Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/958D999AE644F3CCA7738A810C58C08D1A84F92B.mft
File:                     958D999AE644F3CCA7738A810C58C08D1A84F92B.mft (raw, json)
Hash identifier:          K+AbY1NWAyp8Fnwz5dgThJQBhyj2Eha6Quc0Ix5Jhbc=
Subject key identifier:   09:7F:E6:1E:7B:53:81:CE:B6:69:EE:C0:87:8A:63:5B:86:E9:DC:01
Authority key identifier: 95:8D:99:9A:E6:44:F3:CC:A7:73:8A:81:0C:58:C0:8D:1A:84:F9:2B
Certificate issuer:       /CN=958D999AE644F3CCA7738A810C58C08D1A84F92B
Certificate serial:       665E417473020BAB5FD0B14F3FADBCF48BE27183
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/958D999AE644F3CCA7738A810C58C08D1A84F92B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/958D999AE644F3CCA7738A810C58C08D1A84F92B.mft
Manifest number:          02DC
Signing time:             Wed 14 Jun 2023 02:42:00 +0000
Manifest this update:     Wed 14 Jun 2023 02:37:00 +0000
Manifest next update:     Thu 15 Jun 2023 02:42:00 +0000
Files and hashes:         1: 34352e3136382e3136382e302f32322d3234203d3e20323638303737.roa (hash: //pgMlQvQEfP9MUb7dZ+pAKT8y02dj0tqtuEmCNwfu0=)
                          2: 958D999AE644F3CCA7738A810C58C08D1A84F92B.crl (hash: kccAdy/zLoWVCw07+VFm42s+B2XUfzqO4EpyKaf0rFA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:5e:41:74:73:02:0b:ab:5f:d0:b1:4f:3f:ad:bc:f4:8b:e2:71:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=958D999AE644F3CCA7738A810C58C08D1A84F92B
        Validity
            Not Before: Jun 14 02:37:00 2023 GMT
            Not After : Jun 21 02:42:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8e:c0:76:5d:5d:1a:3b:19:ad:c0:ca:12:07:
                    36:62:10:63:4b:c1:6d:27:bc:60:cc:15:53:1b:af:
                    3d:6b:76:1e:3b:c0:3a:c7:3e:ca:5c:3e:78:71:a4:
                    c8:38:04:35:fb:0d:db:39:63:3f:5f:3a:b6:41:89:
                    97:6d:4d:48:6e:f2:b6:b1:4f:a1:bf:d8:47:40:27:
                    81:28:87:71:20:6c:bb:e2:4d:b6:f6:02:81:ef:13:
                    66:3f:d6:45:ea:ab:f0:48:f7:0d:15:ba:3d:3b:09:
                    31:db:50:44:b0:1a:72:80:8d:00:05:40:26:bd:97:
                    18:3f:b6:49:64:81:da:e8:e5:dc:4f:af:f0:0f:e9:
                    18:49:51:4e:0a:c1:4a:a7:a0:22:1d:1d:af:40:b7:
                    7c:be:3f:c4:1e:67:4f:09:48:0a:73:aa:60:57:57:
                    bd:14:99:d1:09:28:6f:14:18:8f:da:b8:a7:73:15:
                    a5:0a:5f:64:9c:11:57:b8:e1:95:ba:4a:44:03:33:
                    67:0c:70:04:86:66:56:39:c1:e9:db:d2:c9:84:76:
                    39:a8:3d:da:2c:a8:bc:f2:4b:86:7b:bf:06:4a:52:
                    13:81:de:f5:bc:b6:42:44:ba:8e:95:11:0f:46:dc:
                    d7:41:3c:62:17:9d:a3:d5:01:ab:66:31:7f:7d:c9:
                    5f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:7F:E6:1E:7B:53:81:CE:B6:69:EE:C0:87:8A:63:5B:86:E9:DC:01
            X509v3 Authority Key Identifier:
                keyid:95:8D:99:9A:E6:44:F3:CC:A7:73:8A:81:0C:58:C0:8D:1A:84:F9:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/958D999AE644F3CCA7738A810C58C08D1A84F92B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/958D999AE644F3CCA7738A810C58C08D1A84F92B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/958D999AE644F3CCA7738A810C58C08D1A84F92B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:97:8f:40:1e:eb:d6:ae:dc:bf:cc:bd:54:d3:98:4a:0a:a4:
         12:18:fa:9a:86:84:34:a9:3d:54:8e:fe:d6:cc:3c:7a:e2:bd:
         b3:46:37:a0:fb:38:77:09:d7:2b:e7:5b:26:5f:02:a5:9d:46:
         9b:5d:81:ee:52:30:c8:2a:9c:33:35:34:6a:7c:2c:86:59:02:
         16:a1:e7:6c:5a:8c:77:1c:97:90:68:0e:45:ba:a6:5a:03:3e:
         5b:75:72:d8:f6:2b:c1:ce:52:b3:4d:6c:f7:82:fd:a4:0b:eb:
         ca:51:c1:e4:cf:7f:2b:28:2e:5b:25:1b:fb:c5:75:f6:0f:f3:
         ae:b3:56:3e:f4:9d:44:76:8a:5a:6a:69:73:d1:98:4d:96:fb:
         e2:8b:0f:7a:0a:af:89:73:5e:45:5e:66:12:e5:d8:3d:82:55:
         b8:22:b8:bc:4a:5e:81:7e:cf:62:2d:e5:2d:be:8a:2f:41:f6:
         fc:16:76:1b:83:fa:53:9d:6d:b5:24:c5:49:62:ba:c8:53:32:
         e0:65:9e:ed:22:a8:ce:1f:26:42:45:3c:1a:af:07:cc:bc:f8:
         5e:84:e5:d6:af:db:42:00:80:f6:be:89:04:c8:5c:a6:f6:95:
         f2:30:de:d0:d6:13:30:24:c5:6f:ba:21:37:b3:3d:03:a4:4a:
         6b:5c:33:f0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----