Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4UBjuvcnxJcFhohnb61SYJEBnW5k5N6odopCeTaSSkMD/0/76F5D002F587024204FE1ADD44E087D067FD98AF.mft
File:                     76F5D002F587024204FE1ADD44E087D067FD98AF.mft (raw, json)
Hash identifier:          bI8JCuBxOZEWedEZ4FT3JzJF2rUlN6+fF5KWZJAjf0M=
Subject key identifier:   2A:A1:DA:68:46:0A:D1:28:EF:28:04:E9:8E:60:A4:79:8C:FC:CB:47
Authority key identifier: 76:F5:D0:02:F5:87:02:42:04:FE:1A:DD:44:E0:87:D0:67:FD:98:AF
Certificate issuer:       /CN=76F5D002F587024204FE1ADD44E087D067FD98AF
Certificate serial:       1F44F9A34A6B617B4F5315F13974021D9BD682A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/76F5D002F587024204FE1ADD44E087D067FD98AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4UBjuvcnxJcFhohnb61SYJEBnW5k5N6odopCeTaSSkMD/0/76F5D002F587024204FE1ADD44E087D067FD98AF.mft
Manifest number:          33
Signing time:             Wed 10 Jan 2024 23:39:05 +0000
Manifest this update:     Wed 10 Jan 2024 23:34:05 +0000
Manifest next update:     Fri 12 Jan 2024 00:08:05 +0000
Files and hashes:         1: 3138362e3231312e34382e302f32302d3332203d3e20323632393836.roa (hash: SMUvASnqNCV5pHtUnQoNoHWZbtIDHij0fdjFKDje0pI=)
                          2: 323830343a3962383a3a2f33322d313238203d3e20323632393836.roa (hash: zl2763rFgaSmN+XMoBhEVjGkuowR8ZsVsLPaSg0YkEU=)
                          3: 76F5D002F587024204FE1ADD44E087D067FD98AF.crl (hash: W3+FkcxA4XSVYm/Sa2cTlaAzkmJCVPHdY8mFGszjhUA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:44:f9:a3:4a:6b:61:7b:4f:53:15:f1:39:74:02:1d:9b:d6:82:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76F5D002F587024204FE1ADD44E087D067FD98AF
        Validity
            Not Before: Jan 10 23:34:05 2024 GMT
            Not After : Jan 12 00:08:05 2024 GMT
        Subject: CN=2AA1DA68460AD128EF2804E98E60A4798CFCCB47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:08:9e:c9:9c:81:ac:f5:f2:cf:a2:1c:7c:b3:
                    93:62:f3:96:01:1b:12:67:66:c0:77:9c:0b:80:27:
                    24:c3:6f:f4:a4:62:fa:5c:5c:ad:16:f3:90:8f:95:
                    56:17:a3:8e:66:b3:a7:c4:68:45:a0:8e:8e:8b:ab:
                    0d:fd:4b:2f:78:15:13:0d:ad:ec:fe:cf:4f:8b:23:
                    ec:08:41:b9:47:6e:90:02:3a:89:38:13:5d:1f:2b:
                    98:ba:e1:5c:e7:b8:c4:01:38:db:5c:4d:fc:db:5a:
                    80:51:53:82:40:3d:09:f3:36:7c:52:ac:9b:a0:97:
                    9a:b3:0c:13:8d:f3:d6:4d:24:09:0a:22:01:82:33:
                    a0:ec:c2:7a:05:bd:25:e5:d4:eb:95:10:58:24:e4:
                    29:42:79:63:31:aa:21:6f:9b:1e:c6:83:d6:a1:57:
                    0b:bd:0f:b1:c2:15:af:fe:6e:a3:9b:4b:50:93:ed:
                    d4:ae:c7:f9:c8:22:3d:1c:c7:1c:89:dd:47:b6:cc:
                    a8:ee:07:56:9b:55:1b:27:3d:db:55:49:d2:f6:21:
                    8a:b5:48:f5:e6:ed:eb:26:48:59:c3:fc:8f:c2:60:
                    e9:7f:12:a7:93:79:df:6a:34:63:2d:51:1f:63:2f:
                    8e:b6:3a:5b:1f:8a:82:16:9e:f9:6d:9e:f4:89:cd:
                    45:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A1:DA:68:46:0A:D1:28:EF:28:04:E9:8E:60:A4:79:8C:FC:CB:47
            X509v3 Authority Key Identifier:
                keyid:76:F5:D0:02:F5:87:02:42:04:FE:1A:DD:44:E0:87:D0:67:FD:98:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4UBjuvcnxJcFhohnb61SYJEBnW5k5N6odopCeTaSSkMD/0/76F5D002F587024204FE1ADD44E087D067FD98AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/76F5D002F587024204FE1ADD44E087D067FD98AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4UBjuvcnxJcFhohnb61SYJEBnW5k5N6odopCeTaSSkMD/0/76F5D002F587024204FE1ADD44E087D067FD98AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:84:70:9a:6f:0a:9f:e7:7d:04:a1:88:30:8e:1c:84:5e:48:
         91:8c:ab:1d:08:cc:8c:c9:33:3e:20:8d:b6:02:df:22:30:39:
         40:1b:4d:08:42:8f:22:38:78:09:0d:49:c7:3f:4e:7f:0d:68:
         b7:4e:65:9f:c5:ae:4f:7e:99:db:0f:6a:d6:3e:f6:9c:ef:20:
         9e:6b:16:fe:19:0d:77:8d:50:31:be:c3:2b:9d:bc:94:32:ba:
         28:e7:99:cc:7f:30:92:3a:02:84:61:b8:13:6f:9b:02:19:41:
         7d:58:2c:78:62:10:3d:5c:a7:b4:45:63:d2:0c:f7:02:45:a2:
         a2:33:91:b9:aa:90:6b:71:3c:ef:c2:ee:0f:c0:cf:80:74:04:
         33:61:78:c9:fb:e8:6e:0e:21:61:77:3e:54:db:28:87:d5:cd:
         8b:5f:ba:81:8a:de:46:43:61:45:d4:6b:53:6c:62:41:e5:9e:
         77:5d:f3:74:78:31:e7:96:f0:b7:6d:33:27:f6:ef:59:7c:43:
         12:dd:a9:2a:75:cc:27:cb:6a:05:02:91:8e:52:57:e3:9f:55:
         e1:eb:dd:0d:ad:3f:c7:59:95:68:06:72:4d:93:3a:f9:ef:9c:
         be:fb:f7:47:0b:ca:dc:39:2c:40:4d:12:6a:ab:cc:ed:af:d0:
         a0:f8:14:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----