Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H4qKyFrWr1AeRE6FG9TKBHQhDYZtUT4wGp3iv6Npwe9n/0/B7039DE7BD77E65831A9DB5B859A6AD9CDBF9FDB.mft
File:                     B7039DE7BD77E65831A9DB5B859A6AD9CDBF9FDB.mft (raw, json)
Hash identifier:          Tjbqo7QKqcib3+DnK3+7sLtqsIyQocZHvT29WoySY8A=
Subject key identifier:   37:F2:4E:8F:29:4E:6E:ED:8B:77:EC:0A:EF:9E:62:6A:1B:8F:EB:D8
Authority key identifier: B7:03:9D:E7:BD:77:E6:58:31:A9:DB:5B:85:9A:6A:D9:CD:BF:9F:DB
Certificate issuer:       /CN=B7039DE7BD77E65831A9DB5B859A6AD9CDBF9FDB
Certificate serial:       704F2EF7A721AF8421A2385CE9B745351279EC54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7039DE7BD77E65831A9DB5B859A6AD9CDBF9FDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4qKyFrWr1AeRE6FG9TKBHQhDYZtUT4wGp3iv6Npwe9n/0/B7039DE7BD77E65831A9DB5B859A6AD9CDBF9FDB.mft
Manifest number:          24
Signing time:             Wed 17 Jan 2024 14:55:59 +0000
Manifest this update:     Wed 17 Jan 2024 14:50:59 +0000
Manifest next update:     Thu 18 Jan 2024 17:34:59 +0000
Files and hashes:         1: 3137372e35332e3136302e302f32322d3232203d3e20323730323437.roa (hash: 19PvWVQ23xGlXSxR03aR/JxVCOj075BECNmt0qBpy/E=)
                          2: 323830343a363931343a3a2f33322d3332203d3e20323730323437.roa (hash: Ep+kSTGtNepDrodnBamhyPK49JeWBIW+e8Ed/MzmTok=)
                          3: B7039DE7BD77E65831A9DB5B859A6AD9CDBF9FDB.crl (hash: zOKFnsMEgygyaoK19ZnCZRw/sOKGXPXLGNnsto3Ct6Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:4f:2e:f7:a7:21:af:84:21:a2:38:5c:e9:b7:45:35:12:79:ec:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7039DE7BD77E65831A9DB5B859A6AD9CDBF9FDB
        Validity
            Not Before: Jan 17 14:50:59 2024 GMT
            Not After : Jan 18 17:34:59 2024 GMT
        Subject: CN=37F24E8F294E6EED8B77EC0AEF9E626A1B8FEBD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cf:b3:e6:0b:7a:11:5e:68:ae:58:4d:ca:24:
                    08:c1:e8:1b:ef:f3:36:88:e3:49:77:36:55:a0:35:
                    c9:45:06:31:80:1b:d1:2e:e8:08:a1:c1:ae:b2:84:
                    78:da:2a:d1:7a:af:44:71:55:9c:9d:fb:07:54:b5:
                    cb:60:a6:e8:67:de:50:fc:e2:1f:c9:8b:cb:39:02:
                    aa:99:24:00:94:1e:75:4a:81:0a:c8:a6:1c:f6:70:
                    3d:bb:e8:18:a2:46:57:75:89:81:37:18:c2:aa:f0:
                    4a:fc:40:e4:03:1b:f5:8e:c4:1a:74:cd:70:2d:81:
                    71:dc:28:81:c7:f8:e2:8e:a4:d3:fb:ab:9e:6a:28:
                    57:30:a8:87:68:5a:dd:53:28:e1:3d:95:bc:fd:c4:
                    83:7c:24:15:7a:30:63:b1:e8:aa:17:59:3e:eb:6a:
                    5c:f6:c1:7c:49:f9:2f:62:2c:9a:f1:47:32:6a:45:
                    c7:0e:0c:30:7f:71:a6:d7:93:9b:bf:e1:4e:3b:5d:
                    d2:58:62:0b:84:7b:d0:1c:d6:df:3a:8e:1a:9a:4b:
                    51:85:98:7d:83:bf:e8:de:50:1e:b9:5e:5b:82:d1:
                    32:89:ec:75:a3:c4:d8:5c:d6:48:22:a1:63:a5:e2:
                    bb:c5:c0:c7:88:fc:4f:89:90:88:bd:b9:8a:97:d1:
                    e0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F2:4E:8F:29:4E:6E:ED:8B:77:EC:0A:EF:9E:62:6A:1B:8F:EB:D8
            X509v3 Authority Key Identifier:
                keyid:B7:03:9D:E7:BD:77:E6:58:31:A9:DB:5B:85:9A:6A:D9:CD:BF:9F:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4qKyFrWr1AeRE6FG9TKBHQhDYZtUT4wGp3iv6Npwe9n/0/B7039DE7BD77E65831A9DB5B859A6AD9CDBF9FDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7039DE7BD77E65831A9DB5B859A6AD9CDBF9FDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4qKyFrWr1AeRE6FG9TKBHQhDYZtUT4wGp3iv6Npwe9n/0/B7039DE7BD77E65831A9DB5B859A6AD9CDBF9FDB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:65:38:8b:53:89:f6:be:0a:77:3b:16:27:39:32:67:de:c7:
         91:2b:3f:37:46:8c:bf:80:97:92:11:44:fb:69:d9:37:50:4d:
         c3:b3:ff:7b:8a:d3:db:64:07:67:91:cb:e8:2b:01:6b:11:d4:
         28:fa:5b:b6:a0:87:87:b3:4c:c4:32:83:68:a8:91:7d:86:3f:
         90:48:13:7d:12:72:6d:6f:24:b3:8e:5f:fc:5b:c3:23:dc:eb:
         de:d6:6b:fb:8c:d1:0e:6b:1a:c3:0f:5c:96:d3:38:f6:97:22:
         32:cf:ab:33:50:fd:d8:69:01:5a:a5:a6:77:52:71:d0:75:4c:
         9d:fb:d4:4f:44:8c:89:bc:27:10:e8:d7:35:5a:f3:ba:87:72:
         9a:0f:5a:f1:be:2c:b6:9e:39:5d:bd:25:07:e9:36:cd:e2:63:
         af:9e:21:83:69:ba:97:fa:81:51:62:de:2e:9d:fb:6c:82:a1:
         28:16:71:a0:05:ed:be:fb:04:ac:6a:c9:4e:c7:fa:30:29:aa:
         0c:7f:8e:2e:b3:ea:8c:b4:42:5d:a3:2c:49:6d:2d:12:4b:f0:
         34:fb:37:67:b9:a5:39:8e:dd:97:4e:ea:f7:85:52:21:07:8f:
         b4:a4:05:9e:bf:52:85:ff:f5:49:01:ce:ed:44:07:0c:ef:86:
         f8:2b:f7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----