Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7aYV74yXq7ry7pDgtX1WycqpPSHEkoK2uWRYY6Gd21Tc/0/569C1F392EB41C3ED38E49FFC29FAD6330A8F403.mft
File:                     569C1F392EB41C3ED38E49FFC29FAD6330A8F403.mft (raw, json)
Hash identifier:          tl4NYQjzxOAYXPTtI7w2Vo/RGPf6Bj+G1aA6K26JePc=
Subject key identifier:   72:84:33:72:96:BE:81:C9:4F:1F:9A:6A:1A:02:AF:91:2C:62:5B:5E
Authority key identifier: 56:9C:1F:39:2E:B4:1C:3E:D3:8E:49:FF:C2:9F:AD:63:30:A8:F4:03
Certificate issuer:       /CN=569C1F392EB41C3ED38E49FFC29FAD6330A8F403
Certificate serial:       7BF28762CBC5E9548AAC84C32534EA7691490596
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/569C1F392EB41C3ED38E49FFC29FAD6330A8F403.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7aYV74yXq7ry7pDgtX1WycqpPSHEkoK2uWRYY6Gd21Tc/0/569C1F392EB41C3ED38E49FFC29FAD6330A8F403.mft
Manifest number:          021A
Signing time:             Mon 15 Apr 2024 07:11:03 +0000
Manifest this update:     Mon 15 Apr 2024 07:06:03 +0000
Manifest next update:     Tue 16 Apr 2024 10:45:03 +0000
Files and hashes:         1: 34352e362e36342e302f32322d3234203d3e20323636313333.roa (hash: /WwMUbSnZHlAF3xX/Dne+usNm3/tfncyu7fyKON4vzI=)
                          2: 323830343a336232633a3a2f33322d3438203d3e20323636313333.roa (hash: j9k9EwR+GKZ/qurfah/0PxePz+l/km3Hghxqi+xf/GM=)
                          3: 569C1F392EB41C3ED38E49FFC29FAD6330A8F403.crl (hash: 9ZrjGmwOBDsPkgSTjqAfb9j26wnlausYo6mJ7jcfVJQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f2:87:62:cb:c5:e9:54:8a:ac:84:c3:25:34:ea:76:91:49:05:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=569C1F392EB41C3ED38E49FFC29FAD6330A8F403
        Validity
            Not Before: Apr 15 07:06:03 2024 GMT
            Not After : Apr 16 10:45:03 2024 GMT
        Subject: CN=7284337296BE81C94F1F9A6A1A02AF912C625B5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:aa:26:0f:20:e2:49:8a:4f:1b:55:6f:00:f9:
                    be:1b:61:81:04:93:0c:df:30:f2:fb:9d:78:89:43:
                    24:50:84:a7:64:f3:dd:57:35:cb:76:e7:9b:1d:fc:
                    79:f6:0a:6c:2c:08:2f:2e:10:7e:33:67:d9:74:9a:
                    7d:95:f3:64:da:f4:ed:e3:5f:d9:d2:d2:08:62:90:
                    01:fc:41:1e:a1:ef:8c:08:db:ee:8d:f3:91:2f:d2:
                    5b:f9:87:65:25:b6:3f:81:8c:6f:7e:d0:35:9a:1c:
                    2d:20:a3:e0:f8:96:76:ec:a8:23:3a:ea:c8:3f:2d:
                    d0:d5:24:ca:02:35:d6:ca:dd:d9:51:66:6b:b8:9c:
                    5d:ae:7a:c2:eb:67:d6:9a:9b:1a:9e:44:86:c6:25:
                    03:1f:00:e1:99:a5:7d:ee:a5:ed:3b:ce:4b:f0:cb:
                    f5:fe:26:1c:90:c5:75:1c:d5:fd:bb:bb:54:6d:92:
                    14:7d:57:7b:89:f4:72:e1:2f:6d:dc:30:ab:51:99:
                    2d:17:62:49:a0:da:2d:90:fc:3d:ca:ca:8d:7b:44:
                    90:0e:93:73:11:15:e8:7c:49:50:97:5e:ba:5d:fc:
                    49:d5:34:5d:24:69:45:eb:f3:ce:2b:81:38:8e:0d:
                    ad:86:c0:2d:1b:9a:f7:67:19:f5:61:0f:8d:d2:b5:
                    1b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:84:33:72:96:BE:81:C9:4F:1F:9A:6A:1A:02:AF:91:2C:62:5B:5E
            X509v3 Authority Key Identifier:
                keyid:56:9C:1F:39:2E:B4:1C:3E:D3:8E:49:FF:C2:9F:AD:63:30:A8:F4:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7aYV74yXq7ry7pDgtX1WycqpPSHEkoK2uWRYY6Gd21Tc/0/569C1F392EB41C3ED38E49FFC29FAD6330A8F403.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/569C1F392EB41C3ED38E49FFC29FAD6330A8F403.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7aYV74yXq7ry7pDgtX1WycqpPSHEkoK2uWRYY6Gd21Tc/0/569C1F392EB41C3ED38E49FFC29FAD6330A8F403.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:37:8b:28:59:90:51:4b:5e:99:cb:86:f9:fc:dd:f6:ad:93:
         b1:74:24:41:e8:4e:d2:e7:95:36:92:ee:a5:bc:1b:9d:61:7b:
         39:d2:bb:29:a7:af:9b:ba:a3:c4:49:0c:2b:e7:f8:39:89:bf:
         15:b2:66:53:95:8b:b3:6d:0d:ce:da:6a:79:2c:c2:4d:9d:db:
         61:43:5e:b5:a6:97:1d:b4:7b:87:d3:e6:5d:9e:54:e6:d7:73:
         48:da:1c:98:4e:54:3f:df:49:38:8c:7d:4e:de:ed:81:e1:00:
         65:e2:97:b4:9d:66:b2:40:38:15:00:02:1f:ca:b2:03:19:e7:
         3a:78:06:b4:d2:42:dd:0e:fe:19:61:d1:d4:1a:f7:df:0a:7d:
         e6:e0:ad:b1:0f:87:10:54:8c:dd:ad:4a:b9:9a:bf:94:38:91:
         a0:ee:5c:e5:86:85:52:47:65:2d:97:a4:33:99:98:0b:f6:6f:
         3b:c4:ee:4c:78:e7:58:65:d3:98:16:ec:1c:d2:28:31:2e:ab:
         c9:c6:bc:2d:9c:62:ac:77:d4:c1:b1:31:86:80:97:c7:ac:2e:
         b5:0d:26:6f:2c:12:fe:3e:ac:a6:7e:19:39:64:fc:dc:00:24:
         b2:d3:9b:96:f0:81:32:f2:2e:b2:0f:05:09:c7:75:ef:36:e5:
         55:28:b4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----