Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2ywLYp6ohkSeucrwntG3C4q6m9LibJb4KxPPdbKsXeG5/0/A7ED2B626B4EA361FF1AEAE9787A5D7051D9C6AA.mft
File:                     A7ED2B626B4EA361FF1AEAE9787A5D7051D9C6AA.mft (raw, json)
Hash identifier:          iXkGxo/wX/UoefL2xL+n5iywPOTWCP5Q9iELk7YR+Zo=
Subject key identifier:   D7:A0:F3:A5:3A:98:60:85:9A:91:66:57:DB:50:18:35:9E:E1:03:17
Authority key identifier: A7:ED:2B:62:6B:4E:A3:61:FF:1A:EA:E9:78:7A:5D:70:51:D9:C6:AA
Certificate issuer:       /CN=A7ED2B626B4EA361FF1AEAE9787A5D7051D9C6AA
Certificate serial:       34A7AA13391DF77C24D9633E9A8FD8737A086F30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7ED2B626B4EA361FF1AEAE9787A5D7051D9C6AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ywLYp6ohkSeucrwntG3C4q6m9LibJb4KxPPdbKsXeG5/0/A7ED2B626B4EA361FF1AEAE9787A5D7051D9C6AA.mft
Manifest number:          020F
Signing time:             Mon 15 Apr 2024 05:19:16 +0000
Manifest this update:     Mon 15 Apr 2024 05:14:16 +0000
Manifest next update:     Tue 16 Apr 2024 06:52:16 +0000
Files and hashes:         1: 323830343a373663343a3a2f33322d3438203d3e20323731313333.roa (hash: +pUu50rvFpd0CqURyDCrQN9SrAfldGROdbMPbKnKu3M=)
                          2: A7ED2B626B4EA361FF1AEAE9787A5D7051D9C6AA.crl (hash: vkiaDBrilT3VUNAOPH98F2IWzE2+NOIylVPttkV18hM=)
                          3: 3133312e302e3132342e302f32322d3234203d3e20323731313333.roa (hash: XCKC2ZboSfCeBRZZ+b242jEy/4PWItodRATzzrpnNsw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:a7:aa:13:39:1d:f7:7c:24:d9:63:3e:9a:8f:d8:73:7a:08:6f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7ED2B626B4EA361FF1AEAE9787A5D7051D9C6AA
        Validity
            Not Before: Apr 15 05:14:16 2024 GMT
            Not After : Apr 16 06:52:16 2024 GMT
        Subject: CN=D7A0F3A53A9860859A916657DB5018359EE10317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:71:5b:51:09:23:a4:7b:9d:c3:97:d0:b4:29:
                    aa:7c:85:49:e3:20:d1:9e:12:95:a7:82:af:3b:e1:
                    88:7e:eb:b5:f9:6d:23:3c:21:65:65:15:87:41:99:
                    a5:2d:d6:cb:ac:06:e2:09:e0:58:fb:ab:ce:50:56:
                    54:81:c2:a4:c2:40:bb:71:7f:6a:5e:06:35:4b:bc:
                    e2:bf:7e:fb:f3:ef:95:d4:bb:1c:02:86:38:2e:2d:
                    ed:80:bd:8e:ff:8e:1c:63:4a:b4:6d:e0:dd:99:81:
                    d6:42:63:7d:94:ad:ce:fa:ae:75:00:45:b0:ac:6d:
                    01:dc:ee:0e:88:e1:59:90:81:ad:59:c4:9c:44:3f:
                    e7:63:48:be:60:bb:40:df:fc:f9:2f:4d:d7:54:26:
                    f1:e4:88:69:d4:44:d3:57:dd:28:e3:2b:77:1c:d2:
                    3a:b1:72:79:60:b7:c8:e7:46:1c:54:d2:ba:69:13:
                    79:3e:16:12:94:24:74:72:f0:e7:34:8a:1e:52:5e:
                    07:46:c7:eb:37:82:4a:28:ea:2f:41:3e:cd:59:8f:
                    96:bd:8d:d6:4a:41:10:d1:d1:ed:20:3f:db:37:d2:
                    d4:d1:fc:44:49:64:cf:d1:da:38:42:54:32:90:3a:
                    ab:84:23:06:68:77:46:47:e6:fd:2c:7a:2f:f4:69:
                    83:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A0:F3:A5:3A:98:60:85:9A:91:66:57:DB:50:18:35:9E:E1:03:17
            X509v3 Authority Key Identifier:
                keyid:A7:ED:2B:62:6B:4E:A3:61:FF:1A:EA:E9:78:7A:5D:70:51:D9:C6:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ywLYp6ohkSeucrwntG3C4q6m9LibJb4KxPPdbKsXeG5/0/A7ED2B626B4EA361FF1AEAE9787A5D7051D9C6AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7ED2B626B4EA361FF1AEAE9787A5D7051D9C6AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ywLYp6ohkSeucrwntG3C4q6m9LibJb4KxPPdbKsXeG5/0/A7ED2B626B4EA361FF1AEAE9787A5D7051D9C6AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:e9:c4:95:7c:95:09:61:b2:dc:ae:79:1d:59:b9:77:d0:69:
         7e:ec:d7:4f:69:3f:5b:b0:6d:74:cc:34:0c:78:15:2e:03:c1:
         cb:15:db:d2:ac:e0:89:36:18:62:08:d5:0c:fd:b1:19:3b:93:
         74:bd:07:4a:be:e8:2a:51:41:60:58:9f:c5:8d:fd:c9:d5:f6:
         e3:97:b3:d7:d1:19:c6:f1:50:5d:f9:ab:61:2e:4b:36:cd:58:
         b1:b1:c1:77:2a:e0:6c:72:a1:18:fc:96:25:64:80:40:cb:89:
         3f:f6:35:6d:82:2a:9e:2b:04:cc:42:bc:cf:2f:1d:02:bb:65:
         b2:85:de:78:88:4c:20:fa:91:79:f2:7c:b8:28:72:a7:96:f2:
         23:90:ae:ad:ca:8b:15:f8:b4:4b:2f:55:0b:c9:61:95:af:6a:
         58:b0:47:63:79:0b:77:33:cf:5f:27:b8:f4:97:a2:33:a5:1e:
         15:be:7f:5e:8a:4b:b4:7f:08:99:93:49:b6:32:16:65:17:66:
         b4:81:6f:00:35:26:25:59:c2:f0:f4:a1:0b:fb:46:38:c2:ef:
         81:0d:18:5a:c5:00:aa:e3:79:ef:d9:5c:21:e5:3a:d2:9a:64:
         a0:20:a4:3a:48:76:b2:12:af:07:ac:f8:40:83:95:52:83:b0:
         1b:24:b1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----