Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/7591761A375FA28BE01555D39899D25E97FAD3A1.mft
File:                     7591761A375FA28BE01555D39899D25E97FAD3A1.mft (raw, json)
Hash identifier:          2r/nRS1200M4E0cIT4YxMlRmBV7KTHFLbj3gCmQFpBE=
Subject key identifier:   7C:88:16:6E:ED:D3:0A:11:6E:6F:C6:9C:AE:B2:24:B0:D5:D2:97:39
Authority key identifier: 75:91:76:1A:37:5F:A2:8B:E0:15:55:D3:98:99:D2:5E:97:FA:D3:A1
Certificate issuer:       /CN=7591761A375FA28BE01555D39899D25E97FAD3A1
Certificate serial:       15F0B5963252BAD9B607A02DFA210EAD8A8497C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7591761A375FA28BE01555D39899D25E97FAD3A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/7591761A375FA28BE01555D39899D25E97FAD3A1.mft
Manifest number:          0111
Signing time:             Sun 14 Apr 2024 23:36:58 +0000
Manifest this update:     Sun 14 Apr 2024 23:31:58 +0000
Manifest next update:     Mon 15 Apr 2024 23:59:58 +0000
Files and hashes:         1: 7591761A375FA28BE01555D39899D25E97FAD3A1.crl (hash: 2yQHiwIjAbTS9hW5W7hmWBMDAB6o5ugiismCul9/rQo=)
                          2: 323830343a336262633a3a2f33322d313238203d3e20323636313638.roa (hash: uzt9NF8BrnA6h8ZnCERs+Y8OJQIb1A4zxE22r/O/Iwc=)
                          3: 3136302e31392e3234342e302f32322d3332203d3e20323636313638.roa (hash: Z99pYd9+WcXG/KW/o1OCbDvyuCcp1j6E35TwzBnBv+4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:f0:b5:96:32:52:ba:d9:b6:07:a0:2d:fa:21:0e:ad:8a:84:97:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7591761A375FA28BE01555D39899D25E97FAD3A1
        Validity
            Not Before: Apr 14 23:31:58 2024 GMT
            Not After : Apr 15 23:59:58 2024 GMT
        Subject: CN=7C88166EEDD30A116E6FC69CAEB224B0D5D29739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:aa:da:70:de:23:ed:fb:75:05:55:36:9b:4f:
                    4a:fa:ea:51:ad:a3:3a:98:bc:18:e8:d0:be:52:48:
                    bb:c7:0a:d6:0c:38:19:84:a9:21:49:9a:50:85:1e:
                    3d:8b:65:67:a3:b7:ea:3e:d9:de:ef:fb:58:0c:3b:
                    7b:48:df:ed:65:95:cc:1b:53:ab:8b:3f:ed:1a:8b:
                    0f:01:b3:9a:01:1f:1a:80:91:a9:2c:9c:a9:37:f2:
                    5d:64:3c:b7:d2:c1:ac:c9:9e:65:02:93:36:f7:1e:
                    7b:9d:e2:dd:c1:68:e1:67:da:ce:f6:e1:00:5f:a9:
                    eb:87:c5:e4:22:21:6a:d6:e9:6e:12:e6:c8:36:21:
                    59:7a:86:74:bb:37:a0:d1:6d:21:32:40:00:cd:38:
                    25:8f:17:4f:cc:ad:6d:7a:6f:3a:91:36:c0:1f:62:
                    a6:ce:c7:2d:43:98:a3:d0:ec:c7:01:67:c4:c1:03:
                    07:fc:ba:4f:c5:c3:2e:d7:8d:0b:8a:cb:a5:4c:34:
                    ad:88:fe:f2:0d:9e:5d:4e:da:73:29:60:03:11:cb:
                    bf:d3:97:d3:ed:18:cf:02:bc:02:14:c7:c2:3f:50:
                    8c:a9:79:4f:f5:3d:bb:c0:77:1f:4a:1a:be:dc:02:
                    3b:9f:4e:3d:d7:f7:b8:11:a4:30:fa:aa:ed:ff:5d:
                    96:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:88:16:6E:ED:D3:0A:11:6E:6F:C6:9C:AE:B2:24:B0:D5:D2:97:39
            X509v3 Authority Key Identifier:
                keyid:75:91:76:1A:37:5F:A2:8B:E0:15:55:D3:98:99:D2:5E:97:FA:D3:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/7591761A375FA28BE01555D39899D25E97FAD3A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7591761A375FA28BE01555D39899D25E97FAD3A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/7591761A375FA28BE01555D39899D25E97FAD3A1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:bc:ff:c2:0b:16:98:32:be:d4:ab:63:2c:07:ea:3d:9a:4c:
         23:34:7d:75:39:70:61:22:66:b2:9b:9a:c7:de:2a:ad:40:ff:
         42:e9:f6:e5:41:e8:cf:8a:02:20:96:e4:ba:22:b3:3b:d4:7f:
         67:32:61:1a:27:d2:88:43:f5:1c:9f:46:ef:8b:95:48:b3:e3:
         0e:c3:92:2f:6d:d7:27:af:d7:a1:24:78:74:94:e5:99:7e:86:
         76:14:2f:5b:5b:23:d0:b6:41:a7:29:c7:68:26:92:33:73:cd:
         63:9c:ad:78:04:ce:e4:44:2f:c6:48:6f:9d:38:1f:f2:06:e5:
         b2:79:fe:ba:50:a5:36:2b:de:89:5e:49:5d:90:b2:0e:66:41:
         fb:ce:df:e8:bb:ed:9c:c3:28:79:da:c0:58:43:09:f5:39:d7:
         33:0b:1e:3b:0b:67:be:ba:da:e7:f2:17:03:0b:9c:8c:74:87:
         f4:dc:35:ba:e2:6f:30:9e:07:4e:f6:ab:3d:ee:5e:ec:2f:fb:
         e6:73:53:48:87:a0:14:cd:d5:ba:30:ef:85:90:49:34:e7:34:
         74:03:9e:04:5b:f1:82:40:14:a2:e6:2f:f0:0c:da:7e:69:ef:
         c5:ed:fb:bf:4e:b2:ae:41:69:ae:5d:70:b2:6a:5f:c5:17:69:
         a2:2c:d7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----