Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8vYMFeQ6JuADYG1En39NgYmAPykR2R5zWJDGcNJcHJnD/0/2F6D778F72DCBDC0ED0DA7C5F05C14348F34A149.mft
File:                     2F6D778F72DCBDC0ED0DA7C5F05C14348F34A149.mft (raw, json)
Hash identifier:          mpK7koOChUP0SzyC8G7qK2YQOm3yZCxyAgqVUB+dsFY=
Subject key identifier:   D3:49:FD:01:3F:07:07:0F:0F:30:B8:9D:93:ED:D1:9B:8D:E4:0C:E5
Authority key identifier: 2F:6D:77:8F:72:DC:BD:C0:ED:0D:A7:C5:F0:5C:14:34:8F:34:A1:49
Certificate issuer:       /CN=2F6D778F72DCBDC0ED0DA7C5F05C14348F34A149
Certificate serial:       3B7BBE76FAF279CB2CB61F0A2E1DCFB27FF71280
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F6D778F72DCBDC0ED0DA7C5F05C14348F34A149.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vYMFeQ6JuADYG1En39NgYmAPykR2R5zWJDGcNJcHJnD/0/2F6D778F72DCBDC0ED0DA7C5F05C14348F34A149.mft
Manifest number:          018A
Signing time:             Sun 14 Apr 2024 20:30:00 +0000
Manifest this update:     Sun 14 Apr 2024 20:25:00 +0000
Manifest next update:     Mon 15 Apr 2024 20:30:00 +0000
Files and hashes:         1: 323830343a386336343a3a2f33322d3332203d3e203631363135.roa (hash: ETARc1ym3uXHnLaTzBVnoIlNEj6VvvKAvsUzJsi+O+I=)
                          2: 2F6D778F72DCBDC0ED0DA7C5F05C14348F34A149.crl (hash: uoUDMOO2OfmeVgo1ArJ6212IxlwlbY78rz3bmb+5j+w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:7b:be:76:fa:f2:79:cb:2c:b6:1f:0a:2e:1d:cf:b2:7f:f7:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F6D778F72DCBDC0ED0DA7C5F05C14348F34A149
        Validity
            Not Before: Apr 14 20:25:00 2024 GMT
            Not After : Apr 15 20:30:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ed:40:45:ca:bf:d2:9c:d5:6c:2f:f5:1a:53:
                    4d:1c:f4:6e:ee:85:43:bf:6e:56:eb:56:3a:2f:95:
                    b5:72:ba:5e:2c:9a:d3:e4:af:1c:b6:b8:1f:2c:a4:
                    4f:4a:c0:56:59:4f:a2:a0:f6:31:9e:dd:0f:f3:f4:
                    68:39:0a:43:37:aa:56:b0:91:00:13:ff:d2:14:53:
                    5c:66:3f:ab:9f:83:97:70:50:54:3a:bf:c1:64:2f:
                    92:a9:06:01:f4:04:f1:6a:65:de:b3:3e:e1:8c:bb:
                    20:74:72:71:8c:86:a9:fc:a3:03:b9:c0:64:5b:15:
                    18:ef:c4:ea:ce:d3:d5:bb:c5:5a:92:98:c6:5b:3c:
                    9e:b8:e2:3f:76:61:ea:d2:b9:e1:ea:d4:cd:43:30:
                    46:0d:3f:42:33:a5:7e:cb:c3:2e:c4:41:40:db:80:
                    c7:70:e6:17:0e:ca:79:45:4e:7d:3e:2e:52:ae:68:
                    66:8e:dc:13:46:63:d1:4e:59:8a:33:6a:56:ea:3a:
                    ea:8c:bf:62:56:c0:1f:18:f5:55:ea:56:67:3a:1d:
                    8b:ae:63:d6:9a:93:77:10:4a:b0:d5:81:ae:e2:ce:
                    6d:db:80:36:b8:bc:0e:5f:39:74:e9:82:2e:8f:94:
                    fd:db:7d:ef:98:bc:2f:c1:9a:ca:1c:5e:e1:4b:3c:
                    e1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:49:FD:01:3F:07:07:0F:0F:30:B8:9D:93:ED:D1:9B:8D:E4:0C:E5
            X509v3 Authority Key Identifier:
                keyid:2F:6D:77:8F:72:DC:BD:C0:ED:0D:A7:C5:F0:5C:14:34:8F:34:A1:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vYMFeQ6JuADYG1En39NgYmAPykR2R5zWJDGcNJcHJnD/0/2F6D778F72DCBDC0ED0DA7C5F05C14348F34A149.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F6D778F72DCBDC0ED0DA7C5F05C14348F34A149.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vYMFeQ6JuADYG1En39NgYmAPykR2R5zWJDGcNJcHJnD/0/2F6D778F72DCBDC0ED0DA7C5F05C14348F34A149.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:38:3c:ae:05:b0:b9:fd:d6:88:1b:7c:c5:02:b8:12:af:b1:
         93:a3:ec:d8:a9:77:91:40:25:c9:4f:73:90:9f:57:ce:45:87:
         9c:3d:b9:25:69:d5:b3:dc:7c:0a:39:04:88:8a:03:ff:6d:76:
         e0:6c:f7:ff:19:20:91:56:cf:7c:f4:9a:f5:25:56:8f:dd:15:
         3a:62:38:a4:20:48:a2:2a:aa:c3:a7:55:f2:26:d5:21:b0:cd:
         a0:48:29:db:60:49:98:0d:72:8c:c0:ad:30:33:98:d6:4a:b2:
         3e:07:1c:fe:98:ab:b8:c6:77:7a:bd:61:7f:d7:ea:4d:e1:fb:
         54:87:f9:9c:92:0f:9c:ee:5c:eb:4f:a7:f1:85:20:64:b0:a7:
         1b:a9:96:fc:94:bf:65:92:f9:cd:de:35:53:cd:4c:53:63:f2:
         8d:df:ef:f5:2a:b0:63:e0:f2:44:cf:77:c9:af:ac:f5:e4:4e:
         6c:d1:c6:66:59:a3:4e:43:ca:53:1a:9b:9f:78:24:ee:6d:85:
         70:6b:11:8c:47:dc:d9:13:d0:bf:89:6e:25:4d:76:0a:03:90:
         25:30:8b:37:bd:b9:6d:86:c4:38:06:10:a4:f8:7c:5a:87:72:
         a1:93:e9:1d:56:75:79:06:90:46:d3:e6:d1:76:87:eb:2f:98:
         61:97:20:f2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----