Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/0B7E676BF893065665A524EBE293E999020CF3E1.mft
File:                     0B7E676BF893065665A524EBE293E999020CF3E1.mft (raw, json)
Hash identifier:          IMwy22qudiyXQgstKDIuP/DSN45u7p8noYdjpHbpRZU=
Subject key identifier:   27:6C:FA:D3:2E:B2:5A:2D:44:1B:C5:62:75:83:50:1F:CC:D8:2A:10
Authority key identifier: 0B:7E:67:6B:F8:93:06:56:65:A5:24:EB:E2:93:E9:99:02:0C:F3:E1
Certificate issuer:       /CN=0B7E676BF893065665A524EBE293E999020CF3E1
Certificate serial:       0E3BCDAFBBC4837E8A5F8506710AF756DF263742
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B7E676BF893065665A524EBE293E999020CF3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/0B7E676BF893065665A524EBE293E999020CF3E1.mft
Manifest number:          71
Signing time:             Sun 14 Apr 2024 21:49:10 +0000
Manifest this update:     Sun 14 Apr 2024 21:44:10 +0000
Manifest next update:     Tue 16 Apr 2024 00:11:10 +0000
Files and hashes:         1: 323830343a373935303a383030303a3a2f34302d3430203d3e20323731323938.roa (hash: 5kZiXaLaS2J7a0JWJYr9jghiL77Y0h1kwioRCGYF2c0=)
                          2: 0B7E676BF893065665A524EBE293E999020CF3E1.crl (hash: NeyNe0RJpzU0K2sBz9OzEPUuvwOPlvGy0DfwZtxeuc8=)
                          3: 3230302e35332e38372e302f32342d3234203d3e20323731323938.roa (hash: Dh/f2Ud0DhWf1llYKCppUFMX8i8GUHdsOymx1B9niOo=)
                          4: 3230302e35332e38362e302f32342d3234203d3e20323731323938.roa (hash: h8DrUuzS91wZ6Vtj65wBmkGm3ioiEkicKdktOxmEJo4=)
                          5: 3230302e35332e38342e302f32332d3234203d3e20323731323938.roa (hash: pZ5NVlStRdu4JePEZBsIdrFvfZXjYqnAAMFrzTD8BUk=)
                          6: 323830343a373935303a3a2f33332d3438203d3e20323731323938.roa (hash: 9DswWsq6hj3A/xOc+MkGCO3NSqGESR7rY6bz7SvqCtA=)
                          7: 323830343a373935303a383130303a3a2f34302d3430203d3e20323731323938.roa (hash: QqQb1HStbx6fPahOGWfAWVipidGPOQxJ1BBi+fa2Mes=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:3b:cd:af:bb:c4:83:7e:8a:5f:85:06:71:0a:f7:56:df:26:37:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B7E676BF893065665A524EBE293E999020CF3E1
        Validity
            Not Before: Apr 14 21:44:10 2024 GMT
            Not After : Apr 16 00:11:10 2024 GMT
        Subject: CN=276CFAD32EB25A2D441BC5627583501FCCD82A10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a4:e4:2f:b3:02:10:3e:3a:47:da:1b:40:f8:
                    3f:ef:23:e2:18:75:0a:5b:21:c5:37:e5:29:9f:94:
                    d3:2f:17:d8:74:34:cc:37:e2:ca:ba:d6:8d:ec:d8:
                    8f:4f:6a:46:6e:a3:62:23:c9:74:6c:59:ac:bf:c6:
                    d0:dd:26:df:68:ad:02:1b:f2:c0:ef:ce:a4:45:a3:
                    68:93:b0:63:ed:f7:b7:6f:22:35:99:ea:3d:68:03:
                    d9:c5:aa:c2:bf:52:4d:c7:79:f0:25:59:ad:0a:f8:
                    b8:fc:75:c3:5c:d3:f7:71:0d:2f:34:c1:c0:a1:9e:
                    46:9b:47:40:5e:7f:09:f6:99:f3:da:4c:de:a9:13:
                    d8:aa:a2:89:3f:a5:8f:87:f5:10:78:8c:40:f9:2b:
                    b3:06:4c:95:6d:3c:fc:2f:41:9c:bf:0a:68:3a:b8:
                    62:ed:c1:33:bc:ad:cd:62:88:a5:83:db:d9:52:bb:
                    35:a5:58:2c:8d:b3:bc:20:2b:e0:f3:e0:f3:b9:d8:
                    95:b9:e0:09:4f:ca:9f:d3:2d:b6:f3:7f:bb:f6:fe:
                    3f:21:c8:45:ab:c9:0d:8b:ea:51:50:13:08:7f:4e:
                    99:ab:74:74:10:c8:5f:84:1c:d3:ff:70:f7:76:0c:
                    2d:aa:06:99:9a:e8:4e:17:67:fe:e5:ff:03:b9:7e:
                    10:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:6C:FA:D3:2E:B2:5A:2D:44:1B:C5:62:75:83:50:1F:CC:D8:2A:10
            X509v3 Authority Key Identifier:
                keyid:0B:7E:67:6B:F8:93:06:56:65:A5:24:EB:E2:93:E9:99:02:0C:F3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/0B7E676BF893065665A524EBE293E999020CF3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B7E676BF893065665A524EBE293E999020CF3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/0B7E676BF893065665A524EBE293E999020CF3E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:6d:08:cd:21:c8:0b:96:9e:dd:20:5d:86:a4:db:96:6d:db:
         a7:20:9f:c4:13:a7:a8:33:d0:cc:b5:54:6d:56:52:57:4b:83:
         03:3a:6a:f1:fa:db:67:7b:81:06:23:5c:13:09:c6:58:d4:61:
         09:31:52:02:d1:64:55:71:58:30:01:78:b4:13:e6:0e:43:52:
         a5:30:15:e6:bf:fe:2c:fa:fb:cc:25:de:62:98:73:3c:79:4b:
         56:3a:0f:0e:3d:24:70:5a:3f:18:61:56:a4:98:ba:36:0c:34:
         a4:cd:ba:10:76:db:24:da:88:dd:01:5f:00:f8:66:be:1f:f8:
         aa:ce:93:bb:08:5f:07:1e:9b:10:16:3b:60:e3:0b:7e:cd:04:
         98:b8:a3:1f:11:59:4e:ee:4e:a8:ae:de:d1:a6:76:6c:0c:2d:
         38:b4:5a:d1:5e:cc:1d:41:b6:2c:c4:43:2b:ec:f7:bc:74:90:
         3d:5e:47:f4:b0:b0:75:8e:77:37:6c:03:9d:63:30:0a:92:14:
         13:10:68:07:09:e7:68:ff:36:33:40:b8:e8:42:1d:8e:90:d0:
         c9:aa:76:39:e3:fe:9a:23:36:51:e5:ec:c8:87:8c:2d:e0:67:
         69:c6:4c:6b:b6:b2:19:ae:e2:82:ca:d6:35:39:4c:dc:20:2b:
         28:aa:9a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----