Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/B92A7D29F2284F4FBCE58E9FB1883BBD15BE3DAF.mft
File:                     B92A7D29F2284F4FBCE58E9FB1883BBD15BE3DAF.mft (raw, json)
Hash identifier:          0xTp5Y4O6jwokax2ZkIpAHix0ZYd4uKx4K9Tbf6MTag=
Subject key identifier:   37:C7:40:99:28:62:43:DA:FF:41:BC:89:E1:D7:CE:71:82:9F:18:76
Authority key identifier: B9:2A:7D:29:F2:28:4F:4F:BC:E5:8E:9F:B1:88:3B:BD:15:BE:3D:AF
Certificate issuer:       /CN=B92A7D29F2284F4FBCE58E9FB1883BBD15BE3DAF
Certificate serial:       6C8399A22F87E83D26C1D5AC04F17D8B21F875EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B92A7D29F2284F4FBCE58E9FB1883BBD15BE3DAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/B92A7D29F2284F4FBCE58E9FB1883BBD15BE3DAF.mft
Manifest number:          0261
Signing time:             Mon 15 Apr 2024 11:08:31 +0000
Manifest this update:     Mon 15 Apr 2024 11:03:31 +0000
Manifest next update:     Tue 16 Apr 2024 11:45:31 +0000
Files and hashes:         1: B92A7D29F2284F4FBCE58E9FB1883BBD15BE3DAF.crl (hash: 7fjnSr9yjp/m0tHtCi27Rnu1FCY2+ohES6gaf58GPyU=)
                          2: 3138392e31342e38302e302f32302d3234203d3e203238323737.roa (hash: 2JeYKMKu3xc/jg2xA3zzKdHYZDC86GzMRvSSTXBsotg=)
                          3: 3137392e35312e3137322e302f32322d3234203d3e203238323737.roa (hash: 4Tv/oPcugjmr8t7ta9cN3wacFqrq2stgWk8MSmUby4Q=)
                          4: 3137372e3133362e38382e302f32312d3234203d3e203238323737.roa (hash: ycLfQ0AtBmL72F1on2thbcomkMPX6EHBPEBnW/Sma3w=)
                          5: 323830343a3264633a3a2f33322d3431203d3e203238323737.roa (hash: EBTjldGnD9lOQaukOCkFR+FhYgQPJiGbgy6ZPeA2LkU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:83:99:a2:2f:87:e8:3d:26:c1:d5:ac:04:f1:7d:8b:21:f8:75:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B92A7D29F2284F4FBCE58E9FB1883BBD15BE3DAF
        Validity
            Not Before: Apr 15 11:03:31 2024 GMT
            Not After : Apr 16 11:45:31 2024 GMT
        Subject: CN=37C74099286243DAFF41BC89E1D7CE71829F1876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:08:58:41:d4:77:4e:e2:fd:ef:cc:8f:62:48:
                    5c:6e:01:fc:73:56:ff:49:5b:bb:04:11:a6:d7:82:
                    30:39:c2:a0:1c:df:11:90:bc:01:4e:57:6a:10:33:
                    3a:18:86:78:b7:3b:93:fc:a2:4c:c9:18:80:45:44:
                    20:84:69:f2:b1:23:c1:27:f0:14:2c:ba:f0:5b:5b:
                    a2:37:81:95:1b:51:6d:08:7b:e5:b9:8f:b3:1a:c8:
                    dd:ad:1c:d7:7f:66:eb:3a:6f:f1:0d:70:96:6a:54:
                    22:c6:20:6e:b7:fd:6f:45:89:45:85:17:0c:ff:43:
                    c3:cd:6c:c3:c7:dd:9a:f1:a2:e6:d6:3c:f3:cb:e2:
                    21:ff:ed:8b:af:c3:58:d9:d4:4b:dd:fe:d9:65:65:
                    83:fe:8b:fd:15:1e:6d:b3:ce:b1:93:83:6d:6c:89:
                    7f:f3:34:02:1c:8f:a2:88:ea:8e:89:d3:a6:5d:f2:
                    c7:73:29:b7:b2:b1:bd:b6:95:9b:c1:f7:8f:63:74:
                    91:da:ee:39:43:69:25:8e:92:eb:73:8b:32:d6:87:
                    8d:0a:1f:17:b4:97:dd:5f:0e:97:06:95:b5:79:b7:
                    f3:31:c7:a6:9d:a1:bf:b8:80:db:cd:71:92:22:15:
                    63:6d:1f:52:db:e7:53:98:c6:68:dd:df:ad:e0:9d:
                    4a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C7:40:99:28:62:43:DA:FF:41:BC:89:E1:D7:CE:71:82:9F:18:76
            X509v3 Authority Key Identifier:
                keyid:B9:2A:7D:29:F2:28:4F:4F:BC:E5:8E:9F:B1:88:3B:BD:15:BE:3D:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/B92A7D29F2284F4FBCE58E9FB1883BBD15BE3DAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B92A7D29F2284F4FBCE58E9FB1883BBD15BE3DAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/B92A7D29F2284F4FBCE58E9FB1883BBD15BE3DAF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:1c:90:98:bf:9b:cd:ae:79:c3:8c:77:e7:3b:e4:ba:7c:b6:
         51:1b:1f:cb:70:0c:a1:12:59:8c:5d:eb:d7:c7:c0:6d:26:48:
         2f:46:c5:ca:f2:64:37:57:34:2f:98:72:9a:8c:67:30:7c:9c:
         26:d7:f0:89:cb:f7:38:aa:21:0e:84:cf:f1:ff:67:69:b2:88:
         3f:43:6e:49:d4:a1:e5:89:9c:d3:a6:15:0e:b0:36:da:2b:c3:
         99:d0:a2:f7:af:59:71:10:3c:3b:19:c8:d4:81:68:f5:19:88:
         41:61:71:1b:24:7b:99:b5:80:a4:f3:ad:e6:63:c5:2d:e0:af:
         3e:31:8d:3c:ce:62:aa:80:a6:7a:bf:19:53:f3:45:b2:83:ce:
         1b:fb:e4:74:9b:81:9a:a9:72:71:1e:da:4c:81:b6:09:a9:c6:
         54:98:73:ec:c2:1e:b0:da:99:17:89:e4:34:e6:0a:95:91:d3:
         49:74:fc:88:a4:ec:36:1e:dc:cb:81:eb:3e:77:b7:4d:a8:16:
         7d:c6:19:2d:b8:b8:42:d3:7c:a6:87:d9:6e:87:30:e1:59:f3:
         fa:38:8b:05:3f:b5:e5:90:03:c4:05:21:d3:48:0c:c5:c2:2b:
         54:c6:ce:13:c0:71:85:0b:18:8d:55:81:24:43:6a:39:a1:9e:
         cf:a1:71:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----