Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/0/72D873FAFB0393C93F1E89BAE1E171F762DA38F1.mft
File:                     72D873FAFB0393C93F1E89BAE1E171F762DA38F1.mft (raw, json)
Hash identifier:          9slDILra3PSLBlAoUWJrf4HHdKv+s+XwA9SEQivYloI=
Subject key identifier:   65:7A:DF:BB:6D:3B:83:CA:A2:C8:8C:7F:15:60:73:18:9D:2A:74:19
Authority key identifier: 72:D8:73:FA:FB:03:93:C9:3F:1E:89:BA:E1:E1:71:F7:62:DA:38:F1
Certificate issuer:       /CN=72D873FAFB0393C93F1E89BAE1E171F762DA38F1
Certificate serial:       3FCA5764A8AAE376BFB12BB3D6D70A78FE334781
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72D873FAFB0393C93F1E89BAE1E171F762DA38F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/0/72D873FAFB0393C93F1E89BAE1E171F762DA38F1.mft
Manifest number:          01DE
Signing time:             Mon 15 Apr 2024 05:26:36 +0000
Manifest this update:     Mon 15 Apr 2024 05:21:36 +0000
Manifest next update:     Tue 16 Apr 2024 09:13:36 +0000
Files and hashes:         1: 72D873FAFB0393C93F1E89BAE1E171F762DA38F1.crl (hash: gzt/yTxhyrS6N+/YsVyEJVptLcXn/FRFNKV4/E5/L7w=)
                          2: 323830343a336538633a3a2f33322d3430203d3e20323636363035.roa (hash: KuM6U5n6g3uL3io9R2Sq+L2cmpykVNXnE/L67XdBUG4=)
                          3: 34352e372e3134342e302f32322d3234203d3e20323636363035.roa (hash: TG//Xsj8qWJRZMQr4pE/vz1bfC3nVrVC4fYzjoE3XNA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ca:57:64:a8:aa:e3:76:bf:b1:2b:b3:d6:d7:0a:78:fe:33:47:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D873FAFB0393C93F1E89BAE1E171F762DA38F1
        Validity
            Not Before: Apr 15 05:21:36 2024 GMT
            Not After : Apr 16 09:13:36 2024 GMT
        Subject: CN=657ADFBB6D3B83CAA2C88C7F156073189D2A7419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e4:25:13:de:fc:09:98:b3:e0:fd:97:0f:d1:
                    58:cb:84:52:f5:f3:2a:c4:bf:32:df:f5:ff:ed:24:
                    fa:6c:48:18:b1:b9:8b:5d:b1:70:a4:da:85:21:bf:
                    bc:ed:b7:c2:0e:92:90:5f:15:72:68:46:20:4b:76:
                    7f:d8:16:2b:52:4d:6d:48:bc:be:d9:ab:49:b1:cc:
                    83:20:41:9c:08:2d:95:33:db:69:c9:95:76:0c:a2:
                    08:87:5b:8d:3d:44:fd:45:ab:08:69:fe:93:af:90:
                    a2:02:9a:ba:a6:a7:7a:fc:9b:8d:f9:6a:6f:2e:ca:
                    18:2b:41:ac:d5:49:5a:35:04:23:d9:14:a0:1f:02:
                    7d:de:76:0d:0f:9f:71:7b:6b:82:4f:fa:cc:f2:2e:
                    85:f2:79:a4:53:1f:d2:92:4a:81:3b:1b:68:94:e6:
                    23:b9:80:cb:dd:58:45:3a:aa:de:c0:74:8c:01:fb:
                    4c:fa:34:89:ca:c1:71:bc:25:9f:e7:2c:cc:54:e1:
                    b4:be:2a:bd:01:f9:ab:72:7b:02:9c:78:64:10:25:
                    0e:71:6c:71:ff:79:e0:da:bb:7d:9d:99:07:8c:a4:
                    ae:b9:3a:c9:9e:ad:81:9f:05:5f:9d:eb:99:d1:04:
                    72:6e:0f:09:f4:50:b7:46:62:7e:80:1c:07:40:0e:
                    46:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:7A:DF:BB:6D:3B:83:CA:A2:C8:8C:7F:15:60:73:18:9D:2A:74:19
            X509v3 Authority Key Identifier:
                keyid:72:D8:73:FA:FB:03:93:C9:3F:1E:89:BA:E1:E1:71:F7:62:DA:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/0/72D873FAFB0393C93F1E89BAE1E171F762DA38F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72D873FAFB0393C93F1E89BAE1E171F762DA38F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/0/72D873FAFB0393C93F1E89BAE1E171F762DA38F1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:6e:87:97:eb:27:e7:33:22:23:bd:ad:bc:64:0d:37:1a:89:
         81:80:d4:de:e1:75:fe:37:84:a2:3a:9b:25:6b:59:d1:fb:12:
         1d:db:21:c9:5a:65:37:6b:f0:4b:43:6b:64:fe:e5:b1:66:ee:
         1b:89:a4:5f:12:38:9f:38:71:0e:f2:b9:ce:d6:6d:1d:9e:f0:
         4c:89:46:90:4c:3e:4d:cd:61:40:29:66:ea:27:29:d9:26:fa:
         9a:db:f1:ad:b4:f5:00:a9:36:1d:9b:fe:bd:b6:70:98:7a:32:
         02:b5:4b:69:94:84:e3:9b:70:f8:fb:a8:9e:56:fd:c5:42:c6:
         98:b5:35:b4:c2:50:51:75:fd:cc:08:df:cf:2a:ba:86:01:65:
         c6:16:3f:50:cd:b9:25:e0:08:57:de:65:ef:a4:31:04:42:c2:
         95:d7:96:10:2c:32:d9:42:54:1c:18:cd:0a:ad:d9:8d:ab:58:
         7b:5e:c6:fb:4d:ed:cd:7d:6a:2d:d0:2c:22:d1:1f:88:ec:5a:
         98:9e:b9:85:1b:5a:20:d5:4e:38:91:d8:ac:23:29:cf:98:c5:
         7a:f7:13:da:57:b9:35:3c:93:13:7e:3b:2a:16:75:83:42:8f:
         12:cc:ca:04:91:92:3d:3a:54:f7:d4:bc:2b:ce:4e:e5:60:10:
         34:b8:38:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----