Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/0/47EF8FA7F3A3AE4912AD1712C85268F6B9E79104.mft
File:                     47EF8FA7F3A3AE4912AD1712C85268F6B9E79104.mft (raw, json)
Hash identifier:          +aaYALSaIxdoeqpuenGAeKyG7evPEXkZhx+j4m3+HBA=
Subject key identifier:   BA:7D:31:13:35:89:25:A9:5A:F0:15:F9:F4:5A:2D:C1:05:D1:AF:43
Authority key identifier: 47:EF:8F:A7:F3:A3:AE:49:12:AD:17:12:C8:52:68:F6:B9:E7:91:04
Certificate issuer:       /CN=47EF8FA7F3A3AE4912AD1712C85268F6B9E79104
Certificate serial:       5EF5E1FE616B75FB8EDE9E561968E8181E4938A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47EF8FA7F3A3AE4912AD1712C85268F6B9E79104.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/0/47EF8FA7F3A3AE4912AD1712C85268F6B9E79104.mft
Manifest number:          01DC
Signing time:             Mon 15 Apr 2024 00:57:04 +0000
Manifest this update:     Mon 15 Apr 2024 00:52:04 +0000
Manifest next update:     Tue 16 Apr 2024 02:08:04 +0000
Files and hashes:         1: 47EF8FA7F3A3AE4912AD1712C85268F6B9E79104.crl (hash: +jc0tjlFdudItncCqgnU21TypI7l8KZBabTxLSJEWNg=)
                          2: 3134312e3139332e3135312e302f32342d3234203d3e203533313230.roa (hash: Z0oV7HY09rPTKvoplwOgNVkDSGInEgPWSSB9caa7ElU=)
                          3: 3138372e3131312e31362e302f32302d3234203d3e203533313230.roa (hash: FjHgjfYOvPfWwxOi26rE3H+lPE9N9Kjwe000ivqQVcc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:f5:e1:fe:61:6b:75:fb:8e:de:9e:56:19:68:e8:18:1e:49:38:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47EF8FA7F3A3AE4912AD1712C85268F6B9E79104
        Validity
            Not Before: Apr 15 00:52:04 2024 GMT
            Not After : Apr 16 02:08:04 2024 GMT
        Subject: CN=BA7D3113358925A95AF015F9F45A2DC105D1AF43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c2:0b:b1:58:7c:2b:73:ec:ad:da:ef:6d:fa:
                    d9:4e:d2:92:7f:60:ca:cf:98:1f:d1:c1:66:bd:61:
                    2b:34:84:d3:73:40:f6:a6:30:14:8d:ec:57:1a:45:
                    23:b9:75:54:e2:52:64:00:10:3e:ef:15:8b:db:1f:
                    83:a7:cf:19:97:2d:d0:a5:fd:a7:66:fa:c7:de:35:
                    0f:6a:71:39:03:13:cc:9b:61:75:6c:4c:a7:d2:49:
                    1e:cb:9d:a6:dc:ce:73:f8:e2:c3:5e:45:64:e2:97:
                    8c:81:e0:67:fe:28:2c:19:db:29:76:6b:09:01:c1:
                    f7:eb:25:f4:ab:b4:b6:10:e3:18:c3:69:e3:d4:7c:
                    89:0a:ab:3a:a0:c5:4c:49:49:17:17:30:e4:a7:ef:
                    8e:f2:b3:50:a7:62:df:80:b3:6c:2d:b6:33:fd:bd:
                    51:b5:e1:3a:69:f4:0c:2d:ce:9d:b9:4a:38:61:5a:
                    e6:9e:bd:12:28:48:be:7c:ca:a0:8e:38:f2:42:19:
                    8f:d6:c4:92:8a:7d:f6:d2:3a:b2:d4:70:4a:93:3d:
                    7a:2f:f0:e3:0f:68:94:32:15:68:d4:5d:fb:b4:cd:
                    5b:34:6f:91:27:34:05:c6:2d:30:77:b0:e1:37:e2:
                    59:36:86:2a:16:34:5a:b7:89:26:d1:e6:85:8f:2b:
                    04:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:7D:31:13:35:89:25:A9:5A:F0:15:F9:F4:5A:2D:C1:05:D1:AF:43
            X509v3 Authority Key Identifier:
                keyid:47:EF:8F:A7:F3:A3:AE:49:12:AD:17:12:C8:52:68:F6:B9:E7:91:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/0/47EF8FA7F3A3AE4912AD1712C85268F6B9E79104.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47EF8FA7F3A3AE4912AD1712C85268F6B9E79104.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/0/47EF8FA7F3A3AE4912AD1712C85268F6B9E79104.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:d2:3a:c2:c8:14:24:a4:a7:2a:0b:be:76:93:9c:74:84:94:
         3a:35:6a:56:46:8b:36:94:81:87:17:8b:c9:02:af:30:be:67:
         93:8a:6e:18:97:d7:06:a9:b8:a6:17:5c:19:d8:cf:9f:4a:33:
         f4:b3:b5:80:be:1d:48:1f:5b:60:31:e2:b1:35:20:25:fe:6a:
         b3:ed:d3:a6:33:84:e3:10:02:fd:36:0a:7b:fb:19:68:ee:6e:
         61:4d:9a:0b:67:d2:e9:74:85:9e:ae:76:75:de:02:53:80:c9:
         6b:3a:7f:78:97:f7:14:e1:1a:35:5f:1d:ee:91:61:4c:52:6a:
         44:dd:66:3a:39:42:aa:e1:31:df:03:49:72:18:f6:0b:c4:1a:
         71:c1:14:b0:0e:50:ff:eb:8a:d0:56:4c:5b:51:cd:64:5e:7e:
         47:55:40:4a:3a:d0:c0:01:fc:4c:5b:2b:54:1b:ea:77:d5:6c:
         d5:fd:0e:4b:4a:4e:cf:87:80:5c:44:7d:db:dd:ee:31:d2:88:
         3d:b4:cf:18:43:33:fd:b6:cf:8d:fe:f4:1b:c4:ed:c5:06:51:
         cc:08:79:01:5f:7d:fb:44:5e:41:71:03:89:e9:3d:a2:14:3b:
         01:1b:c0:09:2d:ef:ae:c4:81:f0:27:a4:01:ce:7a:29:80:6c:
         97:d8:c3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----