Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2BpCBbJyonUgdsmg5Yw9KigKLDXMwVWsAFpChjZ1mRYD/0/127FB800FF084A00786F8ED21A643B4619AD170F.mft
File:                     127FB800FF084A00786F8ED21A643B4619AD170F.mft (raw, json)
Hash identifier:          kzJjtkL/Z2/0mOtEgVCerzyxAn/CstEb/WDDa2SKP2k=
Subject key identifier:   4A:D9:05:C5:15:A2:C9:9C:45:9C:4B:FF:B9:32:40:84:A8:B6:7C:68
Authority key identifier: 12:7F:B8:00:FF:08:4A:00:78:6F:8E:D2:1A:64:3B:46:19:AD:17:0F
Certificate issuer:       /CN=127FB800FF084A00786F8ED21A643B4619AD170F
Certificate serial:       175B4D4A89A97D40ABFB125626FFAAB491F46509
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/127FB800FF084A00786F8ED21A643B4619AD170F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2BpCBbJyonUgdsmg5Yw9KigKLDXMwVWsAFpChjZ1mRYD/0/127FB800FF084A00786F8ED21A643B4619AD170F.mft
Manifest number:          E7
Signing time:             Mon 15 Apr 2024 08:42:40 +0000
Manifest this update:     Mon 15 Apr 2024 08:37:40 +0000
Manifest next update:     Tue 16 Apr 2024 12:06:40 +0000
Files and hashes:         1: 3139312e33372e3139362e302f32322d3234203d3e20323633343034.roa (hash: gjVzd8h+9BOPyEaEtVVGBGHiwFIPrmlmu2fUgJnY/xA=)
                          2: 127FB800FF084A00786F8ED21A643B4619AD170F.crl (hash: u5hmULIQM0NlJ2/676TqN/iozY7OBf1lEhSpbLXvrJY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:5b:4d:4a:89:a9:7d:40:ab:fb:12:56:26:ff:aa:b4:91:f4:65:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=127FB800FF084A00786F8ED21A643B4619AD170F
        Validity
            Not Before: Apr 15 08:37:40 2024 GMT
            Not After : Apr 16 12:06:40 2024 GMT
        Subject: CN=4AD905C515A2C99C459C4BFFB9324084A8B67C68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b0:14:be:f1:bb:06:be:a2:56:34:48:79:71:
                    24:50:2f:45:5f:ae:bf:27:bb:53:71:6c:2b:e4:f7:
                    1a:72:f3:d1:e3:4c:8f:2f:5d:4e:69:ac:bb:6c:39:
                    30:97:b2:d6:d9:5e:cd:8b:a2:9c:0f:84:f8:53:11:
                    ef:90:8e:17:b7:18:3c:a3:0b:01:a7:c8:23:37:66:
                    0a:16:62:d7:48:94:39:0b:25:d7:64:40:af:c5:40:
                    d5:43:d5:b2:83:75:7f:fe:7f:50:76:22:a7:c9:69:
                    72:ba:d5:03:b7:eb:72:63:f9:7a:78:f3:e6:6b:7d:
                    50:77:b0:4b:80:48:7b:96:3b:7c:d1:53:a1:f4:1f:
                    cd:25:48:93:9b:aa:56:e7:20:5c:a3:6b:cd:51:3b:
                    8b:87:38:c1:aa:78:87:cb:3a:57:2d:24:d2:69:83:
                    67:74:0a:aa:7b:9d:37:7d:c5:14:d2:7f:7b:57:b1:
                    47:51:d7:4f:83:9f:2a:05:c3:c4:bd:ff:aa:b9:6b:
                    a1:71:6e:ac:95:85:ee:53:48:28:c5:a2:7b:ca:5a:
                    eb:e1:9c:f9:27:58:c3:f1:4d:ab:59:6d:99:6a:53:
                    fb:7e:d4:86:3e:02:aa:8b:8c:25:5f:4e:97:85:72:
                    7b:02:0d:4f:33:d0:d7:f3:a8:5d:65:ac:50:45:ba:
                    fa:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D9:05:C5:15:A2:C9:9C:45:9C:4B:FF:B9:32:40:84:A8:B6:7C:68
            X509v3 Authority Key Identifier:
                keyid:12:7F:B8:00:FF:08:4A:00:78:6F:8E:D2:1A:64:3B:46:19:AD:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2BpCBbJyonUgdsmg5Yw9KigKLDXMwVWsAFpChjZ1mRYD/0/127FB800FF084A00786F8ED21A643B4619AD170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/127FB800FF084A00786F8ED21A643B4619AD170F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2BpCBbJyonUgdsmg5Yw9KigKLDXMwVWsAFpChjZ1mRYD/0/127FB800FF084A00786F8ED21A643B4619AD170F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:21:33:f3:96:7d:cf:18:23:ad:5a:94:a6:d1:82:1d:d9:41:
         14:6d:59:73:86:49:d7:d6:77:cf:4b:3d:61:cb:db:e5:ef:21:
         0a:46:1d:eb:e6:dd:9d:6a:3a:b7:89:f5:f2:0a:71:cd:a8:f6:
         45:b7:ea:08:f9:f6:39:71:e6:5c:cf:fe:e8:a9:54:e7:0d:69:
         b5:8a:e0:93:fc:15:f7:53:96:84:b1:bb:6a:9d:d4:e8:a6:5f:
         c1:68:61:78:75:a1:4e:03:3e:87:93:25:c9:5e:ff:58:38:4d:
         40:44:04:2c:ab:50:9a:62:40:39:11:c6:14:9c:52:a2:2e:7d:
         59:24:5f:62:0b:f6:d1:ad:ff:57:ef:2c:ad:44:24:d0:51:c5:
         80:55:93:48:f1:06:37:d7:06:98:00:48:15:9d:f4:af:8d:13:
         9f:0c:c5:92:41:f3:3e:71:ce:ed:79:99:87:88:c9:b1:53:8d:
         c1:22:4f:e9:ae:c8:2a:f7:42:cc:24:d2:ad:c6:ec:22:2d:3c:
         a2:e3:8c:b5:31:0f:e1:d3:07:b5:34:ac:45:4b:7f:ff:40:91:
         a2:5a:c4:4b:b5:a4:8e:e2:2f:85:94:05:55:f6:1c:b1:c7:c4:
         2f:7a:3f:b8:a8:92:8c:8f:f5:2e:c0:af:c9:9d:4b:82:42:98:
         6f:9a:69:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----