Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/4A621C555E0A637F8A588F23BDFAF9CBF530BD49.mft
File:                     4A621C555E0A637F8A588F23BDFAF9CBF530BD49.mft (raw, json)
Hash identifier:          JoY3cj0lwKg8xodRlhptmMnguHGbv6cIaglWrkyZNws=
Subject key identifier:   DB:BA:7A:5F:46:B0:12:00:36:00:DE:D9:ED:6E:1C:4D:27:57:5B:53
Authority key identifier: 4A:62:1C:55:5E:0A:63:7F:8A:58:8F:23:BD:FA:F9:CB:F5:30:BD:49
Certificate issuer:       /CN=4A621C555E0A637F8A588F23BDFAF9CBF530BD49
Certificate serial:       2A54D1165DD3C67DE57DEB3929D5E7BC2BBAEF7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A621C555E0A637F8A588F23BDFAF9CBF530BD49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/4A621C555E0A637F8A588F23BDFAF9CBF530BD49.mft
Manifest number:          F9
Signing time:             Sun 14 Apr 2024 19:33:40 +0000
Manifest this update:     Sun 14 Apr 2024 19:28:40 +0000
Manifest next update:     Mon 15 Apr 2024 20:51:40 +0000
Files and hashes:         1: 4A621C555E0A637F8A588F23BDFAF9CBF530BD49.crl (hash: 00XfmVqq2fT+YLFI/fIZhiRvWUeY0eDKyb9bu7UfgvQ=)
                          2: 323830343a323666343a3a2f33322d3336203d3e20323633383636.roa (hash: QMCNWjWUjiuyniUT2YpTXExx+tHLqtuAIGXhL4opWME=)
                          3: 3133382e3138362e3131322e302f32322d3234203d3e20323633383636.roa (hash: faVBvZcx2CklFfW0LuI7Ds0u43BL3FTv8SouBXsFFv8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:54:d1:16:5d:d3:c6:7d:e5:7d:eb:39:29:d5:e7:bc:2b:ba:ef:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A621C555E0A637F8A588F23BDFAF9CBF530BD49
        Validity
            Not Before: Apr 14 19:28:40 2024 GMT
            Not After : Apr 15 20:51:40 2024 GMT
        Subject: CN=DBBA7A5F46B012003600DED9ED6E1C4D27575B53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4a:9e:1b:56:46:8d:8f:99:fd:57:f4:c6:f5:
                    55:e4:02:0d:43:fa:87:89:ec:2f:63:4e:f5:54:51:
                    8e:2a:c1:0a:1d:4c:c6:38:9f:0d:48:dc:a1:e6:c4:
                    7c:18:94:dd:7e:b3:c0:b2:67:e4:b7:a5:2d:05:21:
                    ed:d2:2f:2a:f9:d5:59:bb:62:40:fb:24:dc:10:b5:
                    27:9c:3d:a7:59:25:f4:36:af:ba:8e:c9:84:66:b1:
                    b8:d7:02:e1:35:83:e9:d0:77:6a:dd:97:30:1e:c8:
                    b2:92:ed:17:55:08:a8:4f:91:60:f9:5d:e2:eb:83:
                    cf:c8:bd:be:2c:d3:44:b2:6a:d6:8e:c6:2d:fe:1f:
                    b4:e8:83:f3:54:fe:89:21:96:c0:3d:f8:05:7b:e7:
                    8b:a2:f7:47:95:91:94:99:a0:0c:97:f6:1f:35:24:
                    64:7a:75:ac:9b:c9:78:d9:84:08:de:15:ef:16:24:
                    47:63:57:a2:38:c4:61:63:53:bc:38:34:28:ec:7d:
                    15:0d:d1:59:7c:14:86:e1:c9:d8:77:0f:6f:f2:21:
                    0b:82:37:b4:05:12:a1:a2:f2:86:31:b9:48:38:2b:
                    0b:69:7a:3a:9d:ef:18:25:4a:6f:71:1f:bc:26:f2:
                    43:1c:88:95:f5:e3:0f:63:62:1f:0e:58:09:81:48:
                    85:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:BA:7A:5F:46:B0:12:00:36:00:DE:D9:ED:6E:1C:4D:27:57:5B:53
            X509v3 Authority Key Identifier:
                keyid:4A:62:1C:55:5E:0A:63:7F:8A:58:8F:23:BD:FA:F9:CB:F5:30:BD:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/4A621C555E0A637F8A588F23BDFAF9CBF530BD49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A621C555E0A637F8A588F23BDFAF9CBF530BD49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/4A621C555E0A637F8A588F23BDFAF9CBF530BD49.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:38:a9:76:c5:2a:1e:40:e6:16:18:38:47:79:ab:81:c7:77:
         6b:73:7e:e8:0a:73:1e:d4:37:5c:f4:1c:0c:a0:53:f8:de:7f:
         20:50:63:bf:9b:cb:14:8b:3e:42:fe:19:ec:f9:28:78:ee:2c:
         e9:84:f8:9a:8b:7e:63:7d:ef:bb:f6:40:ee:ae:81:13:dc:22:
         cc:6f:6e:14:20:1b:3c:ea:cd:4a:6a:ff:43:fe:1d:74:8d:d8:
         28:2f:e2:22:f3:36:e1:6f:4b:5f:48:09:f3:a9:68:d0:bb:ee:
         1c:ff:3e:a7:48:ad:37:75:4a:ed:63:95:a6:ff:47:30:01:6e:
         09:0a:6c:4a:a9:4d:3f:34:a0:a9:b5:bc:45:f5:2e:06:de:dc:
         bb:a5:64:88:62:e6:aa:ff:89:39:1a:5e:bc:df:e4:62:a7:57:
         dd:d3:77:86:da:fc:06:e0:54:3a:a4:89:af:1d:41:6a:ff:38:
         b0:0f:2c:7a:77:fa:06:8b:52:c0:6f:19:0d:97:d4:73:94:aa:
         56:52:99:32:bd:99:a7:66:00:ff:83:9e:a1:c5:f4:83:ce:88:
         20:df:f5:75:5e:0c:27:9a:d0:5c:c3:66:46:4b:b2:d3:e3:f9:
         e7:79:87:43:89:d2:28:c8:87:5d:19:57:a2:4d:63:4c:99:ae:
         95:9b:b9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----