Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/4A0CF634A638CADFFABAC397E0D1615D2CA89C53.mft
File:                     4A0CF634A638CADFFABAC397E0D1615D2CA89C53.mft (raw, json)
Hash identifier:          FHqbNH1akhxd2/x1q3GPZblDOK/ZmMOOZJLdFzEu/tg=
Subject key identifier:   37:E5:40:5D:FD:B3:F1:38:09:DE:AC:C5:72:D6:75:0A:B9:51:C5:FA
Authority key identifier: 4A:0C:F6:34:A6:38:CA:DF:FA:BA:C3:97:E0:D1:61:5D:2C:A8:9C:53
Certificate issuer:       /CN=4A0CF634A638CADFFABAC397E0D1615D2CA89C53
Certificate serial:       25A3463CF4B5F3B31E0CFB23741A387AC7A19136
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A0CF634A638CADFFABAC397E0D1615D2CA89C53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/4A0CF634A638CADFFABAC397E0D1615D2CA89C53.mft
Manifest number:          23
Signing time:             Mon 08 Jan 2024 21:51:43 +0000
Manifest this update:     Mon 08 Jan 2024 21:46:43 +0000
Manifest next update:     Wed 10 Jan 2024 00:33:43 +0000
Files and hashes:         1: 4A0CF634A638CADFFABAC397E0D1615D2CA89C53.crl (hash: 8ixWpg5dLi2osBv6ppiD/j/2lmKYLQ+ZzAP5iJQ/wXY=)
                          2: 34352e3232392e35322e302f32322d3234203d3e20323637313234.roa (hash: K2QbC89xqNG1LsuQDst4M3EmgZSOyWccTKm3VdjgHDU=)
                          3: 323830343a343837633a3a2f33322d3438203d3e20323637313234.roa (hash: 6/Ks5BB1bWf6oIm9fDFojyQql0BcUh/DteNpoonbWDs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:a3:46:3c:f4:b5:f3:b3:1e:0c:fb:23:74:1a:38:7a:c7:a1:91:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A0CF634A638CADFFABAC397E0D1615D2CA89C53
        Validity
            Not Before: Jan  8 21:46:43 2024 GMT
            Not After : Jan 10 00:33:43 2024 GMT
        Subject: CN=37E5405DFDB3F13809DEACC572D6750AB951C5FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:73:f2:f9:16:fb:4b:dd:57:17:c4:22:f5:2b:
                    25:bd:2f:29:10:94:64:35:83:b3:7f:9d:55:7d:89:
                    ef:a3:14:c7:bb:ce:7e:b6:64:36:27:48:66:51:a3:
                    6d:9d:d3:48:24:fd:86:37:33:2b:6e:dd:f9:28:33:
                    e4:46:ca:b2:a1:a2:16:15:62:14:57:18:0b:75:ba:
                    46:0b:19:82:bd:1a:86:47:3c:9a:6d:79:6d:77:3e:
                    bf:c3:25:c9:e2:b7:b1:d4:bc:0d:8f:73:bd:d3:bd:
                    6d:0d:20:68:5b:f3:38:d7:02:2e:34:e2:56:10:ce:
                    33:d8:0b:5f:f3:c0:7a:c4:e7:d3:6b:3c:93:23:ac:
                    9e:59:7d:79:8f:42:e9:4e:ba:07:ce:04:ba:a3:1c:
                    fa:08:27:99:ff:52:8d:76:8d:c7:de:ee:9b:a7:20:
                    71:8c:ee:99:8c:a6:8d:dd:ef:78:50:0e:d3:d5:75:
                    7a:bc:53:fb:ca:d6:c7:06:a6:5d:f4:83:56:4b:26:
                    9e:cb:16:c4:ed:2e:b8:04:1e:77:f0:0a:96:93:bf:
                    cb:5e:50:a7:a9:d8:36:f6:9f:77:b6:b4:7a:66:63:
                    7b:ad:fe:7b:99:f9:a1:93:e9:cc:ae:e8:9c:6f:8e:
                    11:48:ca:d5:01:4d:3c:3f:96:88:42:94:0c:61:f3:
                    2e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E5:40:5D:FD:B3:F1:38:09:DE:AC:C5:72:D6:75:0A:B9:51:C5:FA
            X509v3 Authority Key Identifier:
                keyid:4A:0C:F6:34:A6:38:CA:DF:FA:BA:C3:97:E0:D1:61:5D:2C:A8:9C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/4A0CF634A638CADFFABAC397E0D1615D2CA89C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A0CF634A638CADFFABAC397E0D1615D2CA89C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/4A0CF634A638CADFFABAC397E0D1615D2CA89C53.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:1e:bd:2f:82:31:b6:01:45:86:2c:00:8b:89:19:ee:4f:47:
         65:ad:e9:1c:ec:05:db:81:da:27:4d:ed:14:b2:ca:96:b2:de:
         df:36:57:14:1e:da:14:56:a8:24:71:ac:6f:1d:86:39:9e:10:
         bd:08:bf:b3:59:e2:9f:f1:67:79:8e:55:f3:fc:6f:9b:1a:1e:
         b7:39:3c:0d:19:e3:b4:df:5d:1f:ac:cb:e8:e0:eb:32:88:bf:
         13:44:25:a9:5f:c9:5d:11:e3:ac:16:6d:ab:cd:9b:b3:34:23:
         f1:20:8d:9a:0d:09:83:62:55:6b:0c:73:07:46:54:e9:8e:7f:
         5f:8c:81:79:f8:9b:e4:ea:eb:96:4c:b4:27:67:4d:1e:b2:df:
         e7:67:a7:02:b9:92:ed:a1:8d:3d:8b:cf:b2:c5:40:b3:2c:8a:
         dc:d5:f5:4f:a5:84:f0:d7:75:d7:0a:a8:a5:3a:a1:06:fe:a9:
         8c:7f:2e:6e:04:20:de:47:69:2d:29:6d:d0:f6:f2:70:96:03:
         3e:5d:c9:8e:1d:46:8d:72:0e:5e:5a:35:b8:df:e0:6d:45:e7:
         77:f4:9a:0b:63:6f:69:d5:2b:83:41:3c:88:1b:2a:f5:64:dd:
         2d:b2:20:c0:3f:b1:fa:8b:4e:2f:dd:a0:23:32:03:cb:31:5b:
         b1:2c:99:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----