Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7MKYRwfggPSM6xL7UGTyvVrfW7cGC3T7m7A5GGkJTwiC/1/7A38E6F2469CB0B2FC49E585F855B64C41A4C6EA.mft
File:                     7A38E6F2469CB0B2FC49E585F855B64C41A4C6EA.mft (raw, json)
Hash identifier:          D5fJ741GYeDtcSkNGQXlfuq76RVrkOxvthEzeKjsFbI=
Subject key identifier:   59:8E:58:82:07:63:1A:EA:BF:9E:54:6A:D6:A4:94:3C:AE:D6:18:CA
Authority key identifier: 7A:38:E6:F2:46:9C:B0:B2:FC:49:E5:85:F8:55:B6:4C:41:A4:C6:EA
Certificate issuer:       /CN=7A38E6F2469CB0B2FC49E585F855B64C41A4C6EA
Certificate serial:       33DB00A1D917CD6241462C1B6CAD9A12F10870D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A38E6F2469CB0B2FC49E585F855B64C41A4C6EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7MKYRwfggPSM6xL7UGTyvVrfW7cGC3T7m7A5GGkJTwiC/1/7A38E6F2469CB0B2FC49E585F855B64C41A4C6EA.mft
Manifest number:          16
Signing time:             Fri 19 Apr 2024 08:22:19 +0000
Manifest this update:     Fri 19 Apr 2024 08:17:19 +0000
Manifest next update:     Sat 20 Apr 2024 08:23:19 +0000
Files and hashes:         1: 3139302e3131312e3134302e302f32322d3234203d3e20323730343236.roa (hash: O8WQdNX4IWQTuBH1/oGcXm42ASOEVEZhS1dZ1wSznTk=)
                          2: 7A38E6F2469CB0B2FC49E585F855B64C41A4C6EA.crl (hash: cXig4WR9YlpNFoRmGSjPUZ4deTQW7p0SxM8P+VbgidY=)
                          3: 323830343a366263633a3a2f33322d3438203d3e20323730343236.roa (hash: BJWEYzq6QpYOocweW9thfHzX6DF/IV4zYSapW56lGpg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:db:00:a1:d9:17:cd:62:41:46:2c:1b:6c:ad:9a:12:f1:08:70:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A38E6F2469CB0B2FC49E585F855B64C41A4C6EA
        Validity
            Not Before: Apr 19 08:17:19 2024 GMT
            Not After : Apr 20 08:23:19 2024 GMT
        Subject: CN=598E588207631AEABF9E546AD6A4943CAED618CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c0:6f:1f:3a:29:a9:be:c6:0e:74:44:22:fc:
                    8f:79:82:df:0a:6e:a4:cf:98:01:b7:17:c4:dc:b1:
                    c7:0e:1c:22:90:54:d4:70:8d:2b:7b:39:09:d6:ca:
                    f8:ee:40:d2:09:5b:8b:b1:0f:a8:3c:cf:87:2a:6f:
                    a7:1b:08:65:d1:9f:24:7e:bd:fa:0b:e6:65:98:9a:
                    4f:45:95:a1:79:fc:89:c1:49:54:12:f4:1b:28:e1:
                    71:c5:39:84:d9:ec:12:46:33:47:bb:39:43:e7:3a:
                    bb:fa:83:36:d9:5b:e5:2e:ec:06:0f:76:21:60:da:
                    2e:b3:a6:9b:9c:85:22:1e:64:a3:49:db:ad:1f:cc:
                    c6:82:e3:7b:ad:1a:0b:06:c2:b4:b6:ee:d0:10:da:
                    a7:7a:d9:4f:1e:06:50:39:df:94:59:27:8e:1e:a4:
                    1f:af:c8:53:77:d7:6d:b0:4a:5f:c2:de:af:06:3f:
                    69:7f:18:22:50:14:c9:02:64:a0:dd:06:6e:37:22:
                    e0:31:55:32:35:68:39:a6:ab:a0:4f:f2:77:71:da:
                    0a:6f:58:56:2d:d8:84:0c:2e:4f:67:ae:05:70:fa:
                    52:c0:f0:03:42:3c:7e:83:5a:92:5b:92:36:16:50:
                    ff:51:8d:8c:14:b2:5f:16:a6:ee:16:13:7e:07:b9:
                    52:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8E:58:82:07:63:1A:EA:BF:9E:54:6A:D6:A4:94:3C:AE:D6:18:CA
            X509v3 Authority Key Identifier:
                keyid:7A:38:E6:F2:46:9C:B0:B2:FC:49:E5:85:F8:55:B6:4C:41:A4:C6:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7MKYRwfggPSM6xL7UGTyvVrfW7cGC3T7m7A5GGkJTwiC/1/7A38E6F2469CB0B2FC49E585F855B64C41A4C6EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A38E6F2469CB0B2FC49E585F855B64C41A4C6EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MKYRwfggPSM6xL7UGTyvVrfW7cGC3T7m7A5GGkJTwiC/1/7A38E6F2469CB0B2FC49E585F855B64C41A4C6EA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:9d:31:5d:17:43:81:1a:22:ff:5c:bf:5a:76:ce:5b:1a:3f:
         9b:98:8b:94:b1:83:52:cc:2b:17:fc:68:85:dd:ba:c8:de:a6:
         55:d1:4c:a1:fc:5f:32:a6:6e:18:3b:d8:bc:0b:09:04:75:7c:
         6a:82:34:2e:90:da:2e:08:ae:23:5c:12:31:e1:55:c7:49:0f:
         03:b7:40:39:55:04:cb:09:3d:a9:88:c1:b7:49:b2:8d:6c:f9:
         c6:ca:8d:77:e6:cf:de:70:e2:3f:31:59:ff:09:2b:d5:e1:49:
         17:7b:12:de:10:36:8d:c5:d9:7c:ec:90:fd:ec:31:dd:c0:06:
         74:93:6d:6a:1d:dd:84:3a:a8:3b:83:e4:43:64:0a:69:7f:6a:
         d4:31:28:c1:e7:50:03:5f:9b:63:5f:dc:c4:8a:6c:d3:db:b1:
         32:90:66:50:cb:3c:0f:c9:a1:06:8f:7e:be:9d:b3:ff:3e:52:
         65:77:6a:63:c1:2b:5d:8a:c7:f6:62:b1:61:45:de:b4:a7:e3:
         dc:3b:85:95:70:7a:4b:b2:46:2a:05:22:9b:f4:19:6f:fb:8a:
         58:f4:18:dd:b1:5f:d9:cc:fb:d4:f6:10:5c:33:35:7c:24:4a:
         59:92:1a:00:de:3a:ae:13:e2:bf:48:67:a2:7d:22:4e:17:f8:
         59:bc:8f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----