Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/0/AC8402A9EDB131C8A9681A6F1EA97A1F09D2D291.mft
File:                     AC8402A9EDB131C8A9681A6F1EA97A1F09D2D291.mft (raw, json)
Hash identifier:          P5KFTwOdyJ2b6j1I8PVz5skZXm18uw50nqKyzT/v5zE=
Subject key identifier:   71:7D:49:5F:E4:66:A4:46:44:FE:FA:9D:0A:AB:B4:54:A3:6A:C0:7C
Authority key identifier: AC:84:02:A9:ED:B1:31:C8:A9:68:1A:6F:1E:A9:7A:1F:09:D2:D2:91
Certificate issuer:       /CN=AC8402A9EDB131C8A9681A6F1EA97A1F09D2D291
Certificate serial:       010B08A1C9FCDD7886736D9D0881B5F6752B8AAD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC8402A9EDB131C8A9681A6F1EA97A1F09D2D291.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/0/AC8402A9EDB131C8A9681A6F1EA97A1F09D2D291.mft
Manifest number:          01B6
Signing time:             Sun 14 Apr 2024 21:41:04 +0000
Manifest this update:     Sun 14 Apr 2024 21:36:04 +0000
Manifest next update:     Tue 16 Apr 2024 01:36:04 +0000
Files and hashes:         1: AC8402A9EDB131C8A9681A6F1EA97A1F09D2D291.crl (hash: NGFovZfH63roDh3KNaBeAqShR8Qo/45sYsnTUQt0NWM=)
                          2: 34352e3232362e3133382e302f32342d3234203d3e20323636393637.roa (hash: 3QMPLVeKMMGa1yCtDjsmQsKtLFkO8S8YUmOLeV/joqM=)
                          3: 34352e3232362e3133382e302f32332d3233203d3e20323636393637.roa (hash: eAtGFxRDCAo9nr8OR1sEjE0I40AUmc18ZpQ+ckTRyqY=)
                          4: 323830343a343631343a653030303a3a2f33362d3336203d3e20323636393637.roa (hash: p9Pii9FUj8wv/E+MHHIWkJPXg8YTT8VK88gQJNmkJRw=)
                          5: 34352e3232362e3133392e302f32342d3234203d3e20323636393637.roa (hash: wZ40252hoU/hch70FTGbB28EK0eoS3++ynG0r1LRulA=)
                          6: 323830343a343631343a663030303a3a2f33362d3336203d3e20323636393637.roa (hash: GNovflQyYwnmwHNByfjKaGSXQ7fbbzAsM4QlabZFYag=)
                          7: 323830343a343631343a653030303a3a2f33352d3335203d3e20323636393637.roa (hash: OUGvqjfL6iukF/RF0+q9xMuPsISqtQ5n+WKlM477ixo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0b:08:a1:c9:fc:dd:78:86:73:6d:9d:08:81:b5:f6:75:2b:8a:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC8402A9EDB131C8A9681A6F1EA97A1F09D2D291
        Validity
            Not Before: Apr 14 21:36:04 2024 GMT
            Not After : Apr 16 01:36:04 2024 GMT
        Subject: CN=717D495FE466A44644FEFA9D0AABB454A36AC07C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:92:00:e0:84:d0:80:46:26:7a:bf:e0:e2:b9:
                    b7:ea:e6:c8:a7:8a:fc:7a:2c:d3:f6:b8:bf:9f:37:
                    fb:4f:fa:5a:d7:d3:3d:11:0f:6f:e1:5e:29:ae:d8:
                    bb:44:58:b9:dd:82:26:df:53:8d:0a:fd:f7:07:81:
                    c9:50:65:a3:26:3e:35:0e:cf:81:c9:a8:45:7a:ff:
                    13:03:08:aa:17:c7:33:b8:7d:83:f2:95:73:88:91:
                    82:0d:bd:5b:fc:8b:10:24:78:7b:39:49:df:2e:3f:
                    c4:97:2b:d9:f8:1b:ba:4a:ad:3b:4b:28:49:fc:89:
                    75:ed:c4:ae:53:04:48:7a:af:88:53:32:0d:42:84:
                    f6:97:3a:2f:86:b0:af:dd:9d:e0:d1:2c:5a:3e:bf:
                    c8:f7:98:ee:78:10:3c:57:6a:78:9c:c1:12:81:1e:
                    64:66:58:ed:7c:c0:83:ef:c7:68:70:cf:47:62:bd:
                    3a:13:9f:ee:ed:fe:1c:eb:37:ad:a4:42:fc:c9:ed:
                    98:e4:78:f2:2d:d2:93:15:c2:0b:ed:83:77:d4:dd:
                    43:2c:b0:f0:34:20:59:1d:dd:ce:e3:a4:f7:8f:35:
                    a0:7a:93:73:cd:83:4e:b6:ef:a3:18:8b:c8:9b:c8:
                    65:98:62:07:71:fd:91:0a:5d:b7:0e:d3:97:4f:6e:
                    99:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:7D:49:5F:E4:66:A4:46:44:FE:FA:9D:0A:AB:B4:54:A3:6A:C0:7C
            X509v3 Authority Key Identifier:
                keyid:AC:84:02:A9:ED:B1:31:C8:A9:68:1A:6F:1E:A9:7A:1F:09:D2:D2:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/0/AC8402A9EDB131C8A9681A6F1EA97A1F09D2D291.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC8402A9EDB131C8A9681A6F1EA97A1F09D2D291.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/0/AC8402A9EDB131C8A9681A6F1EA97A1F09D2D291.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:dd:2a:09:3c:b2:c9:d9:c6:8d:4f:e6:59:a5:5f:40:f2:e7:
         b4:41:a1:2c:ab:8d:a5:cb:bb:ee:16:a6:91:36:cc:c2:c5:db:
         d7:ba:e0:91:d0:00:85:2a:c2:de:8a:25:fa:fb:26:3c:9a:ac:
         37:ca:76:85:a5:ed:87:58:86:4c:50:9a:57:72:46:83:32:a7:
         49:14:91:2c:c5:34:00:b7:37:8f:2e:32:e2:0e:53:0c:c8:cf:
         5a:b3:75:85:6f:6b:8b:29:d1:33:2b:7f:63:7d:e5:15:4d:e3:
         b1:0e:bf:f9:4f:26:32:a7:13:4f:0b:a4:c1:26:76:de:72:d5:
         ff:04:ca:c4:a1:ff:fa:a8:46:c9:b9:dd:c3:37:72:94:5c:20:
         11:8a:16:2d:b7:fc:5a:1f:7b:24:a7:20:ab:59:dc:2f:59:c8:
         04:ca:10:29:ca:5b:dc:af:3f:4a:b7:d9:ba:e7:45:96:ca:32:
         b2:85:5f:18:85:05:c5:36:10:cb:86:2b:35:42:07:50:48:ae:
         21:00:91:fa:67:76:fb:99:33:dd:85:64:34:1f:fc:f1:df:77:
         f3:76:8b:a2:c4:d8:d0:e9:6a:39:71:0a:fb:f4:d2:d3:22:db:
         d2:5c:51:5d:12:77:f9:31:de:23:45:dd:d8:a4:de:fe:7d:53:
         bd:98:99:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----