Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/64978BE796EAA3AC668D18B091889D09255041B0.mft
File:                     64978BE796EAA3AC668D18B091889D09255041B0.mft (raw, json)
Hash identifier:          agbzJYAe/52rTrWYVnOovlaTTXnvtlaJ3oP04G61Z+0=
Subject key identifier:   35:42:95:30:9D:3F:89:8F:38:07:88:CB:F7:8C:30:65:0E:E2:1B:F7
Authority key identifier: 64:97:8B:E7:96:EA:A3:AC:66:8D:18:B0:91:88:9D:09:25:50:41:B0
Certificate issuer:       /CN=64978BE796EAA3AC668D18B091889D09255041B0
Certificate serial:       5D0C9ABC51F5866743BDBD0653B6F91810B99CD4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/64978BE796EAA3AC668D18B091889D09255041B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/64978BE796EAA3AC668D18B091889D09255041B0.mft
Manifest number:          0232
Signing time:             Mon 15 Apr 2024 08:32:38 +0000
Manifest this update:     Mon 15 Apr 2024 08:27:38 +0000
Manifest next update:     Tue 16 Apr 2024 10:22:38 +0000
Files and hashes:         1: 323830343a346663383a3a2f33322d313238203d3e20323638333439.roa (hash: dDaVQ/i7WN1CllumjII+1lZNXu/bZfXgH5g2NpfMqdQ=)
                          2: 34352e3233392e342e302f32322d3332203d3e20323638333439.roa (hash: naiVbdVgJw28MlVRxhrsxrRzdvRFFOK3o+Y+6m9UCtg=)
                          3: 64978BE796EAA3AC668D18B091889D09255041B0.crl (hash: UOBULVkIJyrfNL68gZxxNvKxSkz/TxLbor6P/WUxPjg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:0c:9a:bc:51:f5:86:67:43:bd:bd:06:53:b6:f9:18:10:b9:9c:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64978BE796EAA3AC668D18B091889D09255041B0
        Validity
            Not Before: Apr 15 08:27:38 2024 GMT
            Not After : Apr 16 10:22:38 2024 GMT
        Subject: CN=354295309D3F898F380788CBF78C30650EE21BF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4c:1f:0a:6d:ca:42:da:7b:a1:bc:d2:33:12:
                    c5:df:e4:bd:3f:e4:8e:4e:c2:88:f7:83:e5:d5:68:
                    99:15:f7:c0:d9:99:37:de:41:17:7e:b9:6f:34:fa:
                    12:0a:8e:85:eb:b3:55:51:9f:6f:17:b7:3c:af:c6:
                    2d:b1:ab:d7:ea:7f:dd:a0:ef:66:2d:10:e7:2c:47:
                    c8:51:29:68:8a:ae:78:48:b2:ca:5a:e3:1a:bd:d2:
                    23:c1:2c:dd:3b:15:aa:be:c0:ba:7f:70:bd:c7:29:
                    c1:07:19:1b:4c:53:b4:a9:89:64:30:75:37:c1:da:
                    01:22:91:a6:72:b1:b4:d1:ac:13:30:78:d0:4f:b6:
                    81:96:f7:83:66:65:bc:06:2b:30:1a:4d:33:10:b0:
                    62:b8:f4:ae:3b:d1:f5:bf:46:ea:52:99:1c:db:d1:
                    90:00:d6:9d:e9:e1:c4:81:5d:a7:a6:c1:42:6d:d6:
                    0e:85:ef:83:33:fe:01:60:a0:e3:bd:fb:38:df:22:
                    f6:ee:7c:7b:ec:51:f6:14:0f:1f:88:f5:89:5d:49:
                    95:c6:3e:5c:21:99:01:38:2f:c3:b3:ed:b0:bb:87:
                    65:d2:65:37:81:0c:31:ca:bb:0e:9d:fb:aa:34:b7:
                    3b:dc:e8:bf:5d:dc:23:50:fb:57:47:de:1f:56:61:
                    50:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:42:95:30:9D:3F:89:8F:38:07:88:CB:F7:8C:30:65:0E:E2:1B:F7
            X509v3 Authority Key Identifier:
                keyid:64:97:8B:E7:96:EA:A3:AC:66:8D:18:B0:91:88:9D:09:25:50:41:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/64978BE796EAA3AC668D18B091889D09255041B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/64978BE796EAA3AC668D18B091889D09255041B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/64978BE796EAA3AC668D18B091889D09255041B0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:ed:da:2c:e9:88:5f:44:61:7e:be:26:80:94:8f:13:2b:56:
         a6:4b:b6:f8:c9:97:85:79:50:d0:be:b8:4f:5e:b0:35:04:06:
         80:62:0d:11:9c:53:81:6a:05:4a:a1:09:f6:a1:a7:7d:2c:d6:
         01:8b:f3:65:b1:e5:1a:5e:4d:b8:d1:13:6d:39:d4:be:b4:f7:
         56:a9:07:9e:52:2b:ba:d5:9f:ff:3b:6d:fb:29:f4:6b:71:6a:
         0d:05:f8:12:0d:fc:8e:61:32:77:7e:03:b4:5e:c3:a3:c8:24:
         73:ba:f3:21:19:cf:40:7d:06:cc:94:ae:c0:71:75:b9:c0:52:
         d0:1e:c1:3c:cf:49:e8:e4:f7:7c:e7:cf:e4:46:15:69:f1:5c:
         08:fd:6f:3f:bc:9a:fc:db:97:b3:29:3b:a7:23:57:49:9b:76:
         9f:1c:51:14:b4:0b:07:53:9c:66:90:f5:0e:ca:74:56:b9:34:
         79:d5:67:cb:7d:1b:28:51:08:cb:de:c2:55:a7:00:be:2c:82:
         7d:19:cd:2b:db:63:17:ab:2c:61:44:01:f1:ff:d9:59:c7:3f:
         16:69:9d:5d:82:ca:a9:0d:3a:ba:b4:b9:0c:f1:70:2d:15:34:
         28:4a:4a:83:75:b5:e6:44:46:79:f0:99:4e:a3:bd:dc:e3:dd:
         1b:6e:77:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----