Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2ywLYp6ohkSeucrwntG3C4q6m9LibJb4KxPPdbKsXeG5/1/4073FA1C2A2E4732C9C4BE9301B36F1801D3904E.mft
File:                     4073FA1C2A2E4732C9C4BE9301B36F1801D3904E.mft (raw, json)
Hash identifier:          sZwDYe4OYRrjKXN8d0pc+0ZCLl+OwZataXedo5ORDgA=
Subject key identifier:   71:67:7C:18:E3:78:DD:FF:DF:BC:90:9A:DC:5D:C4:53:2F:AC:46:C6
Authority key identifier: 40:73:FA:1C:2A:2E:47:32:C9:C4:BE:93:01:B3:6F:18:01:D3:90:4E
Certificate issuer:       /CN=4073FA1C2A2E4732C9C4BE9301B36F1801D3904E
Certificate serial:       69AB70542E7372E08AFA693CCE26FCBB3BF0781C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4073FA1C2A2E4732C9C4BE9301B36F1801D3904E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ywLYp6ohkSeucrwntG3C4q6m9LibJb4KxPPdbKsXeG5/1/4073FA1C2A2E4732C9C4BE9301B36F1801D3904E.mft
Manifest number:          3D
Signing time:             Sun 19 May 2024 08:40:01 +0000
Manifest this update:     Sun 19 May 2024 08:35:01 +0000
Manifest next update:     Mon 20 May 2024 12:00:01 +0000
Files and hashes:         1: 4073FA1C2A2E4732C9C4BE9301B36F1801D3904E.crl (hash: PoJH5GUtUdghlemBbmhkrA9DTO+jdH9rUBLdMo1F9RU=)
                          2: 3133312e302e3132342e302f32322d3234203d3e20323731313333.roa (hash: 33RSSFvRzbrPb4Y330vxue8OonmYDOVRCRVIsIGMyck=)
                          3: 323830343a373663343a3a2f33322d3438203d3e20323731313333.roa (hash: /h8rWR1eLzE7fMYDpUg28yICZ6TrZcmM6IrSoQjOuoQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ab:70:54:2e:73:72:e0:8a:fa:69:3c:ce:26:fc:bb:3b:f0:78:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4073FA1C2A2E4732C9C4BE9301B36F1801D3904E
        Validity
            Not Before: May 19 08:35:01 2024 GMT
            Not After : May 20 12:00:01 2024 GMT
        Subject: CN=71677C18E378DDFFDFBC909ADC5DC4532FAC46C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:43:27:87:38:62:71:7d:80:e5:ee:86:61:c9:
                    db:d1:4e:5e:2a:62:ca:04:ac:e9:5e:23:7f:e8:0d:
                    be:bf:39:91:c0:35:ff:96:40:73:67:b9:58:de:97:
                    b1:58:29:00:19:3e:bb:7a:ec:0b:e1:ae:95:83:33:
                    8f:22:3a:f5:26:e9:74:dc:ed:ce:82:18:68:9f:60:
                    7c:ac:8b:e8:53:90:ed:b1:95:88:0f:43:8d:0d:94:
                    e7:cc:70:3c:f3:b8:19:f6:bb:6d:9d:69:06:da:39:
                    59:0c:3d:be:52:e8:ce:70:f4:4e:9b:7f:2e:b6:f9:
                    fd:8a:15:1f:93:12:cd:6a:42:7f:38:b0:cc:02:0b:
                    46:6d:eb:ef:8d:89:94:79:b3:87:50:b9:42:f5:6f:
                    0c:95:71:4f:5b:f0:ce:88:62:31:e2:dc:a4:3f:24:
                    e4:04:6c:e3:c4:5e:58:9c:cf:81:f9:df:2b:9d:9d:
                    04:4b:e3:00:c0:e5:2d:7e:53:cf:da:58:9a:99:2c:
                    a1:a4:6d:20:6a:67:27:f8:2e:b4:c1:ac:e8:25:1e:
                    db:55:50:ab:c7:cb:f9:ab:b5:22:43:26:f7:43:c3:
                    9b:de:f4:5c:8a:97:a0:fe:a6:8e:89:5a:a9:ea:ee:
                    22:46:5e:42:6c:17:e1:77:ec:46:7e:c9:e3:e2:80:
                    3d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:67:7C:18:E3:78:DD:FF:DF:BC:90:9A:DC:5D:C4:53:2F:AC:46:C6
            X509v3 Authority Key Identifier:
                keyid:40:73:FA:1C:2A:2E:47:32:C9:C4:BE:93:01:B3:6F:18:01:D3:90:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ywLYp6ohkSeucrwntG3C4q6m9LibJb4KxPPdbKsXeG5/1/4073FA1C2A2E4732C9C4BE9301B36F1801D3904E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4073FA1C2A2E4732C9C4BE9301B36F1801D3904E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ywLYp6ohkSeucrwntG3C4q6m9LibJb4KxPPdbKsXeG5/1/4073FA1C2A2E4732C9C4BE9301B36F1801D3904E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:94:91:25:0c:56:f8:de:63:d6:d4:ff:cc:fa:e9:07:cd:37:
         b7:d5:f8:62:c9:8b:89:a0:3e:20:7f:97:55:18:09:21:7a:01:
         74:36:80:7a:6e:98:a2:a8:68:5e:5e:aa:a3:2b:73:70:b2:02:
         dc:f5:e7:00:6f:b3:42:13:3c:f8:2a:b2:09:4f:a7:13:69:a3:
         29:3a:76:94:31:09:28:5d:db:3d:c2:42:2e:d1:3a:e8:8c:44:
         36:13:96:e1:9b:46:22:e7:40:54:9c:3e:48:d3:c3:fd:57:ee:
         b7:10:8f:6e:a8:d1:85:aa:e7:89:2b:bf:fd:3d:2c:a8:04:2e:
         ff:9c:79:04:a2:c4:92:79:0e:7d:02:23:3e:31:4b:f8:19:2c:
         e6:30:e6:0a:95:e3:73:02:18:94:4b:56:1d:c2:41:f0:23:e3:
         5b:c6:9e:a5:4a:31:77:aa:5b:e8:b5:71:cf:6c:31:7a:6f:ae:
         22:ad:76:50:a6:85:70:d9:75:4e:4e:eb:8f:55:33:bf:dc:c9:
         0a:fe:5a:be:6d:44:a2:a8:29:85:fd:a4:64:5e:07:f7:42:c2:
         e0:54:88:54:78:b9:dd:aa:7b:0c:ce:f1:2d:92:36:05:b6:84:
         dd:4b:8e:64:ec:4d:5a:fc:f7:81:2f:df:08:df:d1:38:17:48:
         a4:10:c2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----