Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/1/F4350D0F7940D2C9E193A27C0A14B651396141D6.mft
File:                     F4350D0F7940D2C9E193A27C0A14B651396141D6.mft (raw, json)
Hash identifier:          sXJsnrkSEn8r0DUJc0fL/bOpSaLEUUhftpMNSaVDifU=
Subject key identifier:   41:86:8C:1F:08:75:88:FA:03:03:66:50:45:1E:D9:8B:82:7D:F7:48
Authority key identifier: F4:35:0D:0F:79:40:D2:C9:E1:93:A2:7C:0A:14:B6:51:39:61:41:D6
Certificate issuer:       /CN=F4350D0F7940D2C9E193A27C0A14B651396141D6
Certificate serial:       3E4C2390B2BE32F37915879DF80ADD1FDBD2507C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4350D0F7940D2C9E193A27C0A14B651396141D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/1/F4350D0F7940D2C9E193A27C0A14B651396141D6.mft
Manifest number:          74
Signing time:             Tue 02 Jul 2024 09:26:37 +0000
Manifest this update:     Tue 02 Jul 2024 09:21:37 +0000
Manifest next update:     Wed 03 Jul 2024 10:19:37 +0000
Files and hashes:         1: 323830343a313137633a3a2f33322d3332203d3e203533303631.roa (hash: NogGxKUoxc40Apjm0VbSUWuM+ruJ8xGFtNJxgPXK2oY=)
                          2: 3138372e38352e3133302e302f32332d3233203d3e203533303631.roa (hash: Tg4Kfmu4LXnje32j8e+TxUvDvV6999xkl1Bsz2bgnCc=)
                          3: 3139312e3234312e3232322e302f32332d3233203d3e203533303631.roa (hash: AelAZtYfkf06Nuo+axtvduqJhk+iuIZ5r7IZc+IyiUo=)
                          4: 3138372e38352e3132382e302f32302d3230203d3e203533303631.roa (hash: 4yX/hbQnDkINU0PAyjwCLnJIF4a+SNcteMCD0N7tbTQ=)
                          5: F4350D0F7940D2C9E193A27C0A14B651396141D6.crl (hash: AukzHxd/RWgQHSM+COMmCHpfWLYn0gxZYiYdk/zkmC0=)
                          6: 3139312e3234312e3139322e302f31392d3139203d3e203533303631.roa (hash: q8WexJVZb/idup1eiY/dFtyMw/YG0wL4IOsQGnSODH8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:4c:23:90:b2:be:32:f3:79:15:87:9d:f8:0a:dd:1f:db:d2:50:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4350D0F7940D2C9E193A27C0A14B651396141D6
        Validity
            Not Before: Jul  2 09:21:37 2024 GMT
            Not After : Jul  3 10:19:37 2024 GMT
        Subject: CN=41868C1F087588FA03036650451ED98B827DF748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4b:2f:1b:b5:4d:3f:99:5e:06:d0:34:93:0a:
                    d0:ac:f1:ce:a9:19:dc:de:f8:c7:eb:f6:0e:da:29:
                    3c:cb:49:52:43:84:fc:40:46:2e:89:af:26:2f:81:
                    d4:74:d2:70:99:50:7d:53:80:98:23:c2:1f:3e:a0:
                    3e:06:16:c5:b8:40:79:f3:61:3f:a4:5c:10:61:98:
                    5b:be:0c:e4:1e:e0:50:79:2a:32:b0:0b:6f:74:8c:
                    78:19:e4:e9:1b:48:df:55:14:dd:64:34:18:27:cf:
                    02:c4:26:23:64:c5:fd:33:1a:03:5c:96:b1:bc:0d:
                    d3:b1:c3:b0:3b:ec:eb:4b:1b:dd:5d:b2:16:27:9e:
                    29:80:12:73:4f:17:9b:4a:41:fc:8a:07:47:2f:05:
                    95:70:b5:18:03:90:53:ce:cd:c7:66:30:77:c0:1f:
                    88:de:4e:3b:25:bd:a6:f7:65:80:8b:23:c0:02:9f:
                    66:13:d5:74:10:0d:64:55:2d:45:09:7d:1a:1e:21:
                    d3:f0:00:4d:18:ee:c2:46:78:a4:31:c0:99:c7:fd:
                    8c:57:f2:f0:7a:eb:f5:cf:1e:10:87:ee:a8:39:50:
                    71:5b:a3:f9:5f:df:90:66:20:0c:93:4a:3b:24:a7:
                    a5:50:78:e1:d1:b8:5c:fd:5f:26:48:94:ef:30:22:
                    1e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:86:8C:1F:08:75:88:FA:03:03:66:50:45:1E:D9:8B:82:7D:F7:48
            X509v3 Authority Key Identifier:
                keyid:F4:35:0D:0F:79:40:D2:C9:E1:93:A2:7C:0A:14:B6:51:39:61:41:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/1/F4350D0F7940D2C9E193A27C0A14B651396141D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4350D0F7940D2C9E193A27C0A14B651396141D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/1/F4350D0F7940D2C9E193A27C0A14B651396141D6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:d7:a2:ef:f7:ab:fd:d7:cd:9b:10:46:a4:2e:e3:94:0d:9f:
         7a:48:ef:b7:dd:49:3b:46:be:1f:9d:67:3e:26:6a:8d:cf:9f:
         76:06:f8:87:be:19:3d:a2:a8:86:1f:85:d7:f6:7d:52:0b:51:
         25:93:52:c4:26:ec:ff:f6:26:7d:cc:59:9b:86:fa:60:b5:b8:
         de:5a:0c:02:11:cc:e1:b2:c9:1f:0e:03:73:b2:ae:20:7f:27:
         bd:91:57:6a:9c:95:41:93:26:e4:59:79:36:c6:d8:9c:1c:34:
         9b:ab:bb:15:1d:bd:17:13:3c:95:ea:25:ed:7b:0a:42:c7:db:
         49:d8:c3:56:79:bd:48:6c:2e:ef:9e:b8:58:c9:ac:18:83:b5:
         dd:94:5c:f0:64:e2:fa:c4:40:ce:ea:20:09:6e:a8:52:3d:6f:
         93:49:b9:e1:ec:21:ff:25:16:8d:16:e1:53:47:59:8e:fd:62:
         2c:3f:c0:d6:1d:cc:13:b2:47:4b:42:5e:a1:2b:17:4b:92:14:
         d7:27:75:30:69:67:8c:1b:78:60:8b:c9:38:a7:48:06:f5:6c:
         7d:16:f0:1b:2c:25:65:b7:7f:b2:2f:86:38:a4:74:30:c8:bc:
         3d:f5:b1:27:11:83:2a:c3:55:5c:05:c8:35:37:61:5d:6e:da:
         a1:ac:21:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----