Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/gHpd9ZyoyCyD2NAAFezW1mXxnFigdkEycmfyoYumeAj/0/0405267F7F9B7583A314B52E811AE07A7E07175A.mft
File:                     0405267F7F9B7583A314B52E811AE07A7E07175A.mft (raw, json)
Hash identifier:          adHR4SqU+NK2vrrnyddprh7G00/jANtwbo+55dINtWY=
Subject key identifier:   63:83:CB:1A:F8:66:22:57:83:C8:80:47:83:71:4F:54:6B:45:80:30
Authority key identifier: 04:05:26:7F:7F:9B:75:83:A3:14:B5:2E:81:1A:E0:7A:7E:07:17:5A
Certificate issuer:       /CN=0405267F7F9B7583A314B52E811AE07A7E07175A
Certificate serial:       7DC88AFB3E745F305332CD2F9F39A84ED176BADB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0405267F7F9B7583A314B52E811AE07A7E07175A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/gHpd9ZyoyCyD2NAAFezW1mXxnFigdkEycmfyoYumeAj/0/0405267F7F9B7583A314B52E811AE07A7E07175A.mft
Manifest number:          02DB
Signing time:             Mon 15 Apr 2024 02:54:00 +0000
Manifest this update:     Mon 15 Apr 2024 02:49:00 +0000
Manifest next update:     Tue 16 Apr 2024 06:37:00 +0000
Files and hashes:         1: 0405267F7F9B7583A314B52E811AE07A7E07175A.crl (hash: kCOQoFtp626sDHdGJs1C+U04Uq9Xpou2bEOLZZvei8E=)
                          2: 323830343a323038633a3a2f33322d3438203d3e20323634343937.roa (hash: 1L+mfaBjYFsO1oMn9WyXpSLpLO4q+oERaWD2Ppeq1F8=)
                          3: 3133312e3235352e3138382e302f32322d3234203d3e20323634343937.roa (hash: /LuT5+tSlFmgDKGV3eX5e2bDVb/LY8kcCsQRPATPrQg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:c8:8a:fb:3e:74:5f:30:53:32:cd:2f:9f:39:a8:4e:d1:76:ba:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0405267F7F9B7583A314B52E811AE07A7E07175A
        Validity
            Not Before: Apr 15 02:49:00 2024 GMT
            Not After : Apr 16 06:37:00 2024 GMT
        Subject: CN=6383CB1AF866225783C8804783714F546B458030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:81:62:91:36:3f:4f:06:14:69:a0:30:05:90:
                    be:e6:47:1d:3d:19:5b:d1:40:e9:40:64:a9:e3:f1:
                    33:9a:57:f5:b6:73:e7:52:51:c8:24:34:45:ab:26:
                    8a:08:65:42:a6:25:c4:57:e2:09:f0:8c:57:c8:d9:
                    6c:f7:a2:ca:97:77:33:0b:1f:86:ee:20:60:f9:9f:
                    be:74:70:6d:b0:4e:b4:24:50:09:39:54:cc:f3:f2:
                    bb:0e:d8:f5:42:00:d4:3e:72:af:14:99:3e:4b:89:
                    5d:da:ee:58:8d:3c:0f:6d:37:01:25:98:e2:8e:d2:
                    17:44:43:3e:31:51:1e:0c:d8:58:8f:77:69:62:1c:
                    14:ff:e6:96:98:2b:2b:a1:1c:45:87:14:a5:79:a0:
                    a5:59:ee:34:cf:d5:5a:4a:7e:3e:52:6b:23:25:9c:
                    c2:9f:c2:fa:c4:92:07:51:c2:a0:9b:97:27:89:71:
                    1d:40:a4:e0:d7:7f:2f:e3:15:3d:3e:67:96:aa:0e:
                    01:3b:1b:5c:fd:9f:6b:d7:57:56:41:0c:57:40:59:
                    f5:e7:41:32:d4:3c:2e:ff:ad:4d:9d:15:65:ec:1f:
                    d9:df:13:6b:37:db:b5:02:c2:08:90:92:49:23:15:
                    f2:46:a0:8b:96:c7:ad:b5:d9:22:04:36:ee:7e:98:
                    75:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:83:CB:1A:F8:66:22:57:83:C8:80:47:83:71:4F:54:6B:45:80:30
            X509v3 Authority Key Identifier:
                keyid:04:05:26:7F:7F:9B:75:83:A3:14:B5:2E:81:1A:E0:7A:7E:07:17:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/gHpd9ZyoyCyD2NAAFezW1mXxnFigdkEycmfyoYumeAj/0/0405267F7F9B7583A314B52E811AE07A7E07175A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0405267F7F9B7583A314B52E811AE07A7E07175A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/gHpd9ZyoyCyD2NAAFezW1mXxnFigdkEycmfyoYumeAj/0/0405267F7F9B7583A314B52E811AE07A7E07175A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:89:67:b1:ea:24:14:e3:24:21:08:10:0a:9d:6e:9c:cf:ca:
         21:4d:7e:00:7f:03:cc:75:c6:0a:33:7e:b0:47:1f:56:7c:36:
         c8:1b:ce:59:e3:5c:d6:af:4e:1d:75:31:e6:96:23:ca:6b:18:
         02:11:b7:c7:ba:6c:a2:6b:91:b9:3f:f8:0e:b9:97:a3:86:25:
         86:6a:62:dd:ff:9b:48:f7:be:3f:7e:3c:71:70:04:d4:f3:2d:
         60:40:0e:ae:e3:13:99:35:69:c0:c1:41:8c:7d:0a:66:90:2d:
         5c:e3:72:0b:32:e7:11:0f:09:8a:cf:30:7c:a0:fe:89:0c:6f:
         db:b4:a5:32:a6:4f:44:b4:3d:ea:36:66:05:0e:46:d9:4b:6f:
         3f:41:f7:0a:3a:64:f7:e9:83:79:8f:25:a9:3d:51:65:9d:e5:
         ac:19:7b:be:c8:6d:73:2c:fa:a7:86:fb:0a:12:ef:64:0a:8b:
         68:4d:3a:e9:95:92:97:42:1f:c3:7b:ba:33:df:dd:4a:3b:31:
         e7:d3:4f:7a:46:8f:26:21:67:c2:16:82:de:b3:ec:40:80:49:
         a0:32:a3:16:02:eb:c7:a9:df:c8:c8:9c:cb:32:5d:e5:39:62:
         41:ab:29:21:0e:e8:a0:70:3d:b6:d3:c1:b9:7f:b8:bc:31:a4:
         5d:a4:d3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----