Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.mft
File:                     AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.mft (raw, json)
Hash identifier:          UOKrIuv1UuCDlP1Cxtl+xSAFUp441uTZ7mQ8XMCE3n0=
Subject key identifier:   11:1D:4F:71:65:A3:7A:75:34:F6:64:EB:2C:6C:DC:43:B4:CD:0F:78
Authority key identifier: AD:72:A9:F4:6C:F5:79:BD:9F:5A:5E:AE:AE:29:CD:4D:86:6E:27:C4
Certificate issuer:       /CN=AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4
Certificate serial:       34D9C3BEC0F5DFB4F1385FD261C51DF6F68BE670
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.mft
Manifest number:          1C
Signing time:             Sun 21 Apr 2024 18:40:01 +0000
Manifest this update:     Sun 21 Apr 2024 18:35:01 +0000
Manifest next update:     Mon 22 Apr 2024 18:40:01 +0000
Files and hashes:         1: AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.crl (hash: PZ0iLMB3rY5AY2w7eBWT3JSJyXD/S6AUTq5/UKTwWM4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:d9:c3:be:c0:f5:df:b4:f1:38:5f:d2:61:c5:1d:f6:f6:8b:e6:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4
        Validity
            Not Before: Apr 21 18:35:01 2024 GMT
            Not After : Apr 28 18:40:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:00:14:15:fb:f3:b8:51:3c:0b:52:01:6f:0e:
                    f3:69:06:ab:6c:26:96:88:02:31:6c:2f:0f:16:cc:
                    cb:69:9b:61:f6:45:71:79:90:05:7c:8a:11:e5:41:
                    ec:79:11:9e:bb:9b:f9:e3:93:b4:8f:48:b1:66:b8:
                    5d:1c:cf:58:43:c2:63:71:9d:29:a3:38:e4:1e:2f:
                    7c:fa:33:22:dd:48:39:2f:f8:44:28:b3:5e:52:72:
                    a3:da:92:72:3e:7a:ac:3e:28:d9:de:5c:3f:5b:da:
                    b7:f4:9a:96:b1:35:eb:f1:af:6b:70:5b:f7:74:ee:
                    9b:6f:a2:d8:97:6a:89:41:a7:31:44:3d:2f:16:e4:
                    63:8c:e1:98:06:4b:4e:fb:a6:b5:81:e6:6e:bb:e2:
                    55:35:d8:a4:dc:77:16:93:a1:9c:c1:a9:4f:a1:3c:
                    a9:7c:a5:cf:7f:1d:70:c1:4f:ec:88:21:87:12:2f:
                    f2:df:b0:3c:2c:49:a7:c7:39:70:73:9b:cf:00:e4:
                    c9:1f:5e:3f:dc:94:9b:e0:a3:16:3c:5c:d9:56:b0:
                    41:c9:21:ff:a8:a9:70:c3:b4:c5:95:3e:63:81:64:
                    87:b5:8d:9e:30:cc:15:1f:01:1d:20:f4:a1:3e:9a:
                    9d:a4:77:f0:e1:8d:4d:f6:1a:33:8d:97:c8:8e:f4:
                    33:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:1D:4F:71:65:A3:7A:75:34:F6:64:EB:2C:6C:DC:43:B4:CD:0F:78
            X509v3 Authority Key Identifier:
                keyid:AD:72:A9:F4:6C:F5:79:BD:9F:5A:5E:AE:AE:29:CD:4D:86:6E:27:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/1/AD72A9F46CF579BD9F5A5EAEAE29CD4D866E27C4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:d4:46:15:23:7c:a8:de:46:ad:98:68:21:63:92:8c:78:c1:
         f7:2a:cd:ac:d4:29:6b:9d:e1:ac:5f:c5:03:75:88:37:7d:59:
         4b:47:56:7a:81:c4:1e:f0:67:51:55:20:4b:99:82:5a:e4:8a:
         26:70:86:6f:fc:26:2b:9a:55:a2:24:a6:03:f8:38:97:29:a1:
         03:dd:38:5d:ea:97:e0:0f:31:0c:9f:29:05:58:04:5b:de:52:
         f2:fa:80:ea:20:8b:91:76:1f:f4:30:42:25:58:58:4d:59:5f:
         3a:fc:17:f1:66:90:ea:27:00:f2:a1:8f:7d:94:94:e5:4a:88:
         48:3e:28:4f:21:91:ef:7d:11:3e:fa:91:32:a0:f0:b8:8a:47:
         6e:de:0e:76:ff:01:50:8d:6e:5c:14:fc:2b:fa:d1:cd:fe:13:
         90:26:0b:94:04:67:06:c2:78:1b:08:28:7c:16:dc:bc:61:38:
         d7:31:61:11:06:9c:72:34:ee:8e:83:3d:12:72:f3:0b:06:3e:
         63:49:83:de:53:da:9d:88:6e:d6:fe:31:44:73:dc:13:2e:87:
         70:c7:3e:65:e4:33:e1:84:52:5f:ce:ce:9b:72:21:b1:55:1c:
         df:d1:1a:20:50:c4:8f:69:74:6a:d1:7b:9c:73:93:4f:25:d5:
         6f:90:3e:f9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----