Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/0/4268E7D68AD434C800D3E63BB48AD3784366EDEA.mft
File:                     4268E7D68AD434C800D3E63BB48AD3784366EDEA.mft (raw, json)
Hash identifier:          RRDjmk2LV/6y361mfi6TagNlscmpXNlSZiz6HdGsZdo=
Subject key identifier:   FA:8C:52:19:5A:5F:9C:B7:5C:E9:74:F7:52:F8:B0:70:22:C0:35:12
Authority key identifier: 42:68:E7:D6:8A:D4:34:C8:00:D3:E6:3B:B4:8A:D3:78:43:66:ED:EA
Certificate issuer:       /CN=4268E7D68AD434C800D3E63BB48AD3784366EDEA
Certificate serial:       1D4288D321D905017D232F49C9DE36C430EE0250
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4268E7D68AD434C800D3E63BB48AD3784366EDEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/0/4268E7D68AD434C800D3E63BB48AD3784366EDEA.mft
Manifest number:          70
Signing time:             Mon 15 Apr 2024 01:39:57 +0000
Manifest this update:     Mon 15 Apr 2024 01:34:57 +0000
Manifest next update:     Tue 16 Apr 2024 04:58:57 +0000
Files and hashes:         1: 4268E7D68AD434C800D3E63BB48AD3784366EDEA.crl (hash: hI3p/tlzDOasjNUUmcHshCUSQF3NBMZiFxehD1ZL1RQ=)
                          2: 323830343a343132303a3a2f33322d3335203d3e20323636303035.roa (hash: HTZ+ZHDZCk6aL8Xz3jkupZsnuwyzLGsICh7IeFHQ7fs=)
                          3: 3138312e3139312e3132302e302f32322d3234203d3e20323636303035.roa (hash: 7PTItntwYZTXYl9C/sQOOckx1EpNVgVY/x6gd72rtbY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:42:88:d3:21:d9:05:01:7d:23:2f:49:c9:de:36:c4:30:ee:02:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4268E7D68AD434C800D3E63BB48AD3784366EDEA
        Validity
            Not Before: Apr 15 01:34:57 2024 GMT
            Not After : Apr 16 04:58:57 2024 GMT
        Subject: CN=FA8C52195A5F9CB75CE974F752F8B07022C03512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4f:ed:aa:60:dd:f8:93:5e:f4:9e:60:11:67:
                    fb:f9:94:25:7e:c9:a0:d2:64:16:57:a2:59:40:ec:
                    6a:e8:27:83:96:57:f6:ab:58:88:65:eb:c6:d5:46:
                    cf:63:c1:c4:dc:09:a0:1f:9b:d7:5c:2f:ed:16:17:
                    9e:cf:be:ee:14:d7:89:5f:d1:3e:98:27:d9:e8:58:
                    9c:9d:c8:1f:b7:6a:54:cf:5a:be:c9:75:a2:a8:d6:
                    55:98:74:c3:fd:56:46:92:0a:55:0d:f2:f2:ea:e9:
                    c4:14:7d:e6:cc:77:13:19:4e:57:21:c3:82:41:83:
                    b0:3c:01:f9:ab:39:19:e2:32:63:57:05:b9:97:3a:
                    6c:a1:9e:1e:dc:7a:61:49:3e:c6:14:93:15:a4:77:
                    fb:7c:f5:dd:a4:42:de:31:2b:b4:f9:54:fe:28:54:
                    f3:3f:04:d1:58:12:b0:bd:12:a2:87:b6:3c:ed:7e:
                    4d:10:54:a2:b5:03:7f:7b:0c:ad:8c:2c:42:87:0d:
                    1b:b2:67:11:9f:db:9e:2e:22:2a:98:08:ac:63:80:
                    d5:45:37:28:54:1a:c3:ba:1e:cf:d2:5f:c3:f4:4b:
                    c2:99:44:23:58:88:19:b5:fc:1c:db:3f:82:3a:38:
                    93:6e:ab:29:c3:ae:07:9a:ef:7e:01:37:3c:14:11:
                    9d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:8C:52:19:5A:5F:9C:B7:5C:E9:74:F7:52:F8:B0:70:22:C0:35:12
            X509v3 Authority Key Identifier:
                keyid:42:68:E7:D6:8A:D4:34:C8:00:D3:E6:3B:B4:8A:D3:78:43:66:ED:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/0/4268E7D68AD434C800D3E63BB48AD3784366EDEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4268E7D68AD434C800D3E63BB48AD3784366EDEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/0/4268E7D68AD434C800D3E63BB48AD3784366EDEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:08:7d:16:a8:37:96:08:63:a9:7b:fd:2b:da:4e:c8:7d:9e:
         d2:66:81:b2:d3:eb:ad:02:81:c3:f6:a8:e4:22:00:b3:c4:63:
         b1:01:a5:6a:c5:bc:b1:6a:a8:05:d0:f3:36:a6:45:df:0f:94:
         ee:b7:d5:48:f4:c6:95:8f:bb:68:a6:1e:db:5c:1e:29:b8:e1:
         7e:b4:32:c7:13:5d:24:cc:d4:a8:5a:6b:29:87:fb:57:6e:ac:
         5d:f7:c0:eb:26:f8:c5:11:53:d5:f0:c6:10:fa:6e:97:d6:fc:
         dc:2e:d8:a3:26:22:8c:ff:49:7b:fe:5f:54:6b:32:5f:68:09:
         9b:e3:78:b3:2d:9c:fd:5c:c4:71:5c:4a:fd:e0:04:a5:6f:44:
         4c:85:52:88:b4:8e:2d:91:41:0a:b7:f3:27:97:2b:ce:66:66:
         82:49:cb:f0:2d:c4:c0:ca:a9:47:67:9f:19:ff:e9:a6:5a:c7:
         2c:0f:ba:dc:ed:94:99:eb:38:7e:2d:2a:36:8a:69:8d:20:d9:
         1b:8c:35:1c:43:96:27:d3:c7:65:a5:e8:c1:c6:3f:64:ec:1e:
         b2:dc:63:00:f5:d2:29:f8:71:a4:e6:e0:a4:34:f4:a0:43:dc:
         d4:75:43:ad:b0:30:73:ee:ed:4e:37:3a:a8:6b:b6:3d:a4:3f:
         c8:8d:94:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----