Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7839bifADcNUhPzvkZNsdBznMPbYYsR1WRCMLtgnwX1S/1/B7FA9366533E2602BAC37087160B1B7CCB115AEA.mft
File:                     B7FA9366533E2602BAC37087160B1B7CCB115AEA.mft (raw, json)
Hash identifier:          9Uwl/mIPJh61lH256KAjfol/3gBPVXB1a1CSwPJd94k=
Subject key identifier:   72:14:70:BA:4B:1B:94:5B:B0:2E:45:72:E0:45:CA:B5:5B:41:54:62
Authority key identifier: B7:FA:93:66:53:3E:26:02:BA:C3:70:87:16:0B:1B:7C:CB:11:5A:EA
Certificate issuer:       /CN=B7FA9366533E2602BAC37087160B1B7CCB115AEA
Certificate serial:       56E70BFC013F376BFBD48F77497C9A596620876B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7FA9366533E2602BAC37087160B1B7CCB115AEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7839bifADcNUhPzvkZNsdBznMPbYYsR1WRCMLtgnwX1S/1/B7FA9366533E2602BAC37087160B1B7CCB115AEA.mft
Manifest number:          36
Signing time:             Mon 13 May 2024 09:46:23 +0000
Manifest this update:     Mon 13 May 2024 09:41:23 +0000
Manifest next update:     Tue 14 May 2024 12:06:23 +0000
Files and hashes:         1: 323830343a383934303a3a2f33322d3332203d3e20323733353932.roa (hash: N2U/yMLQga8dcgbbW+p1U3hWAv0bREeV+uITFarI6Ec=)
                          2: B7FA9366533E2602BAC37087160B1B7CCB115AEA.crl (hash: p0rGD6xIwlJbcXluWV0RDWpnydLHepTPmgL4AWsSUZw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e7:0b:fc:01:3f:37:6b:fb:d4:8f:77:49:7c:9a:59:66:20:87:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7FA9366533E2602BAC37087160B1B7CCB115AEA
        Validity
            Not Before: May 13 09:41:23 2024 GMT
            Not After : May 14 12:06:23 2024 GMT
        Subject: CN=721470BA4B1B945BB02E4572E045CAB55B415462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:af:43:eb:a2:9f:d7:bf:9c:7b:3d:99:e8:7e:
                    52:47:51:68:2c:04:9d:44:9d:b2:7b:ad:f2:27:0d:
                    aa:e4:d6:51:f5:b2:a0:bc:83:52:fa:81:d5:a8:8e:
                    f1:38:61:0f:2e:de:1d:cb:88:fd:1e:83:30:0a:5e:
                    0b:a8:6d:67:71:c4:28:dc:d1:12:db:22:d2:fc:3f:
                    9a:93:48:d2:17:08:56:eb:2b:04:81:32:ac:7d:29:
                    53:85:77:1f:2c:45:ee:00:39:c0:03:91:7b:51:f1:
                    f1:63:09:4a:3c:ce:f6:7c:75:cc:01:7b:62:d9:dc:
                    43:ea:f5:dd:e5:5a:58:5c:ba:de:b1:d1:52:ce:c2:
                    71:8a:e6:b8:8d:2d:06:6a:d1:6b:93:7e:0f:ab:2c:
                    ea:ae:60:ea:93:1e:76:f2:ea:e3:8a:a7:ad:71:01:
                    43:6a:d7:f8:67:b0:80:63:d7:cb:7d:05:1c:27:41:
                    31:bc:d1:7d:09:5a:f0:a7:ce:4a:b8:1b:f3:84:4d:
                    7e:d0:44:01:e9:1c:43:38:fa:72:e6:59:d5:e3:c4:
                    70:48:33:3e:af:04:b4:20:08:9b:a8:0e:f7:1c:65:
                    f4:e8:91:5f:c9:ab:84:6f:70:91:a6:ca:d9:7a:a8:
                    0f:0b:1b:f2:44:52:98:53:9b:4d:fc:35:df:5c:9b:
                    45:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:14:70:BA:4B:1B:94:5B:B0:2E:45:72:E0:45:CA:B5:5B:41:54:62
            X509v3 Authority Key Identifier:
                keyid:B7:FA:93:66:53:3E:26:02:BA:C3:70:87:16:0B:1B:7C:CB:11:5A:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7839bifADcNUhPzvkZNsdBznMPbYYsR1WRCMLtgnwX1S/1/B7FA9366533E2602BAC37087160B1B7CCB115AEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7FA9366533E2602BAC37087160B1B7CCB115AEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7839bifADcNUhPzvkZNsdBznMPbYYsR1WRCMLtgnwX1S/1/B7FA9366533E2602BAC37087160B1B7CCB115AEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:1d:a2:c4:13:f8:ef:b2:a0:f4:f1:91:05:14:eb:56:79:c4:
         55:e5:dc:98:9a:f2:36:9d:bf:e0:e5:4c:c9:d6:43:3a:78:3c:
         dc:8d:68:06:6c:73:55:b5:c2:a3:68:96:22:d1:f3:29:b0:27:
         08:33:7f:50:03:6d:bd:1c:e3:c1:04:2e:1f:5b:31:95:7b:0c:
         b3:9d:2e:20:10:7f:00:e6:b5:82:26:2f:aa:a9:d8:d3:4a:1e:
         70:e2:14:fc:b4:b6:96:12:ff:03:02:28:20:eb:10:a7:ab:19:
         7a:fe:ec:de:a8:be:32:76:80:76:9f:2f:2a:f6:0c:38:37:64:
         93:e0:2e:30:7c:d1:06:11:22:0c:45:21:74:f0:b8:4d:88:41:
         c9:3b:89:15:00:41:82:a7:9b:69:e1:5c:cf:0f:1e:d7:9c:b1:
         0d:27:58:ec:98:b9:2a:c5:8b:69:3c:a6:a9:6f:d3:ab:0f:b6:
         61:56:de:f3:64:8a:80:f7:b3:69:da:42:d5:ae:f6:dd:c9:fb:
         17:be:71:4d:af:bf:40:68:ae:57:88:a4:3d:58:bd:a4:fc:1e:
         f2:ee:48:c4:cd:e5:d7:c5:e3:5e:1f:96:7e:81:5a:9e:22:b2:
         02:b3:90:d4:ab:34:e5:04:7f:af:cd:d5:24:f5:00:34:43:23:
         ad:20:ca:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----