Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6dGmNshsi14s8SnyQWQhcfG5RiYdfcBTkwDMYxiQdVD9/0/CF765AF73EDCA320D37792FD19B73025D1DBDDE3.mft
File:                     CF765AF73EDCA320D37792FD19B73025D1DBDDE3.mft (raw, json)
Hash identifier:          +l/LytxQrI/klaiF70Gf5jnOnh0D/lvyDjnTchwZsgk=
Subject key identifier:   25:8E:91:B9:FD:3E:97:07:C2:89:20:FE:81:E3:3A:A2:A9:70:FD:4B
Authority key identifier: CF:76:5A:F7:3E:DC:A3:20:D3:77:92:FD:19:B7:30:25:D1:DB:DD:E3
Certificate issuer:       /CN=CF765AF73EDCA320D37792FD19B73025D1DBDDE3
Certificate serial:       018705798CF6EEC03EF5833488B559A22139F6AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF765AF73EDCA320D37792FD19B73025D1DBDDE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dGmNshsi14s8SnyQWQhcfG5RiYdfcBTkwDMYxiQdVD9/0/CF765AF73EDCA320D37792FD19B73025D1DBDDE3.mft
Manifest number:          01D0
Signing time:             Sun 14 Apr 2024 19:28:40 +0000
Manifest this update:     Sun 14 Apr 2024 19:23:40 +0000
Manifest next update:     Mon 15 Apr 2024 20:12:40 +0000
Files and hashes:         1: CF765AF73EDCA320D37792FD19B73025D1DBDDE3.crl (hash: dcp2JxxwqapkASjszCRj/fGrWIvMzWgAlWf6rQ+vL0M=)
                          2: 323830343a373632303a3a2f33322d3430203d3e20323731303931.roa (hash: sF5vsF5BnThVw99hoQnhMBV5sRzzYbCwx9eCF0ql3HI=)
                          3: 3137392e34382e3136302e302f32322d3234203d3e20323731303931.roa (hash: B7UlodM4PSqTAFkvFGh/wCcIIB6OxToltz3nFwcUBTs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:05:79:8c:f6:ee:c0:3e:f5:83:34:88:b5:59:a2:21:39:f6:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF765AF73EDCA320D37792FD19B73025D1DBDDE3
        Validity
            Not Before: Apr 14 19:23:40 2024 GMT
            Not After : Apr 15 20:12:40 2024 GMT
        Subject: CN=258E91B9FD3E9707C28920FE81E33AA2A970FD4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e1:fc:8b:04:51:3e:41:3e:4e:c9:6f:64:35:
                    45:51:ef:55:0e:77:eb:e8:dd:5f:42:64:7b:be:65:
                    49:42:14:ee:f2:f8:c2:d4:75:57:1d:a5:75:21:f2:
                    5c:cd:33:8c:c6:0a:a4:aa:61:d5:04:7f:ce:1f:88:
                    bb:d9:02:37:53:15:a7:ee:50:09:c8:c6:a9:4f:56:
                    6b:b2:22:e5:6f:cc:a8:f6:01:25:92:3d:52:35:ee:
                    0c:72:d9:fe:4e:f0:16:6b:09:85:1b:ea:65:b4:71:
                    c5:9f:9a:fa:c4:c3:ec:00:9c:23:76:8d:fe:f7:35:
                    54:92:44:52:2d:31:6a:f1:5a:95:ba:66:be:b0:44:
                    3e:06:83:5d:02:b1:92:96:31:8a:20:25:f7:17:24:
                    8b:d1:78:83:82:53:3f:6e:6e:d8:c9:0e:26:de:5b:
                    8c:65:51:93:7e:35:5e:12:2e:fd:68:b6:c7:e7:f4:
                    32:75:52:16:bf:d1:04:49:86:eb:cf:02:f6:c5:e2:
                    38:31:97:8a:b6:2c:b2:82:6e:05:e9:1f:70:e6:79:
                    82:c2:54:84:c1:d0:4e:74:e6:73:94:7a:9a:34:71:
                    f2:9f:eb:db:52:3a:70:c0:be:4d:25:f2:bb:8a:53:
                    5e:24:0f:a7:26:28:22:03:3d:76:f6:3a:21:24:65:
                    3f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:8E:91:B9:FD:3E:97:07:C2:89:20:FE:81:E3:3A:A2:A9:70:FD:4B
            X509v3 Authority Key Identifier:
                keyid:CF:76:5A:F7:3E:DC:A3:20:D3:77:92:FD:19:B7:30:25:D1:DB:DD:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dGmNshsi14s8SnyQWQhcfG5RiYdfcBTkwDMYxiQdVD9/0/CF765AF73EDCA320D37792FD19B73025D1DBDDE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF765AF73EDCA320D37792FD19B73025D1DBDDE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dGmNshsi14s8SnyQWQhcfG5RiYdfcBTkwDMYxiQdVD9/0/CF765AF73EDCA320D37792FD19B73025D1DBDDE3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:6a:bc:eb:89:55:0a:14:ba:31:c3:c6:14:41:2d:38:31:54:
         27:cb:6e:fe:67:0c:da:da:84:01:6b:9b:03:06:91:bd:76:a6:
         29:a6:13:61:5a:a2:3c:76:93:0f:2c:c2:83:7e:ac:74:91:28:
         32:ff:d5:fc:10:a6:82:f5:42:e0:bd:8f:7f:45:c8:c9:54:2d:
         bd:a2:b9:9f:92:8d:80:23:a4:67:ef:44:78:39:45:36:68:8c:
         b9:04:39:21:99:11:f9:82:1e:4b:4d:60:65:2e:19:00:15:ac:
         67:c9:84:ab:a1:5e:5b:57:2e:44:38:85:52:12:0f:d4:57:40:
         c7:c4:c2:62:73:f4:51:ba:ac:27:68:78:ad:de:52:00:88:79:
         b3:66:60:29:2f:ae:23:ff:a8:61:50:4c:48:18:17:2e:0e:65:
         9f:28:de:14:8d:18:a0:8a:c3:a9:c3:b8:02:9a:f0:7f:cb:c5:
         3b:2c:be:7e:05:35:07:27:6f:de:be:f4:05:e7:71:b0:98:96:
         73:25:e6:cd:37:5f:40:fb:00:e0:67:ec:31:20:18:e6:c0:b6:
         cc:3a:25:b9:7c:55:59:ad:18:c7:52:e9:d9:d2:a0:f4:9b:cd:
         aa:0f:2c:2a:6b:0c:d6:97:d7:b9:cd:64:c1:3b:b5:9f:9f:62:
         70:f3:f2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----