Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7dGkkyBprDPFgs6zzv3a6wVAssBKUmqX57byAR3DygK/0/7DCD4B073D74EB8E7D4B5BAB576BBEC8359C937A.mft
File:                     7DCD4B073D74EB8E7D4B5BAB576BBEC8359C937A.mft (raw, json)
Hash identifier:          5MxM4xJOyou3QqAFt0CcESBT1fOC+U8Xy4nA78F9vHo=
Subject key identifier:   F1:71:C3:90:20:AF:4C:FE:56:F6:95:6A:A3:7C:95:65:54:C6:3B:7D
Authority key identifier: 7D:CD:4B:07:3D:74:EB:8E:7D:4B:5B:AB:57:6B:BE:C8:35:9C:93:7A
Certificate issuer:       /CN=7DCD4B073D74EB8E7D4B5BAB576BBEC8359C937A
Certificate serial:       11BF10474D7B4763E1AF1F715353AF6B060777AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7DCD4B073D74EB8E7D4B5BAB576BBEC8359C937A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7dGkkyBprDPFgs6zzv3a6wVAssBKUmqX57byAR3DygK/0/7DCD4B073D74EB8E7D4B5BAB576BBEC8359C937A.mft
Manifest number:          01DD
Signing time:             Mon 15 Apr 2024 02:05:20 +0000
Manifest this update:     Mon 15 Apr 2024 02:00:20 +0000
Manifest next update:     Tue 16 Apr 2024 02:48:20 +0000
Files and hashes:         1: 323830343a376531303a3a2f33322d313238203d3e20323731363030.roa (hash: KV4h/1GJIM4XAKAGLN63fBWJnVmAi+X7/O2D0MRKpYw=)
                          2: 7DCD4B073D74EB8E7D4B5BAB576BBEC8359C937A.crl (hash: bTW2NA7Iria9n5KyWUIV/IHmFbO+tWLj1mWTnE3JvWE=)
                          3: 3230302e32342e3132302e302f32322d3332203d3e20323731363030.roa (hash: /dcSVjSoPsNAS/wNYuw5j64N/cg3rZiq4c6WSLYV2bs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:bf:10:47:4d:7b:47:63:e1:af:1f:71:53:53:af:6b:06:07:77:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DCD4B073D74EB8E7D4B5BAB576BBEC8359C937A
        Validity
            Not Before: Apr 15 02:00:20 2024 GMT
            Not After : Apr 16 02:48:20 2024 GMT
        Subject: CN=F171C39020AF4CFE56F6956AA37C956554C63B7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:5e:a1:a4:2c:fa:df:e7:5a:3b:ac:1c:95:45:
                    f8:fc:aa:01:dc:dd:ad:e2:38:a3:09:d1:60:3f:3d:
                    2a:f0:1e:1a:08:4a:9e:e9:f2:9e:e2:35:65:bf:36:
                    73:33:bd:81:fe:f9:68:0e:90:84:e6:7f:3c:b7:2f:
                    d7:35:7c:d4:22:ad:8b:c4:a2:d4:ac:98:76:9e:71:
                    95:f1:a5:a9:e2:7f:55:bf:c1:5f:81:30:03:18:34:
                    fd:27:fd:3f:55:0d:c2:47:58:08:a4:f1:ff:dd:8c:
                    ed:b3:73:35:64:7a:9a:89:64:b7:5e:ec:a1:f8:02:
                    ad:e8:8a:f9:d5:9d:d4:dc:63:aa:31:d2:f2:91:65:
                    05:a2:45:8c:f5:50:ab:e9:27:85:84:7e:f2:59:25:
                    85:92:9f:16:28:b3:a0:1d:2c:b2:2f:17:40:7b:66:
                    7b:e6:db:c7:14:d3:3c:b7:fa:29:d8:df:36:5a:09:
                    9e:0f:ce:ca:49:5a:5c:96:fb:88:af:1b:0b:8c:2d:
                    b1:6f:b9:ca:56:d2:4f:42:47:be:da:00:2d:1b:c4:
                    1f:e3:8a:4c:26:34:28:cd:3d:9b:48:07:6c:fe:8b:
                    8d:93:5b:63:8b:02:df:d2:f6:3b:26:f6:87:09:81:
                    0f:d4:53:3c:76:10:ab:4e:d1:b2:b1:a3:f8:5e:6f:
                    b3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:71:C3:90:20:AF:4C:FE:56:F6:95:6A:A3:7C:95:65:54:C6:3B:7D
            X509v3 Authority Key Identifier:
                keyid:7D:CD:4B:07:3D:74:EB:8E:7D:4B:5B:AB:57:6B:BE:C8:35:9C:93:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7dGkkyBprDPFgs6zzv3a6wVAssBKUmqX57byAR3DygK/0/7DCD4B073D74EB8E7D4B5BAB576BBEC8359C937A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7DCD4B073D74EB8E7D4B5BAB576BBEC8359C937A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7dGkkyBprDPFgs6zzv3a6wVAssBKUmqX57byAR3DygK/0/7DCD4B073D74EB8E7D4B5BAB576BBEC8359C937A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:fc:4a:98:0b:5a:c3:5c:cd:2f:9d:a5:75:60:2c:da:13:5f:
         e2:e4:3a:0c:9d:a4:10:e1:18:91:c7:e1:eb:24:aa:69:33:ef:
         79:65:d2:c8:b0:b8:95:19:c7:54:3f:c8:b1:a1:31:7e:ca:0c:
         27:6e:f4:07:3c:e3:76:82:92:58:dc:99:12:64:6f:88:58:b7:
         38:f8:78:ee:c2:c0:0d:c0:10:67:a9:cd:26:5c:f4:c4:93:60:
         d2:12:b6:d8:c8:b8:36:2f:7c:28:8e:f8:db:87:7c:d7:e4:aa:
         89:80:6c:c4:74:66:05:d0:a1:0d:90:d7:91:7b:7d:d5:57:ec:
         29:98:b5:bd:87:9e:92:d6:0f:fe:07:42:a5:76:d8:2b:35:ec:
         92:a3:3b:32:f3:81:74:c0:91:1a:b3:46:60:17:87:67:aa:c6:
         95:90:8f:6c:64:8b:55:c3:79:a7:bb:ac:ab:a1:c6:bb:e8:c1:
         5f:92:1f:68:5c:4b:f9:42:3e:50:e5:d7:8e:62:5c:6f:18:85:
         43:cd:24:91:b8:32:66:59:26:33:cd:1c:b1:54:24:90:15:b5:
         29:23:8a:e5:90:e6:e9:b1:40:84:2a:35:8c:8f:49:f1:04:32:
         82:20:36:7e:cd:2a:99:84:ca:57:dd:13:c5:cb:40:95:e9:2c:
         06:21:9a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----