Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8sV7DTz7dqmbJyqEgQ7BsT9PCwBew26NyGvYDi97pL3s/1/76E9BD0DD7027668B8B47535B502BF5B007BC805.mft
File:                     76E9BD0DD7027668B8B47535B502BF5B007BC805.mft (raw, json)
Hash identifier:          SG/tPt+q+umzo0re/KIbLZ3/XN9rreyqjotky++h2XA=
Subject key identifier:   0D:40:69:33:FE:BF:D1:57:FC:0E:B7:C1:F2:1E:79:10:42:F8:18:40
Authority key identifier: 76:E9:BD:0D:D7:02:76:68:B8:B4:75:35:B5:02:BF:5B:00:7B:C8:05
Certificate issuer:       /CN=76E9BD0DD7027668B8B47535B502BF5B007BC805
Certificate serial:       64E210704888ED36D6BB2F32117784B5385E8088
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/76E9BD0DD7027668B8B47535B502BF5B007BC805.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8sV7DTz7dqmbJyqEgQ7BsT9PCwBew26NyGvYDi97pL3s/1/76E9BD0DD7027668B8B47535B502BF5B007BC805.mft
Manifest number:          18
Signing time:             Mon 15 Apr 2024 01:47:43 +0000
Manifest this update:     Mon 15 Apr 2024 01:42:43 +0000
Manifest next update:     Tue 16 Apr 2024 04:28:43 +0000
Files and hashes:         1: 3138362e3232372e3132342e302f32322d3332203d3e20323633323738.roa (hash: 7mG52VGMYRe/0b7zrsMav2qWt9AOFzTZ/Mu1ZZYTHDo=)
                          2: 76E9BD0DD7027668B8B47535B502BF5B007BC805.crl (hash: FnVeeA92Jv+2UjPkR65HwZXYR5ZyuRewbMK8SgMt++k=)
                          3: 323830343a313634383a3a2f33322d313238203d3e20323633323738.roa (hash: mxrxVhy2j1sbBX5XAcaBWSJNFRZgsjI6qz41IjgTYO0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:e2:10:70:48:88:ed:36:d6:bb:2f:32:11:77:84:b5:38:5e:80:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76E9BD0DD7027668B8B47535B502BF5B007BC805
        Validity
            Not Before: Apr 15 01:42:43 2024 GMT
            Not After : Apr 16 04:28:43 2024 GMT
        Subject: CN=0D406933FEBFD157FC0EB7C1F21E791042F81840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:58:73:57:b4:63:d5:24:31:48:b4:01:f0:61:
                    89:a5:52:df:8c:c7:06:48:5b:09:ef:e3:d4:50:6d:
                    c3:ab:75:e2:53:0f:78:d8:7d:ae:5f:f4:80:7f:ce:
                    73:a6:c0:32:3b:8e:7c:1f:52:d7:f8:36:b0:5d:b0:
                    f9:2c:b9:a5:bf:22:82:c2:19:be:a4:f1:13:66:25:
                    59:99:c9:b1:4e:bb:a6:d4:e1:29:38:0e:48:7e:e6:
                    47:17:9d:41:12:c9:6e:e0:cb:37:82:66:e0:ea:d3:
                    66:31:ed:6f:d5:ac:8e:54:13:cd:f9:80:54:2e:4b:
                    3a:07:1c:ce:43:3b:4a:3d:b7:d2:86:a3:3c:5e:81:
                    45:a6:1f:a1:f7:be:2d:e8:66:f0:61:71:69:66:cd:
                    33:2f:40:de:a8:2d:d8:e7:3b:6e:4c:9c:e3:78:29:
                    f2:4c:66:6d:7d:d7:7f:44:ac:0a:6a:9f:17:a1:d4:
                    8d:d1:d1:66:c7:96:85:b7:f2:be:8e:69:a6:63:05:
                    65:af:2c:8d:ba:14:93:a4:50:1d:26:17:ef:0c:de:
                    39:c4:ec:3a:a6:b6:ba:e0:c8:e3:fc:56:bd:3a:b6:
                    df:f6:fe:ed:dd:7a:8c:b2:8a:4e:4b:5e:b8:a4:c8:
                    7f:af:8d:a4:93:28:bc:f3:9b:14:49:b0:06:cc:4e:
                    49:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:40:69:33:FE:BF:D1:57:FC:0E:B7:C1:F2:1E:79:10:42:F8:18:40
            X509v3 Authority Key Identifier:
                keyid:76:E9:BD:0D:D7:02:76:68:B8:B4:75:35:B5:02:BF:5B:00:7B:C8:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8sV7DTz7dqmbJyqEgQ7BsT9PCwBew26NyGvYDi97pL3s/1/76E9BD0DD7027668B8B47535B502BF5B007BC805.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/76E9BD0DD7027668B8B47535B502BF5B007BC805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8sV7DTz7dqmbJyqEgQ7BsT9PCwBew26NyGvYDi97pL3s/1/76E9BD0DD7027668B8B47535B502BF5B007BC805.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:40:9c:7f:33:18:25:4d:29:63:e5:08:6b:df:c5:8d:bf:3a:
         60:0b:ae:d6:3d:53:94:f9:d3:71:e3:ee:1a:84:d9:53:db:21:
         52:69:dd:ba:8b:1b:1b:e2:55:98:ef:8f:5c:78:07:7f:67:6a:
         06:9d:1b:81:eb:90:b1:f2:dc:86:9a:fe:09:e1:42:ee:90:0f:
         66:b9:2c:5b:be:8f:29:ef:e8:f1:32:ca:52:ff:e9:1f:55:07:
         05:9f:8e:71:4c:01:8a:a2:9b:02:e5:ef:99:4b:e5:ed:a6:fb:
         48:5b:69:d3:ec:d9:f4:67:0b:ae:47:9c:8f:5e:ce:19:91:03:
         71:54:57:6f:91:cf:36:df:4c:07:20:5b:b2:ac:b0:ce:fa:f6:
         e0:1c:73:d6:29:7c:d4:9c:e9:9d:28:23:b9:35:7d:07:b9:b7:
         41:37:e6:27:9e:7f:db:a0:cb:e0:fe:cc:09:51:35:50:e7:cf:
         34:1a:88:47:b0:b5:a4:b6:11:11:73:50:1b:68:76:0f:af:a1:
         a6:3c:23:bf:e1:65:1a:59:c8:a8:02:a8:31:7b:df:cd:06:82:
         6e:5c:a1:21:71:36:24:80:a7:b9:06:38:68:f7:1b:96:a1:17:
         8c:b7:a2:79:6f:7b:5a:f2:5c:50:c3:d4:99:48:4a:44:91:c7:
         20:2b:80:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----