Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9RthThtZv7rrREVF5bnBaK5YzzMPa25WL1zxy5q8NScu/0/A413B78BE6FCE4E566F3F1295EE1118E98656302.mft
File:                     A413B78BE6FCE4E566F3F1295EE1118E98656302.mft (raw, json)
Hash identifier:          TXjobEu9nSDyg787DiRdtmPVP92qdN4yFELwVoEx0aY=
Subject key identifier:   70:0A:2B:FB:7B:4A:6F:CF:32:8A:CF:8E:C7:92:12:5C:94:DC:2C:8A
Authority key identifier: A4:13:B7:8B:E6:FC:E4:E5:66:F3:F1:29:5E:E1:11:8E:98:65:63:02
Certificate issuer:       /CN=A413B78BE6FCE4E566F3F1295EE1118E98656302
Certificate serial:       136456AB7BA9B7D00306E9EF842302E4A7C535C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A413B78BE6FCE4E566F3F1295EE1118E98656302.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RthThtZv7rrREVF5bnBaK5YzzMPa25WL1zxy5q8NScu/0/A413B78BE6FCE4E566F3F1295EE1118E98656302.mft
Manifest number:          034D
Signing time:             Sun 14 Apr 2024 21:17:51 +0000
Manifest this update:     Sun 14 Apr 2024 21:12:51 +0000
Manifest next update:     Mon 15 Apr 2024 22:16:51 +0000
Files and hashes:         1: A413B78BE6FCE4E566F3F1295EE1118E98656302.crl (hash: L6gX98VnbdALSWQbaG03Bl3QfppJE3KkxD87KefqJxo=)
                          2: 323830343a313164383a3a2f33322d3438203d3e20323633343433.roa (hash: tUX8W6vtKVdQZ8+2BGZeOnMgiU1Az491QE4LDQI0VFI=)
                          3: 3137372e39312e3133322e302f32322d3234203d3e20323633343433.roa (hash: /7OzIKio1zBC2eJWo06JiDDKj6i//5ujakfckFUBx48=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:64:56:ab:7b:a9:b7:d0:03:06:e9:ef:84:23:02:e4:a7:c5:35:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A413B78BE6FCE4E566F3F1295EE1118E98656302
        Validity
            Not Before: Apr 14 21:12:51 2024 GMT
            Not After : Apr 15 22:16:51 2024 GMT
        Subject: CN=700A2BFB7B4A6FCF328ACF8EC792125C94DC2C8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d4:ac:46:8b:83:24:38:0f:3c:c0:70:12:ac:
                    d6:ab:0e:9c:96:b9:4e:2b:f4:37:67:b6:b7:6c:fa:
                    7c:b0:44:8e:cf:29:6d:ef:64:04:bd:9f:d8:3b:26:
                    42:f6:50:66:e5:b2:e1:c2:ae:1f:00:65:97:60:e9:
                    d1:55:93:86:13:6c:ca:73:45:e6:3d:fe:de:3f:ea:
                    2b:eb:ff:c0:6d:a9:19:0c:77:1c:a7:99:ff:7f:e3:
                    07:a5:86:b2:ee:b7:43:52:ec:09:58:8a:ef:29:01:
                    d0:fb:a5:0a:2a:4d:0e:ac:2e:75:47:e5:1a:f7:e8:
                    7a:6f:95:68:94:ac:ca:8c:03:f8:b8:17:05:0d:b6:
                    34:c1:5a:af:51:f6:5b:56:f7:d4:34:a7:7e:de:7f:
                    30:2d:e4:45:5d:0e:19:b8:8a:36:e6:44:af:f8:ca:
                    0b:67:25:32:2a:25:5a:08:c9:30:f7:17:3f:88:3f:
                    43:64:31:62:05:fc:0c:c1:91:d0:2a:8d:7c:bd:00:
                    ac:3d:af:98:5e:02:a7:38:da:4b:02:80:1c:fc:81:
                    ab:1b:75:44:68:e4:e7:6b:e0:82:8a:cc:37:5c:5b:
                    f5:49:34:c9:73:e8:0a:2d:c4:ab:80:03:1c:df:26:
                    9f:4a:f1:ca:48:5b:62:d3:c6:5f:ad:87:d9:11:b5:
                    b1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:0A:2B:FB:7B:4A:6F:CF:32:8A:CF:8E:C7:92:12:5C:94:DC:2C:8A
            X509v3 Authority Key Identifier:
                keyid:A4:13:B7:8B:E6:FC:E4:E5:66:F3:F1:29:5E:E1:11:8E:98:65:63:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RthThtZv7rrREVF5bnBaK5YzzMPa25WL1zxy5q8NScu/0/A413B78BE6FCE4E566F3F1295EE1118E98656302.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A413B78BE6FCE4E566F3F1295EE1118E98656302.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RthThtZv7rrREVF5bnBaK5YzzMPa25WL1zxy5q8NScu/0/A413B78BE6FCE4E566F3F1295EE1118E98656302.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:a8:1b:0f:25:b5:b5:7a:cc:2d:ef:58:57:de:01:bc:c0:b0:
         c9:0b:78:1c:3d:b2:e4:e8:2d:d6:f8:f7:78:60:fe:f2:a8:6b:
         37:b6:78:8c:55:25:86:81:30:d6:62:cd:29:53:aa:de:4a:02:
         db:74:a5:2d:03:52:cc:be:74:8f:b6:bc:31:35:65:68:c1:a2:
         28:f2:7a:fd:42:f5:06:30:3a:0c:ca:31:72:fa:70:cf:18:8e:
         44:54:ae:82:36:99:b6:44:c3:20:ff:66:ff:46:04:6a:c5:93:
         36:1c:36:60:da:e7:2b:c6:d9:c6:b4:a5:ab:66:f7:21:6b:b9:
         25:d0:6e:8f:dc:82:28:57:6f:8b:be:f2:73:27:8a:9f:4a:92:
         e1:bb:4d:a1:e7:01:7f:f5:35:0f:f4:8d:83:84:65:d4:43:78:
         31:5e:92:6f:dc:07:ba:ac:4d:16:b4:7c:5c:db:5e:b3:4d:54:
         d1:6d:ce:2e:d8:ba:84:83:8a:08:76:18:4a:ce:96:44:41:be:
         19:73:e9:c8:eb:9a:34:87:c9:ab:b7:e8:26:29:fd:2c:88:cb:
         7a:bf:e3:54:22:96:f5:c7:16:b2:aa:27:50:32:b3:a1:4d:e7:
         ea:77:47:17:0b:03:23:b5:ce:16:6b:75:87:50:4b:b1:e1:5f:
         39:ca:3e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----