Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/0/D2F7452DD5564A2585DD665D38AD7886662B208D.mft
File:                     D2F7452DD5564A2585DD665D38AD7886662B208D.mft (raw, json)
Hash identifier:          Zfl8Gbx5Z3Jow6pr+AGtFszID4yJYXT4OauazwrDnts=
Subject key identifier:   8A:9A:E1:FD:7D:F5:F0:A5:9B:36:BF:53:5D:CF:3E:20:A4:43:29:25
Authority key identifier: D2:F7:45:2D:D5:56:4A:25:85:DD:66:5D:38:AD:78:86:66:2B:20:8D
Certificate issuer:       /CN=D2F7452DD5564A2585DD665D38AD7886662B208D
Certificate serial:       43FF41FFD76931828FAAC49E41DF67A8FDD4B51C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2F7452DD5564A2585DD665D38AD7886662B208D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/0/D2F7452DD5564A2585DD665D38AD7886662B208D.mft
Manifest number:          F0
Signing time:             Mon 15 Apr 2024 09:21:42 +0000
Manifest this update:     Mon 15 Apr 2024 09:16:42 +0000
Manifest next update:     Tue 16 Apr 2024 10:36:42 +0000
Files and hashes:         1: D2F7452DD5564A2585DD665D38AD7886662B208D.crl (hash: KMM806OIhEDlQ3+8hgQfHiI0A2i38RZSZNveEEAhNMk=)
                          2: 3230302e3139342e3138382e302f32322d3332203d3e20323731363431.roa (hash: C2HDkwIoAsAXWwI5gc0pC6Pbos2T1a13/LVHwRKsBaQ=)
                          3: 323830343a376562303a3a2f33322d313238203d3e20323731363431.roa (hash: gJ67qE9+fEsQsKkPBB1j46+B/aELUQRPZ5GK2CrTGEI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ff:41:ff:d7:69:31:82:8f:aa:c4:9e:41:df:67:a8:fd:d4:b5:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2F7452DD5564A2585DD665D38AD7886662B208D
        Validity
            Not Before: Apr 15 09:16:42 2024 GMT
            Not After : Apr 16 10:36:42 2024 GMT
        Subject: CN=8A9AE1FD7DF5F0A59B36BF535DCF3E20A4432925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2e:59:f1:d7:4c:3b:fe:2c:7e:d2:5a:a4:08:
                    74:ce:df:fa:d9:94:7c:d0:a8:fa:06:ac:ac:42:f5:
                    ca:c9:9d:46:80:f1:62:38:9c:ba:db:c4:2c:59:31:
                    66:9f:1f:a4:ae:16:ff:ac:97:6d:49:f8:85:23:40:
                    f6:45:8b:2e:12:31:3e:ac:73:6c:4d:34:28:c2:8d:
                    eb:9e:b9:98:35:6c:f2:ca:af:4a:8d:02:a6:09:62:
                    ce:9d:91:44:15:fa:f0:18:72:8e:a3:83:d2:db:08:
                    bc:f3:aa:2b:78:35:51:cd:c9:04:25:e8:44:eb:a1:
                    40:a8:1b:09:4c:17:bb:38:a4:2c:7c:86:3d:79:61:
                    d6:3f:d9:91:3c:93:2f:94:9b:a4:67:e2:06:a8:10:
                    2b:35:2b:29:46:35:67:b9:1a:dd:30:ba:98:68:ef:
                    2e:f2:21:92:e1:64:6e:8c:e0:71:37:ec:9d:e1:45:
                    c9:a7:be:fc:2b:0c:09:7f:c4:78:b5:5f:e5:37:f8:
                    25:56:93:93:5b:fa:80:81:6c:ad:23:c3:e0:79:c1:
                    f3:d3:bb:2a:40:dc:d3:cf:61:7d:46:40:87:25:87:
                    a1:fd:b3:6a:98:55:00:b3:90:9f:a9:b6:2a:2d:02:
                    65:38:e9:71:8b:3c:da:54:cc:5b:49:76:ec:a6:c9:
                    c5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:9A:E1:FD:7D:F5:F0:A5:9B:36:BF:53:5D:CF:3E:20:A4:43:29:25
            X509v3 Authority Key Identifier:
                keyid:D2:F7:45:2D:D5:56:4A:25:85:DD:66:5D:38:AD:78:86:66:2B:20:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/0/D2F7452DD5564A2585DD665D38AD7886662B208D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2F7452DD5564A2585DD665D38AD7886662B208D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/0/D2F7452DD5564A2585DD665D38AD7886662B208D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:62:ec:a0:16:2a:0e:a3:1b:fb:73:42:40:3f:88:16:46:b2:
         66:7c:9e:e9:6e:19:e9:cf:ce:15:ba:96:ca:5f:d8:da:81:5e:
         18:a6:12:71:9a:55:98:ef:41:bd:22:a7:76:8d:80:28:b3:57:
         70:63:c3:82:84:5c:51:a1:65:cf:38:bd:a4:11:5d:15:83:cc:
         08:8a:ec:7f:98:4b:a7:10:2e:26:b8:11:d4:be:5d:23:c5:d3:
         fa:c5:ff:94:c6:88:87:12:a4:e9:b1:30:b0:5c:0c:df:3d:95:
         26:3e:5d:9c:3c:f2:b3:4c:1b:3f:6a:a6:5e:6f:35:c0:25:eb:
         10:ad:2a:fa:08:84:19:5e:a2:15:68:e9:12:5f:2b:de:80:8d:
         35:f4:26:6c:4b:56:ea:2d:25:f3:2f:4a:09:63:48:35:27:45:
         ee:f8:ed:f1:2a:0c:ce:53:97:e5:9c:49:ca:fc:17:19:77:27:
         2c:73:09:2a:29:2f:7a:bf:be:8f:44:9b:75:c5:94:8c:7f:5f:
         be:50:49:9e:da:cf:da:c1:a1:60:a1:9a:5d:63:e3:fa:1b:d8:
         40:d2:c0:27:6e:4a:a3:69:fc:50:6b:40:a4:23:78:e3:50:68:
         e8:27:15:68:23:8f:3e:e1:59:cb:e5:f4:0e:b7:ed:e6:2b:cf:
         13:ee:18:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----