Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HYQh6mvPsATqMgPRKVW2sxHxdYy95bthKpMoTWqmPUq/0/8D9B4497462412C0585CF6E4DC68BB819B6D1E0D.mft
File:                     8D9B4497462412C0585CF6E4DC68BB819B6D1E0D.mft (raw, json)
Hash identifier:          5kWLkxd2tGgik5PLlkz29DYiDyPo3wJf0wmSHx6ziBU=
Subject key identifier:   F0:FF:61:B3:88:06:A7:46:C4:17:31:72:2F:C8:F8:17:40:72:11:84
Authority key identifier: 8D:9B:44:97:46:24:12:C0:58:5C:F6:E4:DC:68:BB:81:9B:6D:1E:0D
Certificate issuer:       /CN=8D9B4497462412C0585CF6E4DC68BB819B6D1E0D
Certificate serial:       7695F113021A3B959D578C1C6E712319962E2E10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8D9B4497462412C0585CF6E4DC68BB819B6D1E0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HYQh6mvPsATqMgPRKVW2sxHxdYy95bthKpMoTWqmPUq/0/8D9B4497462412C0585CF6E4DC68BB819B6D1E0D.mft
Manifest number:          06A7
Signing time:             Mon 15 Apr 2024 07:40:00 +0000
Manifest this update:     Mon 15 Apr 2024 07:35:00 +0000
Manifest next update:     Tue 16 Apr 2024 07:40:00 +0000
Files and hashes:         1: 8D9B4497462412C0585CF6E4DC68BB819B6D1E0D.crl (hash: ZZMC5ugdoqXx05RaJs+RJFpGswNjijkUqH7jn82iOTE=)
                          2: 323830343a333263303a3a2f33322d3438203d3e20323635303937.roa (hash: Si0JRuzZ4xR6QccU7TsigNmRkyr4CA4wGCPxOnpz/Oo=)
                          3: 3137302e3233332e3235322e302f32322d3234203d3e20323635303937.roa (hash: dYTWeGwYoZnwE8iG6tb8K7BN9X2jyJ0sUSdC9oQZqyM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:95:f1:13:02:1a:3b:95:9d:57:8c:1c:6e:71:23:19:96:2e:2e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D9B4497462412C0585CF6E4DC68BB819B6D1E0D
        Validity
            Not Before: Apr 15 07:35:00 2024 GMT
            Not After : Apr 22 07:40:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:26:2f:c0:99:2a:f3:88:28:0e:bd:39:66:22:
                    e2:fe:00:2a:30:a9:66:4e:ad:60:ad:50:22:ce:e4:
                    a0:b0:c3:0b:fe:93:32:80:a6:59:db:85:8c:11:0b:
                    85:d6:4f:79:bd:94:41:48:8b:97:79:41:49:78:91:
                    eb:e0:a1:9a:60:06:e1:d2:b5:11:d1:e4:22:76:50:
                    38:c0:51:40:0f:42:17:8b:89:bb:f5:83:87:55:6e:
                    b2:52:b2:fa:7c:27:6c:88:b9:1a:9e:3a:3f:82:86:
                    33:94:cb:aa:79:68:d7:03:54:5b:05:18:f8:2c:47:
                    45:02:ac:cf:c0:14:39:3b:da:8a:27:91:63:13:c1:
                    37:17:72:8b:7f:f9:4c:ea:bf:7d:b8:d1:c3:7b:1e:
                    b1:84:1f:44:8b:e2:70:9b:74:2d:66:2f:f6:28:58:
                    e5:dd:9d:be:d5:b5:9c:7d:94:f4:c2:25:6b:95:9d:
                    48:1d:78:d6:d9:a4:c9:b6:66:95:ac:c5:e0:e1:0f:
                    84:5f:50:8e:a2:20:96:01:96:c7:f2:55:25:59:5d:
                    c1:77:f9:27:5f:c9:8c:95:3d:7c:34:5c:6b:0a:55:
                    9b:43:f9:4f:e2:f4:1f:f0:83:8f:a2:1b:41:64:6a:
                    58:e9:d9:bc:07:41:73:ff:41:84:45:3a:6c:ed:91:
                    6d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FF:61:B3:88:06:A7:46:C4:17:31:72:2F:C8:F8:17:40:72:11:84
            X509v3 Authority Key Identifier:
                keyid:8D:9B:44:97:46:24:12:C0:58:5C:F6:E4:DC:68:BB:81:9B:6D:1E:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HYQh6mvPsATqMgPRKVW2sxHxdYy95bthKpMoTWqmPUq/0/8D9B4497462412C0585CF6E4DC68BB819B6D1E0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8D9B4497462412C0585CF6E4DC68BB819B6D1E0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HYQh6mvPsATqMgPRKVW2sxHxdYy95bthKpMoTWqmPUq/0/8D9B4497462412C0585CF6E4DC68BB819B6D1E0D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:64:73:de:76:57:6d:25:2f:a3:dc:a4:38:59:9a:ce:7f:64:
         61:2c:cc:66:01:c5:51:c7:6d:14:f1:a1:e7:8b:bf:a6:a9:73:
         8d:97:21:98:d7:91:9a:60:54:ae:97:88:1c:d9:f8:24:d9:d2:
         d8:86:6f:39:92:81:b7:83:61:14:a7:8f:c0:f7:91:f3:8a:de:
         f6:d1:c5:2d:01:67:5a:5b:89:9b:65:45:38:fb:d4:b6:3b:4f:
         c2:0e:57:7f:04:5d:f7:7c:2f:3d:82:56:53:73:c7:bd:20:28:
         94:d1:b0:77:24:6a:5c:da:c6:bb:c6:53:e1:9b:19:08:aa:6c:
         8f:b2:32:d2:0c:9a:cf:0d:aa:0d:d1:06:e8:d6:71:94:ff:d9:
         c7:67:52:fe:6c:1a:b3:99:84:30:80:01:d6:90:1f:97:56:9d:
         a6:c0:a9:86:4d:17:53:49:40:9b:eb:d6:46:e4:58:fa:ae:b9:
         0c:8b:71:32:d5:0f:76:78:0a:a4:4e:dc:ff:97:d9:8c:ec:0c:
         84:74:08:86:34:a3:86:dc:91:21:ec:9e:4b:a2:54:26:44:61:
         37:d4:0e:3a:a4:2a:c3:4e:99:9d:d2:7a:28:cf:01:8e:20:50:
         c2:f6:07:4e:a7:be:70:0f:14:5c:f5:75:b2:b6:19:54:db:a4:
         7b:51:6d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----