Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/0/B4E2CEBFE3B84B40B7E2069624E8751BE40B580F.mft
File:                     B4E2CEBFE3B84B40B7E2069624E8751BE40B580F.mft (raw, json)
Hash identifier:          cWVYIzEvB7XsW1kq+L16sjondiRaPF73T0M2ujGHEdw=
Subject key identifier:   03:FB:38:46:F9:4C:B6:5D:74:E1:97:A0:CE:05:26:C2:06:A0:0C:55
Authority key identifier: B4:E2:CE:BF:E3:B8:4B:40:B7:E2:06:96:24:E8:75:1B:E4:0B:58:0F
Certificate issuer:       /CN=B4E2CEBFE3B84B40B7E2069624E8751BE40B580F
Certificate serial:       46A75A4AA72984EBD4B74929D7B9E4C77BC5592A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4E2CEBFE3B84B40B7E2069624E8751BE40B580F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/0/B4E2CEBFE3B84B40B7E2069624E8751BE40B580F.mft
Manifest number:          02CF
Signing time:             Mon 15 Apr 2024 10:29:46 +0000
Manifest this update:     Mon 15 Apr 2024 10:24:46 +0000
Manifest next update:     Tue 16 Apr 2024 13:37:46 +0000
Files and hashes:         1: B4E2CEBFE3B84B40B7E2069624E8751BE40B580F.crl (hash: tJxYyzPktSKOhO/c2MrQjPa8UVrEJEW/jL4Z3cC48cI=)
                          2: 323830343a333931383a3a2f33322d3438203d3e20323636353234.roa (hash: dtIAj8b9U8puNDroDHRFDa4SlaQWxqGd07PLWd6HUc8=)
                          3: 3137302e3234352e3137362e302f32322d3234203d3e20323636353234.roa (hash: +pgaVOG/3cYX7ZbomJ8/V31/XaGO7/cAAlAyEbYY7PI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:a7:5a:4a:a7:29:84:eb:d4:b7:49:29:d7:b9:e4:c7:7b:c5:59:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4E2CEBFE3B84B40B7E2069624E8751BE40B580F
        Validity
            Not Before: Apr 15 10:24:46 2024 GMT
            Not After : Apr 16 13:37:46 2024 GMT
        Subject: CN=03FB3846F94CB65D74E197A0CE0526C206A00C55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:87:72:cc:14:6b:8a:6f:a1:01:8b:34:30:aa:
                    86:f8:78:cd:36:ce:8f:0f:57:6c:64:bf:30:62:e5:
                    94:c0:f2:aa:d8:b3:c1:2f:ab:5e:c3:c0:a7:69:c3:
                    6f:83:eb:0e:5b:f9:b7:5b:c0:8e:27:0e:d9:df:8f:
                    ca:d8:8b:cf:14:b7:81:95:64:12:31:9e:6d:b8:54:
                    a8:47:6c:d7:88:bd:71:3d:05:f3:7f:d3:cf:db:b5:
                    37:3a:4c:54:40:07:39:3d:b4:bc:5b:36:5c:6c:39:
                    12:49:00:5b:70:1a:d7:24:34:ad:e0:11:94:7b:83:
                    43:c4:7a:72:ba:64:6d:4f:69:05:cf:47:62:d3:e7:
                    0d:86:2b:9e:69:0d:d2:9c:1c:ed:2c:2d:b0:cc:12:
                    39:20:5c:57:71:09:7c:07:54:62:44:83:58:a7:e2:
                    db:90:87:0f:01:1b:29:59:dc:ab:bc:58:2f:bb:58:
                    49:0e:8c:b2:50:c9:14:84:bb:6e:5a:cf:1b:98:2e:
                    ab:57:28:91:88:4a:14:67:75:e7:c4:f6:77:54:3c:
                    29:6e:12:dc:b6:1f:5b:cd:7e:59:4a:cc:2d:fe:ff:
                    fd:78:32:3d:37:69:8b:c1:54:e7:bf:19:6e:3b:e2:
                    68:f7:ec:a8:67:57:16:69:80:39:80:94:5c:77:2a:
                    32:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:FB:38:46:F9:4C:B6:5D:74:E1:97:A0:CE:05:26:C2:06:A0:0C:55
            X509v3 Authority Key Identifier:
                keyid:B4:E2:CE:BF:E3:B8:4B:40:B7:E2:06:96:24:E8:75:1B:E4:0B:58:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/0/B4E2CEBFE3B84B40B7E2069624E8751BE40B580F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4E2CEBFE3B84B40B7E2069624E8751BE40B580F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/0/B4E2CEBFE3B84B40B7E2069624E8751BE40B580F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:24:13:1f:13:94:26:d3:18:2d:0d:8f:5e:71:05:7c:d3:a5:
         67:ec:fc:b2:0a:c9:b6:7a:85:1a:b2:bf:f2:86:f9:e5:48:d3:
         45:9d:09:be:16:0d:28:09:e9:5c:5b:fb:08:a2:6c:62:ea:fd:
         47:b7:dc:55:85:bf:0c:03:7c:2e:73:14:5d:3d:dc:e8:a1:c7:
         94:7c:da:8e:49:bf:39:ac:dd:9d:10:b3:f7:97:c4:ae:88:70:
         c4:60:f7:a3:58:88:8d:f7:5b:7b:02:8c:c1:e6:87:d2:c3:5f:
         85:d3:39:b3:78:df:87:a2:21:30:2e:90:b3:4a:de:93:3b:c2:
         eb:5d:46:74:74:50:e3:16:d3:56:77:03:cf:d0:ed:04:20:77:
         86:cc:a5:a1:cd:73:3a:20:e4:73:be:f1:af:51:6f:d0:f6:23:
         4c:f1:04:e3:ad:0b:ad:73:4a:dd:73:50:1c:33:23:9a:b4:a2:
         dc:f7:8b:e7:f8:32:45:0d:29:09:04:35:e7:58:4d:50:08:03:
         38:e7:61:db:d1:ac:5b:7e:e9:20:d1:9a:30:b5:14:9f:0a:5b:
         0d:ec:55:4b:36:f9:af:07:5e:87:e1:4c:59:ac:b4:83:32:63:
         1e:af:46:44:00:5b:4e:26:3f:d6:2f:5a:6b:6e:da:03:3d:75:
         ba:98:d3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----