Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/67F5AE43E37505B47AB1DB03356AF2C5B2E02962.mft
File:                     67F5AE43E37505B47AB1DB03356AF2C5B2E02962.mft (raw, json)
Hash identifier:          Vbuvhq+eWaKcaFUi8ZwP3Sy+NABI4uAa6sEZDkEDE0k=
Subject key identifier:   F7:38:82:48:A9:94:0A:80:20:C4:A8:BD:CB:23:93:88:C9:79:07:DC
Authority key identifier: 67:F5:AE:43:E3:75:05:B4:7A:B1:DB:03:35:6A:F2:C5:B2:E0:29:62
Certificate issuer:       /CN=67F5AE43E37505B47AB1DB03356AF2C5B2E02962
Certificate serial:       43EED04826D2496170D8AF5347F72B5C82884407
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67F5AE43E37505B47AB1DB03356AF2C5B2E02962.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/67F5AE43E37505B47AB1DB03356AF2C5B2E02962.mft
Manifest number:          2C
Signing time:             Sun 14 Apr 2024 20:21:13 +0000
Manifest this update:     Sun 14 Apr 2024 20:16:13 +0000
Manifest next update:     Mon 15 Apr 2024 22:24:13 +0000
Files and hashes:         1: 67F5AE43E37505B47AB1DB03356AF2C5B2E02962.crl (hash: 70ReCTOcOWnefVu/G/90WueO/SoqYLksxru0l4F2IyQ=)
                          2: 34352e3137392e3130382e302f32322d3332203d3e20323639303735.roa (hash: 1n4ItKPRUfafzWGBxcVF+HqaQNgX3Ei7MDj89IGc11Q=)
                          3: 323830343a356631343a3a2f33322d313238203d3e20323639303735.roa (hash: o30djYvb5I/2rYk1gwXJPyl61zblvgcwNKSyMqQeds8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ee:d0:48:26:d2:49:61:70:d8:af:53:47:f7:2b:5c:82:88:44:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67F5AE43E37505B47AB1DB03356AF2C5B2E02962
        Validity
            Not Before: Apr 14 20:16:13 2024 GMT
            Not After : Apr 15 22:24:13 2024 GMT
        Subject: CN=F7388248A9940A8020C4A8BDCB239388C97907DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cd:e4:1a:db:46:d5:00:55:14:0a:e4:45:b4:
                    ce:66:a8:79:da:98:ff:39:66:d3:fe:ca:6c:d2:63:
                    aa:2c:d2:7f:38:79:68:0b:bd:f7:c3:95:aa:39:ed:
                    1e:00:be:04:48:83:60:67:87:0f:df:98:2c:82:bd:
                    2f:e2:47:4a:ec:ab:93:04:2c:d7:22:51:4e:25:54:
                    6c:ff:aa:92:22:15:d3:39:2d:7d:21:26:af:af:c9:
                    48:5a:26:25:5b:4f:c0:f0:b8:c0:b2:cc:ef:cd:91:
                    2c:0a:28:10:c2:40:f1:bc:b8:a6:52:c5:3e:40:15:
                    97:47:9b:c7:37:6e:6e:98:5a:88:54:ee:ea:93:1e:
                    50:90:76:65:93:8e:11:10:e7:26:a6:b1:15:df:58:
                    cb:79:6f:f6:1b:8d:8a:b2:27:1a:72:7c:16:68:0a:
                    6e:32:01:7e:0a:11:af:75:70:b3:c7:59:29:e7:7c:
                    09:d3:d5:81:22:b7:29:6e:23:73:30:77:46:38:d7:
                    cb:29:6c:95:14:f0:cf:c3:ce:c9:1e:13:35:f2:81:
                    87:69:be:e3:c4:6a:e8:90:ec:7a:2d:0f:ee:dc:f9:
                    55:b8:2c:0c:07:a0:f5:ed:ea:e9:af:8c:4f:c1:ae:
                    99:60:3d:60:74:96:b0:b9:09:51:57:81:c2:c4:57:
                    28:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:38:82:48:A9:94:0A:80:20:C4:A8:BD:CB:23:93:88:C9:79:07:DC
            X509v3 Authority Key Identifier:
                keyid:67:F5:AE:43:E3:75:05:B4:7A:B1:DB:03:35:6A:F2:C5:B2:E0:29:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/67F5AE43E37505B47AB1DB03356AF2C5B2E02962.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67F5AE43E37505B47AB1DB03356AF2C5B2E02962.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/67F5AE43E37505B47AB1DB03356AF2C5B2E02962.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:bb:1b:f5:73:a7:88:a1:80:5d:97:3d:2c:93:9b:c0:99:5e:
         c0:65:1e:66:59:33:b8:1c:a1:5b:92:5d:24:37:19:ee:51:6f:
         e6:be:2d:de:46:1b:5a:e1:bb:f7:7a:be:4a:93:21:ba:6b:77:
         da:4b:e9:73:4d:4b:e0:40:a9:84:13:0a:8f:d4:72:b2:33:3f:
         84:9d:39:5e:6c:b5:32:a1:5d:3a:78:68:ed:b5:1a:3c:46:1a:
         4e:46:b1:7a:c6:19:1b:ea:54:19:9e:1b:2c:c6:6f:40:8f:d0:
         77:72:c7:ba:39:2d:e7:01:4f:2b:87:92:00:d8:3b:80:a7:dc:
         88:a3:da:80:a3:b5:9b:9d:a3:c5:64:70:fd:ac:7d:eb:f7:98:
         54:fa:19:0d:40:a4:eb:93:d5:94:0b:1a:8f:5c:75:7a:98:aa:
         b3:aa:d8:44:dd:b3:58:66:31:14:a6:dd:e9:31:f7:74:3d:29:
         f1:5b:bf:6c:10:95:1f:ab:fe:b5:34:d8:8c:d8:73:ae:03:85:
         f6:23:ae:63:11:7e:7e:f8:be:1e:e6:6f:d4:49:e5:e8:61:94:
         4c:ce:71:d4:b0:b6:67:ce:5d:b0:50:21:c5:f9:fa:86:40:be:
         e7:10:55:b7:4e:f9:1c:4c:15:e3:15:85:ac:60:dc:11:78:a3:
         ed:6f:eb:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----