Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/107B680E5B5FB305DB89311B48605A8468508948.mft
File:                     107B680E5B5FB305DB89311B48605A8468508948.mft (raw, json)
Hash identifier:          zZjATzvOwAVbNII4+mjvoQWdzz0WMuudVedH5mKLdJQ=
Subject key identifier:   8C:40:CF:D4:48:D6:11:75:44:76:BD:E4:A5:6A:44:AD:CB:34:EC:B7
Authority key identifier: 10:7B:68:0E:5B:5F:B3:05:DB:89:31:1B:48:60:5A:84:68:50:89:48
Certificate issuer:       /CN=107B680E5B5FB305DB89311B48605A8468508948
Certificate serial:       3D233DDA80A1751381BD444B3152F33CC7F270A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/107B680E5B5FB305DB89311B48605A8468508948.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/107B680E5B5FB305DB89311B48605A8468508948.mft
Manifest number:          7E
Signing time:             Mon 15 Apr 2024 11:09:58 +0000
Manifest this update:     Mon 15 Apr 2024 11:04:58 +0000
Manifest next update:     Tue 16 Apr 2024 11:40:58 +0000
Files and hashes:         1: 3134332e3230322e35322e302f32322d3234203d3e203631373534.roa (hash: viQKER4NkkC1grq2ojvJcnYISQLRfCYZazXaVW6/+cM=)
                          2: 107B680E5B5FB305DB89311B48605A8468508948.crl (hash: Cx8EDStvWGCayR0DSVt3WTzRkumnZjEZKzs37ER55lw=)
                          3: 3133312e3130302e34302e302f32322d3234203d3e203631373534.roa (hash: aKQdnh4LH/5zZaVwnNoO38gvV6GTDJFqxyy48tSNc7M=)
                          4: 3137302e38332e36382e302f32322d3234203d3e203631373534.roa (hash: UAViOZHYAoqmIxNKYvvWTTI4hS1u2OfuBGJkRtC9mgM=)
                          5: 323830343a316265303a3a2f33322d3438203d3e203631373534.roa (hash: dDQ7RdIGXNbiMZhK5ka//qGIN3WCpeg+HeT7dtlGmSs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:23:3d:da:80:a1:75:13:81:bd:44:4b:31:52:f3:3c:c7:f2:70:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=107B680E5B5FB305DB89311B48605A8468508948
        Validity
            Not Before: Apr 15 11:04:58 2024 GMT
            Not After : Apr 16 11:40:58 2024 GMT
        Subject: CN=8C40CFD448D611754476BDE4A56A44ADCB34ECB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:48:db:10:9e:5a:e3:8f:f0:94:2f:fe:03:c8:
                    2a:66:24:de:7b:b3:2c:39:23:7e:b8:0f:19:b9:56:
                    b9:ec:a5:49:db:59:66:33:d1:9a:42:5b:4c:68:b1:
                    0d:9c:b3:45:fa:a8:c8:82:16:e5:a0:b3:c8:41:bd:
                    45:7d:e6:dd:f1:88:23:6e:76:25:74:8c:d4:ee:59:
                    4a:8b:3d:6b:40:0e:18:69:40:00:a9:eb:50:b3:c2:
                    ae:41:31:81:85:02:60:98:de:56:cb:23:ea:ea:ec:
                    d1:73:1c:75:ed:82:83:9c:6f:82:01:a0:94:9b:6a:
                    cd:b5:7a:f5:2f:2a:e7:14:62:b7:73:3d:6e:8d:ac:
                    64:18:95:16:04:3a:a2:5d:39:d5:71:a0:5f:25:62:
                    8e:38:2e:55:6e:03:d5:f5:74:e0:44:3a:b7:58:3b:
                    00:a9:71:17:b7:bc:cd:98:97:57:ba:d9:3e:f1:47:
                    36:7d:d5:22:f9:a7:d7:57:66:ca:aa:7a:b6:8e:05:
                    49:64:34:85:7a:dc:ff:38:c0:e5:58:01:a4:d7:c4:
                    97:a3:36:9f:85:df:77:01:e4:30:7d:3e:4b:e9:1a:
                    b2:ae:e4:6c:a2:0b:a0:14:29:10:98:e8:70:de:e4:
                    37:1b:5c:d5:6d:3c:6d:d7:7e:61:2f:f8:29:d4:64:
                    e7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:40:CF:D4:48:D6:11:75:44:76:BD:E4:A5:6A:44:AD:CB:34:EC:B7
            X509v3 Authority Key Identifier:
                keyid:10:7B:68:0E:5B:5F:B3:05:DB:89:31:1B:48:60:5A:84:68:50:89:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/107B680E5B5FB305DB89311B48605A8468508948.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/107B680E5B5FB305DB89311B48605A8468508948.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/107B680E5B5FB305DB89311B48605A8468508948.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:bb:b9:63:5b:35:02:ba:b8:f4:dd:5a:9f:55:73:e5:8f:b8:
         95:d1:0d:55:ad:95:4e:85:ae:6d:cc:b2:c1:a2:4d:fb:2c:ed:
         da:ef:79:d1:71:81:b9:8a:dc:1e:5a:5f:20:b4:d5:5e:30:0a:
         00:1c:50:52:09:96:ad:34:75:f9:7b:6d:b9:3a:16:ac:e3:34:
         ce:68:b3:e9:78:8c:76:95:cf:b0:5b:c1:fe:60:33:e0:8a:cf:
         ea:8a:fb:05:3a:1d:b9:43:85:d0:ba:8a:c0:e7:1f:41:96:1d:
         8e:17:10:06:20:78:a4:dc:82:87:ee:2d:36:1a:88:7c:e7:0f:
         67:3e:8c:c4:ba:40:f7:b2:08:4b:de:c0:f3:57:33:11:27:b6:
         02:76:af:ab:9f:73:62:dc:6f:99:0f:a1:60:71:65:1a:36:5c:
         cf:dc:5c:a1:33:cc:38:16:ba:8b:06:9e:07:b9:9c:17:19:84:
         06:dd:51:8f:4b:93:17:37:f0:01:c0:13:51:94:86:3a:44:6b:
         96:30:0e:c5:0e:ac:b7:fd:d4:fb:9c:73:f8:38:27:67:0a:e0:
         6b:f2:bc:95:5d:6e:10:cb:16:1a:63:0b:1c:cf:d5:db:37:31:
         79:3e:35:58:ca:b6:c5:ed:45:ff:2d:b2:4b:c2:12:69:dd:7a:
         8a:58:95:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----