Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/D3D4B6B6B7DF2CC7AC285E2A712FF399A3B667D7.mft
File:                     D3D4B6B6B7DF2CC7AC285E2A712FF399A3B667D7.mft (raw, json)
Hash identifier:          tUwRmsl2JAu4be54xXNhi0SE+L61LTlcI/3dNbuhpvQ=
Subject key identifier:   23:56:2D:6E:C0:21:0D:10:D6:CF:5F:7E:94:79:F4:44:2C:9E:10:8E
Authority key identifier: D3:D4:B6:B6:B7:DF:2C:C7:AC:28:5E:2A:71:2F:F3:99:A3:B6:67:D7
Certificate issuer:       /CN=D3D4B6B6B7DF2CC7AC285E2A712FF399A3B667D7
Certificate serial:       7E7F5A0CB202ABC6A530F4A02FE6DBF79578E866
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D3D4B6B6B7DF2CC7AC285E2A712FF399A3B667D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/D3D4B6B6B7DF2CC7AC285E2A712FF399A3B667D7.mft
Manifest number:          56
Signing time:             Sun 14 Apr 2024 17:32:00 +0000
Manifest this update:     Sun 14 Apr 2024 17:27:00 +0000
Manifest next update:     Mon 15 Apr 2024 21:17:00 +0000
Files and hashes:         1: 323830343a343830303a3a2f33322d3332203d3e20323637303931.roa (hash: MnmF2YqH3Z8eCuZFBOCKbCa8cS6+X5mz9UoQ7YSUuCk=)
                          2: 34352e3232392e32332e302f32342d3234203d3e20323637303931.roa (hash: eTCSQXL92/PUgLKSBip7quhBeBHinjgE4PeKQpvtHMs=)
                          3: D3D4B6B6B7DF2CC7AC285E2A712FF399A3B667D7.crl (hash: ZHO3PDcxRrQ77NwkeY6s6KXC4KBfcf5/xBauGAtWZ80=)
                          4: 34352e3232392e32302e302f32322d3232203d3e20323637303931.roa (hash: 5hcsveObdnOMWHxc/lsQ2nP+31XsmqVqUJv05bQOKNA=)
                          5: 34352e3232392e32302e302f32342d3234203d3e20323637303931.roa (hash: suCExveAWkiqiyPtnFL0wIT9zpzeCZcZs+zwWbbZTRg=)
                          6: 34352e3232392e32312e302f32342d3234203d3e20323637303931.roa (hash: e/E1Y72LCg6w/OcgiG5XA7tkD+OtPDENCx48SEX/tIk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:7f:5a:0c:b2:02:ab:c6:a5:30:f4:a0:2f:e6:db:f7:95:78:e8:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3D4B6B6B7DF2CC7AC285E2A712FF399A3B667D7
        Validity
            Not Before: Apr 14 17:27:00 2024 GMT
            Not After : Apr 15 21:17:00 2024 GMT
        Subject: CN=23562D6EC0210D10D6CF5F7E9479F4442C9E108E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c1:b0:0c:d6:6f:8e:e3:56:fd:53:e5:f7:51:
                    a8:07:c1:bb:06:1b:c4:13:70:ba:f3:81:b8:f5:6d:
                    b8:7d:da:46:3b:a7:ff:ae:99:e1:9f:ae:a2:3f:f6:
                    4a:58:dd:5e:7e:27:70:da:bc:7f:ff:e2:23:9b:16:
                    29:c4:31:57:40:68:27:10:dd:1c:43:c2:b6:7d:58:
                    93:5a:96:6d:ac:a3:47:59:78:f9:f9:35:b7:da:da:
                    01:b8:75:b6:2b:d3:ef:63:cb:55:9f:fb:38:f6:21:
                    db:74:ec:b6:1a:35:96:13:a1:dc:5c:c2:74:b3:e4:
                    8f:de:22:aa:db:52:2c:2e:b5:8c:42:81:39:4a:a3:
                    a4:8a:a3:20:c5:19:cd:e7:c4:e3:70:e5:e1:f1:2e:
                    88:9d:3f:d4:e8:55:e8:7e:09:31:1b:03:f9:17:b7:
                    a6:87:b6:0c:2b:53:5b:16:df:f9:a0:ef:fa:53:de:
                    3a:e1:b6:2f:37:eb:20:59:a4:66:1b:fa:ff:a3:4d:
                    eb:d1:6b:af:4a:26:9b:8c:33:01:cb:5e:4d:36:73:
                    e5:d0:d1:7e:93:aa:14:a4:52:7d:0f:54:41:d9:ee:
                    76:26:b3:0c:7f:f6:8f:e2:2f:d9:51:e4:29:c5:73:
                    b3:30:5f:c5:b0:c8:a1:12:27:00:fc:9a:17:f3:cf:
                    fb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:56:2D:6E:C0:21:0D:10:D6:CF:5F:7E:94:79:F4:44:2C:9E:10:8E
            X509v3 Authority Key Identifier:
                keyid:D3:D4:B6:B6:B7:DF:2C:C7:AC:28:5E:2A:71:2F:F3:99:A3:B6:67:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/D3D4B6B6B7DF2CC7AC285E2A712FF399A3B667D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D3D4B6B6B7DF2CC7AC285E2A712FF399A3B667D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/D3D4B6B6B7DF2CC7AC285E2A712FF399A3B667D7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:04:b8:b4:56:72:19:ee:70:74:6b:81:3b:25:6b:a6:ce:ae:
         05:cb:01:cd:d6:86:b8:f5:d5:e9:26:65:b4:91:b4:c4:bb:7d:
         8c:4b:ca:d5:85:74:89:84:3e:9e:37:18:20:75:05:45:b2:b6:
         b5:d0:aa:68:ad:13:54:12:7b:88:07:f8:ce:3a:dc:29:45:ee:
         2c:79:b9:c0:21:fb:1b:d5:59:ea:d6:f9:cc:1b:e2:49:35:62:
         59:3a:23:75:10:6b:a1:30:70:57:6c:27:85:d5:7d:f1:5c:77:
         66:62:2e:04:8e:ef:df:6c:a2:c5:8b:91:b0:94:77:18:cb:ba:
         b5:4f:9d:a8:b5:58:3b:d2:3d:50:cd:c0:d6:e7:12:77:bf:91:
         24:34:9f:cd:2a:50:53:71:07:5d:bb:c3:37:a3:dd:4b:2a:6b:
         b5:72:88:ea:4d:b9:78:fc:09:ec:68:85:0d:37:db:1f:73:f8:
         6c:62:3a:99:40:88:de:4a:e2:d1:61:98:83:ae:05:99:03:f9:
         b4:7f:e3:e0:69:e1:2a:2b:93:94:4f:13:bf:01:63:8e:8c:8e:
         d8:5d:5a:ea:2a:0b:6c:59:19:af:da:51:95:c9:2c:6f:6c:2d:
         36:00:03:1a:c8:dc:4d:34:ee:09:87:b3:3f:2e:d3:e7:91:a8:
         aa:36:79:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----