Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3ggwCtEcgn2A9CoDUkYHTrTAPnULgPo8jg9zpEq7JThA/0/61E2D2B53D81871EEFCB177DBA0D5F4ED947B790.mft
File:                     61E2D2B53D81871EEFCB177DBA0D5F4ED947B790.mft (raw, json)
Hash identifier:          Uj8ZZDS1XsoS0tDDY9igCdOpwkGizlFbf52u/opSONo=
Subject key identifier:   20:1F:A5:7D:6D:01:E0:49:8F:70:A9:73:5E:2E:FC:3F:4A:74:E2:64
Authority key identifier: 61:E2:D2:B5:3D:81:87:1E:EF:CB:17:7D:BA:0D:5F:4E:D9:47:B7:90
Certificate issuer:       /CN=61E2D2B53D81871EEFCB177DBA0D5F4ED947B790
Certificate serial:       21B3D569B0FE5046F93725F4C9467B39C7B7A6DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61E2D2B53D81871EEFCB177DBA0D5F4ED947B790.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ggwCtEcgn2A9CoDUkYHTrTAPnULgPo8jg9zpEq7JThA/0/61E2D2B53D81871EEFCB177DBA0D5F4ED947B790.mft
Manifest number:          077D
Signing time:             Mon 15 Apr 2024 04:38:13 +0000
Manifest this update:     Mon 15 Apr 2024 04:33:13 +0000
Manifest next update:     Tue 16 Apr 2024 06:28:13 +0000
Files and hashes:         1: 34352e37302e3137322e302f32322d3234203d3e20323637353834.roa (hash: kYr8MJWLTxL4COK1LEJjZYRGFIlAn/8KR+MtPLV5jzQ=)
                          2: 323830343a343362303a3a2f33322d3438203d3e20323637353834.roa (hash: ZhQLowEjx5/Ero3iOu26kJvu137T2LamcKK9FNqjtmE=)
                          3: 61E2D2B53D81871EEFCB177DBA0D5F4ED947B790.crl (hash: ulQ96x3Idambofnkv8Scu/qv7hFBI1wFRrSdNeq1plQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:b3:d5:69:b0:fe:50:46:f9:37:25:f4:c9:46:7b:39:c7:b7:a6:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61E2D2B53D81871EEFCB177DBA0D5F4ED947B790
        Validity
            Not Before: Apr 15 04:33:13 2024 GMT
            Not After : Apr 16 06:28:13 2024 GMT
        Subject: CN=201FA57D6D01E0498F70A9735E2EFC3F4A74E264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d6:97:c2:4e:01:65:7b:22:38:d4:99:40:d0:
                    da:8b:c9:6d:67:65:56:a4:d2:15:ce:e9:86:4e:d8:
                    9d:d2:e9:bb:34:6e:83:bb:e8:7b:23:fd:ee:43:17:
                    44:0c:f3:52:b1:c8:b8:25:55:5f:8d:c2:f0:0b:5c:
                    1d:33:56:81:4e:82:b0:91:0f:82:a4:b3:3d:44:7f:
                    08:02:09:90:cf:6a:d1:38:b3:d0:34:a3:e6:b4:2b:
                    f4:64:ab:6a:0e:23:f3:ae:cc:36:af:a9:4e:39:83:
                    70:4a:d9:a8:75:00:7b:c0:3c:ee:ed:56:7c:c0:2f:
                    2c:ff:95:61:8a:7a:19:8e:2a:35:34:78:f7:d8:d1:
                    8d:52:b7:04:5d:d9:dc:41:d9:3c:d9:f9:5a:4f:d9:
                    ec:f2:93:92:f1:3c:9a:89:1f:09:b1:81:81:c3:e2:
                    df:dc:99:4f:8d:d1:2c:19:e6:88:22:3e:1d:cf:69:
                    e3:51:8e:67:54:d1:4a:f3:48:11:aa:74:7d:72:91:
                    25:6c:91:5e:05:f8:1d:0a:89:0d:65:ce:f0:be:83:
                    e0:63:70:de:3a:86:6c:3c:ad:d2:60:e6:f5:99:d5:
                    91:1e:70:1d:b1:97:ee:62:76:65:23:1b:79:ec:e7:
                    7b:12:e2:ed:c5:f6:df:8f:de:24:9e:98:52:20:c6:
                    1a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:1F:A5:7D:6D:01:E0:49:8F:70:A9:73:5E:2E:FC:3F:4A:74:E2:64
            X509v3 Authority Key Identifier:
                keyid:61:E2:D2:B5:3D:81:87:1E:EF:CB:17:7D:BA:0D:5F:4E:D9:47:B7:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ggwCtEcgn2A9CoDUkYHTrTAPnULgPo8jg9zpEq7JThA/0/61E2D2B53D81871EEFCB177DBA0D5F4ED947B790.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61E2D2B53D81871EEFCB177DBA0D5F4ED947B790.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ggwCtEcgn2A9CoDUkYHTrTAPnULgPo8jg9zpEq7JThA/0/61E2D2B53D81871EEFCB177DBA0D5F4ED947B790.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:bc:89:43:e2:b8:6e:fc:cc:fe:9f:36:92:af:d0:25:d9:c3:
         44:b9:71:7f:8b:95:05:11:ec:df:b2:5b:b6:3c:60:4d:dd:ea:
         2b:28:e6:92:01:f3:27:4f:df:40:8e:fc:c7:0d:57:a0:d7:be:
         2b:45:c2:98:99:9e:ba:a3:f5:05:1c:f1:2f:05:7c:5a:6b:3f:
         a5:7f:da:ff:67:5b:d4:5c:66:78:98:ad:a6:6d:3d:49:bc:1a:
         69:ad:9d:f8:8c:25:40:f2:be:9e:ad:63:25:e7:c8:6b:16:a1:
         11:00:27:63:ce:52:ad:d0:e2:5a:dd:d0:1d:c8:f5:74:4f:5a:
         e9:6e:a4:7e:23:e5:2c:f0:c6:e8:e1:5d:92:fe:d4:7b:45:56:
         18:15:7b:28:49:ed:9d:20:87:cf:95:1b:a9:72:cf:e4:ef:d8:
         60:d1:2a:41:90:1f:e7:dd:68:ce:2c:20:9f:fe:6c:ab:0f:09:
         80:29:a1:64:68:24:1c:8e:40:c5:34:c2:b3:52:7b:e4:00:fd:
         6b:a7:0a:66:05:2e:08:be:a7:e4:20:1a:7f:44:fd:52:7a:c5:
         bf:5c:e1:6a:59:00:e7:16:7f:b3:99:00:c9:21:cf:0e:a9:76:
         e9:43:33:f0:cb:d7:42:0b:d0:ba:ae:d3:6b:81:a0:6c:30:4f:
         84:f2:f3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----