Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/838cDPwYJEZKbGjLSoA88xwRC7Y9NutRtnLvV1ZUJmzx/0/7B688C41F3A6BB806F255EA1032B8DA1525EAA71.mft
File:                     7B688C41F3A6BB806F255EA1032B8DA1525EAA71.mft (raw, json)
Hash identifier:          cOq8BieaokbflWctWaXdea/Gr2h8MZBb0OcRUH/txI8=
Subject key identifier:   7B:D1:92:0A:DD:DF:B6:6B:11:1A:A6:55:70:E5:02:0E:F8:63:7D:D5
Authority key identifier: 7B:68:8C:41:F3:A6:BB:80:6F:25:5E:A1:03:2B:8D:A1:52:5E:AA:71
Certificate issuer:       /CN=7B688C41F3A6BB806F255EA1032B8DA1525EAA71
Certificate serial:       2AAACD9EA49ED032907A66F709DFEA534AF1447A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7B688C41F3A6BB806F255EA1032B8DA1525EAA71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/838cDPwYJEZKbGjLSoA88xwRC7Y9NutRtnLvV1ZUJmzx/0/7B688C41F3A6BB806F255EA1032B8DA1525EAA71.mft
Manifest number:          4F
Signing time:             Mon 15 Apr 2024 05:26:37 +0000
Manifest this update:     Mon 15 Apr 2024 05:21:37 +0000
Manifest next update:     Tue 16 Apr 2024 07:57:37 +0000
Files and hashes:         1: 7B688C41F3A6BB806F255EA1032B8DA1525EAA71.crl (hash: yPKNVxTY6dQEQqIERUxck8hxwqf3VXSLsZAMwVnBab0=)
                          2: 3230302e35332e342e302f32322d3234203d3e20323730323633.roa (hash: 3tgh4ggsJemnvUy0a8YNBVxU3phayxN8hYUkyi2vl0g=)
                          3: 323830343a363935343a3a2f33322d313238203d3e20323730323633.roa (hash: MVe6aLIRrCZ1c/UkNQkhjiLy3zonxe0bpy112z7rpMg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:aa:cd:9e:a4:9e:d0:32:90:7a:66:f7:09:df:ea:53:4a:f1:44:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B688C41F3A6BB806F255EA1032B8DA1525EAA71
        Validity
            Not Before: Apr 15 05:21:37 2024 GMT
            Not After : Apr 16 07:57:37 2024 GMT
        Subject: CN=7BD1920ADDDFB66B111AA65570E5020EF8637DD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f4:e4:7e:c4:8d:8f:2a:45:3f:ee:fb:cf:90:
                    1f:6b:b4:5e:fc:39:01:7e:bd:04:b6:12:44:80:bf:
                    aa:26:cd:0d:29:c7:5a:b9:67:0d:91:82:0e:b4:d2:
                    9f:16:83:4a:17:3c:bc:6c:0d:d6:04:96:b9:65:32:
                    2a:6f:11:e7:9d:27:2c:ab:c3:b1:d8:cb:0c:eb:7c:
                    2c:28:60:fb:19:d6:43:a3:b5:12:79:02:0c:3f:14:
                    8b:e3:f9:92:e7:35:3b:17:84:c6:60:3d:bf:cb:e7:
                    f9:92:be:2c:af:e3:cc:95:fb:d8:15:82:e0:ea:18:
                    9e:db:41:52:3b:19:6c:0b:59:c1:28:f5:3d:7e:4a:
                    7f:f0:d1:a8:e9:ae:09:f7:76:3f:08:2d:28:78:c9:
                    2f:d1:5f:f0:37:c0:f0:c8:49:f8:1f:cb:8f:eb:14:
                    20:64:65:99:a9:62:e1:98:a6:44:9c:aa:3a:9e:2f:
                    93:61:ff:30:ab:bc:aa:06:22:4b:b9:51:18:f4:59:
                    30:e4:02:f5:2a:da:4b:a3:c4:ae:15:50:a0:ad:d4:
                    c4:75:5b:0b:aa:40:60:db:a5:be:5a:3b:93:87:dd:
                    60:ca:a2:ee:98:29:bc:8f:8a:5d:91:fc:f8:1f:f2:
                    89:3e:00:91:d1:ec:7c:39:f1:81:77:3a:c4:33:2d:
                    7a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D1:92:0A:DD:DF:B6:6B:11:1A:A6:55:70:E5:02:0E:F8:63:7D:D5
            X509v3 Authority Key Identifier:
                keyid:7B:68:8C:41:F3:A6:BB:80:6F:25:5E:A1:03:2B:8D:A1:52:5E:AA:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/838cDPwYJEZKbGjLSoA88xwRC7Y9NutRtnLvV1ZUJmzx/0/7B688C41F3A6BB806F255EA1032B8DA1525EAA71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7B688C41F3A6BB806F255EA1032B8DA1525EAA71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/838cDPwYJEZKbGjLSoA88xwRC7Y9NutRtnLvV1ZUJmzx/0/7B688C41F3A6BB806F255EA1032B8DA1525EAA71.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:6e:ab:59:e0:b8:58:5d:9c:ad:cb:f3:7c:c3:b7:d2:f0:f4:
         f2:9e:48:2c:f6:c4:28:44:1c:99:c3:fd:a1:79:82:cd:72:b5:
         dd:d9:0c:05:8e:7a:c0:79:41:c0:53:8b:8a:3c:a3:07:8a:c1:
         c0:0d:49:19:b8:1b:d3:7f:42:86:8d:d8:f4:77:ef:28:c0:82:
         27:81:fa:ab:31:fa:55:38:73:96:76:27:92:f9:83:ee:b4:20:
         d9:ca:a3:b0:f6:16:fb:2b:67:59:b8:96:65:de:8b:78:89:a9:
         a1:6f:89:45:9a:f1:19:85:75:23:4c:dd:36:6b:d0:16:71:ff:
         cf:6d:53:77:7d:61:99:bf:a2:d8:69:ea:de:52:31:12:fb:45:
         4f:e5:bd:90:a6:c2:3e:4e:98:61:75:73:51:1e:c8:1e:8b:4e:
         d4:d1:6a:f6:59:72:02:db:76:0e:ff:ab:d3:67:2a:39:c8:4d:
         d4:05:c5:61:80:f2:39:61:49:cd:88:c2:6b:46:c1:ef:ba:4f:
         6d:66:89:6c:7e:70:5f:2a:a7:85:62:1f:0d:4d:7b:bd:75:7c:
         72:83:ea:86:b0:d5:7f:7a:ed:ef:b2:e7:55:5b:a5:da:07:e6:
         4b:cc:3c:90:55:db:3d:cc:cc:eb:ad:92:7c:65:19:5a:f8:dd:
         d0:1f:99:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----