Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/72C8B4B193828EB61655C0B82B9A43750F59074A.mft
File:                     72C8B4B193828EB61655C0B82B9A43750F59074A.mft (raw, json)
Hash identifier:          bVF1gZsFrOtaWtNXzgEUrRnlQ0tMHGm3unSUX+o8rWA=
Subject key identifier:   17:08:6D:0F:FA:14:09:BB:5B:BF:DB:82:DF:76:B8:50:9A:8D:41:F1
Authority key identifier: 72:C8:B4:B1:93:82:8E:B6:16:55:C0:B8:2B:9A:43:75:0F:59:07:4A
Certificate issuer:       /CN=72C8B4B193828EB61655C0B82B9A43750F59074A
Certificate serial:       3B21B0DF112C817B2E0C767851C49264954BDDB3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72C8B4B193828EB61655C0B82B9A43750F59074A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/72C8B4B193828EB61655C0B82B9A43750F59074A.mft
Manifest number:          30
Signing time:             Mon 15 Apr 2024 04:04:50 +0000
Manifest this update:     Mon 15 Apr 2024 03:59:50 +0000
Manifest next update:     Tue 16 Apr 2024 05:40:50 +0000
Files and hashes:         1: 3137372e38352e35362e302f32312d3234203d3e203532373337.roa (hash: stmksk1OiUSkqkDCT3IYqjCUWiQqczrOLsKaVF+mWCE=)
                          2: 323830343a373936343a3a2f33322d3336203d3e203532373337.roa (hash: Dl6tw3VrBIUPDVG9B9Q3UY7dFnioF+z9JfSlq0IbOa0=)
                          3: 72C8B4B193828EB61655C0B82B9A43750F59074A.crl (hash: VY+nmoMMsjWGvZba9NoVvlPYbOBd5fJDp64d0zhtnWw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:21:b0:df:11:2c:81:7b:2e:0c:76:78:51:c4:92:64:95:4b:dd:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72C8B4B193828EB61655C0B82B9A43750F59074A
        Validity
            Not Before: Apr 15 03:59:50 2024 GMT
            Not After : Apr 16 05:40:50 2024 GMT
        Subject: CN=17086D0FFA1409BB5BBFDB82DF76B8509A8D41F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:62:ad:fd:34:86:c3:d1:77:86:d2:31:1d:7c:
                    32:b3:25:03:c4:37:1e:e3:1c:81:ca:aa:8d:6a:41:
                    8a:6e:b1:8b:fe:ac:22:2b:42:12:17:75:61:e1:24:
                    4d:c3:5e:84:1a:de:77:d2:69:ca:3d:d8:ce:5c:1e:
                    e6:b1:f9:e0:e6:aa:70:68:2d:3c:3f:a1:f0:d8:de:
                    4c:60:6b:a1:9c:2c:f6:fc:31:95:70:8f:41:77:5e:
                    2d:42:a6:11:34:10:b7:83:14:30:44:bc:80:85:71:
                    e4:86:1c:62:0d:91:76:92:46:f6:16:74:8c:b8:28:
                    67:26:f6:6d:32:47:fb:26:78:1e:af:8d:54:42:b3:
                    37:1d:47:3e:98:8b:c5:b1:c1:42:55:e3:bd:c1:24:
                    11:3a:4b:c2:9c:4a:a5:65:75:96:84:4a:ba:fc:96:
                    46:21:7b:f2:d8:38:4d:81:09:97:19:26:7a:f5:b0:
                    53:66:85:23:e3:48:52:12:5e:d4:81:a8:b1:1c:81:
                    33:d0:21:65:30:91:f0:44:f5:8d:4d:3d:01:f1:75:
                    ac:9a:65:a7:e2:f3:69:a3:d4:b5:58:1c:97:a8:8c:
                    59:0e:88:bf:4a:12:c1:78:bc:91:1f:95:9f:5b:91:
                    f1:86:74:83:4b:0b:2a:13:16:59:e3:da:62:fe:9b:
                    0f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:08:6D:0F:FA:14:09:BB:5B:BF:DB:82:DF:76:B8:50:9A:8D:41:F1
            X509v3 Authority Key Identifier:
                keyid:72:C8:B4:B1:93:82:8E:B6:16:55:C0:B8:2B:9A:43:75:0F:59:07:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/72C8B4B193828EB61655C0B82B9A43750F59074A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72C8B4B193828EB61655C0B82B9A43750F59074A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/72C8B4B193828EB61655C0B82B9A43750F59074A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:a2:07:ba:f0:1f:ee:c9:d7:2f:5e:3d:74:be:6d:42:ef:78:
         b0:a7:ac:f9:ee:85:50:a2:01:18:63:de:ac:c8:db:ff:11:dc:
         14:d4:80:e5:82:6a:8f:31:c3:25:ca:6d:40:60:92:bb:93:44:
         41:69:34:ce:47:78:f9:54:75:bf:6d:b7:d3:a7:98:e1:4a:3e:
         8b:41:b6:36:9c:b4:9c:31:e5:34:bf:94:f7:1a:77:47:b6:f2:
         33:64:8b:cd:9f:e4:00:c2:3e:5c:a3:07:17:63:0a:3a:ef:5e:
         6d:da:1c:a6:0a:32:28:3a:bd:db:8d:1a:57:f4:a3:9b:c1:20:
         95:46:25:1e:16:57:5e:84:33:57:52:6a:f1:d5:d6:1e:3b:66:
         c1:d9:00:d0:a3:4e:0a:f3:02:59:d6:57:2b:a7:c7:c8:9b:9a:
         f9:9e:3e:6f:b6:50:fb:51:c7:ae:98:f2:c8:05:8f:dc:38:ac:
         28:79:e7:80:5f:70:84:1b:05:9c:d0:24:1a:ab:ef:9d:be:ad:
         42:b9:6b:48:07:00:6d:76:6a:63:33:cc:d1:86:98:36:92:00:
         9b:3c:4c:dc:52:8b:71:6e:87:27:d8:28:8b:26:4d:2d:64:d2:
         4d:56:24:65:c9:90:25:42:b8:8c:88:2e:37:a8:c0:cf:85:18:
         71:54:2f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----