Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7S5oA7gWhenZZDoUT9g8oBFvDgCFpzoLAhBXsaVYnrB/1/708F064BF344A2F78B8AB54D553811C27DBF477C.mft
File:                     708F064BF344A2F78B8AB54D553811C27DBF477C.mft (raw, json)
Hash identifier:          iOX+ecqrSKNfMTrB3sXM9BZgUzszk5dRz+zodgsuC9A=
Subject key identifier:   A5:30:D0:81:05:3F:29:5C:2E:BE:C7:8D:DF:63:47:BE:42:B9:43:4C
Authority key identifier: 70:8F:06:4B:F3:44:A2:F7:8B:8A:B5:4D:55:38:11:C2:7D:BF:47:7C
Certificate issuer:       /CN=708F064BF344A2F78B8AB54D553811C27DBF477C
Certificate serial:       150089224EDA39F5FD61F06CACA43F673747F859
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/708F064BF344A2F78B8AB54D553811C27DBF477C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7S5oA7gWhenZZDoUT9g8oBFvDgCFpzoLAhBXsaVYnrB/1/708F064BF344A2F78B8AB54D553811C27DBF477C.mft
Manifest number:          17
Signing time:             Sat 20 Apr 2024 13:05:17 +0000
Manifest this update:     Sat 20 Apr 2024 13:00:17 +0000
Manifest next update:     Sun 21 Apr 2024 15:53:17 +0000
Files and hashes:         1: 708F064BF344A2F78B8AB54D553811C27DBF477C.crl (hash: 0AW1M4wo3z8bs2hiYTS7BodjiaUWreF81vvWwe32z3o=)
                          2: 323830343a376437303a3a2f33322d313238203d3e20323731353631.roa (hash: EBn3lNhFfPSmg4zjb3qxaw0wKPMcq7OyD/LqQl+AQ/c=)
                          3: 3137392e36332e3133362e302f32332d3332203d3e20323731353631.roa (hash: yCyhMgzT0AkvmxB76fSP0lZrmACZlHEbC1mvO6p/SyA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:00:89:22:4e:da:39:f5:fd:61:f0:6c:ac:a4:3f:67:37:47:f8:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=708F064BF344A2F78B8AB54D553811C27DBF477C
        Validity
            Not Before: Apr 20 13:00:17 2024 GMT
            Not After : Apr 21 15:53:17 2024 GMT
        Subject: CN=A530D081053F295C2EBEC78DDF6347BE42B9434C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:03:b6:a7:2c:ca:2e:57:d7:af:e3:2c:2b:74:
                    fa:41:24:85:66:25:46:2d:1f:84:cc:e1:b3:12:f0:
                    ac:2a:df:74:7e:07:97:e9:17:63:bd:b5:75:d3:4b:
                    97:54:01:5f:19:b1:71:c8:e8:af:e4:60:f3:2a:57:
                    ca:a9:f2:cb:a6:a5:6e:f1:b8:80:93:ee:e9:25:c1:
                    e7:53:3c:45:16:29:03:a8:39:8e:17:45:11:b7:c2:
                    26:1c:c9:ce:bc:b9:55:3b:2e:73:45:e4:6f:a0:7f:
                    0c:ed:89:ba:5d:eb:26:c5:a8:bb:ae:8c:48:94:43:
                    30:bc:45:52:e9:f5:2d:16:1b:db:ec:64:7c:42:91:
                    11:2a:73:c6:05:76:5a:8c:06:40:9f:dd:69:59:39:
                    d7:b9:85:47:8f:f4:e9:0b:1e:02:78:96:64:12:53:
                    76:d9:1e:48:2c:1f:bc:9e:a8:f9:67:2d:a5:38:36:
                    f9:5e:29:10:39:03:30:f5:d7:b8:b0:72:51:5e:e2:
                    5a:da:23:2e:bc:1b:51:5e:bb:b0:09:d1:27:d2:37:
                    d0:79:99:30:77:0d:ef:3a:b6:9c:53:81:7d:a1:a4:
                    22:d5:db:1d:e0:0f:4f:d4:2f:0f:2b:47:0b:08:44:
                    09:67:8e:66:df:46:52:e8:3e:33:d3:9b:89:59:dc:
                    a1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:30:D0:81:05:3F:29:5C:2E:BE:C7:8D:DF:63:47:BE:42:B9:43:4C
            X509v3 Authority Key Identifier:
                keyid:70:8F:06:4B:F3:44:A2:F7:8B:8A:B5:4D:55:38:11:C2:7D:BF:47:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7S5oA7gWhenZZDoUT9g8oBFvDgCFpzoLAhBXsaVYnrB/1/708F064BF344A2F78B8AB54D553811C27DBF477C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/708F064BF344A2F78B8AB54D553811C27DBF477C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7S5oA7gWhenZZDoUT9g8oBFvDgCFpzoLAhBXsaVYnrB/1/708F064BF344A2F78B8AB54D553811C27DBF477C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:e3:48:44:0a:0e:56:b1:71:ba:3f:1e:a4:00:7c:11:92:6a:
         df:92:73:b6:87:63:11:67:02:d7:b5:dd:39:68:db:d0:3c:9e:
         21:de:31:b7:47:ec:d1:03:74:78:91:08:fa:85:8d:f2:48:85:
         ed:44:79:bc:38:d7:a8:7d:94:e3:25:9e:cd:45:f1:53:70:34:
         64:af:cf:26:0b:5f:38:ec:d2:01:d2:c0:45:95:69:7d:60:b4:
         a1:a1:5e:bf:f8:5e:92:f5:9f:3c:1e:86:9e:22:f2:ca:20:3c:
         76:f9:99:3e:ae:4e:9d:0d:81:ed:22:7d:34:c2:dc:c1:10:cc:
         23:69:d2:ed:8b:24:55:aa:bc:94:dd:01:8f:f1:2f:a8:38:28:
         4f:32:f7:6d:04:8d:c8:98:ee:a7:2c:82:95:04:fa:af:93:b2:
         73:ea:85:f5:81:4d:74:33:56:62:ea:88:66:94:5e:d0:66:d1:
         27:c6:a0:b9:9d:c6:c8:ad:32:33:ba:82:ed:b1:60:43:eb:e2:
         5c:a6:f0:ab:aa:2b:ae:76:d5:11:79:dc:90:57:98:e9:f7:db:
         63:44:fb:a5:26:11:c1:07:2e:9a:af:c4:18:ac:72:06:43:74:
         4a:a5:7c:5a:36:5f:bf:d5:10:30:db:3d:27:b7:2e:91:a4:67:
         aa:9a:7b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----