Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5uZi9RWs7h1UCLPWHtofMRdvYRHXFy8wAgDeWAmrb4HV/0/B7422E6B51CC8D9B50F1B900AC91C6CCB0166D64.mft
File:                     B7422E6B51CC8D9B50F1B900AC91C6CCB0166D64.mft (raw, json)
Hash identifier:          avRo10tWBmtcEuoXWQpaOpjXtdU9SFwNl1JfOdbzzBY=
Subject key identifier:   08:B7:BB:55:E3:ED:B4:D1:96:A1:A9:53:E8:C2:85:E1:17:58:6B:B9
Authority key identifier: B7:42:2E:6B:51:CC:8D:9B:50:F1:B9:00:AC:91:C6:CC:B0:16:6D:64
Certificate issuer:       /CN=B7422E6B51CC8D9B50F1B900AC91C6CCB0166D64
Certificate serial:       5A4C0ECC7568CDCCC2364D640FDC18B0210A70A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7422E6B51CC8D9B50F1B900AC91C6CCB0166D64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uZi9RWs7h1UCLPWHtofMRdvYRHXFy8wAgDeWAmrb4HV/0/B7422E6B51CC8D9B50F1B900AC91C6CCB0166D64.mft
Manifest number:          20
Signing time:             Thu 27 Jun 2024 16:10:45 +0000
Manifest this update:     Thu 27 Jun 2024 16:05:45 +0000
Manifest next update:     Fri 28 Jun 2024 19:19:45 +0000
Files and hashes:         1: B7422E6B51CC8D9B50F1B900AC91C6CCB0166D64.crl (hash: tWC34CEpC2hg56pffRRw8Y4iHMw2n8rJumQF1tNMFfM=)
                          2: 323830343a373030633a3a2f33322d313238203d3e20323730373033.roa (hash: zD1XMYZCMChJk72yNW+/PpuTcD5NFItAAEiy1CkB8vk=)
                          3: 3138362e3230392e3132342e302f32322d3332203d3e20323730373033.roa (hash: ar7EYh30tIuTpRnef23hO9HZ4+//tnAmMrU8oQzQQrk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:4c:0e:cc:75:68:cd:cc:c2:36:4d:64:0f:dc:18:b0:21:0a:70:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7422E6B51CC8D9B50F1B900AC91C6CCB0166D64
        Validity
            Not Before: Jun 27 16:05:45 2024 GMT
            Not After : Jun 28 19:19:45 2024 GMT
        Subject: CN=08B7BB55E3EDB4D196A1A953E8C285E117586BB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a1:8f:8f:3d:3c:9a:db:d9:4e:ef:0a:2c:06:
                    b0:9a:aa:f2:18:cc:27:39:19:bc:6e:e4:15:a5:6a:
                    53:2a:43:11:5f:c2:be:85:2b:8e:b2:65:26:ed:f2:
                    7c:3b:43:3c:66:80:61:2d:ab:2a:bf:d3:e8:03:1c:
                    e0:17:f1:ab:1d:19:3d:29:88:de:46:bc:ac:6d:79:
                    54:27:5d:63:0e:ad:fe:16:e6:84:e7:cf:83:9b:c6:
                    25:cd:38:ff:d4:fb:b8:c8:f5:f0:46:27:cc:e3:48:
                    58:a4:62:50:16:ea:77:5b:83:24:a9:80:d8:78:23:
                    14:f6:ea:f3:5c:46:74:d0:ae:a2:77:50:37:b5:69:
                    c8:97:a4:11:af:73:77:05:8f:b6:39:fe:dd:4c:63:
                    58:41:a9:2f:e9:f0:9d:fb:7a:ae:71:64:74:09:1a:
                    67:1c:dd:f0:4c:6c:7c:a2:46:d6:cd:4c:b4:61:bb:
                    55:e0:2e:d9:b2:ba:e4:18:e1:bd:60:ca:52:38:73:
                    7b:4a:11:64:63:5a:d4:31:f5:4b:2b:62:62:10:af:
                    ee:3a:f9:26:52:d9:28:5e:75:f3:00:13:fe:4d:d4:
                    6c:fb:ba:58:cc:f3:00:a6:2c:05:5b:77:32:ef:89:
                    73:ad:ed:da:45:71:a7:b9:b8:cb:89:80:b0:55:6d:
                    fb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B7:BB:55:E3:ED:B4:D1:96:A1:A9:53:E8:C2:85:E1:17:58:6B:B9
            X509v3 Authority Key Identifier:
                keyid:B7:42:2E:6B:51:CC:8D:9B:50:F1:B9:00:AC:91:C6:CC:B0:16:6D:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uZi9RWs7h1UCLPWHtofMRdvYRHXFy8wAgDeWAmrb4HV/0/B7422E6B51CC8D9B50F1B900AC91C6CCB0166D64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7422E6B51CC8D9B50F1B900AC91C6CCB0166D64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uZi9RWs7h1UCLPWHtofMRdvYRHXFy8wAgDeWAmrb4HV/0/B7422E6B51CC8D9B50F1B900AC91C6CCB0166D64.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:da:f6:12:f8:50:e0:35:2e:61:a8:33:ad:3c:3c:b8:e9:84:
         48:38:0a:2c:56:4f:ed:15:6e:ea:7f:d3:51:58:58:96:db:77:
         c3:18:c4:0f:05:ea:37:2b:56:d0:0e:59:6e:0d:8a:a5:2d:27:
         bb:3e:c7:c5:fe:c2:94:ad:73:0b:4e:b0:ed:5e:ea:d4:2f:2c:
         fd:66:38:53:07:61:4e:c2:c6:7d:f9:24:a0:2a:c6:1f:6e:3a:
         b8:dd:5b:0d:4f:e9:9d:c6:a4:2e:d1:ed:aa:87:cc:f2:35:c7:
         59:1c:d8:a7:b0:47:85:42:7c:1a:55:72:3c:5f:c6:79:6b:6c:
         dd:35:1e:24:d2:27:18:6d:14:cd:74:08:54:aa:1d:94:62:4d:
         43:87:e8:ed:5e:a2:1b:eb:47:6d:cd:da:16:bc:17:53:ea:30:
         53:64:58:c0:70:65:75:a0:c2:5d:cd:92:51:0e:96:d8:d0:15:
         be:2e:17:8a:16:f2:6c:b7:54:f4:2b:2c:55:71:d2:b4:db:ee:
         dc:98:21:8f:0e:08:07:e9:82:36:87:a4:2e:4b:dc:33:f5:80:
         55:6b:2c:9f:f9:13:f2:c5:1b:6f:27:1b:03:9c:69:ae:bc:31:
         39:69:20:18:5a:04:89:b8:b7:c5:2a:07:ce:f8:43:7c:0c:86:
         39:6c:c3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----