Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/1E94701DD600A862C548840197A22D5CEE4B2FDA.mft
File:                     1E94701DD600A862C548840197A22D5CEE4B2FDA.mft (raw, json)
Hash identifier:          WZej79LuwdoChPYvfNjKhUlNzzChdA9b8V8lHUhQvBs=
Subject key identifier:   04:8F:83:B7:E8:F8:55:1C:26:89:65:15:44:F7:97:8D:3F:4B:26:F1
Authority key identifier: 1E:94:70:1D:D6:00:A8:62:C5:48:84:01:97:A2:2D:5C:EE:4B:2F:DA
Certificate issuer:       /CN=1E94701DD600A862C548840197A22D5CEE4B2FDA
Certificate serial:       7FBDEDADAA1360D74159074E6C2244C2DC148C27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E94701DD600A862C548840197A22D5CEE4B2FDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/1E94701DD600A862C548840197A22D5CEE4B2FDA.mft
Manifest number:          03D6
Signing time:             Mon 15 Apr 2024 10:20:01 +0000
Manifest this update:     Mon 15 Apr 2024 10:15:01 +0000
Manifest next update:     Tue 16 Apr 2024 12:16:01 +0000
Files and hashes:         1: 323830343a326461343a3a2f33352d3335203d3e20323635323934.roa (hash: R1giaKC0sqqItEUPJxuuctAOVhoPjZFxiqre141DmZU=)
                          2: 323830343a326461343a3a2f33332d3333203d3e20323635323934.roa (hash: VjxeeXJi8IMbBiNitqOu1RfxdRW2crJggIaBhM3dg2A=)
                          3: 323830343a326461343a3a2f33342d3334203d3e20323635323934.roa (hash: c0Pan3a7iMkqRlmqYbk26TBGQpQUUcMnfXzuRYAePf0=)
                          4: 3136382e3132312e32342e302f32332d3233203d3e20323635323934.roa (hash: xVu4ng1F39N6ge1n1SwBZi+4D2kY1p/G4L/AGitn+2E=)
                          5: 1E94701DD600A862C548840197A22D5CEE4B2FDA.crl (hash: 7xTfPhDtF6xEks6m5Kv8WOjFDlmgXr0mHRc7sJIzGfI=)
                          6: 3136382e3132312e32362e302f32332d3233203d3e20323635323934.roa (hash: wb+HsQnwcTalwAcNckeuIFntf+pVvnTfvYa/7RmwnPQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:bd:ed:ad:aa:13:60:d7:41:59:07:4e:6c:22:44:c2:dc:14:8c:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E94701DD600A862C548840197A22D5CEE4B2FDA
        Validity
            Not Before: Apr 15 10:15:01 2024 GMT
            Not After : Apr 16 12:16:01 2024 GMT
        Subject: CN=048F83B7E8F8551C2689651544F7978D3F4B26F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:fc:a3:ae:83:b4:5b:db:5b:6d:b0:3b:cc:74:
                    80:c3:dc:dc:0d:02:24:25:cc:93:27:a1:9a:4a:df:
                    14:a7:5e:e6:a0:dc:8f:3e:95:b7:c5:3e:cd:5e:17:
                    74:4d:43:f8:fe:28:a5:af:96:ec:65:d0:ea:e9:d9:
                    46:d2:f6:39:17:65:14:03:9c:fc:52:ed:7d:a6:61:
                    1d:23:e1:c0:0b:76:3b:57:73:04:0e:15:be:17:e1:
                    6d:89:77:d5:95:f0:7d:92:63:3f:c4:7e:16:5a:15:
                    ad:66:10:63:17:17:23:9b:59:93:43:52:98:3d:f1:
                    1d:0a:d7:ad:bc:97:7f:4c:98:63:d7:e9:09:cc:a4:
                    27:ec:9f:c9:ca:8e:f7:34:9b:41:65:c8:4a:d6:bf:
                    a8:c1:73:32:41:c6:12:ea:69:22:d1:67:37:8a:fe:
                    a2:42:b9:3f:c6:c9:18:f1:b4:9c:c8:5c:e0:e6:c7:
                    e9:d1:d9:9e:09:9d:7a:36:39:92:45:16:a9:aa:d1:
                    4d:1f:79:94:e7:1d:08:11:4d:27:17:ea:51:66:bc:
                    42:50:d2:a2:49:8f:1e:91:62:ee:b7:fb:26:ef:cd:
                    de:4f:19:0e:bc:1a:af:37:86:f9:f0:82:8b:74:3f:
                    5f:9f:e2:4f:4b:16:bd:4e:16:e8:ee:e8:ba:c2:da:
                    c0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:8F:83:B7:E8:F8:55:1C:26:89:65:15:44:F7:97:8D:3F:4B:26:F1
            X509v3 Authority Key Identifier:
                keyid:1E:94:70:1D:D6:00:A8:62:C5:48:84:01:97:A2:2D:5C:EE:4B:2F:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/1E94701DD600A862C548840197A22D5CEE4B2FDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E94701DD600A862C548840197A22D5CEE4B2FDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/1E94701DD600A862C548840197A22D5CEE4B2FDA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:73:bd:2b:65:cb:6a:61:06:b0:e7:9b:37:3d:aa:97:62:7c:
         2b:09:ae:fe:4d:9d:72:e6:af:d8:f1:58:ef:e5:e5:42:7f:cb:
         d3:d5:83:80:d7:7f:41:e0:7c:96:72:09:1d:c6:10:7e:db:5c:
         b2:33:84:6c:61:b2:c7:e4:89:d4:cb:1e:7a:fc:32:cd:ad:25:
         d4:47:4e:15:d7:c0:a3:fd:9f:2b:20:93:df:d2:b7:d3:a9:ca:
         97:cd:0b:c5:96:b9:07:91:07:63:e3:df:74:f7:f4:1f:48:b3:
         41:83:64:e9:cf:b0:ef:fe:c4:8e:56:d1:cd:1a:73:08:26:fb:
         52:a1:12:25:91:ad:26:67:76:1c:0e:7e:f3:d5:43:f3:44:d7:
         f2:6c:e3:24:1b:b3:9f:66:e6:9e:bb:12:68:e9:8a:f7:b7:ff:
         36:37:64:bd:14:28:ad:eb:f0:13:8e:86:c3:f1:d4:b9:f3:e2:
         83:06:fb:f6:85:8c:e9:27:99:3b:d2:ab:4d:4c:da:43:e4:0f:
         c3:4c:68:c8:74:71:41:a7:a0:9a:4e:83:d9:55:6f:a3:30:40:
         f5:57:dd:91:b1:92:84:f5:d0:55:27:a7:47:5c:3b:7d:e2:75:
         05:b5:5c:43:d1:cf:2f:44:ab:d4:2e:05:97:6d:cb:7f:af:89:
         d4:5f:93:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----