Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/A37F949C9D7092C43D6C2162D98F3EFFC398E477.mft
File:                     A37F949C9D7092C43D6C2162D98F3EFFC398E477.mft (raw, json)
Hash identifier:          LO9jd5mnh5Wl2Eq/ybXcjS2MDK357wrjVNHhsBrBmc0=
Subject key identifier:   33:6E:4B:77:FD:DF:1B:66:EF:6D:D3:24:66:91:A2:DB:23:BE:BC:4C
Authority key identifier: A3:7F:94:9C:9D:70:92:C4:3D:6C:21:62:D9:8F:3E:FF:C3:98:E4:77
Certificate issuer:       /CN=A37F949C9D7092C43D6C2162D98F3EFFC398E477
Certificate serial:       1F536E484C58B5163F2648E362321C4F23B68A1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A37F949C9D7092C43D6C2162D98F3EFFC398E477.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/A37F949C9D7092C43D6C2162D98F3EFFC398E477.mft
Manifest number:          52
Signing time:             Mon 15 Apr 2024 03:49:57 +0000
Manifest this update:     Mon 15 Apr 2024 03:44:57 +0000
Manifest next update:     Tue 16 Apr 2024 07:43:57 +0000
Files and hashes:         1: A37F949C9D7092C43D6C2162D98F3EFFC398E477.crl (hash: ip1AlxA8IxNKqh2EQBHbuGHVv0dPXG5kqtE3BUGqTYs=)
                          2: 323830343a343030343a3a2f33322d3438203d3e20323635393238.roa (hash: 7Lq7HTzJO1zbUEw9qTmw+Ef84WpX/zJC3I/B91J0LKo=)
                          3: 3133312e3139362e3133322e302f32322d3234203d3e20323635393238.roa (hash: SsobTwoWNSmvyoIt3C90ipfYX7o50WKnczWJQHKtqOc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:53:6e:48:4c:58:b5:16:3f:26:48:e3:62:32:1c:4f:23:b6:8a:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A37F949C9D7092C43D6C2162D98F3EFFC398E477
        Validity
            Not Before: Apr 15 03:44:57 2024 GMT
            Not After : Apr 16 07:43:57 2024 GMT
        Subject: CN=336E4B77FDDF1B66EF6DD3246691A2DB23BEBC4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4a:d1:cc:72:61:5b:95:eb:92:af:a9:24:06:
                    52:ea:80:5f:bb:84:bb:5f:72:3a:69:48:2f:0c:c4:
                    fa:b4:db:66:5c:01:c3:35:2d:7c:1c:19:98:75:61:
                    92:f9:b4:2d:cd:65:82:5d:3d:be:58:32:b9:0f:3c:
                    6f:e8:44:2f:e5:97:3e:98:da:84:03:1d:66:d1:74:
                    78:53:2b:5f:08:5f:37:0c:1f:c9:ab:4d:90:4a:f4:
                    d7:7d:6f:4c:c6:10:68:06:98:2e:18:77:c2:f2:cb:
                    e2:55:85:bb:e2:99:a1:0f:a9:e3:08:e1:0d:19:ae:
                    50:48:1b:b7:32:99:ec:3b:68:e6:a6:aa:a2:b7:7c:
                    c8:ff:2b:eb:e1:98:ab:ef:4b:06:42:14:9c:e9:a0:
                    f9:70:73:6b:20:80:08:99:db:d2:7e:12:33:7a:ff:
                    3c:0b:5a:95:7c:7b:65:b2:3d:ef:5d:d4:87:95:8a:
                    95:b1:04:30:73:f2:cd:1a:d1:5c:10:51:f7:fd:f6:
                    9c:b0:a3:6c:ab:2b:3e:2f:1a:dd:c8:b0:11:e8:cc:
                    ad:74:20:cb:ec:43:cb:86:40:32:37:f2:39:f5:fe:
                    f5:9c:5d:9a:f5:d1:ad:72:f5:26:3c:58:9a:34:f8:
                    63:19:23:22:66:b2:14:8f:66:0c:7e:26:4f:be:79:
                    af:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:6E:4B:77:FD:DF:1B:66:EF:6D:D3:24:66:91:A2:DB:23:BE:BC:4C
            X509v3 Authority Key Identifier:
                keyid:A3:7F:94:9C:9D:70:92:C4:3D:6C:21:62:D9:8F:3E:FF:C3:98:E4:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/A37F949C9D7092C43D6C2162D98F3EFFC398E477.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A37F949C9D7092C43D6C2162D98F3EFFC398E477.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/A37F949C9D7092C43D6C2162D98F3EFFC398E477.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:6a:60:fd:69:65:4a:33:c4:d3:bb:63:2b:c6:bd:3b:c3:62:
         7f:74:73:bd:cf:8e:e1:5c:c9:d4:32:f2:67:5e:0f:60:85:13:
         ac:75:df:82:a9:6b:d7:19:59:65:fe:e9:65:49:c3:e9:f2:5a:
         b0:bc:bc:7b:58:e8:f4:77:dd:93:8a:ab:e6:70:af:48:3c:ac:
         aa:8a:65:7f:3f:61:53:39:17:66:2e:82:c1:6c:19:fa:7e:9c:
         18:94:ca:54:3b:39:35:ba:c4:7c:1f:bf:c3:7f:d7:09:b0:ea:
         ea:80:58:52:85:d0:74:5c:06:f4:33:35:57:9d:dc:f3:a2:2f:
         24:51:ec:6d:70:03:b8:2d:07:e2:fa:b1:17:f2:74:7a:b4:42:
         31:a4:df:5a:63:1e:e2:ce:5e:9a:6b:71:d2:5e:46:8e:48:ce:
         ac:12:b1:a2:30:f8:2a:b0:d7:4e:1a:a3:c5:2b:ba:86:76:d3:
         20:74:f6:cd:b0:44:e0:ca:a5:f8:c1:5c:09:a9:d9:31:73:32:
         86:8f:fc:60:52:11:8d:13:64:ca:86:07:3b:4b:32:a9:a3:a6:
         16:ca:9a:bf:ed:f8:54:e1:3a:b3:90:6e:e7:c7:97:92:eb:e7:
         15:00:e8:84:1b:cc:e2:b3:03:d8:25:bf:a1:8a:ef:34:4e:d6:
         77:e5:f1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----