9e:a3:9b:7a:14:f4:fc:ad:e7:b4:7a:4f:71:ee:
         5c:73:0b:48:56:d3:af:15:36:9d:f3:90:77:96:06:5a:5f:da:
         2b:72:cd:3e:f5:50:14:9d:6b:89:91:ef:96:6e:59:e4:03:0c:
         81:b2:c1:81:df:9b:aa:cb:34:70:fc:8a:0d:7a:45:71:32:49:
         5b:5a:e7:ec:36:ac:ca:56:1f:4f:bc:83:91:e2:0f:17:36:ca:
         2a:4c:02:ad:4a:61:d1:9d:e3:43:3a:1c:52:5c:e3:7b:ff:bd:
         1c:5e:48:fc:da:c8:1c:3b:26:56:f8:f9:25:ac:02:37:ad:d2:
         06:15:ab:8e:38:85:71:7a:96:7f:33:0f:96:05:f1:39:2c:6e:
         00:0a:db:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----