Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/0/9DBC9C78877931A9B30C34BE2DD69CFA7FECC4BB.mft
File:                     9DBC9C78877931A9B30C34BE2DD69CFA7FECC4BB.mft (raw, json)
Hash identifier:          N3JsrKijeSqpHjIbBYTUvAMgpGEmN9acoDuxjClnvdo=
Subject key identifier:   95:A4:F0:D5:9A:A6:0E:CA:E3:0E:0B:B9:89:4A:EE:CD:11:22:4A:2C
Authority key identifier: 9D:BC:9C:78:87:79:31:A9:B3:0C:34:BE:2D:D6:9C:FA:7F:EC:C4:BB
Certificate issuer:       /CN=9DBC9C78877931A9B30C34BE2DD69CFA7FECC4BB
Certificate serial:       2C3851F4072EED7A765C549C1ED61F7E342D89D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DBC9C78877931A9B30C34BE2DD69CFA7FECC4BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/0/9DBC9C78877931A9B30C34BE2DD69CFA7FECC4BB.mft
Manifest number:          0298
Signing time:             Sun 14 Apr 2024 18:47:47 +0000
Manifest this update:     Sun 14 Apr 2024 18:42:47 +0000
Manifest next update:     Mon 15 Apr 2024 19:41:47 +0000
Files and hashes:         1: 323830343a323362343a3a2f33322d3336203d3e20323634313738.roa (hash: d8qIOWCLStwARCsM/Fk+T5MdFfjAUGSsEsMZ9M+81bg=)
                          2: 9DBC9C78877931A9B30C34BE2DD69CFA7FECC4BB.crl (hash: cxvMNV/DndmWgsx4dmpZ+UuTTkVj0PpvA4SnOB9r44s=)
                          3: 3133382e39392e37322e302f32322d3234203d3e20323634313738.roa (hash: SfimaFInsElWZkBxjG4Y+GnkoPqj3YOoODdMQK2U7Wc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:38:51:f4:07:2e:ed:7a:76:5c:54:9c:1e:d6:1f:7e:34:2d:89:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DBC9C78877931A9B30C34BE2DD69CFA7FECC4BB
        Validity
            Not Before: Apr 14 18:42:47 2024 GMT
            Not After : Apr 15 19:41:47 2024 GMT
        Subject: CN=95A4F0D59AA60ECAE30E0BB9894AEECD11224A2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3a:de:96:78:9c:9c:43:a6:76:5d:6a:3f:d5:
                    0a:de:97:27:78:09:03:41:45:e9:8b:23:f7:e7:20:
                    1a:89:b2:33:42:ef:25:3e:54:13:0b:3a:8e:d6:2e:
                    61:86:91:25:49:d0:5a:8a:a9:50:60:7e:6c:3d:fb:
                    5c:e1:52:74:0f:cd:d8:76:81:eb:c3:d8:bd:4b:cc:
                    bd:31:48:2d:c2:fd:3c:c6:b7:b8:de:3c:a0:e5:5b:
                    fa:90:d1:b4:c1:6a:a2:2e:e6:03:97:fe:da:d8:c4:
                    bb:4b:be:8f:10:53:6f:7e:b1:22:80:26:75:15:bd:
                    9b:92:09:43:c4:09:47:ef:f3:58:8c:6b:3d:50:b8:
                    35:ed:ba:32:e2:c8:34:be:c5:3c:57:3f:cc:b7:24:
                    03:ac:a3:03:0b:d6:30:0f:5b:95:6c:d7:4e:ca:c9:
                    c7:d7:13:6c:60:d3:d7:ad:2e:fd:25:24:65:11:32:
                    d9:af:e6:cf:80:9a:f2:5f:38:f0:02:48:1a:cb:f1:
                    47:31:80:32:ec:2c:df:08:a0:9b:f7:1f:38:dd:4d:
                    bb:6e:7c:c3:17:92:8a:73:5e:07:dd:85:5d:63:4a:
                    9e:94:71:5e:9c:fd:fa:09:51:ef:25:2e:8a:b3:87:
                    1d:ee:7c:1c:d2:29:f0:28:24:06:7f:79:15:18:3f:
                    3c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A4:F0:D5:9A:A6:0E:CA:E3:0E:0B:B9:89:4A:EE:CD:11:22:4A:2C
            X509v3 Authority Key Identifier:
                keyid:9D:BC:9C:78:87:79:31:A9:B3:0C:34:BE:2D:D6:9C:FA:7F:EC:C4:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/0/9DBC9C78877931A9B30C34BE2DD69CFA7FECC4BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DBC9C78877931A9B30C34BE2DD69CFA7FECC4BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/0/9DBC9C78877931A9B30C34BE2DD69CFA7FECC4BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:86:37:63:65:89:69:6d:fa:78:0d:a8:a9:78:1f:43:b2:b3:
         ca:6b:4f:df:15:b8:4f:64:7f:ab:1a:d1:14:b8:ae:d1:d2:ba:
         af:9e:5f:09:bb:21:43:76:9b:f6:33:62:a5:4f:eb:b1:6d:28:
         c3:96:51:84:be:dd:65:04:5e:d1:f9:83:1a:4d:3a:fc:50:31:
         4c:66:31:77:1a:f5:da:67:65:1c:6a:d8:09:c5:9b:ff:f9:f8:
         d4:d4:bc:ee:a5:b6:84:c1:ce:a4:36:40:40:fd:fe:5d:f2:16:
         99:f6:15:e6:94:9b:f9:79:5c:b1:c3:82:a9:dc:2d:a9:1b:ce:
         d7:8d:ed:9f:d8:fe:60:b5:dd:96:62:e5:e5:de:64:78:71:47:
         d9:68:bf:e0:60:96:b4:de:95:c0:a5:27:81:47:7c:12:97:2d:
         4b:a9:d0:ac:9b:c8:99:00:21:07:fa:03:b9:12:07:25:41:c3:
         b4:22:d6:ad:47:ca:eb:98:97:98:21:c0:a7:49:48:97:02:db:
         3a:55:5a:2b:24:0d:d3:49:38:55:04:65:2a:0c:19:70:d8:e8:
         5b:42:be:55:0e:bc:cb:ec:f5:08:87:ac:20:76:a8:22:fe:06:
         36:ed:a3:32:be:7b:2b:31:50:01:31:68:80:7e:cd:12:45:af:
         d0:76:76:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----