Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/762800C66254875F8F5D3741B20C66D69F01F4E3.mft
File:                     762800C66254875F8F5D3741B20C66D69F01F4E3.mft (raw, json)
Hash identifier:          3A7tN8EQUYy9lLZ14gbMkKpFBWjQZMRG+tPM4+LWaCE=
Subject key identifier:   23:8E:11:7A:BC:ED:9B:32:99:23:69:A7:B6:A5:5F:C3:95:7F:18:4D
Authority key identifier: 76:28:00:C6:62:54:87:5F:8F:5D:37:41:B2:0C:66:D6:9F:01:F4:E3
Certificate issuer:       /CN=762800C66254875F8F5D3741B20C66D69F01F4E3
Certificate serial:       37FEA4A5DC88CD83B3DAF85859E4B8426D2BBA0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/762800C66254875F8F5D3741B20C66D69F01F4E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/762800C66254875F8F5D3741B20C66D69F01F4E3.mft
Manifest number:          4E
Signing time:             Mon 15 Apr 2024 04:59:13 +0000
Manifest this update:     Mon 15 Apr 2024 04:54:13 +0000
Manifest next update:     Tue 16 Apr 2024 05:09:13 +0000
Files and hashes:         1: 762800C66254875F8F5D3741B20C66D69F01F4E3.crl (hash: FwwuvNAb4WZHHQYQMAuLUDcwRZh9Ytqe9OLQmhSGpQY=)
                          2: 323830343a333664383a3a2f33322d313238203d3e20323636333736.roa (hash: twkFOIjI8HXhpWavydBboAZLIvp4nA2KU8YDcf2YuBk=)
                          3: 3137302e38302e3131322e302f32322d3332203d3e20323636333736.roa (hash: 7+I8e3UCYkLg1J5HnstHs7cOCM4wZE0u4n2zNeEuApk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:fe:a4:a5:dc:88:cd:83:b3:da:f8:58:59:e4:b8:42:6d:2b:ba:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=762800C66254875F8F5D3741B20C66D69F01F4E3
        Validity
            Not Before: Apr 15 04:54:13 2024 GMT
            Not After : Apr 16 05:09:13 2024 GMT
        Subject: CN=238E117ABCED9B32992369A7B6A55FC3957F184D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:cf:98:1a:ac:44:c0:7c:ac:c0:b5:e0:df:1d:
                    a7:24:53:29:ca:d8:96:21:da:62:ef:42:59:0e:94:
                    42:c3:cf:98:1f:ed:f5:bd:74:51:b4:12:18:76:ce:
                    bb:22:b0:e7:57:99:51:d6:ed:78:a4:9d:e4:2b:27:
                    eb:65:bd:c8:42:1a:7a:47:36:39:b3:31:7f:cc:e8:
                    e5:9d:d6:7a:bf:1c:60:14:e1:66:e5:8a:90:db:ef:
                    9a:d6:d5:41:6f:d3:e7:b7:38:56:e4:88:0f:db:83:
                    08:2e:9b:6f:fa:91:e5:43:22:38:8d:bd:c7:1d:f2:
                    1f:32:91:0f:ae:67:34:18:82:c7:4b:0e:2c:81:15:
                    e8:6d:70:31:c2:6e:c3:09:7a:3e:e9:77:d3:a9:bf:
                    1c:f3:de:97:a2:3d:55:47:e2:bf:00:85:8e:d0:4b:
                    6a:fd:8e:f3:93:11:40:1f:50:0a:2a:d7:9f:86:79:
                    c8:b7:db:8b:89:a7:32:50:44:6a:f1:a8:62:d1:08:
                    c6:31:1c:e9:e4:c2:66:20:aa:a0:47:c0:df:cd:a4:
                    31:eb:a7:22:eb:77:77:87:86:d4:ac:41:f2:6d:03:
                    b4:ea:52:f9:3f:91:63:68:47:c3:61:f4:9b:98:e0:
                    8b:94:4c:fd:b3:76:25:1d:31:f8:da:43:81:f7:23:
                    44:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:8E:11:7A:BC:ED:9B:32:99:23:69:A7:B6:A5:5F:C3:95:7F:18:4D
            X509v3 Authority Key Identifier:
                keyid:76:28:00:C6:62:54:87:5F:8F:5D:37:41:B2:0C:66:D6:9F:01:F4:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/762800C66254875F8F5D3741B20C66D69F01F4E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/762800C66254875F8F5D3741B20C66D69F01F4E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/762800C66254875F8F5D3741B20C66D69F01F4E3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:c4:c1:51:be:b5:b2:43:64:fc:ca:91:20:e3:28:ab:f4:bb:
         e5:3f:fe:65:97:c8:31:ac:e3:82:5e:f8:b2:5a:27:7a:8c:d9:
         e3:62:27:d5:78:08:e5:1a:0b:7e:5b:a5:2a:ff:b0:61:d9:b3:
         48:a4:e5:6c:32:b6:08:9b:2b:2f:a4:5f:68:18:6f:39:28:81:
         b6:86:a4:8f:d0:27:3b:8e:1a:7a:ce:a7:27:42:af:59:75:9f:
         c7:72:93:3c:e8:03:a4:1b:bc:49:3d:93:4b:69:1d:14:7b:09:
         49:c3:01:69:b9:7a:81:72:9c:75:2b:ef:4d:12:9d:2e:43:84:
         6e:4f:f6:d3:cd:8e:86:b8:c2:74:de:48:98:ba:22:6f:07:53:
         33:a9:01:23:d5:b1:0e:17:35:a4:27:a9:ad:21:1e:6a:ca:37:
         fa:8d:24:6b:4d:cb:82:0f:67:28:19:75:28:c2:60:4c:0e:47:
         a4:75:7e:56:09:5b:ea:67:d6:22:9b:b8:0a:ed:a2:7d:d9:a9:
         60:08:a1:0c:e5:d5:00:c7:f7:c0:b0:b3:40:c4:55:7b:8a:fc:
         80:58:1a:99:54:dc:67:dc:8c:83:ef:1e:a1:4b:3e:d3:a3:e0:
         03:7f:a4:6d:bc:91:48:e9:8f:e6:bd:fa:04:79:b7:92:f2:1a:
         ad:da:49:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----