Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/0/77B7BFEC0248ABE9641C1DDDEAEC6B2ABC2EC98F.mft
File:                     77B7BFEC0248ABE9641C1DDDEAEC6B2ABC2EC98F.mft (raw, json)
Hash identifier:          9be9TwXhWcDewzD2AVRzKCQIdXBZ8bZYEA1Fl/9GBPc=
Subject key identifier:   42:17:B4:E7:66:4C:2D:AF:7A:E9:7F:CA:F9:C7:33:98:B2:3F:A9:E7
Authority key identifier: 77:B7:BF:EC:02:48:AB:E9:64:1C:1D:DD:EA:EC:6B:2A:BC:2E:C9:8F
Certificate issuer:       /CN=77B7BFEC0248ABE9641C1DDDEAEC6B2ABC2EC98F
Certificate serial:       6594DDBCFDFC77DC45FA3552760A37BFA46FDEB1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77B7BFEC0248ABE9641C1DDDEAEC6B2ABC2EC98F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/0/77B7BFEC0248ABE9641C1DDDEAEC6B2ABC2EC98F.mft
Manifest number:          7E
Signing time:             Mon 16 Oct 2023 17:37:07 +0000
Manifest this update:     Mon 16 Oct 2023 17:32:07 +0000
Manifest next update:     Tue 17 Oct 2023 18:39:07 +0000
Files and hashes:         1: 77B7BFEC0248ABE9641C1DDDEAEC6B2ABC2EC98F.crl (hash: d+s2NdNYwS7emd9Ugwun6bWMqBvED1qp4NuY8QSb9Xg=)
                          2: 3139302e38392e34382e302f32322d3234203d3e20323730333535.roa (hash: csin7hRbXXDdB9eKVgUgcmBkZ0fT8NTOJK447ZlF9P0=)
                          3: 323830343a366162383a3a2f33322d3438203d3e20323730333535.roa (hash: IqrsPsoxuBi4BjSE5njWlHOwbZZVDPB67y8Kg60QnLo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:94:dd:bc:fd:fc:77:dc:45:fa:35:52:76:0a:37:bf:a4:6f:de:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77B7BFEC0248ABE9641C1DDDEAEC6B2ABC2EC98F
        Validity
            Not Before: Oct 16 17:32:07 2023 GMT
            Not After : Oct 17 18:39:07 2023 GMT
        Subject: CN=4217B4E7664C2DAF7AE97FCAF9C73398B23FA9E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bf:01:b0:b8:55:ac:d2:a3:f7:a0:04:6e:36:
                    8f:cc:ae:f5:2e:e8:70:6a:d9:a7:1b:1d:b0:13:da:
                    c6:a4:32:01:98:1f:02:1a:90:a3:01:86:cc:8f:ee:
                    bc:f5:24:15:c7:ba:a6:32:60:3d:d7:4f:ce:dd:25:
                    f3:66:3b:16:0a:4c:ce:86:83:b5:03:a1:9b:a0:11:
                    bf:b7:ef:68:02:ca:fa:02:26:fc:fc:ac:35:c2:a7:
                    f3:ec:9d:f5:db:e8:f5:95:2b:65:81:2a:2f:81:b9:
                    65:a7:f4:9f:79:22:8d:fa:88:41:05:f3:31:49:64:
                    da:d4:08:5d:29:d7:55:c5:bd:88:84:6b:cb:a9:bd:
                    5d:ea:f1:a2:20:88:6c:87:9b:9d:75:7d:a1:e4:0c:
                    86:1b:91:73:25:ca:f3:1c:96:49:66:1d:8f:3a:db:
                    9b:3c:71:7b:b2:a6:29:2f:41:bd:b3:e5:3b:5b:26:
                    fd:2f:cb:76:15:6e:50:1a:82:1d:90:3b:9d:e8:2d:
                    56:e2:87:1c:db:cd:1e:aa:a0:f7:12:38:27:cd:29:
                    9c:2a:a1:2c:d3:3a:a2:6a:ad:98:63:01:8d:71:e0:
                    62:61:d1:1c:00:4e:b7:a3:95:19:ef:e1:4f:9c:b6:
                    6b:ec:25:3f:62:16:81:d9:87:f2:26:7f:44:44:38:
                    d8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:17:B4:E7:66:4C:2D:AF:7A:E9:7F:CA:F9:C7:33:98:B2:3F:A9:E7
            X509v3 Authority Key Identifier:
                keyid:77:B7:BF:EC:02:48:AB:E9:64:1C:1D:DD:EA:EC:6B:2A:BC:2E:C9:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/0/77B7BFEC0248ABE9641C1DDDEAEC6B2ABC2EC98F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77B7BFEC0248ABE9641C1DDDEAEC6B2ABC2EC98F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/0/77B7BFEC0248ABE9641C1DDDEAEC6B2ABC2EC98F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:14:ea:7a:de:95:24:c4:ab:8f:0b:96:2f:fc:70:60:4e:6b:
         07:d2:b6:05:82:7c:26:00:6f:94:f2:00:0d:be:e9:39:7d:b1:
         77:ee:9e:af:21:61:5c:d3:0d:0a:c3:45:b8:79:a0:ee:3a:6b:
         f4:87:c7:df:a9:6e:10:07:6b:dc:b3:e6:c7:16:74:91:45:ab:
         08:9a:e0:ab:0f:21:af:43:83:f4:b6:62:74:d7:b2:58:da:cf:
         96:4d:24:11:ae:8c:c8:31:27:82:fe:11:2c:ca:b8:8c:8f:fa:
         31:79:a8:5d:68:3c:bb:3a:4d:26:2f:8c:5f:bb:10:a6:26:3f:
         cd:c6:bb:92:f6:5a:9f:19:79:e2:a9:7c:d8:b8:e7:27:b5:d8:
         e5:de:30:ab:fa:ad:b0:d1:c8:77:4e:f0:eb:8a:ca:fa:68:64:
         f7:a0:7c:e4:64:1e:3a:75:c9:d3:3b:05:94:ba:14:cc:40:eb:
         f4:6e:1a:a3:dd:13:de:7b:74:a7:26:30:64:59:cd:0b:56:f2:
         9f:3e:3a:97:e8:d9:55:61:91:f6:d8:97:c6:6b:44:17:f6:30:
         5b:d2:59:f6:5c:a6:d4:bf:f8:9d:5d:77:a8:5e:95:0a:e8:ad:
         23:61:3d:97:eb:75:6b:66:41:24:2c:41:7c:20:cf:3c:7e:1b:
         79:70:9c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----