Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Du5jZRdEVuiH3AFCGpy9BjmgranPKGwt39kDsiro3te2/0/7D45E1D0EBBFC0C58C5B59B5141198B5B32C99B6.mft
File:                     7D45E1D0EBBFC0C58C5B59B5141198B5B32C99B6.mft (raw, json)
Hash identifier:          8pnV/dLETFBdW9+MaqV1gIiJTQ4noACxwJxFK3xGwuk=
Subject key identifier:   1D:A0:87:9A:51:C6:44:B7:D8:AE:8B:37:6F:3C:D7:10:47:1B:19:8A
Authority key identifier: 7D:45:E1:D0:EB:BF:C0:C5:8C:5B:59:B5:14:11:98:B5:B3:2C:99:B6
Certificate issuer:       /CN=7D45E1D0EBBFC0C58C5B59B5141198B5B32C99B6
Certificate serial:       37124A50B31EF50D807CBFBF924F4AD6C5F8B39B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D45E1D0EBBFC0C58C5B59B5141198B5B32C99B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Du5jZRdEVuiH3AFCGpy9BjmgranPKGwt39kDsiro3te2/0/7D45E1D0EBBFC0C58C5B59B5141198B5B32C99B6.mft
Manifest number:          6D
Signing time:             Mon 15 Apr 2024 10:09:01 +0000
Manifest this update:     Mon 15 Apr 2024 10:04:01 +0000
Manifest next update:     Tue 16 Apr 2024 12:04:01 +0000
Files and hashes:         1: 3138362e3235302e342e302f32322d3234203d3e20323632383031.roa (hash: er/bsmNfDTiJgI0bvHTPSWo6bqfy4cnh3U6ZZDgtXu4=)
                          2: 7D45E1D0EBBFC0C58C5B59B5141198B5B32C99B6.crl (hash: mycESYq6BlnfPxmiSfMJybyEh0SMxfVeQ3tNkn6ldsg=)
                          3: 3138362e3235302e302e302f32322d3234203d3e20323632383031.roa (hash: DRFVW3yye9PRWr2OM9htc9O+yoy9/N/5qdUsGSchM5c=)
                          4: 3138372e31372e34382e302f32302d3234203d3e20323632383031.roa (hash: UA71hENTcEe+xLNlQPDikxzVWu6k0LVyIM/EJ8Pl97U=)
                          5: 323830343a3234343a3a2f33322d3332203d3e20323632383031.roa (hash: 4gn17lsezvPtwzK8iuPQTbNIxJCeNejzOeMNNG0rEMk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:12:4a:50:b3:1e:f5:0d:80:7c:bf:bf:92:4f:4a:d6:c5:f8:b3:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D45E1D0EBBFC0C58C5B59B5141198B5B32C99B6
        Validity
            Not Before: Apr 15 10:04:01 2024 GMT
            Not After : Apr 16 12:04:01 2024 GMT
        Subject: CN=1DA0879A51C644B7D8AE8B376F3CD710471B198A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9a:2f:9b:76:40:71:4a:5b:97:99:91:c8:90:
                    85:3e:09:ad:b4:ca:12:a1:2c:bb:44:4c:7c:70:f7:
                    a4:98:e3:94:48:5d:48:12:14:69:71:f5:d4:76:8c:
                    3c:42:fc:a1:97:96:8c:11:90:68:c9:4e:08:64:32:
                    ee:6a:8f:91:66:16:f0:1d:fe:5d:c7:a7:3b:1b:13:
                    5b:c1:b7:7f:7b:69:ee:77:4c:c1:e1:12:d1:74:f3:
                    3f:fb:14:88:21:bf:76:f0:84:06:e1:c2:b5:c9:83:
                    74:8a:c3:8e:ba:ab:2b:20:60:85:45:16:6d:a2:91:
                    07:f2:04:b9:ab:7e:8c:de:bf:82:ab:60:42:4e:e0:
                    39:99:6b:07:47:42:9c:dc:ba:93:3b:9a:80:27:f1:
                    49:3a:8a:16:cc:2a:9e:f0:88:38:55:06:82:22:5f:
                    b9:ce:f1:40:11:65:b6:d2:e0:cc:9a:35:c8:08:7a:
                    1c:73:fe:42:cd:f0:be:85:7b:8a:fa:c0:8b:9e:11:
                    b2:1f:d6:30:91:63:3d:c0:5b:2a:2b:a1:41:38:11:
                    5f:10:96:e5:10:70:e5:6c:c0:90:6a:67:6a:63:eb:
                    18:93:0e:30:6a:d4:eb:5f:1b:f9:ad:1a:81:51:4d:
                    ab:fe:a1:a7:e7:f0:85:95:dd:92:ad:c7:22:fb:36:
                    ef:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A0:87:9A:51:C6:44:B7:D8:AE:8B:37:6F:3C:D7:10:47:1B:19:8A
            X509v3 Authority Key Identifier:
                keyid:7D:45:E1:D0:EB:BF:C0:C5:8C:5B:59:B5:14:11:98:B5:B3:2C:99:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Du5jZRdEVuiH3AFCGpy9BjmgranPKGwt39kDsiro3te2/0/7D45E1D0EBBFC0C58C5B59B5141198B5B32C99B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D45E1D0EBBFC0C58C5B59B5141198B5B32C99B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Du5jZRdEVuiH3AFCGpy9BjmgranPKGwt39kDsiro3te2/0/7D45E1D0EBBFC0C58C5B59B5141198B5B32C99B6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:21:d9:ec:d3:49:52:23:f4:c7:c5:83:05:ce:a1:84:1d:a1:
         e1:92:bb:8c:63:6d:86:f6:96:fd:8f:1f:cf:3b:bd:81:a8:d9:
         ad:e3:74:2f:e5:45:cb:5a:02:80:e4:f1:7e:70:9e:7a:b5:8c:
         67:a6:89:29:f6:29:bb:05:9e:cf:26:7c:2a:32:a6:ab:18:b4:
         64:b6:47:89:e9:5e:cf:4e:15:86:bb:f1:1e:49:12:95:04:9b:
         09:ab:24:2c:b0:78:e5:19:ce:ce:af:98:25:f5:2b:d2:2d:71:
         7d:02:0b:74:57:1a:86:ca:d3:5d:2c:d7:2d:36:28:a9:2e:cf:
         ea:e7:ad:ab:c9:59:e5:20:10:1b:06:34:19:5e:6e:56:87:4a:
         fa:b4:b2:2b:c1:c5:4f:74:2e:ad:6b:ef:61:e9:87:77:01:4d:
         73:6c:84:d3:19:16:f3:e3:07:ff:05:78:4d:f9:3b:df:d9:8f:
         aa:c9:be:92:32:fc:3d:6c:00:b7:59:85:9d:06:94:f0:cd:85:
         1d:7d:f0:51:e8:19:35:3a:1c:52:04:20:d6:c4:5c:95:3d:76:
         c6:74:35:b6:32:dd:0d:2b:7b:9f:6e:f1:f6:f9:cc:d3:1b:86:
         7d:d8:a7:0d:8c:13:79:a9:3c:78:e7:11:9f:02:d9:4f:a6:3c:
         51:44:4f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----