Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/1577A1F48EF835698EAFA702E5FD3EE85A3F44B7.mft
File:                     1577A1F48EF835698EAFA702E5FD3EE85A3F44B7.mft (raw, json)
Hash identifier:          R10iSnwK4PUWr+BA3WdG2MWkvYDfjHW9Q9HWjjxzAFE=
Subject key identifier:   09:B3:C9:CC:D7:CD:65:9B:98:AD:A6:C8:8C:9E:C8:14:2E:AD:30:D9
Authority key identifier: 15:77:A1:F4:8E:F8:35:69:8E:AF:A7:02:E5:FD:3E:E8:5A:3F:44:B7
Certificate issuer:       /CN=1577A1F48EF835698EAFA702E5FD3EE85A3F44B7
Certificate serial:       2151042073F869D2DBBC68E734A57AC7258343C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1577A1F48EF835698EAFA702E5FD3EE85A3F44B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/1577A1F48EF835698EAFA702E5FD3EE85A3F44B7.mft
Manifest number:          3D
Signing time:             Sat 29 Jun 2024 17:23:25 +0000
Manifest this update:     Sat 29 Jun 2024 17:18:25 +0000
Manifest next update:     Sun 30 Jun 2024 20:19:25 +0000
Files and hashes:         1: 1577A1F48EF835698EAFA702E5FD3EE85A3F44B7.crl (hash: Qtn/Q3/SMOaycD9k7BHuH/ao0QRurT65SQeSMyKMxHE=)
                          2: 3138312e3139312e34392e302f32342d3234203d3e20323637343533.roa (hash: bcwNpQACOXY08VwsKQwvAwksR8h8E1lCStOLIpAQux4=)
                          3: 3138312e3139312e34382e302f32332d3233203d3e20323637343533.roa (hash: BjgTZwCmRgclCwgySRU+QXpgisjHK/YJW/5wvTFzLSw=)
                          4: 3138312e3139312e35312e302f32342d3234203d3e20323637343533.roa (hash: SfgBdJzC54ddCzZNBCfuUxfKxrHNfwxXz5Lnc3xctXg=)
                          5: 323830343a343162633a3a2f33362d3336203d3e20323637343533.roa (hash: VbfQjvlc9Q7ov+TMumJHQnKP+oPz/AO/tDMf7InVPvg=)
                          6: 3138312e3139312e34382e302f32322d3234203d3e20323637343533.roa (hash: 0bQE1fKr/Z2oPqEgFO+EcV+uMiTZ561uySrBupZYer4=)
                          7: 3138312e3139312e35302e302f32342d3234203d3e20323637343533.roa (hash: DDiufmdbimKk3Gl3Q/72DrREZlL68h9g83L7/DK9Z04=)
                          8: 3138312e3139312e34382e302f32342d3234203d3e20323637343533.roa (hash: s9sSgZO8sVpa+3NIXLxivFKwVnjNJpXUAZn++vG/DVY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:51:04:20:73:f8:69:d2:db:bc:68:e7:34:a5:7a:c7:25:83:43:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1577A1F48EF835698EAFA702E5FD3EE85A3F44B7
        Validity
            Not Before: Jun 29 17:18:25 2024 GMT
            Not After : Jun 30 20:19:25 2024 GMT
        Subject: CN=09B3C9CCD7CD659B98ADA6C88C9EC8142EAD30D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fe:94:3a:8d:8f:eb:1d:cd:04:7b:db:55:43:
                    4b:41:df:df:54:5a:f5:73:0c:61:e1:63:b1:b2:37:
                    2c:76:1f:9e:3d:3d:2b:a2:df:ca:48:23:f0:24:bb:
                    61:24:27:23:fb:69:c3:a7:72:aa:e8:92:b5:5c:1d:
                    89:c6:ca:80:6c:1f:a3:8f:a9:fb:71:3a:34:ab:93:
                    c7:a9:94:17:4d:6f:d7:24:4f:df:c4:15:f0:9c:b7:
                    a6:e4:39:14:24:4a:80:61:63:ae:d4:e3:e2:7d:55:
                    79:f4:03:29:58:10:43:8c:64:9d:74:a8:6f:50:2d:
                    3e:64:07:8c:c6:cf:12:6b:d0:98:7c:bc:28:85:89:
                    09:e6:d6:34:f8:3f:e8:54:57:d6:50:87:5e:71:46:
                    5f:8a:f7:57:07:7c:b9:1a:10:fc:84:9b:56:06:f5:
                    d3:20:38:32:02:41:48:e5:df:ac:82:0b:a8:a3:91:
                    a9:46:ad:59:6f:6d:94:44:bc:12:36:90:00:cd:3f:
                    b8:7f:ea:c5:14:b4:a8:38:6a:83:1c:5e:fc:9d:80:
                    20:19:b7:2f:31:36:b1:62:c4:fd:d1:dc:19:8d:bb:
                    be:d1:22:1c:ca:97:24:2e:e3:6a:05:9c:34:4e:8a:
                    87:79:95:25:b5:81:dc:a3:03:c3:72:34:d5:2c:ae:
                    38:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B3:C9:CC:D7:CD:65:9B:98:AD:A6:C8:8C:9E:C8:14:2E:AD:30:D9
            X509v3 Authority Key Identifier:
                keyid:15:77:A1:F4:8E:F8:35:69:8E:AF:A7:02:E5:FD:3E:E8:5A:3F:44:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/1577A1F48EF835698EAFA702E5FD3EE85A3F44B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1577A1F48EF835698EAFA702E5FD3EE85A3F44B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/1577A1F48EF835698EAFA702E5FD3EE85A3F44B7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:7d:87:75:0a:41:9b:14:fe:1e:a3:7a:59:41:0a:91:46:fe:
         bb:62:3c:cd:87:dd:8e:67:58:0a:d3:00:4f:75:d3:82:55:a1:
         9e:66:02:f8:a5:57:81:33:ef:f9:9a:5a:7b:0f:38:3e:cf:e1:
         ce:ed:41:d4:ce:36:dc:ed:ba:e4:44:9d:4f:39:03:13:33:6b:
         b4:47:75:56:a6:f1:4e:bd:0a:0d:7a:1b:3b:b8:93:3d:40:27:
         2e:08:02:15:9b:b0:40:f5:9d:17:e1:03:80:65:52:2e:7b:10:
         a2:55:be:0c:29:b1:b9:fe:f4:89:d8:5b:cd:b9:fd:f8:9b:41:
         12:f7:a0:b6:e3:d7:f4:8d:3a:ec:4a:36:c4:a6:e9:ce:f2:34:
         4e:c7:73:2f:35:e4:2e:01:32:50:69:1c:2e:21:1d:6d:db:7c:
         cf:d8:89:5d:8c:45:1e:0a:df:64:63:ec:55:ce:d3:54:c2:eb:
         88:ea:ef:84:95:a6:c3:60:13:f1:55:02:e0:1b:9e:13:bb:ee:
         83:4a:62:a8:eb:89:7f:3f:31:45:fb:8a:57:c0:36:c4:3a:76:
         ea:da:a4:b5:1d:81:a2:77:96:2b:1c:be:35:fe:ba:e2:c3:d0:
         77:b7:b4:34:66:0c:d0:9a:74:68:08:62:70:27:a7:61:35:9b:
         3c:bd:ca:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----