Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4FsHYPbVJBKvd2wf55jUHYa8v2PHjN5Cj8W62KyAwL3p/0/70BE8D0BD8D8A865C7BA3B3AD423FE0496971164.mft
File:                     70BE8D0BD8D8A865C7BA3B3AD423FE0496971164.mft (raw, json)
Hash identifier:          9gWl5OHWRBVBwSvnGJ8MTMPriZWJepjxM2GtNkdanZ0=
Subject key identifier:   6E:43:68:4E:9D:6F:FC:A6:84:F9:12:71:70:FB:B2:A0:00:43:7F:E6
Authority key identifier: 70:BE:8D:0B:D8:D8:A8:65:C7:BA:3B:3A:D4:23:FE:04:96:97:11:64
Certificate issuer:       /CN=70BE8D0BD8D8A865C7BA3B3AD423FE0496971164
Certificate serial:       6320D9EE3ADE59C2E080B3C76E728EE735C0B462
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70BE8D0BD8D8A865C7BA3B3AD423FE0496971164.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4FsHYPbVJBKvd2wf55jUHYa8v2PHjN5Cj8W62KyAwL3p/0/70BE8D0BD8D8A865C7BA3B3AD423FE0496971164.mft
Manifest number:          03D0
Signing time:             Mon 15 Apr 2024 11:36:00 +0000
Manifest this update:     Mon 15 Apr 2024 11:31:00 +0000
Manifest next update:     Tue 16 Apr 2024 11:36:00 +0000
Files and hashes:         1: 3230302e3231352e3234302e302f32322d3232203d3e20323730363134.roa (hash: LBVyTglnYyoWCw9Ak7l4ClFsl7GvtJRMFengiGuQa5k=)
                          2: 3230302e3231352e3234302e302f32342d3234203d3e20323730363134.roa (hash: rZ9oTqHjUOF39d9F2zMNongpmQKDuDPbPHDskG8T4fQ=)
                          3: 3230302e3231352e3234332e302f32342d3234203d3e20323730363134.roa (hash: Tn0UdxyjU8uiiV40n8gausC5EUfWdYjle3hcP2/yxP8=)
                          4: 3230302e3231352e3234322e302f32342d3234203d3e20323730363134.roa (hash: DOi2etZC7V9uM10wD/Gp9v3dqBCpAqjbsKKjV9s8jwU=)
                          5: 3230302e3231352e3234312e302f32342d3234203d3e20323730363134.roa (hash: fzCSRUISc9Tqof8juakNZ2rGencd0ZEuHBXJSkqt2eI=)
                          6: 70BE8D0BD8D8A865C7BA3B3AD423FE0496971164.crl (hash: l4HmL3r3LgYLUz3c4ujth0iy2Xl/qfXcYplLsp/qxIw=)
                          7: 323830343a366562343a3a2f33322d3332203d3e20323730363134.roa (hash: zVEKENKVvihKywOklkJRc1W2cV17oNJQedSlVNUCnh4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:20:d9:ee:3a:de:59:c2:e0:80:b3:c7:6e:72:8e:e7:35:c0:b4:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70BE8D0BD8D8A865C7BA3B3AD423FE0496971164
        Validity
            Not Before: Apr 15 11:31:00 2024 GMT
            Not After : Apr 22 11:36:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:eb:41:82:4d:39:03:40:32:49:0e:a8:9b:d6:
                    6d:5e:fd:bb:07:f9:32:4f:fa:26:6e:2c:bd:38:28:
                    9a:be:c9:19:55:26:c0:a6:4d:d0:78:8f:b8:fa:88:
                    cb:70:04:82:c9:74:07:20:78:99:5a:a3:84:1f:0b:
                    50:09:f7:34:3b:2c:62:90:77:6b:f6:9b:0d:3e:65:
                    aa:72:1e:88:6d:22:83:a9:1b:3a:e7:49:cb:4e:1d:
                    89:0f:60:ad:25:60:32:73:c5:6c:ea:a4:73:8a:b8:
                    a6:8e:38:3f:10:81:2b:8e:44:45:46:47:ea:ec:ce:
                    dc:00:11:69:73:85:61:df:91:8a:c5:49:32:c9:29:
                    96:47:49:01:ad:ac:1d:4e:5a:34:1c:18:87:b4:ad:
                    f1:31:1d:db:5c:d0:d0:55:58:3d:3e:5b:cb:9f:a0:
                    0a:3a:1e:4e:e8:53:b3:1d:9b:31:37:8b:eb:39:b4:
                    3c:94:4f:53:38:1b:7d:e0:9b:57:df:2d:3f:44:ce:
                    df:6d:e5:0a:55:4c:eb:ce:89:43:53:ff:40:a3:bf:
                    d9:e0:1d:c8:c1:0c:fc:6f:5a:54:13:48:de:1e:fc:
                    25:fa:56:e5:9f:6b:0a:2a:f2:da:97:7b:f4:fc:f0:
                    4c:da:a8:db:80:7f:c5:9c:f5:26:40:6a:98:8b:58:
                    d6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:43:68:4E:9D:6F:FC:A6:84:F9:12:71:70:FB:B2:A0:00:43:7F:E6
            X509v3 Authority Key Identifier:
                keyid:70:BE:8D:0B:D8:D8:A8:65:C7:BA:3B:3A:D4:23:FE:04:96:97:11:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4FsHYPbVJBKvd2wf55jUHYa8v2PHjN5Cj8W62KyAwL3p/0/70BE8D0BD8D8A865C7BA3B3AD423FE0496971164.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70BE8D0BD8D8A865C7BA3B3AD423FE0496971164.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4FsHYPbVJBKvd2wf55jUHYa8v2PHjN5Cj8W62KyAwL3p/0/70BE8D0BD8D8A865C7BA3B3AD423FE0496971164.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:07:99:47:fd:69:1f:b0:fe:c9:eb:d2:f2:0d:a1:77:13:2c:
         b6:1c:c8:07:de:98:cb:0b:95:91:ac:ae:28:29:54:43:ed:96:
         6c:a7:ac:9c:a2:7c:4f:2d:c0:49:4e:ab:66:37:fb:46:21:1d:
         4c:10:77:ed:3c:4c:1c:7f:c0:e5:b3:37:a9:c1:0d:79:0f:e8:
         0f:e7:d1:d2:7c:15:d1:eb:db:e7:fc:20:a8:5d:f8:97:4f:30:
         bd:ce:d7:94:2e:93:84:03:44:8b:d3:bc:20:24:2f:47:ba:03:
         a4:cb:fd:66:a6:1e:cd:28:ad:7d:94:20:9f:e9:d0:e9:9e:cd:
         a7:b1:93:c8:c3:9a:e7:04:ff:c0:01:dd:d4:22:c4:ad:9b:d0:
         4f:5c:b2:d8:ba:93:9a:2b:62:39:68:7f:b7:3b:3c:03:8d:74:
         df:08:64:7e:b8:36:0e:5d:d6:0a:3b:6a:fc:02:eb:5d:d7:c9:
         65:ac:47:5a:5d:5f:ba:49:aa:58:cf:f4:51:d3:df:4a:50:9c:
         ae:41:15:b0:a1:6c:28:06:d3:8b:30:00:29:83:17:87:e7:d0:
         16:4b:d0:8f:11:72:ff:c4:db:4b:5d:3c:03:35:65:fa:24:32:
         32:a6:37:99:22:74:f5:0a:a0:f0:e9:1d:c4:21:0a:f0:7d:cb:
         92:85:27:ac
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----