Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.mft
File:                     A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.mft (raw, json)
Hash identifier:          8H/ghpLRJfn2ijO3PvyoWuP+DPm3hiO2CGx1zv1Cs0M=
Subject key identifier:   0C:D0:D2:E0:E3:47:DF:AD:75:0A:78:3F:F4:40:E1:EC:97:50:B0:B1
Authority key identifier: A7:D1:E6:9F:57:80:7C:1E:D0:2C:A4:59:71:AD:14:ED:A3:93:1F:2E
Certificate issuer:       /CN=A7D1E69F57807C1ED02CA45971AD14EDA3931F2E
Certificate serial:       2DB2E45E1D157C6CBD1085E03EEC52E4517E68E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.mft
Manifest number:          072C
Signing time:             Mon 15 Apr 2024 04:30:00 +0000
Manifest this update:     Mon 15 Apr 2024 04:25:00 +0000
Manifest next update:     Tue 16 Apr 2024 04:30:00 +0000
Files and hashes:         1: 323830343a343134343a3a2f33342d3334203d3e20323637343234.roa (hash: EA7h+MAPFM4QWWljytfhycQFpXNFGQiXOMO7da0IweU=)
                          2: 3138312e3139312e3133352e302f32342d3234203d3e20323637343234.roa (hash: yANiefhOd8diTk/d0Zf5HdZYEw9ZNJ2tFJz2Ipq85KA=)
                          3: 3138312e3139312e3133322e302f32342d3234203d3e20323637343234.roa (hash: SPyqiHvOK4GzhOhA0qzkgHpVVSib0FNfhHzcGFIxIxE=)
                          4: 323830343a343134343a383030303a3a2f33342d3334203d3e20323637343234.roa (hash: K+RDQspduGAjnJqxhLuHP6xqKPYHd5CcIDT0tmxb/ek=)
                          5: A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.crl (hash: vA1+ekFTW86+MoyJtPEzvbJtlGjyQsWWLIPlMowpbpc=)
                          6: 3138312e3139312e3133342e302f32332d3233203d3e20323637343234.roa (hash: 3E3JXNUdiSb1vf0mXm5n3SfTmS7ojh8QfBzhq+Lh9Q8=)
                          7: 323830343a343134343a633030303a3a2f33342d3334203d3e20323637343234.roa (hash: 54yfo1Op0+roXHmxuAGX3tc42KD1eZL2Cph4pfit73I=)
                          8: 323830343a343134343a3a2f33322d3332203d3e20323637343234.roa (hash: bwryJgG2vd28lAUOOtfEP6p1L6BAYc+Md9ZNWJXh6uc=)
                          9: 3138312e3139312e3133342e302f32342d3234203d3e20323637343234.roa (hash: LyT9BeVbNy9Mu3o1/2tjHLoqq0titMt0iuzbVpZ5Gu0=)
                          10: 3138312e3139312e3133332e302f32342d3234203d3e20323637343234.roa (hash: CBa5X8OiWp2OwvcOL2hLhzSEHtZZM92kzi5SoUpz+7s=)
                          11: 3138312e3139312e3133322e302f32332d3233203d3e20323637343234.roa (hash: 1yI903TPztpzF/oegve/r6hGTxpirxE3b3iDUSLQcHM=)
                          12: 323830343a343134343a343030303a3a2f33342d3334203d3e20323637343234.roa (hash: VEnHuAPTGHFH//E1VtiWtJAwakqEq616yGTY8dozIfM=)
                          13: 3138312e3139312e3133322e302f32322d3232203d3e20323637343234.roa (hash: WAV1dJN8gEpxSoOVPmGN8y0Xy7Oih3gKy36epsABYsI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:b2:e4:5e:1d:15:7c:6c:bd:10:85:e0:3e:ec:52:e4:51:7e:68:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7D1E69F57807C1ED02CA45971AD14EDA3931F2E
        Validity
            Not Before: Apr 15 04:25:00 2024 GMT
            Not After : Apr 22 04:30:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d6:25:d4:b0:cc:84:9a:ce:b6:bf:04:6a:d6:
                    df:5b:62:ad:82:d1:99:08:b3:5e:ed:60:a5:74:30:
                    5c:b5:af:1c:c2:16:89:a7:72:85:e4:72:ce:d6:96:
                    d1:64:bb:50:ad:e9:80:f9:09:e5:04:f1:99:80:fc:
                    a9:d6:17:1c:8f:7c:30:81:cb:93:06:db:7f:04:99:
                    54:d7:5e:c2:4c:15:72:c1:fb:62:cd:d6:aa:e5:4d:
                    3f:f4:6d:58:01:04:28:ed:2f:44:e5:1c:cc:ef:57:
                    f1:bd:a5:91:39:7a:c8:5e:30:c1:ea:ac:5d:f6:11:
                    83:be:84:f2:20:95:eb:0e:d1:da:f3:22:30:14:65:
                    83:a0:59:43:d9:c4:0d:78:c9:41:97:9c:40:cc:33:
                    f5:8e:19:38:c0:af:25:13:1b:e2:e2:b5:33:eb:c3:
                    29:b2:2c:80:43:6a:39:e5:e4:f0:5f:b4:17:15:ef:
                    83:37:6f:49:ad:f0:fe:2f:50:d6:95:1c:33:b2:a9:
                    17:8b:14:60:5d:50:b0:ff:3d:e1:76:18:91:2c:c1:
                    c1:2f:fb:d1:4c:54:3b:dc:41:3d:2a:19:8b:ef:7b:
                    7c:53:df:bd:61:45:fa:67:89:0d:83:06:9d:cf:81:
                    cb:1b:d5:46:3c:d4:f4:df:17:62:4d:27:2e:31:ef:
                    a1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D0:D2:E0:E3:47:DF:AD:75:0A:78:3F:F4:40:E1:EC:97:50:B0:B1
            X509v3 Authority Key Identifier:
                keyid:A7:D1:E6:9F:57:80:7C:1E:D0:2C:A4:59:71:AD:14:ED:A3:93:1F:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52Rgjjg8xjzNQjxmttDLd9CHa8gFP13qHV4Z11oNXYQK/0/A7D1E69F57807C1ED02CA45971AD14EDA3931F2E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:bf:97:24:0f:7d:03:c9:a0:81:28:81:e5:69:45:62:ff:54:
         3e:ed:54:b7:5b:c1:62:d2:64:fb:e2:a2:d3:8a:f9:f5:6c:f3:
         11:83:74:d3:05:46:ec:98:17:b6:2c:24:f9:4b:d3:78:65:7d:
         fd:9f:33:91:f3:ed:ee:e8:18:5f:84:6b:3c:a3:5b:87:c6:16:
         d4:5a:29:9d:4b:f5:ab:fe:81:29:04:0d:e3:f6:0d:fc:46:9e:
         9d:27:10:b8:b2:73:c1:8b:3d:92:45:53:b6:8d:da:49:9a:51:
         cb:73:ab:7c:82:54:15:cf:4a:5b:d9:00:35:6a:af:77:03:f1:
         57:6a:05:73:60:4a:50:de:79:2d:ce:ba:62:e4:98:b3:5c:e3:
         06:50:ff:af:bb:bd:0b:11:35:a3:42:28:84:dd:36:4f:6b:bd:
         81:b9:d2:a9:88:87:e7:7d:37:07:57:d5:dc:64:45:19:5d:14:
         5c:3b:94:e2:65:f4:2a:5e:ce:e1:2b:f9:09:73:f3:2c:57:6f:
         a5:b1:72:52:09:93:55:d1:41:80:7c:f8:31:9b:b4:81:6e:bd:
         d2:50:3b:78:5b:40:b6:16:3a:73:f0:c4:05:30:34:ca:e6:c6:
         79:fa:6c:03:06:32:8a:06:92:f4:9f:bc:39:af:88:c7:a6:c2:
         23:47:a9:71
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----