Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/iQMcW3n7AW99XdjWkQiMSV4UYgBnRZZzjbovJ42zmf6/0/9B07FF5C1ECDFE4922F0BCDD3514CA4127A6B4CF.mft
File:                     9B07FF5C1ECDFE4922F0BCDD3514CA4127A6B4CF.mft (raw, json)
Hash identifier:          /AsJckKnGoTd9VWUv/TO0lFYTug6FPdOXIJrFabSMBQ=
Subject key identifier:   CF:4E:F2:99:61:7D:B4:9D:13:E7:F3:97:E3:76:68:33:BC:8E:E5:E2
Authority key identifier: 9B:07:FF:5C:1E:CD:FE:49:22:F0:BC:DD:35:14:CA:41:27:A6:B4:CF
Certificate issuer:       /CN=9B07FF5C1ECDFE4922F0BCDD3514CA4127A6B4CF
Certificate serial:       3BAA407243572A2A4B5F046103A27D1D2912EA30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B07FF5C1ECDFE4922F0BCDD3514CA4127A6B4CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/iQMcW3n7AW99XdjWkQiMSV4UYgBnRZZzjbovJ42zmf6/0/9B07FF5C1ECDFE4922F0BCDD3514CA4127A6B4CF.mft
Manifest number:          0199
Signing time:             Mon 15 Apr 2024 00:09:22 +0000
Manifest this update:     Mon 15 Apr 2024 00:04:22 +0000
Manifest next update:     Tue 16 Apr 2024 03:21:22 +0000
Files and hashes:         1: 9B07FF5C1ECDFE4922F0BCDD3514CA4127A6B4CF.crl (hash: MkTDamYe+cCH5Aq7L2rda1dKL2iQKP012m256P/Kfvs=)
                          2: 3137372e38372e3234382e302f32332d3234203d3e20323731313535.roa (hash: C/DF3l3poKliGs0VWfGCfQFXFdpyhW4Eg6gCXrorbl4=)
                          3: 323830343a373761303a3a2f33322d3438203d3e20323731313535.roa (hash: U0VBYuyzoxYS7rTRIMPr8KO20WjTgw5rbGKvkWdNJgM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:aa:40:72:43:57:2a:2a:4b:5f:04:61:03:a2:7d:1d:29:12:ea:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B07FF5C1ECDFE4922F0BCDD3514CA4127A6B4CF
        Validity
            Not Before: Apr 15 00:04:22 2024 GMT
            Not After : Apr 16 03:21:22 2024 GMT
        Subject: CN=CF4EF299617DB49D13E7F397E3766833BC8EE5E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:2d:a7:72:2f:25:32:22:21:7d:17:4b:3e:2f:
                    a3:9a:ec:96:2d:9a:9c:26:1b:39:11:8f:73:fa:0e:
                    ca:aa:dd:39:24:47:1c:28:b0:dc:04:47:17:cd:39:
                    53:5a:f9:b0:d4:3d:58:19:e8:c5:e3:c3:9f:d0:35:
                    37:33:5f:fc:84:2e:ca:dd:d5:d4:34:72:d0:cb:c1:
                    5a:ff:66:a9:39:cd:bb:89:10:7a:fe:cd:f4:a7:7e:
                    f2:3c:de:75:b6:fa:2c:ef:39:ea:22:2a:46:15:e1:
                    7b:7a:2d:e4:87:34:7f:e2:8b:69:66:a1:f8:44:d4:
                    5d:7a:c3:47:79:10:7a:70:7e:bd:12:19:29:ae:85:
                    78:60:c5:21:c9:10:ea:44:ce:b7:85:52:65:ab:b8:
                    0a:b5:bb:f3:85:3b:24:32:f5:a3:2b:4e:8d:2a:09:
                    37:69:e0:5c:63:05:f8:0d:28:21:0c:84:e3:26:76:
                    ac:fc:98:43:2d:a2:31:ad:74:b3:f6:b4:f5:4a:a4:
                    01:49:c4:4d:b9:61:86:26:8c:c1:88:19:2a:84:20:
                    ab:9a:34:aa:ad:80:9f:8b:62:78:cf:dc:54:ff:e9:
                    b7:27:47:5d:77:63:8c:71:35:a3:cf:0d:b8:61:46:
                    39:a4:d9:bc:46:dd:2b:39:2d:cf:17:88:b6:cf:d0:
                    8d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:4E:F2:99:61:7D:B4:9D:13:E7:F3:97:E3:76:68:33:BC:8E:E5:E2
            X509v3 Authority Key Identifier:
                keyid:9B:07:FF:5C:1E:CD:FE:49:22:F0:BC:DD:35:14:CA:41:27:A6:B4:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/iQMcW3n7AW99XdjWkQiMSV4UYgBnRZZzjbovJ42zmf6/0/9B07FF5C1ECDFE4922F0BCDD3514CA4127A6B4CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B07FF5C1ECDFE4922F0BCDD3514CA4127A6B4CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/iQMcW3n7AW99XdjWkQiMSV4UYgBnRZZzjbovJ42zmf6/0/9B07FF5C1ECDFE4922F0BCDD3514CA4127A6B4CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:39:dc:1d:87:97:4a:c8:75:8d:b6:38:05:9f:c4:cc:38:91:
         74:ea:2c:0a:c0:27:49:82:6f:93:07:dc:52:18:97:fc:94:74:
         c9:9f:cd:59:04:c5:98:96:af:cf:f9:5e:5b:38:6a:75:1c:d1:
         77:23:80:3a:19:33:85:e3:2b:88:d6:ea:7b:b1:3d:83:58:a2:
         ab:c8:73:98:ad:5b:93:21:29:00:c4:3e:ed:c7:3e:98:59:60:
         3b:4f:2e:36:81:a6:7f:b9:ef:57:06:60:98:fa:27:9b:e2:02:
         c3:3a:46:db:a8:38:7d:a0:27:8d:0b:68:41:a8:f9:55:4a:53:
         1a:80:83:0d:e5:31:34:2a:0f:39:85:e1:09:fc:d1:cd:96:38:
         c4:40:7f:e2:16:0c:08:1d:dc:6e:3a:e6:b4:7c:f8:d4:90:17:
         80:c4:46:60:af:0d:87:fe:42:4a:16:4b:fe:05:65:2a:23:c8:
         01:c1:46:a3:3c:a5:ca:b2:cf:2c:ba:93:31:96:d2:4d:58:8d:
         fb:4a:6d:48:bb:fd:b5:a8:ad:74:de:1c:d7:6b:14:6f:4c:3c:
         c6:2d:b7:a9:43:c0:57:95:13:66:60:1a:2d:2b:01:50:f7:57:
         e7:c4:1f:5e:24:38:6e:1e:b0:62:c3:27:d8:34:10:7b:0b:2c:
         c2:ac:87:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----