Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GsnVXKFbFzrR6Ur8HXWz1Dm5oJMdm71N8UHgrC4FbzmA/0/99E22FDE9968EA6E814D18C26D75AFE82C90F5F4.mft
File:                     99E22FDE9968EA6E814D18C26D75AFE82C90F5F4.mft (raw, json)
Hash identifier:          eGCQXZeTVQJ0DYvjTR6e47sEUCrWQzT+Crr8UnfHx7E=
Subject key identifier:   68:20:BA:73:87:4C:74:39:58:30:9C:EE:78:4A:69:08:EA:64:7C:85
Authority key identifier: 99:E2:2F:DE:99:68:EA:6E:81:4D:18:C2:6D:75:AF:E8:2C:90:F5:F4
Certificate issuer:       /CN=99E22FDE9968EA6E814D18C26D75AFE82C90F5F4
Certificate serial:       78F2663DF91D8F2EAFE314BB22FED7A7A642807B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/99E22FDE9968EA6E814D18C26D75AFE82C90F5F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsnVXKFbFzrR6Ur8HXWz1Dm5oJMdm71N8UHgrC4FbzmA/0/99E22FDE9968EA6E814D18C26D75AFE82C90F5F4.mft
Manifest number:          14
Signing time:             Mon 15 Apr 2024 01:24:26 +0000
Manifest this update:     Mon 15 Apr 2024 01:19:26 +0000
Manifest next update:     Tue 16 Apr 2024 05:13:26 +0000
Files and hashes:         1: 3230312e35342e3138302e302f32322d3234203d3e20323731323336.roa (hash: nfeRkLLqoNq9uxQdPVwsSLgR34bBllPOP+z2u0LS2tE=)
                          2: 99E22FDE9968EA6E814D18C26D75AFE82C90F5F4.crl (hash: 2t5Sr+Fj8RVX/ccU2aYCVFMWnIogR2YurAMQsjPNrps=)
                          3: 323830343a373835383a3a2f33322d3336203d3e20323731323336.roa (hash: 8o/TkA05pflZ1oSBLgF0QuuhaCi7f03BlkY3NVytuVY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f2:66:3d:f9:1d:8f:2e:af:e3:14:bb:22:fe:d7:a7:a6:42:80:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99E22FDE9968EA6E814D18C26D75AFE82C90F5F4
        Validity
            Not Before: Apr 15 01:19:26 2024 GMT
            Not After : Apr 16 05:13:26 2024 GMT
        Subject: CN=6820BA73874C743958309CEE784A6908EA647C85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cc:b7:24:8a:6d:1a:74:06:bd:83:2b:32:65:
                    f9:8a:6c:16:ba:9a:da:fa:fa:2b:3b:34:6b:a8:bd:
                    c5:fe:0e:35:01:4b:35:8f:85:25:c9:d1:c9:12:8c:
                    54:c6:58:df:de:2e:0f:21:ca:8c:b3:d6:f6:91:66:
                    a7:27:17:a9:dd:c0:e0:2b:ae:39:e3:4a:50:a1:a2:
                    21:f6:41:b0:be:2d:72:02:23:f0:2c:96:14:d3:ba:
                    00:dd:17:cb:0b:08:35:ad:be:c2:0f:c3:45:71:84:
                    14:52:3c:12:19:cb:ee:93:da:0c:09:2c:64:6f:b5:
                    b3:af:da:b6:80:08:b6:0f:18:81:17:3f:55:d0:f6:
                    d5:56:17:57:4a:10:de:f0:fb:5b:da:6e:34:08:70:
                    45:95:41:f9:16:b0:2e:af:74:c4:18:5c:8e:8d:1b:
                    d7:88:74:9f:29:15:a2:33:20:6b:fd:f7:5f:7a:59:
                    a2:e7:d6:a8:87:31:68:aa:00:7e:50:bf:c7:ab:6d:
                    15:cd:69:0e:cd:1d:14:7d:51:41:a6:24:d6:30:a3:
                    b4:46:3b:cc:6e:2c:8b:3b:e4:fe:53:b4:79:02:46:
                    6f:e3:f9:68:39:9e:6c:c6:bc:ca:d2:05:99:f1:ad:
                    fc:ee:c2:7c:5d:f1:1b:b3:3b:e1:52:37:dc:46:ea:
                    7f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:20:BA:73:87:4C:74:39:58:30:9C:EE:78:4A:69:08:EA:64:7C:85
            X509v3 Authority Key Identifier:
                keyid:99:E2:2F:DE:99:68:EA:6E:81:4D:18:C2:6D:75:AF:E8:2C:90:F5:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsnVXKFbFzrR6Ur8HXWz1Dm5oJMdm71N8UHgrC4FbzmA/0/99E22FDE9968EA6E814D18C26D75AFE82C90F5F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/99E22FDE9968EA6E814D18C26D75AFE82C90F5F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsnVXKFbFzrR6Ur8HXWz1Dm5oJMdm71N8UHgrC4FbzmA/0/99E22FDE9968EA6E814D18C26D75AFE82C90F5F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:57:82:93:c2:7c:aa:b0:a1:39:70:62:48:a9:da:2d:a1:3d:
         8d:51:80:55:1b:f9:7b:a3:4b:15:90:cc:59:e4:c0:20:b6:f0:
         03:7f:46:c9:94:2e:d4:eb:3a:39:ba:23:ed:33:5e:27:d1:51:
         43:9f:93:50:53:89:cb:9f:4c:be:39:6d:34:77:98:7e:c5:5e:
         b1:7d:2d:8a:25:05:f5:0f:cb:48:ad:b1:e2:d1:ef:df:12:f2:
         40:bb:55:2e:51:8a:6d:8b:38:0b:30:11:8c:b1:c8:54:15:41:
         5f:cf:2c:c7:c9:cb:b9:ce:fa:50:1f:36:8a:28:7e:13:c1:15:
         1e:65:4d:24:ee:e1:d0:51:d8:3c:b7:12:ec:3c:f7:f0:cb:0e:
         93:c3:c5:99:c3:37:d1:f8:07:db:0c:64:f3:b2:f9:87:46:65:
         1b:b8:96:24:5a:f4:ee:4f:1b:4d:38:27:f9:44:ae:46:87:e4:
         aa:7a:da:d3:3f:e2:b1:ec:fb:6e:bf:53:2b:c3:19:9e:01:91:
         35:ae:83:81:15:ff:85:46:50:ae:35:5e:48:89:1e:d3:91:6d:
         d1:39:83:80:57:26:55:b8:6b:71:d8:b4:3a:51:07:3c:3b:03:
         46:18:8e:24:67:4f:b5:52:91:e8:55:0a:3e:a9:f5:6e:1a:29:
         db:cf:62:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----