Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/73A308EE05C4F2E10A0E3EE801B45E394B133268.mft
File:                     73A308EE05C4F2E10A0E3EE801B45E394B133268.mft (raw, json)
Hash identifier:          rmsV0lFaDIVZMh7TvzyiglIVjSMAJquJNSwSPah7u4M=
Subject key identifier:   66:E2:94:4C:29:FA:D1:F0:86:65:9B:39:ED:DB:A7:94:88:76:CB:2C
Authority key identifier: 73:A3:08:EE:05:C4:F2:E1:0A:0E:3E:E8:01:B4:5E:39:4B:13:32:68
Certificate issuer:       /CN=73A308EE05C4F2E10A0E3EE801B45E394B133268
Certificate serial:       220B93738AD3EB4E2FB5DDC282AB355CCEA3647E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A308EE05C4F2E10A0E3EE801B45E394B133268.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/73A308EE05C4F2E10A0E3EE801B45E394B133268.mft
Manifest number:          14
Signing time:             Tue 17 Sep 2024 17:55:22 +0000
Manifest this update:     Tue 17 Sep 2024 17:50:22 +0000
Manifest next update:     Wed 18 Sep 2024 20:10:22 +0000
Files and hashes:         1: 73A308EE05C4F2E10A0E3EE801B45E394B133268.crl (hash: uDZBX3WJI3YZC8c45yW9V9jO0D1eyb9Zy1XjAN9Ol+8=)
                          2: 323830343a373934633a3a2f33322d3332203d3e20323731323937.roa (hash: 7+VTt8om+DhIKVh2lZ1evO0yhSTg3DBhWosY2dkDGwY=)
                          3: 3139322e3233312e3137352e302f32342d3234203d3e20323731323937.roa (hash: uaxOJt6vEjDMPqojR5/vcEn55ZrAtroY8tmRngk+8v4=)
                          4: 34352e3232392e3133362e302f32342d3234203d3e20323731323937.roa (hash: aHzfb2dZapK0Zj/2aeZfL6edGmxs9EOVAVfDIdnwSYA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:0b:93:73:8a:d3:eb:4e:2f:b5:dd:c2:82:ab:35:5c:ce:a3:64:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A308EE05C4F2E10A0E3EE801B45E394B133268
        Validity
            Not Before: Sep 17 17:50:22 2024 GMT
            Not After : Sep 18 20:10:22 2024 GMT
        Subject: CN=66E2944C29FAD1F086659B39EDDBA7948876CB2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8b:17:c5:73:64:12:3e:1e:e8:4a:6d:13:33:
                    4b:3e:44:5e:b5:d1:26:33:2a:53:c0:ff:f8:5b:8e:
                    cf:ca:6d:3a:c8:33:fc:a8:fc:8b:66:b7:b0:ec:d7:
                    e9:03:d0:c8:6d:8d:d9:0c:66:8d:3a:aa:24:f1:42:
                    35:ec:fc:03:79:b7:92:d2:fb:c1:3e:33:f4:46:a4:
                    3e:85:c9:55:ac:e4:94:27:4a:0a:25:8b:27:58:f2:
                    29:17:50:32:4b:92:18:11:4f:26:a6:7b:df:7f:52:
                    f1:51:f1:55:ba:d8:79:bb:c2:25:0a:14:e7:a3:ed:
                    59:78:df:8a:0a:62:16:9b:7c:7b:a3:75:60:1c:af:
                    e8:42:e0:a4:17:a7:b7:bd:da:23:cb:45:4f:dc:f9:
                    9c:42:f6:2e:cc:54:e1:74:c1:09:43:99:18:5e:d1:
                    c9:0e:3f:9b:53:6e:6d:19:9c:63:c6:3c:1f:11:ef:
                    d9:38:29:dd:97:95:5c:16:7e:e2:da:5d:29:89:f0:
                    85:1d:5d:61:2d:55:81:32:aa:24:38:12:dd:07:e5:
                    f2:b0:4e:d1:c8:74:66:e9:7c:4e:57:bc:39:71:a6:
                    fb:21:b2:0d:55:e5:b9:bb:ff:34:12:d2:3b:bb:46:
                    6b:28:21:70:e8:ed:0f:65:0a:80:f2:59:22:95:c8:
                    c0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E2:94:4C:29:FA:D1:F0:86:65:9B:39:ED:DB:A7:94:88:76:CB:2C
            X509v3 Authority Key Identifier:
                keyid:73:A3:08:EE:05:C4:F2:E1:0A:0E:3E:E8:01:B4:5E:39:4B:13:32:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/73A308EE05C4F2E10A0E3EE801B45E394B133268.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A308EE05C4F2E10A0E3EE801B45E394B133268.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/73A308EE05C4F2E10A0E3EE801B45E394B133268.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:1b:0d:e9:b0:32:4c:97:b5:e5:c1:ff:04:2a:90:28:e8:49:
         50:bf:17:27:e9:93:f2:1a:c9:10:e6:3e:2f:4c:85:73:7f:f5:
         1d:eb:8f:80:ce:e7:bd:30:8b:c8:fa:dc:49:8a:a3:d9:04:5d:
         2e:c8:c5:2f:6d:70:45:d4:76:bd:ef:1e:ae:d3:c5:19:69:6c:
         d9:65:21:a4:f0:c5:a7:c1:70:c0:55:77:cf:38:d3:fd:8f:23:
         66:af:17:4a:07:c7:33:f1:95:67:0e:70:4a:b4:7b:9d:fe:32:
         f2:0c:98:49:a7:82:8b:be:63:1f:5d:53:90:a2:f1:35:d5:2d:
         66:dd:23:9c:3b:37:b7:2d:66:5a:8c:61:05:ed:15:8c:6b:8f:
         53:9a:df:b2:fb:b9:e3:25:83:b3:3a:ee:a9:b3:b9:09:ef:fe:
         ae:bb:e7:bb:1e:4d:be:1f:f0:c0:d8:19:b0:4e:ea:c7:14:0b:
         6e:dd:65:57:8b:fb:96:63:80:e6:c5:84:e0:e0:ed:42:4a:e9:
         a7:33:19:dc:9c:69:3f:ad:20:cd:b2:ee:cb:31:03:d8:86:4e:
         da:9c:d0:83:f9:bd:96:ab:b3:0a:26:4b:a7:65:70:ca:66:09:
         91:6f:3a:14:82:b4:2f:d5:ad:17:cb:01:ed:41:1c:d8:98:18:
         a8:40:0c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----