Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9934F4612B558BBD8DCD81B41A48C39A8E686631.mft
File:                     9934F4612B558BBD8DCD81B41A48C39A8E686631.mft (raw, json)
Hash identifier:          uQZNTBwzNOkQ44P55aJ7e8x4eZ0ZPnHW/lPKghNuxt4=
Subject key identifier:   AE:E8:B9:7B:92:CE:B0:66:F9:1D:1A:0D:0D:0E:71:5B:8F:DE:FC:40
Authority key identifier: 99:34:F4:61:2B:55:8B:BD:8D:CD:81:B4:1A:48:C3:9A:8E:68:66:31
Certificate issuer:       /CN=9934F4612B558BBD8DCD81B41A48C39A8E686631
Certificate serial:       48B2DB1A4B5AA94DB3E2F86D3C977D8254B4AFB2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9934F4612B558BBD8DCD81B41A48C39A8E686631.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9934F4612B558BBD8DCD81B41A48C39A8E686631.mft
Manifest number:          03
Signing time:             Tue 16 Apr 2024 14:48:02 +0000
Manifest this update:     Tue 16 Apr 2024 14:43:02 +0000
Manifest next update:     Wed 17 Apr 2024 18:36:02 +0000
Files and hashes:         1: 3136302e3233382e32342e302f32322d3234203d3e20323637323633.roa (hash: 8ebulrtmXODh8LDAb+mjfRmCBSgJETeqAG0P/T5Kwv4=)
                          2: 323830343a346163383a3a2f33322d3332203d3e20323637323633.roa (hash: P7KYJsh3JcaIVsUQFVsjJJN2N4eGzixYbMHIrBLjo1k=)
                          3: 9934F4612B558BBD8DCD81B41A48C39A8E686631.crl (hash: O0UzP1Tn+ObZ+Bh+YK82tNRev5qKWFzmCzqgUz4ABs8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:b2:db:1a:4b:5a:a9:4d:b3:e2:f8:6d:3c:97:7d:82:54:b4:af:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9934F4612B558BBD8DCD81B41A48C39A8E686631
        Validity
            Not Before: Apr 16 14:43:02 2024 GMT
            Not After : Apr 17 18:36:02 2024 GMT
        Subject: CN=AEE8B97B92CEB066F91D1A0D0D0E715B8FDEFC40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ae:9d:33:05:2b:b6:6d:aa:7d:c4:13:aa:a9:
                    a4:33:6e:82:60:6d:06:be:b3:2a:a7:a6:13:dc:5e:
                    a7:bd:cb:af:7c:44:cd:b6:4a:00:e8:b0:84:cb:4e:
                    ce:56:6e:7b:ac:41:b7:ce:c4:18:75:0d:3d:a1:0c:
                    75:fe:26:94:b0:9b:8b:08:38:8e:52:4f:84:da:39:
                    af:6b:8c:16:fe:0c:d0:2b:9d:2f:a7:20:08:6c:85:
                    97:90:db:28:f8:2d:70:4e:3e:6b:44:07:30:e7:32:
                    a4:ef:46:0e:83:35:fc:31:57:99:c2:9d:8f:de:69:
                    4a:1d:59:80:90:47:f6:47:e5:fa:ed:42:e4:e6:06:
                    ac:ca:00:8a:5d:72:4b:07:b8:48:e6:9c:6c:5b:9e:
                    36:7e:ab:f6:a1:3c:d9:0c:64:a9:e1:ba:6e:0b:b9:
                    3e:ac:b1:93:ff:39:e8:41:c8:ef:de:03:5f:b8:43:
                    7f:4e:80:18:8c:83:e6:17:41:db:c2:33:2e:66:dd:
                    db:d1:f9:3a:ff:22:3f:f9:fa:e1:35:1d:ab:4e:7c:
                    3f:2c:fc:c9:e5:58:62:6a:21:81:fe:90:7a:9c:42:
                    ed:55:5d:b9:88:41:cf:e2:e1:d6:7d:53:17:21:a6:
                    f5:07:89:65:8b:1d:cf:33:47:ad:29:81:83:49:39:
                    ff:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E8:B9:7B:92:CE:B0:66:F9:1D:1A:0D:0D:0E:71:5B:8F:DE:FC:40
            X509v3 Authority Key Identifier:
                keyid:99:34:F4:61:2B:55:8B:BD:8D:CD:81:B4:1A:48:C3:9A:8E:68:66:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9934F4612B558BBD8DCD81B41A48C39A8E686631.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9934F4612B558BBD8DCD81B41A48C39A8E686631.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9934F4612B558BBD8DCD81B41A48C39A8E686631.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:f2:d3:f0:e5:de:49:8b:4f:5c:a1:cd:90:c2:dd:dd:1a:a5:
         67:bd:fc:78:50:d3:41:14:1c:b2:73:e2:f5:90:cc:d0:37:17:
         91:53:52:0d:58:19:6b:b4:5f:c1:ff:e6:f2:f4:3c:1c:64:de:
         21:3c:c4:40:31:96:01:3e:9f:e4:78:18:12:a4:56:89:09:d8:
         89:29:51:f4:d0:44:64:6c:a8:96:22:85:fa:e4:ce:47:f5:04:
         8c:e2:fe:5c:f4:d6:a4:c3:6a:de:01:73:42:a3:66:ef:19:b4:
         9f:9b:e9:a0:32:33:8c:72:e8:44:16:7b:cd:6b:0b:7a:42:59:
         78:78:8a:08:b5:0e:46:b1:7a:34:bc:7e:31:b4:03:a5:17:ad:
         52:d1:e9:de:4e:ba:d5:84:ad:58:d8:8b:74:da:e1:ba:8c:b1:
         18:2b:37:24:38:27:f1:67:aa:fa:40:11:19:fa:c6:f2:84:27:
         fd:36:9e:6b:9b:5d:ff:af:d6:20:70:38:a9:ec:92:3c:9d:04:
         3e:1b:f5:25:e6:e2:c6:ce:ba:a1:04:98:5c:1b:47:29:49:75:
         22:5b:31:c6:84:0b:b3:5b:4b:f5:bb:12:8c:e9:6e:ef:c1:47:
         29:45:8f:f2:1b:a3:ca:13:91:e6:64:bd:4c:78:b5:9f:98:1f:
         32:e4:7e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----