Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/0/04124B6068EE1E77306A1BA87F1F25EA7A596E2D.mft
File:                     04124B6068EE1E77306A1BA87F1F25EA7A596E2D.mft (raw, json)
Hash identifier:          gvH8uI2CC/74XmSiBJ6oWOsKf+yjg6+tEdIy+Ur917M=
Subject key identifier:   7D:A4:87:63:FE:CB:49:8A:DB:C5:4F:72:D4:A6:E6:47:B5:7A:39:44
Authority key identifier: 04:12:4B:60:68:EE:1E:77:30:6A:1B:A8:7F:1F:25:EA:7A:59:6E:2D
Certificate issuer:       /CN=04124B6068EE1E77306A1BA87F1F25EA7A596E2D
Certificate serial:       5B433190463CF0FADC7D52D58D4FE1F6C10CC9BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04124B6068EE1E77306A1BA87F1F25EA7A596E2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/0/04124B6068EE1E77306A1BA87F1F25EA7A596E2D.mft
Manifest number:          0376
Signing time:             Mon 15 Apr 2024 07:29:55 +0000
Manifest this update:     Mon 15 Apr 2024 07:24:55 +0000
Manifest next update:     Tue 16 Apr 2024 08:28:55 +0000
Files and hashes:         1: 323830343a313636343a3a2f33322d3438203d3e20323633323835.roa (hash: YALhhliMOz9f86xEnc6TxYe5IquCFHSQOYI5VN2fNbY=)
                          2: 04124B6068EE1E77306A1BA87F1F25EA7A596E2D.crl (hash: gR7kHjwj1Jzgwm2TEWe9Du6dFLT8qQYPInGSNBg2epc=)
                          3: 3138362e3233352e3235322e302f32322d3234203d3e20323633323835.roa (hash: Nl6GXvs6W4NFNlgXERfK/8/GhDfmOIfziWoYcwJlMp4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:43:31:90:46:3c:f0:fa:dc:7d:52:d5:8d:4f:e1:f6:c1:0c:c9:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04124B6068EE1E77306A1BA87F1F25EA7A596E2D
        Validity
            Not Before: Apr 15 07:24:55 2024 GMT
            Not After : Apr 16 08:28:55 2024 GMT
        Subject: CN=7DA48763FECB498ADBC54F72D4A6E647B57A3944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f2:ac:a0:89:f4:64:3b:33:5b:47:29:35:b1:
                    ad:4c:83:36:b2:b8:51:9e:29:d2:26:01:fa:93:6c:
                    be:fa:e4:aa:56:2c:b0:f6:df:f8:13:02:bb:e5:07:
                    91:16:37:09:0b:b0:97:0a:a4:9f:b4:30:8e:f0:d4:
                    c4:4d:60:63:c0:4a:15:0f:1b:98:c4:1c:97:b6:8b:
                    46:79:8d:f1:a2:79:a7:fc:c0:c8:dc:30:3d:4d:60:
                    52:37:33:1f:58:34:56:3f:65:4d:f4:68:a9:4e:49:
                    53:f5:0c:f7:35:58:d8:06:29:d5:33:28:85:8b:d7:
                    7c:6d:e3:6c:b0:88:eb:f7:a6:22:71:c9:b5:0c:ae:
                    e1:cc:28:39:dc:3c:2f:2c:1e:b9:1c:7d:af:13:16:
                    65:8c:57:e2:53:b5:11:48:43:09:b2:e5:68:54:61:
                    9c:e3:53:7b:82:d5:51:45:c0:f0:3f:87:a2:75:dc:
                    be:fd:dd:f9:9d:16:bd:de:22:97:a1:51:17:a7:48:
                    85:4e:af:7d:00:68:0e:67:0b:df:d9:f9:50:2e:2d:
                    e1:c3:f5:cd:0e:f1:99:28:c5:57:d1:66:62:d2:b6:
                    89:f1:18:df:83:95:a7:38:8a:b5:03:17:71:5f:f9:
                    0a:f2:81:f9:9f:5d:ef:f7:cc:2b:26:9b:77:5e:19:
                    3b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A4:87:63:FE:CB:49:8A:DB:C5:4F:72:D4:A6:E6:47:B5:7A:39:44
            X509v3 Authority Key Identifier:
                keyid:04:12:4B:60:68:EE:1E:77:30:6A:1B:A8:7F:1F:25:EA:7A:59:6E:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/0/04124B6068EE1E77306A1BA87F1F25EA7A596E2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04124B6068EE1E77306A1BA87F1F25EA7A596E2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/0/04124B6068EE1E77306A1BA87F1F25EA7A596E2D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:db:ea:42:8f:b0:24:7d:15:d7:19:2f:fa:cb:fa:94:61:c6:
         92:f1:36:2e:3b:ec:97:a1:9f:1a:53:56:1e:13:55:fe:7a:d8:
         06:b8:d7:c8:52:19:2e:78:39:52:d9:fb:17:7a:20:b3:b9:bb:
         56:ae:40:40:c1:a1:08:12:e2:7d:04:d6:26:5e:c9:fc:59:05:
         a7:69:fe:a0:8f:12:2a:4b:f2:d9:5e:21:66:15:6e:bc:6e:40:
         02:da:5c:5a:86:35:7d:7e:73:5d:c9:e7:75:b1:8a:83:0c:1e:
         d9:c1:e6:42:23:fb:4b:0e:33:42:5a:3b:8d:a7:85:39:f6:5e:
         26:d7:a2:21:f1:6f:93:2c:8b:5d:f6:5d:46:4a:a6:1c:40:ce:
         32:73:00:81:b5:17:81:e0:f9:d3:ac:de:4d:39:b4:e9:a4:e9:
         15:5e:bc:5a:69:1c:3b:aa:22:da:d1:6d:81:4d:2a:89:b4:bd:
         0b:6d:89:21:1d:c6:5a:5a:44:61:0b:f9:63:6d:75:58:67:6e:
         60:d7:d5:1a:cc:66:3a:05:05:dc:1a:57:32:12:eb:cd:d2:0d:
         83:d8:8a:ce:3c:85:29:98:f1:1e:a0:2b:91:f5:20:21:ca:ce:
         14:5f:f6:d5:0b:5c:06:62:d4:36:81:2c:a0:7d:16:d0:b7:26:
         8a:8a:1c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----