Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6siqoKYb47LW1pQWDzyebzbgZEqtwiSPRtCbR7Cti6Gf/1/D36EAE79059103C5416DAC3F9185031E78EF7E52.mft
File:                     D36EAE79059103C5416DAC3F9185031E78EF7E52.mft (raw, json)
Hash identifier:          kN7ZqVWWLLWlF5i0yErPdzJ4MiX0F+XmdixvC783TzU=
Subject key identifier:   D0:A3:EF:CD:A5:24:75:12:C2:78:E9:16:C8:FB:BD:71:1E:36:EC:D3
Authority key identifier: D3:6E:AE:79:05:91:03:C5:41:6D:AC:3F:91:85:03:1E:78:EF:7E:52
Certificate issuer:       /CN=D36EAE79059103C5416DAC3F9185031E78EF7E52
Certificate serial:       2952611A359C402BE4A11EF419CF21CB32235071
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D36EAE79059103C5416DAC3F9185031E78EF7E52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6siqoKYb47LW1pQWDzyebzbgZEqtwiSPRtCbR7Cti6Gf/1/D36EAE79059103C5416DAC3F9185031E78EF7E52.mft
Manifest number:          7A
Signing time:             Tue 02 Jul 2024 16:20:01 +0000
Manifest this update:     Tue 02 Jul 2024 16:15:01 +0000
Manifest next update:     Wed 03 Jul 2024 17:53:01 +0000
Files and hashes:         1: 34352e3137352e3230302e302f32322d3332203d3e20323638393039.roa (hash: DnIKFROk+2cOLxI6tcDyL+wmjYrk6DWGljqB6o8uLXs=)
                          2: D36EAE79059103C5416DAC3F9185031E78EF7E52.crl (hash: DflowDYxPvi9KFKOKUvJ14gt/mY4tQ5uoHc2T7954vI=)
                          3: 323830343a356337303a3a2f33322d313238203d3e20323638393039.roa (hash: jAQbJZBADgrPN8IgTzmnvTOrETpN9MZBUbSVavyMO/o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:52:61:1a:35:9c:40:2b:e4:a1:1e:f4:19:cf:21:cb:32:23:50:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D36EAE79059103C5416DAC3F9185031E78EF7E52
        Validity
            Not Before: Jul  2 16:15:01 2024 GMT
            Not After : Jul  3 17:53:01 2024 GMT
        Subject: CN=D0A3EFCDA5247512C278E916C8FBBD711E36ECD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b6:9e:82:14:0d:80:05:99:ec:f7:df:9a:d7:
                    db:4b:42:ab:bd:f7:50:d3:db:12:c7:b8:9d:97:34:
                    e0:20:3d:47:ec:d0:58:98:91:a1:43:a3:7e:12:29:
                    61:40:72:74:ae:ad:40:c5:d0:b0:73:5d:06:9f:a9:
                    8f:da:fc:e2:84:5f:3c:03:d4:77:a1:4b:a1:2c:88:
                    10:b1:23:4f:17:c7:bc:4e:a0:48:c1:6e:18:6e:ec:
                    fb:97:d9:39:cd:64:43:ae:16:67:f3:30:c3:a1:72:
                    fe:ca:50:51:f0:44:b2:10:40:36:d2:cc:c1:f3:e3:
                    0f:ac:16:a1:73:4f:a1:e7:95:c8:df:ba:18:15:fb:
                    87:15:ba:ad:80:3c:b4:14:e9:de:49:01:0b:5b:4a:
                    ef:1a:53:46:99:65:a1:28:9e:18:6d:1f:14:58:49:
                    bd:21:d3:50:a5:de:a9:a3:a1:bc:9b:aa:b6:f6:ed:
                    f7:7b:0e:cd:fa:1b:a5:05:b1:db:f5:4e:81:ad:95:
                    b2:e1:26:b7:b0:8a:84:f7:63:01:79:27:ee:56:bd:
                    66:96:6e:b3:6b:cb:b9:f1:f0:60:95:5c:65:9b:25:
                    90:cf:a6:e6:55:14:8a:7b:56:e5:4b:f1:76:47:90:
                    42:27:10:04:8e:3e:b1:e1:b2:87:55:72:53:cb:fe:
                    1e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A3:EF:CD:A5:24:75:12:C2:78:E9:16:C8:FB:BD:71:1E:36:EC:D3
            X509v3 Authority Key Identifier:
                keyid:D3:6E:AE:79:05:91:03:C5:41:6D:AC:3F:91:85:03:1E:78:EF:7E:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6siqoKYb47LW1pQWDzyebzbgZEqtwiSPRtCbR7Cti6Gf/1/D36EAE79059103C5416DAC3F9185031E78EF7E52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D36EAE79059103C5416DAC3F9185031E78EF7E52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6siqoKYb47LW1pQWDzyebzbgZEqtwiSPRtCbR7Cti6Gf/1/D36EAE79059103C5416DAC3F9185031E78EF7E52.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:92:ab:72:78:dc:df:d0:d3:3b:f7:a7:c6:15:13:d9:00:57:
         1c:ed:fb:ca:8a:9f:0d:ee:8f:3b:cb:8a:b8:e3:a4:b7:44:13:
         c4:92:8f:d7:a7:de:32:99:9c:36:0b:9e:d9:15:e2:87:1e:d3:
         b7:13:31:f5:ff:66:9a:8b:df:37:fe:ee:fa:3c:6f:6f:d3:93:
         39:73:33:f7:6c:e1:5b:ed:79:05:b5:5f:58:83:79:57:b8:0f:
         ad:61:19:84:33:dd:03:2c:fd:6f:a5:c3:ef:76:11:7f:b1:cf:
         59:52:88:a7:2d:10:37:6a:08:e8:ae:be:27:d4:7a:d1:d7:0a:
         07:12:2f:8d:a4:bb:d5:e1:18:44:3d:e8:9c:6a:e4:e7:59:0e:
         be:5c:6c:be:a4:be:b7:86:56:b7:9f:b9:60:84:db:08:ee:9d:
         76:a8:0b:25:c3:32:4a:79:28:49:5d:aa:53:42:eb:b8:7a:b8:
         46:49:69:db:ab:86:a3:85:d6:b7:86:52:5a:9f:7a:da:ce:0c:
         f1:11:a0:8f:64:78:a0:f3:a4:04:53:0b:02:ff:d9:76:74:a7:
         b9:58:40:87:8b:51:30:c9:de:b2:aa:47:75:72:ef:1b:11:a0:
         11:fb:8f:71:56:6a:57:ed:cf:33:41:7c:d3:4f:a1:15:78:ab:
         c9:b9:7d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----