Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/F7F6A71E49F1F3B065858A411F3D9669A240EA4E.mft
File:                     F7F6A71E49F1F3B065858A411F3D9669A240EA4E.mft (raw, json)
Hash identifier:          Zp6CPQI1halYvWo1kAuYleEsKiscmFw9WS198PlW500=
Subject key identifier:   33:CC:A8:D3:AA:4D:C7:86:2D:B1:5A:D2:A7:A0:41:69:F7:48:B0:BC
Authority key identifier: F7:F6:A7:1E:49:F1:F3:B0:65:85:8A:41:1F:3D:96:69:A2:40:EA:4E
Certificate issuer:       /CN=F7F6A71E49F1F3B065858A411F3D9669A240EA4E
Certificate serial:       751CB96F9692AD97A227AE43AAF52B6D66A443AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F7F6A71E49F1F3B065858A411F3D9669A240EA4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/F7F6A71E49F1F3B065858A411F3D9669A240EA4E.mft
Manifest number:          27
Signing time:             Mon 15 Apr 2024 02:12:41 +0000
Manifest this update:     Mon 15 Apr 2024 02:07:41 +0000
Manifest next update:     Tue 16 Apr 2024 06:10:41 +0000
Files and hashes:         1: F7F6A71E49F1F3B065858A411F3D9669A240EA4E.crl (hash: OYPGPIfZKR6puxN5v+ck0BFPYHYypTbP4vLfkTsGc9g=)
                          2: 323830343a383162303a3a2f33322d3438203d3e20323732343730.roa (hash: IBps2glVYGNt6u5qaNkm96BSgrr/KDeln4+HBM4xLhw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:1c:b9:6f:96:92:ad:97:a2:27:ae:43:aa:f5:2b:6d:66:a4:43:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7F6A71E49F1F3B065858A411F3D9669A240EA4E
        Validity
            Not Before: Apr 15 02:07:41 2024 GMT
            Not After : Apr 16 06:10:41 2024 GMT
        Subject: CN=33CCA8D3AA4DC7862DB15AD2A7A04169F748B0BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:01:81:14:cb:10:0c:2e:60:37:b2:85:61:40:
                    49:7f:16:d2:1f:1d:d6:8f:21:8e:dc:d3:35:7d:fb:
                    83:36:08:9e:dd:21:f8:e0:d1:db:24:e9:45:84:47:
                    68:42:7d:ef:21:41:3e:c4:f8:3a:fc:c7:39:b2:90:
                    1b:6f:a0:db:21:d0:7f:28:09:ea:f4:bf:fe:10:0e:
                    dc:63:ee:41:71:70:f9:f6:5f:23:49:fe:9b:d1:dd:
                    e2:d7:dd:48:f5:5d:ac:ba:47:e6:7c:8a:77:72:cc:
                    50:22:8f:76:5c:cc:3f:72:be:b7:8e:8a:0e:1a:72:
                    7a:1f:ba:ec:c5:90:ad:71:97:24:6a:fd:8e:c5:5d:
                    ac:8f:6e:ee:6c:5e:ab:59:5c:ca:59:ca:3e:60:30:
                    70:ad:8b:7c:3d:f1:b5:a9:9f:cd:40:ef:ce:b8:19:
                    87:ac:4d:66:36:74:ff:d2:1d:71:ea:0a:5e:20:d8:
                    aa:af:aa:fa:17:97:9b:35:18:ec:13:ac:d7:0f:0c:
                    cc:96:fd:5e:32:d0:f5:8a:ee:bf:1d:de:88:3a:d6:
                    9e:4a:fd:64:04:57:28:e6:2e:1c:27:05:88:03:03:
                    5d:d7:85:fa:ed:9f:e6:85:88:5e:59:49:3e:25:e3:
                    9a:9d:bd:16:fa:8d:f7:b6:4e:c7:94:b1:2c:49:c8:
                    f7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:CC:A8:D3:AA:4D:C7:86:2D:B1:5A:D2:A7:A0:41:69:F7:48:B0:BC
            X509v3 Authority Key Identifier:
                keyid:F7:F6:A7:1E:49:F1:F3:B0:65:85:8A:41:1F:3D:96:69:A2:40:EA:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/F7F6A71E49F1F3B065858A411F3D9669A240EA4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F7F6A71E49F1F3B065858A411F3D9669A240EA4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/F7F6A71E49F1F3B065858A411F3D9669A240EA4E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:ec:90:38:e2:d3:38:48:ec:62:67:a9:ee:e6:68:4f:76:e7:
         07:c3:d4:b4:1d:4c:11:b8:b8:b0:1a:be:12:b8:4d:0c:03:27:
         1b:58:e3:f4:ff:34:9b:50:cb:35:36:80:fb:ce:18:e4:c9:06:
         5c:9b:04:2a:56:31:cf:1b:93:68:42:4d:a2:2b:3f:71:13:f8:
         08:fa:04:60:2d:83:b2:44:cd:9c:49:71:4c:7f:ee:09:60:67:
         13:9c:0f:db:ba:2b:fc:b8:35:c0:52:6d:0e:23:54:5e:86:62:
         26:4a:a8:ac:89:98:37:6c:9a:2b:d7:06:13:7b:f9:27:21:ab:
         a7:7e:d9:28:bd:49:72:a3:bb:ab:cd:7d:4d:59:a4:ad:52:23:
         47:59:12:be:27:90:f1:88:a4:3a:95:66:08:d8:cc:91:48:d8:
         f7:84:bd:ea:59:e4:97:6c:f9:6e:45:05:96:7d:8c:0b:75:97:
         e2:83:d5:cd:14:3c:54:6c:ea:b1:22:34:06:95:9b:e3:c3:b1:
         74:70:9a:c1:f8:e8:76:df:6e:1e:e5:91:74:58:aa:00:c6:c5:
         94:5e:5d:3e:e1:c9:cb:52:d7:d8:40:5a:7c:94:d9:df:08:e6:
         6b:38:1c:b3:58:91:62:ce:a7:d2:80:33:28:85:ee:22:e4:db:
         61:dd:97:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----