Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/0/1078C6CBCEB6EEDE3FCC8BFECE988A951FF373EC.mft
File:                     1078C6CBCEB6EEDE3FCC8BFECE988A951FF373EC.mft (raw, json)
Hash identifier:          Ur1/iHCZ0sOlLaCkW5NMgNpogAKkW6IJvqE7V7bTke0=
Subject key identifier:   73:F3:0F:BB:F3:CB:A0:FF:B1:02:0A:3F:59:7F:A9:82:F5:01:61:38
Authority key identifier: 10:78:C6:CB:CE:B6:EE:DE:3F:CC:8B:FE:CE:98:8A:95:1F:F3:73:EC
Certificate issuer:       /CN=1078C6CBCEB6EEDE3FCC8BFECE988A951FF373EC
Certificate serial:       2AA4FF47F65DFB3D8CAB6B6FA7CC21984C201F0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1078C6CBCEB6EEDE3FCC8BFECE988A951FF373EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/0/1078C6CBCEB6EEDE3FCC8BFECE988A951FF373EC.mft
Manifest number:          0730
Signing time:             Sun 14 Apr 2024 23:17:54 +0000
Manifest this update:     Sun 14 Apr 2024 23:12:54 +0000
Manifest next update:     Mon 15 Apr 2024 23:49:54 +0000
Files and hashes:         1: 3136382e3230352e37362e302f32322d3234203d3e20323635333535.roa (hash: zEDWQ6hgQS8JcinZN2FbMtBTHDYKUKb67pdvZbAm72Y=)
                          2: 1078C6CBCEB6EEDE3FCC8BFECE988A951FF373EC.crl (hash: FuDBlQ5PrIV2Pj8ilsubm0crQWEU9GPdzXKDQKk9g/Q=)
                          3: 323830343a326539633a3a2f33322d3438203d3e20323635333535.roa (hash: yKQ/BSv3AIy+RfIz6YUHZnfyVc0UcjuuahLIHJmqNuk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:a4:ff:47:f6:5d:fb:3d:8c:ab:6b:6f:a7:cc:21:98:4c:20:1f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1078C6CBCEB6EEDE3FCC8BFECE988A951FF373EC
        Validity
            Not Before: Apr 14 23:12:54 2024 GMT
            Not After : Apr 15 23:49:54 2024 GMT
        Subject: CN=73F30FBBF3CBA0FFB1020A3F597FA982F5016138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:83:2f:33:7d:8b:91:9d:13:97:cc:ec:4e:a6:
                    8c:c8:53:90:70:e9:6b:1a:93:aa:31:00:f7:aa:33:
                    d3:3a:3b:28:86:09:8a:0b:12:0e:55:00:42:21:1c:
                    e2:fd:bf:f5:02:14:e6:26:c1:98:c9:95:38:0a:22:
                    38:d5:34:ae:96:e5:62:5d:dc:cd:99:d3:51:fe:5d:
                    00:13:dd:cd:d5:81:24:30:05:36:2d:6d:05:3e:bb:
                    9c:ee:09:a1:9d:d1:f9:8e:3e:12:a2:e1:34:17:d7:
                    57:43:a9:d3:61:1f:cd:3c:69:14:63:99:8b:65:c7:
                    94:7f:85:20:8d:5e:be:fe:62:e8:f0:73:d4:fb:fb:
                    d4:a2:fc:a9:b3:66:61:df:14:9c:e7:5e:9e:58:ab:
                    eb:65:77:4b:27:4e:0f:7d:dd:3e:51:76:20:6e:81:
                    9f:5a:6f:61:e9:88:6d:9d:83:07:fb:e9:b5:2c:52:
                    c9:3c:37:66:d9:db:df:ad:e1:c8:da:be:40:5b:19:
                    13:3a:7e:ac:08:8d:4a:61:55:d5:48:5c:14:d0:74:
                    35:58:ae:e3:aa:4d:c0:05:a8:84:78:a8:7e:f2:09:
                    be:7b:d5:0e:76:ed:de:b7:fc:34:73:4a:97:cc:b2:
                    a0:ad:09:8d:86:98:ea:d7:6f:ff:d0:01:35:c4:fc:
                    6b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F3:0F:BB:F3:CB:A0:FF:B1:02:0A:3F:59:7F:A9:82:F5:01:61:38
            X509v3 Authority Key Identifier:
                keyid:10:78:C6:CB:CE:B6:EE:DE:3F:CC:8B:FE:CE:98:8A:95:1F:F3:73:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/0/1078C6CBCEB6EEDE3FCC8BFECE988A951FF373EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1078C6CBCEB6EEDE3FCC8BFECE988A951FF373EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/0/1078C6CBCEB6EEDE3FCC8BFECE988A951FF373EC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:9a:88:85:2b:e4:29:6b:f8:96:27:d3:55:02:8d:dc:1a:a7:
         05:30:cb:a0:71:ee:6c:27:9c:40:2c:17:f9:2e:93:7a:ee:40:
         0d:a3:6b:83:16:04:30:33:b2:b4:11:ee:a7:47:11:2b:5f:98:
         fa:0c:4d:18:4e:6c:2f:6f:4d:68:0a:6b:b2:50:ad:c8:9c:d2:
         36:b3:2a:9e:2b:ae:90:47:dc:a7:8d:d1:d1:55:e6:6b:53:03:
         0d:e0:6d:76:82:c2:2e:5e:12:72:68:4b:73:a1:62:bf:d0:c0:
         22:98:6e:cc:a9:5b:9c:85:03:8c:f5:c3:47:eb:b8:55:9b:e5:
         51:81:a6:ba:3e:a8:be:5c:71:5a:ba:2f:29:0f:a1:af:6a:46:
         12:c6:03:8e:86:7e:20:4d:fe:ea:30:34:6b:24:61:a6:7e:d7:
         20:ad:b3:b6:54:e6:ac:da:45:e0:84:da:6c:6d:fd:b9:19:43:
         29:46:6e:e2:34:e7:93:46:21:30:6c:e2:45:00:61:2e:65:1e:
         78:f8:a9:b0:27:c2:5d:d1:a2:38:3a:a8:1d:c0:5e:1e:28:f4:
         1f:ec:14:e0:e6:b6:5b:9a:b5:99:2d:b1:da:ef:f5:5f:e7:3e:
         18:c6:32:79:5e:88:16:2f:6e:6d:05:eb:77:f9:1f:1e:72:3b:
         cf:ee:00:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----