Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/374F51C9ED54F1414625E1F43A042A23F1C7C299.mft
File:                     374F51C9ED54F1414625E1F43A042A23F1C7C299.mft (raw, json)
Hash identifier:          vn0IcwkJkR4XSv9Pt4YN4c3E4SHTCVyqau8OCeyJCaM=
Subject key identifier:   77:29:DB:4B:22:18:D0:94:54:40:9E:29:06:02:3B:57:EB:96:44:CD
Authority key identifier: 37:4F:51:C9:ED:54:F1:41:46:25:E1:F4:3A:04:2A:23:F1:C7:C2:99
Certificate issuer:       /CN=374F51C9ED54F1414625E1F43A042A23F1C7C299
Certificate serial:       4FADAD5DF75F2608453F87E441E1AFDDD7BD448D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/374F51C9ED54F1414625E1F43A042A23F1C7C299.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/374F51C9ED54F1414625E1F43A042A23F1C7C299.mft
Manifest number:          0221
Signing time:             Wed 17 Jan 2024 18:24:59 +0000
Manifest this update:     Wed 17 Jan 2024 18:19:59 +0000
Manifest next update:     Thu 18 Jan 2024 21:26:59 +0000
Files and hashes:         1: 3134332e3133372e33322e302f32322d3234203d3e20323634303235.roa (hash: rrh2vokTee/LKVWOe2FqNHSClM+iWCXNSTfFhcBZnyk=)
                          2: 374F51C9ED54F1414625E1F43A042A23F1C7C299.crl (hash: OrBP1pDES1oqsTzWjqzCRCXosLNO6r/thF21H0wwguQ=)
                          3: 3136382e3139372e35362e302f32322d3234203d3e20323634303235.roa (hash: UMY0V/HF44aJ3g1Et0Zw0aVtu9M+jd6TFuTfDlXz9Y8=)
                          4: 323830343a323939633a3a2f33322d3335203d3e20323634303235.roa (hash: 1MmlZ7G2VPQ/3QSeJhQE+lXGfuKFRmN8sqi1yvCGoo0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ad:ad:5d:f7:5f:26:08:45:3f:87:e4:41:e1:af:dd:d7:bd:44:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374F51C9ED54F1414625E1F43A042A23F1C7C299
        Validity
            Not Before: Jan 17 18:19:59 2024 GMT
            Not After : Jan 18 21:26:59 2024 GMT
        Subject: CN=7729DB4B2218D09454409E2906023B57EB9644CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:11:04:40:e7:7b:46:07:64:1c:69:19:0e:d9:
                    5e:a8:41:48:13:f3:75:ac:a6:5f:44:73:8d:88:b1:
                    01:21:52:e7:4c:47:d0:c4:21:fd:a4:e7:c0:70:b1:
                    b0:a1:98:e0:e2:c2:13:96:1c:20:82:3f:6c:bb:1e:
                    a4:55:2a:d6:f7:b7:2d:35:23:88:78:fa:3d:ed:4c:
                    4f:05:49:c6:c8:81:92:98:c6:72:f4:91:7e:0c:a5:
                    00:61:f4:d8:2f:35:66:fd:d7:1d:92:30:1d:9e:e5:
                    5e:06:29:63:77:12:ad:cd:70:41:83:63:18:c1:21:
                    d6:74:79:1b:63:7c:81:18:fa:9b:42:be:86:cb:26:
                    35:c3:e2:66:73:78:2d:1e:e5:7e:10:9e:df:c9:1c:
                    c3:98:84:9f:ca:9d:36:92:76:31:b6:63:02:a7:77:
                    10:16:1a:79:14:8f:10:9c:a3:ce:dc:a0:28:b6:35:
                    13:48:6f:5a:8d:3f:9e:c1:28:58:67:88:db:4b:e2:
                    b1:15:d3:22:e5:1f:9a:a9:7c:be:6e:97:a5:36:b7:
                    04:4f:0e:0a:a8:62:16:76:cd:ad:d4:ce:e6:6b:e5:
                    63:b6:b9:c7:50:c2:ec:67:a4:01:ac:d4:2a:80:a0:
                    7f:f8:1b:5a:b2:39:3a:f6:af:c6:da:f3:81:05:ba:
                    0c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:29:DB:4B:22:18:D0:94:54:40:9E:29:06:02:3B:57:EB:96:44:CD
            X509v3 Authority Key Identifier:
                keyid:37:4F:51:C9:ED:54:F1:41:46:25:E1:F4:3A:04:2A:23:F1:C7:C2:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/374F51C9ED54F1414625E1F43A042A23F1C7C299.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/374F51C9ED54F1414625E1F43A042A23F1C7C299.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/374F51C9ED54F1414625E1F43A042A23F1C7C299.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:29:34:37:07:6a:d2:6e:90:dd:7f:62:1f:02:6a:a6:51:7a:
         5f:c6:d1:43:b2:a3:14:e1:ce:c0:55:88:70:b2:b0:0e:6f:eb:
         e9:7b:af:ed:04:4f:e6:e9:bb:41:09:b7:10:fa:cb:92:c1:3a:
         da:c7:5c:f7:b4:18:75:cd:82:85:12:7d:57:15:7c:8f:c9:8f:
         08:75:e8:01:d0:ab:70:f5:ea:9c:c2:36:fe:dd:a5:2b:10:38:
         af:4b:ec:ef:35:45:3d:40:a1:d2:af:82:8a:c4:49:a6:88:22:
         40:45:b5:0d:ee:88:26:49:9b:b7:24:fb:88:af:1e:cc:e2:84:
         f9:a0:51:e3:19:45:2f:9a:c2:4d:c2:fc:9d:43:ed:e2:82:1a:
         28:62:c4:21:f9:27:10:93:35:ef:f7:8c:30:f1:4b:06:0d:e1:
         e2:ee:dc:87:0d:75:9c:aa:8f:ac:a3:8a:73:c4:86:50:d7:38:
         d8:55:69:63:7b:17:a8:bc:67:d3:23:be:75:9a:72:31:64:36:
         ab:1b:f9:7a:d4:1d:af:2c:33:c1:a4:53:1e:dd:66:f3:4f:69:
         d7:08:82:33:8d:5d:1c:96:93:3b:50:83:42:f8:49:19:0a:0a:
         08:21:51:ba:1e:fc:81:52:d5:ad:96:7c:f7:04:22:d2:f0:4e:
         a6:9a:23:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----