Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/0/9820C6E503613C874E71459373B23F1FF20274DE.mft
File:                     9820C6E503613C874E71459373B23F1FF20274DE.mft (raw, json)
Hash identifier:          0vVfyu7tnIj8VRJ3rLNTKAvvkrBnhpU2KsrzUhVlnw4=
Subject key identifier:   E0:A0:1C:8B:A4:67:20:F2:9B:12:77:86:8D:60:A0:0B:9E:64:4E:49
Authority key identifier: 98:20:C6:E5:03:61:3C:87:4E:71:45:93:73:B2:3F:1F:F2:02:74:DE
Certificate issuer:       /CN=9820C6E503613C874E71459373B23F1FF20274DE
Certificate serial:       4D2D55324A6FFD0B8D0CFA2747D658406871938E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9820C6E503613C874E71459373B23F1FF20274DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/0/9820C6E503613C874E71459373B23F1FF20274DE.mft
Manifest number:          0188
Signing time:             Sun 14 Apr 2024 21:21:23 +0000
Manifest this update:     Sun 14 Apr 2024 21:16:23 +0000
Manifest next update:     Mon 15 Apr 2024 22:20:23 +0000
Files and hashes:         1: 9820C6E503613C874E71459373B23F1FF20274DE.crl (hash: iB59CKtZK/LufeG+c490ivltyUbYcwcuL/Z7H5xDJLA=)
                          2: 3137302e38342e3131362e302f32322d3234203d3e20323634393933.roa (hash: sFK4Pq5+hRko4DIIi+H8LF3yKcGCN5jievwt12d8PNs=)
                          3: 323830343a333131633a3a2f33322d3438203d3e20323634393933.roa (hash: gyiaj5bXN+D8tFgDlm+/J1Y+B/eFpSzg9MdTpx3elj8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:2d:55:32:4a:6f:fd:0b:8d:0c:fa:27:47:d6:58:40:68:71:93:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9820C6E503613C874E71459373B23F1FF20274DE
        Validity
            Not Before: Apr 14 21:16:23 2024 GMT
            Not After : Apr 15 22:20:23 2024 GMT
        Subject: CN=E0A01C8BA46720F29B1277868D60A00B9E644E49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:13:0c:d8:20:33:37:64:72:68:87:ae:82:51:
                    11:ac:19:64:12:ca:35:28:bf:9d:c6:10:95:86:1b:
                    db:da:30:40:ff:45:42:15:b3:14:b9:11:e2:b9:8a:
                    30:da:d0:34:c4:29:ff:b9:9c:a4:6e:79:13:df:20:
                    c0:98:b2:51:08:be:eb:aa:c7:71:1f:dd:39:e5:26:
                    56:1a:4b:53:25:21:96:23:09:e9:c8:9b:6b:6c:44:
                    6c:0f:1b:46:aa:50:ac:fb:89:c0:74:87:35:a5:f2:
                    3a:74:10:ca:5e:d4:cc:22:c5:81:ee:d7:5f:f6:6d:
                    48:f2:c8:72:e1:9e:01:62:03:14:31:08:f0:23:2f:
                    60:81:29:f2:3e:2a:6c:82:df:fc:fb:d0:e2:f6:be:
                    46:5c:2d:4d:8b:75:3c:76:a0:84:21:ea:08:8a:59:
                    3c:1e:0c:38:b6:0a:5e:67:5e:aa:33:9d:5d:07:d4:
                    6a:5c:fb:ec:bf:d5:29:a0:75:3a:1c:4c:61:42:c7:
                    21:b0:cd:68:5c:dc:f0:10:c6:12:00:59:14:19:ed:
                    e4:f4:cb:b2:fa:6f:29:27:2f:1a:65:b1:5d:2e:d9:
                    8b:2c:09:37:3e:a7:25:e6:91:87:1c:a9:39:32:31:
                    4d:14:ac:1d:b0:ba:11:aa:09:82:50:45:c8:70:62:
                    b6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A0:1C:8B:A4:67:20:F2:9B:12:77:86:8D:60:A0:0B:9E:64:4E:49
            X509v3 Authority Key Identifier:
                keyid:98:20:C6:E5:03:61:3C:87:4E:71:45:93:73:B2:3F:1F:F2:02:74:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/0/9820C6E503613C874E71459373B23F1FF20274DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9820C6E503613C874E71459373B23F1FF20274DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/0/9820C6E503613C874E71459373B23F1FF20274DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:3c:4b:0f:53:5e:1e:26:db:02:13:52:16:c3:7b:1b:5a:9f:
         8b:64:a8:c5:ca:1d:62:f1:bd:9f:e8:06:b0:62:21:45:f0:c3:
         2f:9d:5a:e7:16:48:a1:d5:60:b3:48:02:75:06:6f:97:36:70:
         11:6b:03:f6:5e:d5:8d:dd:fa:14:2a:d6:38:98:05:a4:d2:79:
         bc:70:77:87:6d:94:7b:f2:52:11:97:21:22:08:ad:f4:fd:fc:
         88:74:2f:eb:b5:03:1a:3b:3e:fc:32:65:73:77:8d:0b:8e:8a:
         3f:1a:16:69:d4:d4:b6:1e:00:9d:2d:3c:e2:15:6d:27:22:d6:
         35:10:52:4b:5e:8f:a8:09:b8:85:2c:ce:36:37:21:9c:32:37:
         94:c3:79:ae:f4:d6:fe:42:56:e5:25:70:55:b4:c8:78:cc:02:
         6e:80:1c:63:e8:2b:3c:53:ba:c8:1d:55:c4:6a:0d:b9:4e:2c:
         08:77:ac:fa:1f:70:e5:d4:37:17:4d:fd:23:48:fd:c3:78:4c:
         c7:2e:35:fc:62:a8:91:b1:b5:85:f6:73:22:3b:3f:01:12:ad:
         12:1f:bd:04:c5:5f:8b:e2:e3:d1:ae:a9:a2:d7:24:e0:3a:a0:
         b3:47:15:83:1f:e2:04:ec:5c:6f:ac:75:3a:d1:68:61:f9:2d:
         a5:fd:bc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----