Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7sWMo72DSd3mnGyX2t1svXo3eRkLqiqY2AD8wpJ5C8L3/0/816D51F6643DF49212B620CE13FB0488B07BC0ED.mft
File:                     816D51F6643DF49212B620CE13FB0488B07BC0ED.mft (raw, json)
Hash identifier:          8v8OD0ERtoQujF5ur+esoZrX38h/+kUZPJbMEQYvdeY=
Subject key identifier:   07:51:C0:42:71:8D:5A:1C:96:5F:E8:CA:E2:0E:94:03:E3:6E:2B:37
Authority key identifier: 81:6D:51:F6:64:3D:F4:92:12:B6:20:CE:13:FB:04:88:B0:7B:C0:ED
Certificate issuer:       /CN=816D51F6643DF49212B620CE13FB0488B07BC0ED
Certificate serial:       3BE6711FC8D6F0E44CC33ADB91D3012354F9A3CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/816D51F6643DF49212B620CE13FB0488B07BC0ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7sWMo72DSd3mnGyX2t1svXo3eRkLqiqY2AD8wpJ5C8L3/0/816D51F6643DF49212B620CE13FB0488B07BC0ED.mft
Manifest number:          0185
Signing time:             Mon 15 Apr 2024 00:36:00 +0000
Manifest this update:     Mon 15 Apr 2024 00:31:00 +0000
Manifest next update:     Tue 16 Apr 2024 00:36:00 +0000
Files and hashes:         1: 816D51F6643DF49212B620CE13FB0488B07BC0ED.crl (hash: TdMNmFsgWwUSmJeNUeONbqJYrUqMRC9SUeRjfchAp0E=)
                          2: 323830343a386332343a3a2f33322d3438203d3e20323733373832.roa (hash: IRE39CrSLV0GGycSQSvJK0B1TAQbsoYVLcO3yWWrsYY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:e6:71:1f:c8:d6:f0:e4:4c:c3:3a:db:91:d3:01:23:54:f9:a3:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816D51F6643DF49212B620CE13FB0488B07BC0ED
        Validity
            Not Before: Apr 15 00:31:00 2024 GMT
            Not After : Apr 22 00:36:00 2024 GMT
        Subject: CN=3082010A0282010100B0A181B343BC09AC03AB0D754510DA10B8A0C0044EBCEA4F46D349868006370CC561367342494D6C4C0E2DB8A69CB09BF3EEC3AA77E382ED214E4C6B6D3BBB0EC742CB51E1B7630B239F079FC5963F863E93BE03C8F6BEE075AB7862823DC0ED2E2FBB9CA71AE6B0E06EF645FE20CC4438B1BBF3D1EA64D504234938DF2DB8BE4D74CDAC07B95E97C7609556D304E293FA41A59F1BADEF9826512C21E5D5F9074AEABFD3042D73D768D84B6910079EC532E1003738C8DCC8DA42784DD885916C11B0FA5A9718566F3B048F7E705AE90D23D0F0940D3B1D9432B3822BE25EFAF4D4F97B275731CF1F1D4C55030019AACB05A44AC2539A1817F49701347B68C3F30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a1:81:b3:43:bc:09:ac:03:ab:0d:75:45:10:
                    da:10:b8:a0:c0:04:4e:bc:ea:4f:46:d3:49:86:80:
                    06:37:0c:c5:61:36:73:42:49:4d:6c:4c:0e:2d:b8:
                    a6:9c:b0:9b:f3:ee:c3:aa:77:e3:82:ed:21:4e:4c:
                    6b:6d:3b:bb:0e:c7:42:cb:51:e1:b7:63:0b:23:9f:
                    07:9f:c5:96:3f:86:3e:93:be:03:c8:f6:be:e0:75:
                    ab:78:62:82:3d:c0:ed:2e:2f:bb:9c:a7:1a:e6:b0:
                    e0:6e:f6:45:fe:20:cc:44:38:b1:bb:f3:d1:ea:64:
                    d5:04:23:49:38:df:2d:b8:be:4d:74:cd:ac:07:b9:
                    5e:97:c7:60:95:56:d3:04:e2:93:fa:41:a5:9f:1b:
                    ad:ef:98:26:51:2c:21:e5:d5:f9:07:4a:ea:bf:d3:
                    04:2d:73:d7:68:d8:4b:69:10:07:9e:c5:32:e1:00:
                    37:38:c8:dc:c8:da:42:78:4d:d8:85:91:6c:11:b0:
                    fa:5a:97:18:56:6f:3b:04:8f:7e:70:5a:e9:0d:23:
                    d0:f0:94:0d:3b:1d:94:32:b3:82:2b:e2:5e:fa:f4:
                    d4:f9:7b:27:57:31:cf:1f:1d:4c:55:03:00:19:aa:
                    cb:05:a4:4a:c2:53:9a:18:17:f4:97:01:34:7b:68:
                    c3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:51:C0:42:71:8D:5A:1C:96:5F:E8:CA:E2:0E:94:03:E3:6E:2B:37
            X509v3 Authority Key Identifier:
                keyid:81:6D:51:F6:64:3D:F4:92:12:B6:20:CE:13:FB:04:88:B0:7B:C0:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7sWMo72DSd3mnGyX2t1svXo3eRkLqiqY2AD8wpJ5C8L3/0/816D51F6643DF49212B620CE13FB0488B07BC0ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/816D51F6643DF49212B620CE13FB0488B07BC0ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7sWMo72DSd3mnGyX2t1svXo3eRkLqiqY2AD8wpJ5C8L3/0/816D51F6643DF49212B620CE13FB0488B07BC0ED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:cd:b0:2f:40:4d:3b:80:cd:41:92:b2:5b:0d:35:48:4f:69:
         a9:fd:90:b5:bb:87:db:73:a4:8a:a0:1c:8a:df:e4:e2:b4:ae:
         84:61:5a:fa:ae:e8:b6:59:ef:bc:d4:ac:bd:54:6f:ce:b3:fe:
         82:ff:c3:d0:42:96:dd:12:46:c4:df:bc:49:af:66:fb:0c:9c:
         ee:ab:05:53:54:43:d1:66:70:fa:77:1b:27:96:c0:0e:44:81:
         53:40:4a:8a:76:41:4c:a3:87:67:4c:31:c2:27:fb:d2:73:f1:
         c9:03:d8:25:36:28:8d:98:d5:b2:78:73:f8:30:23:91:b3:cf:
         49:6b:3f:db:f0:c8:83:d2:12:92:7c:e4:2a:cd:25:b8:16:f5:
         cc:30:a8:d7:78:48:12:03:f4:e5:40:9f:c2:b4:9a:d2:8d:e3:
         a3:8d:e2:92:f5:83:53:5a:2a:af:d2:b9:fa:72:bd:9a:e6:ab:
         d9:1f:29:51:65:b6:63:8c:dd:6e:6c:65:48:1d:39:a2:e8:ea:
         1e:a1:50:a2:61:22:63:05:78:bc:02:a6:67:f9:81:15:fa:82:
         38:55:9d:f8:5c:3b:b9:a9:aa:89:fa:75:0d:8e:50:8f:5c:6b:
         06:4a:1f:70:76:76:79:5a:16:5b:9d:e5:65:fd:47:67:13:8a:
         88:49:3a:1b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----