Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/76A98DCE3044413110B31F3B267B5F050111F9FD.mft
File:                     76A98DCE3044413110B31F3B267B5F050111F9FD.mft (raw, json)
Hash identifier:          3wWK8sCK01rSgGc1ms1RJsL416kAAd7UK/69N1ngJC8=
Subject key identifier:   53:A4:07:25:5A:B9:6B:7A:6A:3E:8B:51:99:31:9E:CE:36:BE:F9:C3
Authority key identifier: 76:A9:8D:CE:30:44:41:31:10:B3:1F:3B:26:7B:5F:05:01:11:F9:FD
Certificate issuer:       /CN=76A98DCE3044413110B31F3B267B5F050111F9FD
Certificate serial:       2B5CE6A90697AFA685D35BC27AB9571414F9370A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/76A98DCE3044413110B31F3B267B5F050111F9FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/76A98DCE3044413110B31F3B267B5F050111F9FD.mft
Manifest number:          3E
Signing time:             Mon 15 Apr 2024 11:29:08 +0000
Manifest this update:     Mon 15 Apr 2024 11:24:08 +0000
Manifest next update:     Tue 16 Apr 2024 11:44:08 +0000
Files and hashes:         1: 34352e362e3231362e302f32322d3233203d3e20323636323437.roa (hash: qkl/q3gv9OsS5kiM2QgpTIJToKj67K2tc8Iu9MO2Cug=)
                          2: 76A98DCE3044413110B31F3B267B5F050111F9FD.crl (hash: 6ce5klwGdC3VPH7zkPoqNdiGQs4oyPl1oitLDtIwfBQ=)
                          3: 323830343a336430303a3a2f33322d3438203d3e20323636323437.roa (hash: boMJ5DZLBYZvuH0Pi5VlPsJqDlYZsYCsLgzXdh/k2jE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:5c:e6:a9:06:97:af:a6:85:d3:5b:c2:7a:b9:57:14:14:f9:37:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76A98DCE3044413110B31F3B267B5F050111F9FD
        Validity
            Not Before: Apr 15 11:24:08 2024 GMT
            Not After : Apr 16 11:44:08 2024 GMT
        Subject: CN=53A407255AB96B7A6A3E8B5199319ECE36BEF9C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:34:75:a8:70:a5:71:ea:d5:31:2a:d7:05:72:
                    12:a3:90:0a:f5:10:de:4d:c9:32:19:fa:3c:6a:27:
                    75:99:52:0f:7b:48:f9:6f:1a:43:19:c7:17:e1:d0:
                    7e:1d:22:df:fb:2f:af:20:92:50:d3:bd:46:ed:df:
                    90:29:06:b4:f8:5c:54:27:fd:10:70:15:88:eb:0d:
                    20:7c:d2:64:60:0a:3f:79:0e:16:e9:ba:ee:a6:d4:
                    fc:67:b4:9d:56:c4:5b:3f:ee:87:bd:94:80:25:55:
                    c5:c9:60:5a:e7:a4:c4:48:f1:c3:6f:e1:a5:fe:31:
                    d3:42:ab:ba:b5:43:e0:7a:5b:74:02:eb:41:81:f4:
                    cc:3b:07:39:9a:51:ab:25:57:2c:76:3d:5d:52:ca:
                    10:83:dd:d1:5c:4e:95:18:d2:e0:62:d3:4f:97:5b:
                    db:35:69:d1:41:3d:7f:a2:ee:7d:27:01:bb:50:ec:
                    61:1e:12:c9:a8:55:e6:1e:31:66:01:69:43:96:05:
                    6a:21:c6:ba:17:d2:72:19:e9:9b:b0:dd:54:cd:86:
                    e2:df:17:72:61:a1:2b:26:da:63:4b:95:2a:4c:31:
                    7c:26:52:d0:97:7f:69:23:f4:3a:39:18:7f:84:90:
                    78:5d:49:51:66:42:f9:7f:c7:0c:f0:a8:f8:56:53:
                    cf:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A4:07:25:5A:B9:6B:7A:6A:3E:8B:51:99:31:9E:CE:36:BE:F9:C3
            X509v3 Authority Key Identifier:
                keyid:76:A9:8D:CE:30:44:41:31:10:B3:1F:3B:26:7B:5F:05:01:11:F9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/76A98DCE3044413110B31F3B267B5F050111F9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/76A98DCE3044413110B31F3B267B5F050111F9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/76A98DCE3044413110B31F3B267B5F050111F9FD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:ce:9b:b4:f4:1e:02:c9:03:69:06:5c:93:51:60:89:e5:b7:
         f4:45:79:10:b3:4a:c8:11:a0:c7:3c:13:e5:f1:6d:69:3d:e2:
         91:7b:a9:9e:41:c4:3f:04:7c:68:80:bd:b2:b8:da:c6:e7:d4:
         aa:da:b8:64:35:2f:a6:e9:0b:db:68:61:19:a3:52:b8:bd:f3:
         e0:c8:24:69:7e:d4:00:a5:f9:b4:ff:1a:cf:c5:86:b6:1a:fa:
         51:13:2c:cf:c3:17:28:97:db:69:6b:0d:58:99:41:df:dc:05:
         e0:e8:ba:da:81:a3:f5:44:cf:f8:62:ba:22:cd:2b:b9:2e:a4:
         03:3f:94:b1:0e:1e:7a:55:af:24:0a:b6:4c:ce:ef:e2:45:d8:
         e9:cd:7f:0f:91:f3:61:02:c3:b0:8e:86:5a:39:61:bf:cd:b1:
         ba:aa:a2:dc:9e:2e:3e:d1:08:02:04:02:ef:56:ad:27:96:eb:
         11:ee:32:a3:af:05:b5:91:a0:4c:be:e5:e1:3f:22:72:2f:53:
         6b:f7:cf:3a:19:51:63:f6:10:21:60:e6:01:59:1a:20:31:5c:
         7a:92:e8:8b:8c:fc:00:05:0b:03:19:dc:79:04:8e:61:4f:d1:
         ed:2d:f7:b0:b3:7c:e3:88:0f:09:08:1a:6e:23:5a:1c:74:6c:
         f5:ae:17:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----