Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6cLarKxNwfvpJfU1uEsYuFBuumgoQQe81LJVW31xKea8/1/7948260E0BEAA7417DD376357ACF0E40F6931454.mft
File:                     7948260E0BEAA7417DD376357ACF0E40F6931454.mft (raw, json)
Hash identifier:          FBPf+KNW8nlaIYi3J4BJH8JpHUtRFZIX2oige+1uENI=
Subject key identifier:   D2:FE:99:D5:C1:F9:05:2F:C4:65:F1:59:B6:78:47:D2:E2:7F:9D:59
Authority key identifier: 79:48:26:0E:0B:EA:A7:41:7D:D3:76:35:7A:CF:0E:40:F6:93:14:54
Certificate issuer:       /CN=7948260E0BEAA7417DD376357ACF0E40F6931454
Certificate serial:       1F5E43CA02482D86865E398CFEFCC6E9AE50BC39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7948260E0BEAA7417DD376357ACF0E40F6931454.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6cLarKxNwfvpJfU1uEsYuFBuumgoQQe81LJVW31xKea8/1/7948260E0BEAA7417DD376357ACF0E40F6931454.mft
Manifest number:          1F
Signing time:             Thu 25 Apr 2024 13:28:00 +0000
Manifest this update:     Thu 25 Apr 2024 13:23:00 +0000
Manifest next update:     Fri 26 Apr 2024 17:10:00 +0000
Files and hashes:         1: 323830343a366638303a3a2f33322d3438203d3e20323730363634.roa (hash: eBE82ilZ4le9kfDpyKxBfD/fSShnSx24aWjQUxh8PZE=)
                          2: 7948260E0BEAA7417DD376357ACF0E40F6931454.crl (hash: ZMn2kGNXXD3HhPGkr8zDFP3boAoq2BXRqsK1AB4LP+g=)
                          3: 3138362e36352e39322e302f32322d3234203d3e20323730363634.roa (hash: poBnS5ysI8J4kOvdUb9yovY5Oi3rm6jFlqVTisVX97c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:5e:43:ca:02:48:2d:86:86:5e:39:8c:fe:fc:c6:e9:ae:50:bc:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7948260E0BEAA7417DD376357ACF0E40F6931454
        Validity
            Not Before: Apr 25 13:23:00 2024 GMT
            Not After : Apr 26 17:10:00 2024 GMT
        Subject: CN=D2FE99D5C1F9052FC465F159B67847D2E27F9D59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:04:70:5c:c1:cb:48:fd:c7:bd:97:88:1a:95:
                    0d:0c:50:21:36:fd:41:77:e2:45:03:f3:89:ad:d0:
                    ec:c8:fa:19:5d:e4:ac:7d:2d:3d:31:62:07:c4:fd:
                    66:da:8e:b7:e0:ac:8c:21:6f:1f:6c:69:61:ff:6d:
                    f1:67:24:2c:01:ee:96:3f:63:cb:49:6e:20:02:f7:
                    cc:78:9a:3c:22:19:cd:52:8f:06:f3:55:82:2a:05:
                    0e:e2:94:c6:3a:05:0b:8a:c8:0b:67:64:d1:36:1d:
                    5b:9b:f8:df:b3:a9:1a:9b:9c:c0:88:e1:f4:e7:92:
                    65:00:e9:48:69:b1:56:7f:23:46:44:90:ac:c5:6c:
                    93:33:d1:c6:5e:78:ee:1d:37:e9:d9:96:f6:3e:e6:
                    27:8c:d0:c5:e0:2a:72:21:f3:e4:71:bb:b5:05:69:
                    aa:aa:2f:82:17:b8:e7:f4:eb:39:24:c6:38:60:b5:
                    1c:08:ab:2f:40:27:cf:df:34:6f:30:91:41:4a:fa:
                    fa:f6:ed:44:cd:b0:55:73:21:b0:05:3e:e6:ec:7a:
                    f8:d9:a3:b6:a5:36:16:06:19:6f:b8:70:50:17:e2:
                    af:78:38:da:3f:39:bf:a3:96:8f:7a:27:7a:9f:99:
                    a1:63:fa:36:3a:f4:da:38:3b:86:b2:bf:80:5e:fa:
                    3e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:FE:99:D5:C1:F9:05:2F:C4:65:F1:59:B6:78:47:D2:E2:7F:9D:59
            X509v3 Authority Key Identifier:
                keyid:79:48:26:0E:0B:EA:A7:41:7D:D3:76:35:7A:CF:0E:40:F6:93:14:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6cLarKxNwfvpJfU1uEsYuFBuumgoQQe81LJVW31xKea8/1/7948260E0BEAA7417DD376357ACF0E40F6931454.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7948260E0BEAA7417DD376357ACF0E40F6931454.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cLarKxNwfvpJfU1uEsYuFBuumgoQQe81LJVW31xKea8/1/7948260E0BEAA7417DD376357ACF0E40F6931454.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:03:ad:62:fe:f9:b6:7f:eb:59:80:fd:08:66:34:dd:3d:5c:
         d2:be:36:92:18:3a:fb:15:98:1c:b1:d9:d8:27:ec:86:d7:9e:
         83:ec:e7:e5:49:59:ef:c8:33:3a:b9:c8:cf:cc:ad:39:e6:f1:
         d2:57:3d:7d:85:a6:0b:a9:2a:06:3a:95:b5:11:ea:94:d6:5e:
         eb:90:86:ee:76:38:a1:c7:9c:52:ff:57:0d:5b:e9:d1:f0:8f:
         77:51:c4:ff:a2:9b:95:84:df:25:00:70:23:9f:2f:5f:33:c3:
         85:6d:b7:19:63:43:a6:f6:dc:b6:04:a3:13:ee:d2:24:61:e0:
         05:d7:8e:24:bf:9d:a0:3e:eb:7a:f3:3c:48:e1:83:f8:f3:a8:
         1f:50:c9:6e:f0:40:40:18:0d:f0:23:ad:44:eb:86:db:ea:05:
         32:49:97:0b:85:ac:83:d1:7f:0d:63:57:a0:7f:b9:1e:05:8f:
         c6:7f:23:fe:47:33:73:bc:b4:c8:7d:2e:cc:9b:92:e7:cc:96:
         2b:5e:f9:90:59:de:7b:7c:ec:90:cd:da:20:4c:68:7c:e1:cd:
         3c:2d:10:fb:9f:26:5e:31:49:24:16:c1:e4:f9:07:b5:45:2c:
         88:93:83:bb:ed:8d:7e:cc:f2:fe:e9:eb:b7:ec:c7:c5:9d:1f:
         c7:1a:74:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----