Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ntvfDPmRr3Q4VNuMjCJ1k1NXHrB6Joq8N3tABSyuiPA/0/9BDBA20C31BBEBFE68ABC7F43F742C279C96B734.mft
File:                     9BDBA20C31BBEBFE68ABC7F43F742C279C96B734.mft (raw, json)
Hash identifier:          Rycr/ZxZc/x/WA+N6jmt8OVZGooI71RrdsExZqwj1Ts=
Subject key identifier:   94:FB:91:A3:01:00:20:2F:4B:BA:0E:50:3F:46:1B:EF:9B:8A:85:BA
Authority key identifier: 9B:DB:A2:0C:31:BB:EB:FE:68:AB:C7:F4:3F:74:2C:27:9C:96:B7:34
Certificate issuer:       /CN=9BDBA20C31BBEBFE68ABC7F43F742C279C96B734
Certificate serial:       6F3C58EA6954F0427BE515FD571E14078F22DDAE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9BDBA20C31BBEBFE68ABC7F43F742C279C96B734.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ntvfDPmRr3Q4VNuMjCJ1k1NXHrB6Joq8N3tABSyuiPA/0/9BDBA20C31BBEBFE68ABC7F43F742C279C96B734.mft
Manifest number:          0160
Signing time:             Sun 14 Apr 2024 19:57:48 +0000
Manifest this update:     Sun 14 Apr 2024 19:52:48 +0000
Manifest next update:     Mon 15 Apr 2024 22:55:48 +0000
Files and hashes:         1: 323830343a343339303a3a2f33322d3334203d3e203238313934.roa (hash: mPQdN4K72nMmvk9acl9n9MGcaPCpQHTpNM0K0ZifYZM=)
                          2: 9BDBA20C31BBEBFE68ABC7F43F742C279C96B734.crl (hash: 59aE/hlomrp9pV1giRK+EQmu3Gn8Zl5RCjGq6XlvXSg=)
                          3: 3138372e33332e35362e302f32312d3234203d3e203238313934.roa (hash: QHLiBRRKUVNiZUUSwxrjVMeQwgiPUsbbqGtbeympalk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:3c:58:ea:69:54:f0:42:7b:e5:15:fd:57:1e:14:07:8f:22:dd:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BDBA20C31BBEBFE68ABC7F43F742C279C96B734
        Validity
            Not Before: Apr 14 19:52:48 2024 GMT
            Not After : Apr 15 22:55:48 2024 GMT
        Subject: CN=94FB91A30100202F4BBA0E503F461BEF9B8A85BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0b:21:95:73:4c:7a:ce:59:94:99:1e:a6:f7:
                    27:86:5c:96:30:89:49:4e:78:21:57:f4:64:bb:66:
                    e3:d2:c9:37:9c:af:c4:5d:3c:68:43:06:db:6b:1c:
                    0a:bf:34:ce:98:d8:71:e7:ec:fe:3d:f9:3c:fa:14:
                    a1:d9:f1:36:16:c9:42:9a:8d:d3:e6:c6:0e:32:48:
                    a3:58:b6:8c:fd:1c:5a:24:32:ab:da:5a:12:c1:f0:
                    b3:4b:e2:e1:79:ba:27:f0:fc:b9:1c:fc:b2:7d:46:
                    88:31:1e:d0:32:6a:b0:0d:59:77:38:3f:35:21:6c:
                    08:f0:69:28:4a:48:6a:11:cf:14:fb:e1:8e:80:b2:
                    11:4d:28:96:f8:49:7d:dd:dd:5e:3d:e5:d2:39:aa:
                    0b:33:3d:a0:9c:d2:82:ed:50:48:9b:67:75:e1:46:
                    84:f4:38:a1:7b:39:66:f5:4e:95:97:1b:98:a5:9b:
                    ff:ed:29:4d:20:ad:1d:52:67:2f:b6:f3:7e:b2:ec:
                    6c:ac:e4:66:fa:f7:ca:1e:6d:cf:b0:d8:dd:fa:00:
                    ac:f4:eb:88:9d:6b:5c:a9:7b:3d:44:24:83:09:1a:
                    3b:d8:87:03:a8:80:43:52:d6:dd:12:e6:5e:59:c0:
                    0c:55:df:eb:04:3a:b1:58:7a:e5:85:77:70:82:d3:
                    0e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:FB:91:A3:01:00:20:2F:4B:BA:0E:50:3F:46:1B:EF:9B:8A:85:BA
            X509v3 Authority Key Identifier:
                keyid:9B:DB:A2:0C:31:BB:EB:FE:68:AB:C7:F4:3F:74:2C:27:9C:96:B7:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ntvfDPmRr3Q4VNuMjCJ1k1NXHrB6Joq8N3tABSyuiPA/0/9BDBA20C31BBEBFE68ABC7F43F742C279C96B734.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9BDBA20C31BBEBFE68ABC7F43F742C279C96B734.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ntvfDPmRr3Q4VNuMjCJ1k1NXHrB6Joq8N3tABSyuiPA/0/9BDBA20C31BBEBFE68ABC7F43F742C279C96B734.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:97:8c:fd:89:65:8c:28:9f:5e:f1:72:3b:54:0d:60:d7:73:
         5f:d2:83:03:1b:c8:94:bf:ca:f8:d6:c2:30:46:82:c8:2c:2b:
         76:83:d1:a6:9e:72:fc:de:51:87:c6:61:6a:a2:9f:15:83:1d:
         1d:b1:cf:1e:db:c8:48:d8:9b:14:52:15:0b:4d:ec:3e:45:06:
         dd:ea:95:21:8f:38:78:5c:f8:a2:04:08:9c:83:dd:9a:de:b6:
         5a:45:9b:3e:46:5b:90:c4:54:ca:5c:8c:d2:c4:94:6a:ec:8d:
         58:87:08:70:65:ba:22:05:ac:a9:df:e6:d9:cc:8b:cf:10:a4:
         db:bd:2b:23:61:0a:06:22:04:6f:7f:70:89:b9:66:c2:d7:be:
         36:38:6e:ed:5d:46:8b:17:08:e5:ba:02:d8:23:41:94:12:c2:
         4b:2d:c1:03:c6:1e:6b:cc:18:6a:ea:19:15:26:8d:60:3b:9f:
         c4:48:8d:97:ae:67:67:0d:96:18:f3:bf:1b:5a:ac:ca:4f:bc:
         db:fc:da:d5:6c:f0:45:6d:0f:40:07:52:6a:a1:41:d4:3a:03:
         eb:e2:fb:47:cc:9e:56:9d:a0:eb:10:1e:af:ad:b2:04:c4:66:
         58:7b:c2:25:7f:6a:02:9b:ca:92:cf:00:d6:c4:cf:b4:4d:1e:
         90:d3:9d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----