Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/1/C009A2D2D52E5A7910CF6CC4DC196D8F87E2C2DC.mft
File:                     C009A2D2D52E5A7910CF6CC4DC196D8F87E2C2DC.mft (raw, json)
Hash identifier:          s5m3fP3LGK2Zy1yP1TyMOgcliGw01zwgActUg0CNudk=
Subject key identifier:   90:77:86:3F:47:57:31:56:D0:1D:F7:5D:0A:2F:F4:B5:5A:96:E1:5B
Authority key identifier: C0:09:A2:D2:D5:2E:5A:79:10:CF:6C:C4:DC:19:6D:8F:87:E2:C2:DC
Certificate issuer:       /CN=C009A2D2D52E5A7910CF6CC4DC196D8F87E2C2DC
Certificate serial:       3AC494612AFB56C5E685BE9E6B455943DA58B592
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C009A2D2D52E5A7910CF6CC4DC196D8F87E2C2DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/1/C009A2D2D52E5A7910CF6CC4DC196D8F87E2C2DC.mft
Manifest number:          11
Signing time:             Fri 19 Apr 2024 05:17:05 +0000
Manifest this update:     Fri 19 Apr 2024 05:12:05 +0000
Manifest next update:     Sat 20 Apr 2024 08:23:05 +0000
Files and hashes:         1: C009A2D2D52E5A7910CF6CC4DC196D8F87E2C2DC.crl (hash: Y+ep2GtHYf5LRuz0q0Jr3HlVig5LR8BfuvYTl1Wa6fE=)
                          2: 323830343a353330303a3a2f33322d3332203d3e20323638353536.roa (hash: YR5R0ok9ZEz5ZnFhnQzjw6VkSD41b6vdv7/Fwlf/Hw0=)
                          3: 34352e3136332e3137322e302f32322d3234203d3e20323638353536.roa (hash: xev2xNRVbyRG0GjxM8ZyMXl31xxloGB+Y2RfUHvWwoQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:c4:94:61:2a:fb:56:c5:e6:85:be:9e:6b:45:59:43:da:58:b5:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C009A2D2D52E5A7910CF6CC4DC196D8F87E2C2DC
        Validity
            Not Before: Apr 19 05:12:05 2024 GMT
            Not After : Apr 20 08:23:05 2024 GMT
        Subject: CN=9077863F47573156D01DF75D0A2FF4B55A96E15B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d1:0c:1a:39:cc:4e:d3:9b:3b:b1:d8:bc:30:
                    2c:e0:81:3b:34:e4:f9:45:d8:83:bc:b0:95:12:37:
                    4a:c9:12:53:10:f0:dd:c6:8b:a1:a0:a8:8c:f0:66:
                    7e:62:b9:0a:7e:b0:6d:1f:fc:19:2c:65:87:2b:f3:
                    35:cf:9c:be:4c:aa:61:68:25:8c:61:3a:5b:0b:d3:
                    42:7c:9c:70:91:79:71:12:90:5b:b9:1c:0b:f6:33:
                    1f:55:58:ee:4b:24:d8:fe:26:1d:bb:29:43:6f:59:
                    93:42:65:9a:bd:33:21:9d:7b:86:f1:00:3c:94:ee:
                    7b:5e:a2:a7:72:9c:fd:bd:91:8c:97:32:ad:47:e1:
                    37:04:42:3c:57:ed:5a:e1:f5:bf:49:de:74:a6:09:
                    b5:e4:76:16:03:4e:a8:b6:3f:d1:a1:06:b7:2e:5e:
                    ed:c2:79:9e:a7:9a:a4:79:04:e0:0f:4d:aa:44:13:
                    20:68:88:1a:f1:c2:bc:14:4e:26:52:f9:24:82:02:
                    35:a4:1c:c9:1a:34:03:a6:a6:d1:c6:51:0e:d9:75:
                    4b:55:39:ea:b4:9f:6c:71:a1:ae:7d:5c:62:a3:a9:
                    f4:a3:59:ac:85:5d:04:74:c3:e2:37:99:13:e8:16:
                    e3:1d:f8:67:96:21:15:83:f0:45:7b:5a:17:c2:1a:
                    80:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:77:86:3F:47:57:31:56:D0:1D:F7:5D:0A:2F:F4:B5:5A:96:E1:5B
            X509v3 Authority Key Identifier:
                keyid:C0:09:A2:D2:D5:2E:5A:79:10:CF:6C:C4:DC:19:6D:8F:87:E2:C2:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/1/C009A2D2D52E5A7910CF6CC4DC196D8F87E2C2DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C009A2D2D52E5A7910CF6CC4DC196D8F87E2C2DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/1/C009A2D2D52E5A7910CF6CC4DC196D8F87E2C2DC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:02:35:a3:da:62:44:19:21:a1:6d:2f:20:8e:1d:91:e4:1e:
         6e:b7:15:34:9b:8c:0c:c5:6c:f3:37:0e:98:ee:02:80:cf:a8:
         00:1f:55:51:d8:dd:c8:80:74:a5:6c:3a:30:ec:a7:29:da:a7:
         68:36:a7:6e:37:5b:08:03:2e:a4:97:93:59:99:b7:b4:c7:d8:
         34:06:34:f1:57:b8:eb:fc:55:f4:b3:b8:f6:9c:d4:62:ae:81:
         1d:ec:c5:7b:23:b8:a5:56:2c:0b:7c:fd:ac:21:21:af:36:5f:
         53:fa:13:2f:bf:d3:4f:71:2a:91:4a:69:a7:50:fb:82:90:a7:
         0a:06:f9:85:31:f5:7e:22:aa:0f:45:0d:b5:9a:d9:a1:e8:44:
         33:56:d5:bb:c9:ea:42:f9:7f:76:33:27:22:3a:17:db:ab:8a:
         88:a8:7a:78:a5:60:2b:98:8e:42:41:12:21:de:d7:34:b5:23:
         ae:3f:ec:40:2b:1a:10:4e:42:ef:7b:62:79:32:94:6e:91:07:
         f2:21:7f:f4:c5:2f:f5:c8:3e:d2:df:20:dc:2b:ed:eb:94:6a:
         a7:9d:38:32:21:66:7f:f5:b6:72:35:4a:43:9b:dd:7c:17:87:
         2c:32:cf:43:15:ce:cd:dc:eb:f8:66:64:4e:22:66:ff:21:62:
         1a:64:a1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----