Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/0/329861E01AE7B51B7D7965F1537F72FFCB2506D3.mft
File:                     329861E01AE7B51B7D7965F1537F72FFCB2506D3.mft (raw, json)
Hash identifier:          sTUOhVEeBTjt2moIMuQ1paYOyooTLj3AbTFw63eD1lY=
Subject key identifier:   8A:5A:36:78:DE:0C:17:F6:B7:41:BB:C8:FB:34:21:B0:01:61:B2:BF
Authority key identifier: 32:98:61:E0:1A:E7:B5:1B:7D:79:65:F1:53:7F:72:FF:CB:25:06:D3
Certificate issuer:       /CN=329861E01AE7B51B7D7965F1537F72FFCB2506D3
Certificate serial:       2111B8B6E25DD804029F082F65769ACAE252F774
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/329861E01AE7B51B7D7965F1537F72FFCB2506D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/0/329861E01AE7B51B7D7965F1537F72FFCB2506D3.mft
Manifest number:          01B7
Signing time:             Mon 15 Apr 2024 00:45:40 +0000
Manifest this update:     Mon 15 Apr 2024 00:40:40 +0000
Manifest next update:     Tue 16 Apr 2024 01:10:40 +0000
Files and hashes:         1: 3137302e3234372e3131322e302f32322d3234203d3e20323633393033.roa (hash: Ckdnej9uFmLQ4CizYsaiCxIsNEhVs2rdvB0KBSYF+Ow=)
                          2: 329861E01AE7B51B7D7965F1537F72FFCB2506D3.crl (hash: Opoy5VNJiXe/EDVAab81GicKXEDU04iFKLtqhgVBq/A=)
                          3: 3133382e3230342e3134302e302f32322d3234203d3e20323633393033.roa (hash: xvhwqjN4ArmQF68Tt7d71ZpU+pzY4EBlV0hBgl/KQX4=)
                          4: 323830343a323737383a3a2f33322d3438203d3e20323633393033.roa (hash: tVmJpUtAuvlfO+0EBewM+K9b4l9ihVi3sxTpvhgYw6Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:11:b8:b6:e2:5d:d8:04:02:9f:08:2f:65:76:9a:ca:e2:52:f7:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=329861E01AE7B51B7D7965F1537F72FFCB2506D3
        Validity
            Not Before: Apr 15 00:40:40 2024 GMT
            Not After : Apr 16 01:10:40 2024 GMT
        Subject: CN=8A5A3678DE0C17F6B741BBC8FB3421B00161B2BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6d:5c:d8:09:34:e6:6c:67:c3:95:5e:29:21:
                    16:ad:e9:4f:9f:34:b2:1b:42:a8:29:f7:6e:bc:40:
                    6f:9c:b9:a5:07:9b:fc:60:d3:cf:03:7a:e8:c3:a1:
                    57:87:08:0c:98:ce:d6:78:b2:b4:ec:08:72:cd:84:
                    f3:10:2d:3b:0b:b9:9c:a3:01:e0:7b:d4:fc:ad:5c:
                    92:2f:b1:0f:74:3b:f1:90:87:7c:1a:1c:11:7b:da:
                    ea:b4:aa:40:ee:b0:af:d1:a2:70:91:8f:b0:0a:cc:
                    c9:f8:61:1e:cf:6b:96:2d:f2:8d:57:d7:55:fc:73:
                    30:5d:0d:b7:42:bb:0c:f6:b8:20:31:e5:c1:13:6c:
                    6c:46:8e:f8:6b:0d:65:ff:c2:05:26:33:02:3c:81:
                    c7:86:5b:25:c1:b2:1d:22:b8:4e:c4:d6:75:30:5d:
                    e6:72:b5:83:f4:b6:00:bc:66:8c:25:9c:4f:8a:e5:
                    d4:28:76:ff:7f:37:d5:b0:5d:58:ab:c8:51:6c:66:
                    a5:c4:ac:9b:f7:30:fe:90:87:a1:46:da:e0:ec:be:
                    b2:47:15:f3:87:fb:27:3b:74:18:cd:bb:1c:80:18:
                    92:a4:9d:97:88:78:1d:4d:ed:f1:45:82:5b:68:4c:
                    ec:32:e4:69:1e:88:07:7a:74:5c:94:0d:e1:1e:9a:
                    d0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:5A:36:78:DE:0C:17:F6:B7:41:BB:C8:FB:34:21:B0:01:61:B2:BF
            X509v3 Authority Key Identifier:
                keyid:32:98:61:E0:1A:E7:B5:1B:7D:79:65:F1:53:7F:72:FF:CB:25:06:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/0/329861E01AE7B51B7D7965F1537F72FFCB2506D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/329861E01AE7B51B7D7965F1537F72FFCB2506D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/0/329861E01AE7B51B7D7965F1537F72FFCB2506D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:36:c7:6e:c0:0d:1c:52:5a:6c:2d:04:48:eb:95:16:ab:89:
         cc:70:1a:12:3d:0e:bb:96:f6:4f:ca:16:2f:7f:cc:cc:35:bc:
         b2:1c:c3:47:0c:13:78:bf:e0:73:4f:b9:5e:79:68:8b:e5:e2:
         8a:91:ab:17:4e:b3:58:52:42:d7:72:f2:eb:84:91:bc:1d:1d:
         e8:29:d7:28:d0:da:79:71:18:d6:01:f7:4d:34:4a:30:8b:39:
         f4:4a:92:c4:dd:95:4b:da:7c:30:03:bc:99:20:86:8a:0c:78:
         14:be:e1:f0:8b:5b:2a:b8:09:8c:bc:ba:8f:80:b3:cf:44:19:
         e9:83:bc:84:e8:e8:aa:61:26:43:b7:d9:62:37:c2:71:bc:97:
         08:9c:4b:62:bf:e8:2b:07:71:b7:b0:da:fa:6d:07:a2:af:aa:
         86:29:3d:79:d0:25:84:35:bb:65:f4:f6:8d:93:44:89:70:6d:
         1e:4f:f1:3d:88:48:5b:ff:ff:17:df:1f:de:91:e3:35:3e:8b:
         27:12:75:8c:e1:9f:4c:de:7d:3a:af:ff:a4:35:1d:09:25:53:
         88:1b:54:3b:7c:dc:54:da:2a:1f:6b:c2:98:ae:50:7f:32:c4:
         0a:30:71:78:8c:df:83:97:32:5e:ae:bd:06:77:91:7f:b7:cb:
         01:d2:7c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----