Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/0/40E7288637FB8A96FBBB9308B21C9F98E254F8F4.mft
File:                     40E7288637FB8A96FBBB9308B21C9F98E254F8F4.mft (raw, json)
Hash identifier:          SYtTppuS/oYSwQQdWohCyL9ZaZfWifH4p1eHxBj8chk=
Subject key identifier:   DD:B9:84:BD:32:E2:1A:18:49:67:B4:2D:DD:0C:44:5E:58:4D:56:6F
Authority key identifier: 40:E7:28:86:37:FB:8A:96:FB:BB:93:08:B2:1C:9F:98:E2:54:F8:F4
Certificate issuer:       /CN=40E7288637FB8A96FBBB9308B21C9F98E254F8F4
Certificate serial:       4B480FAC295FC7622F3D49AA6E5E0524FA8AE460
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40E7288637FB8A96FBBB9308B21C9F98E254F8F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/0/40E7288637FB8A96FBBB9308B21C9F98E254F8F4.mft
Manifest number:          0733
Signing time:             Sun 14 Apr 2024 20:00:01 +0000
Manifest this update:     Sun 14 Apr 2024 19:55:01 +0000
Manifest next update:     Mon 15 Apr 2024 20:00:01 +0000
Files and hashes:         1: 3230302e3234302e3232342e302f31392d3234203d3e203238323833.roa (hash: F/3XFmbKLK41Yr8dBj70mpjDQnx6NEXmFmCF3wpgL0s=)
                          2: 323830343a3337383a3a2f33322d3438203d3e203238323833.roa (hash: t4wq+5DoTbuw9pwZv2hEgu1Wso8I1M4wA3NeYqU6nB0=)
                          3: 3230312e3134382e3234342e302f32322d3234203d3e203238323833.roa (hash: +eNEUEgAg8P+ljdMqcMInEBikjLRNMGXfiJ3PYqqLic=)
                          4: 3138392e31342e3232342e302f32302d3234203d3e203238323833.roa (hash: wYMDBP850vSlLqFtVQkTScxl82V5Cllb3cX9xadGKAs=)
                          5: 3138372e3130332e3232342e302f31392d3234203d3e203238323833.roa (hash: Rz0vwz50LzFNYh21xk6G9/cgNoEc/Bmlaefxz/jhhiQ=)
                          6: 323830343a3632343a3a2f33322d3438203d3e203238323833.roa (hash: sgiwhxlp4aTKFCj5t3qnFVv8rZJ33Qsl9kyZwE1XKEE=)
                          7: 3138372e302e302e302f32302d3234203d3e203238323833.roa (hash: I1NYFyxJqPuPrPYTodwhREBizPcBUADwxno7mVlbCQY=)
                          8: 3137372e37322e3232342e302f32312d3234203d3e203238323833.roa (hash: dfPK9xAYn+XwxSQBUq4Lnv42wq8XpbBCR49lNgQIBSw=)
                          9: 40E7288637FB8A96FBBB9308B21C9F98E254F8F4.crl (hash: D731apfSJVHJfqA2MtGrG8AERl0nnB/UHQdIJ3l+vIk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:48:0f:ac:29:5f:c7:62:2f:3d:49:aa:6e:5e:05:24:fa:8a:e4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40E7288637FB8A96FBBB9308B21C9F98E254F8F4
        Validity
            Not Before: Apr 14 19:55:01 2024 GMT
            Not After : Apr 21 20:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0f:9b:96:34:7d:d8:f5:19:67:f5:4c:eb:2f:
                    6d:20:c9:94:88:ed:f6:c6:92:f8:5e:88:75:82:12:
                    07:87:c3:44:2e:5f:ff:16:4d:67:2a:56:8e:1f:2b:
                    0a:80:d2:f0:87:fe:0a:1b:76:cd:c3:02:3e:11:fc:
                    cc:1a:fc:cb:10:ec:69:6d:dd:df:d3:7d:12:2d:33:
                    8a:60:a7:71:b1:7a:12:b5:af:02:f2:e2:b1:85:50:
                    31:6b:c9:bc:fe:24:62:83:5a:62:57:83:7f:16:9e:
                    ae:9d:e6:67:26:0b:17:ec:7f:c9:d1:35:d4:e8:02:
                    71:ca:b5:21:aa:13:55:38:b4:f5:98:96:fc:25:64:
                    87:a7:fc:e9:6d:cf:c2:8e:33:c8:3e:2c:ec:b1:57:
                    b6:49:34:b8:e4:d9:9d:e5:f6:89:1f:52:4f:3e:65:
                    11:fe:7a:25:57:6c:67:e7:66:0c:ae:0a:7a:5f:fd:
                    19:95:4f:f1:e7:0e:d5:53:fe:57:70:af:8a:0b:1c:
                    43:39:d7:9d:b7:ac:d0:22:95:cd:d7:fd:4f:b1:57:
                    c0:00:12:0f:bf:4e:50:09:57:32:83:e3:c4:e3:74:
                    41:a1:e0:eb:78:af:06:2d:ed:15:30:00:0e:7b:4e:
                    31:d2:18:0e:a0:00:32:76:fe:43:ab:db:be:d9:9b:
                    e1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B9:84:BD:32:E2:1A:18:49:67:B4:2D:DD:0C:44:5E:58:4D:56:6F
            X509v3 Authority Key Identifier:
                keyid:40:E7:28:86:37:FB:8A:96:FB:BB:93:08:B2:1C:9F:98:E2:54:F8:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/0/40E7288637FB8A96FBBB9308B21C9F98E254F8F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40E7288637FB8A96FBBB9308B21C9F98E254F8F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/0/40E7288637FB8A96FBBB9308B21C9F98E254F8F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:4d:38:aa:23:55:62:bf:6d:d7:c2:fb:ba:b9:41:38:5c:78:
         c1:f5:8b:8c:a1:f9:a1:2c:6f:43:29:95:d6:f7:96:1e:cf:28:
         a5:f0:a5:f7:c3:87:fc:8b:26:8f:64:ab:7e:26:91:ca:29:5f:
         06:79:ab:34:b6:51:4b:86:7b:ac:b4:39:0c:0c:c9:bc:47:b0:
         77:9d:c2:3a:f4:0f:5c:f9:88:94:29:b4:f1:f3:a5:34:83:b8:
         5b:f3:df:a9:fe:ec:dd:03:46:42:9c:7c:16:ac:9e:6e:f1:70:
         9e:90:11:d5:1b:70:13:19:e6:ef:1c:b3:a5:26:ca:1a:37:ec:
         e3:47:88:fa:70:87:a5:7f:d5:14:50:72:e0:cd:4a:3d:6c:15:
         40:e2:76:81:6d:46:03:f4:61:71:bd:99:15:f1:8a:d2:66:3e:
         bc:bd:01:8a:2b:7e:60:fd:67:a5:98:5e:c6:45:6a:c9:07:2a:
         a0:2b:1a:84:0b:01:46:11:14:7c:f0:46:e8:16:92:e3:21:30:
         f2:e7:08:77:da:43:1a:bb:a9:a3:f3:79:92:8a:f0:8d:92:b5:
         e6:b4:1a:b7:49:ee:87:7f:aa:4c:64:d4:bc:f3:52:74:54:27:
         4f:74:0f:bd:9f:9f:bf:9e:04:c5:e8:98:75:a5:f9:5d:3d:28:
         97:fa:7e:9e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----