Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/817FDD720A91C442D681C927F5AB6D6E78081250.mft
File:                     817FDD720A91C442D681C927F5AB6D6E78081250.mft (raw, json)
Hash identifier:          REnTBDcnBRLHK4rcbXvZSCPAa/sea+PkUmU6+Kyaem0=
Subject key identifier:   44:5C:7F:F7:F3:2C:F3:75:FB:4F:6F:0F:4A:08:7B:34:70:EC:DA:75
Authority key identifier: 81:7F:DD:72:0A:91:C4:42:D6:81:C9:27:F5:AB:6D:6E:78:08:12:50
Certificate issuer:       /CN=817FDD720A91C442D681C927F5AB6D6E78081250
Certificate serial:       6A0590C0120214EFAD929E6D7A96D0BA49EDE672
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/817FDD720A91C442D681C927F5AB6D6E78081250.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/817FDD720A91C442D681C927F5AB6D6E78081250.mft
Manifest number:          0156
Signing time:             Mon 15 Apr 2024 08:48:51 +0000
Manifest this update:     Mon 15 Apr 2024 08:43:51 +0000
Manifest next update:     Tue 16 Apr 2024 09:58:51 +0000
Files and hashes:         1: 3138372e3130382e302e302f32302d3234203d3e203238323637.roa (hash: QAg/oEZnxScd51ZoTLWmvgbJEaGlx+gpGZ4l3AKAqJw=)
                          2: 3138372e31372e3232342e302f32302d3234203d3e203238323637.roa (hash: ndAzmxVyRlvoS/TI/hTUG2eETOS3ZKanHkqqQJItxmo=)
                          3: 817FDD720A91C442D681C927F5AB6D6E78081250.crl (hash: rqOCjTHqu24wwSJP71Eqn4mlFwWMue1zMQYm6EcbmjE=)
                          4: 323830343a323064343a3a2f33322d3332203d3e203238323637.roa (hash: Lxgo4n9Bf3T4lm98da9kt66r8HB34BncCgP0YPGVPh8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:05:90:c0:12:02:14:ef:ad:92:9e:6d:7a:96:d0:ba:49:ed:e6:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=817FDD720A91C442D681C927F5AB6D6E78081250
        Validity
            Not Before: Apr 15 08:43:51 2024 GMT
            Not After : Apr 16 09:58:51 2024 GMT
        Subject: CN=445C7FF7F32CF375FB4F6F0F4A087B3470ECDA75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:63:dc:c8:cd:a8:29:95:37:9d:80:25:63:68:
                    4b:c2:ca:99:4c:61:59:7b:5a:11:6a:e3:1b:0f:d8:
                    ed:fa:07:0f:81:8c:40:ee:c6:d8:aa:b9:d3:0e:a0:
                    4f:80:d9:1d:11:4d:56:c6:1f:87:db:e4:45:7b:6e:
                    9d:e1:c3:fc:0c:b4:35:ff:a6:b5:17:c5:1d:db:9b:
                    b9:f2:f1:ab:b1:ad:d9:8a:2f:2e:ee:dc:02:06:0b:
                    38:c6:0c:10:94:69:57:f5:8c:cc:a2:02:ad:70:67:
                    6e:11:8c:5b:dc:c6:f4:04:15:c2:6f:ef:f5:ec:fa:
                    a4:51:4b:50:63:ee:08:b3:e3:79:71:d9:ed:46:6b:
                    17:8e:d9:e2:5f:14:b3:4f:2e:b1:d6:4b:d7:0f:e8:
                    6f:9d:35:92:09:12:ce:5e:c3:98:3c:8e:e7:c1:18:
                    93:41:75:ae:f5:62:e3:67:03:19:74:29:63:63:90:
                    47:9e:7b:ea:25:cf:f1:30:5b:b5:a9:94:b7:9b:e6:
                    04:14:07:30:45:fc:76:0a:22:7c:b0:4f:cb:a0:7f:
                    ae:88:2f:a7:c8:0a:94:a1:71:35:3a:13:45:71:7b:
                    e7:b4:60:59:f3:f1:93:15:f5:4c:61:a3:37:15:c6:
                    ed:7b:0b:7d:20:81:8c:5c:55:8d:19:04:9b:a1:fa:
                    24:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5C:7F:F7:F3:2C:F3:75:FB:4F:6F:0F:4A:08:7B:34:70:EC:DA:75
            X509v3 Authority Key Identifier:
                keyid:81:7F:DD:72:0A:91:C4:42:D6:81:C9:27:F5:AB:6D:6E:78:08:12:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/817FDD720A91C442D681C927F5AB6D6E78081250.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/817FDD720A91C442D681C927F5AB6D6E78081250.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/817FDD720A91C442D681C927F5AB6D6E78081250.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:e1:72:80:63:f9:66:f1:c2:52:01:d6:6c:bc:ba:84:2e:69:
         19:19:98:76:c6:3c:06:6e:55:5e:63:e2:77:11:20:8f:69:e0:
         9d:87:ab:bc:4d:67:c8:57:e7:68:cf:c5:03:48:b4:cf:fe:96:
         c4:73:70:65:94:ea:c2:d7:94:86:98:42:2e:b8:b7:46:44:5a:
         7f:ad:04:6f:12:2d:ad:10:fc:78:e2:be:d0:e1:25:7b:df:83:
         6d:50:0c:c4:d9:76:06:c2:8b:00:21:39:f2:5d:24:38:ee:0d:
         be:0e:bd:b0:2e:30:a6:eb:2d:2a:78:08:c4:11:8c:78:98:27:
         d5:da:16:29:cd:02:85:9d:ef:c2:5a:55:44:cc:39:85:79:e8:
         0f:36:23:78:d4:65:c2:89:d2:21:2e:49:49:f0:7c:85:7b:c2:
         ee:74:e3:1d:3e:35:f8:cf:d0:df:85:c3:f1:3e:38:1e:b9:c2:
         fe:bc:f0:99:3d:55:4a:2d:4b:77:9e:63:86:98:e9:41:29:72:
         6e:22:31:3e:31:0b:b8:d2:a5:9c:0e:43:e6:82:02:26:aa:77:
         43:96:df:84:77:f7:3e:6d:e9:47:3a:95:77:24:30:6a:77:ad:
         30:10:97:ff:52:9f:1e:b2:bb:42:ab:79:e2:fd:fb:60:9e:c3:
         2f:d6:a1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----