Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ATPVmXwY6zqHTYx5AuztY1wd7ZYWk3sazUnwx4oQyhny/0/668937F037AEFCAEE46AED89C757C78F4A31B6C9.mft
File:                     668937F037AEFCAEE46AED89C757C78F4A31B6C9.mft (raw, json)
Hash identifier:          C62hWXZGzFIRW6FldTanqvYwLCK6Pc1aw/HtXukhzp4=
Subject key identifier:   40:E7:0A:57:DA:FB:47:64:2C:C7:B8:1B:09:52:A5:7B:05:B3:2A:86
Authority key identifier: 66:89:37:F0:37:AE:FC:AE:E4:6A:ED:89:C7:57:C7:8F:4A:31:B6:C9
Certificate issuer:       /CN=668937F037AEFCAEE46AED89C757C78F4A31B6C9
Certificate serial:       39D3419E52017A212422E0F20247C0E3D503E483
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/668937F037AEFCAEE46AED89C757C78F4A31B6C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATPVmXwY6zqHTYx5AuztY1wd7ZYWk3sazUnwx4oQyhny/0/668937F037AEFCAEE46AED89C757C78F4A31B6C9.mft
Manifest number:          0157
Signing time:             Mon 15 Apr 2024 08:15:54 +0000
Manifest this update:     Mon 15 Apr 2024 08:10:54 +0000
Manifest next update:     Tue 16 Apr 2024 08:41:54 +0000
Files and hashes:         1: 3230312e3134302e3233362e302f32322d3234203d3e20323636313438.roa (hash: k13ERrdpOCghBl8HNUdiYYpgDhPoiquAL25L8Hsuhwk=)
                          2: 323830343a336236633a3a2f33322d3334203d3e20323636313438.roa (hash: D4bCrX8C5EsbvvglF0KlJQhOX8TyfnIdNhN8lXvquj0=)
                          3: 668937F037AEFCAEE46AED89C757C78F4A31B6C9.crl (hash: j8rs687tLb74WQRB/W3/sd98OQg05nFV3gjb07Fh43E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:d3:41:9e:52:01:7a:21:24:22:e0:f2:02:47:c0:e3:d5:03:e4:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=668937F037AEFCAEE46AED89C757C78F4A31B6C9
        Validity
            Not Before: Apr 15 08:10:54 2024 GMT
            Not After : Apr 16 08:41:54 2024 GMT
        Subject: CN=40E70A57DAFB47642CC7B81B0952A57B05B32A86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:48:07:1b:e7:ae:df:82:b3:16:5c:4c:e8:b2:
                    fa:e0:7c:23:06:a0:6d:6e:1b:d8:1c:08:16:20:56:
                    b3:83:ee:bb:ae:c2:f2:9d:e9:31:e8:bf:71:3d:07:
                    02:cd:d0:f6:be:0a:f5:b2:20:e9:a2:ee:af:ff:1c:
                    a7:8b:8b:94:75:00:0f:8e:a0:92:62:2d:58:44:01:
                    95:e8:86:40:8b:7d:61:1c:63:2c:fd:b1:19:2b:8e:
                    e3:aa:b6:4f:98:e6:d1:34:bc:89:9d:bf:c3:07:31:
                    1d:3e:ed:13:6d:4b:2c:48:99:3c:e8:3d:7d:95:8f:
                    b3:9b:ce:d0:32:ca:64:1c:60:ed:b2:b7:d7:ad:c4:
                    4f:f9:65:89:2d:89:f9:f9:9b:e3:0c:10:e3:bf:58:
                    a0:4c:40:99:53:f0:aa:fa:e0:bd:d3:f2:5b:34:2a:
                    06:f1:60:80:52:63:d4:8a:ad:80:bc:d8:3c:86:4d:
                    51:e4:3b:49:81:98:51:46:f5:b4:78:d7:37:97:18:
                    34:56:1f:1f:85:31:5c:ff:c4:12:bf:51:09:6b:81:
                    3c:4c:52:24:1c:8b:20:72:81:1d:d1:6c:2d:0e:59:
                    c7:9d:70:a0:09:95:77:ad:33:86:7d:a2:bd:65:05:
                    90:46:46:e6:09:2d:42:1e:e5:3c:66:5a:41:d9:ba:
                    5d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E7:0A:57:DA:FB:47:64:2C:C7:B8:1B:09:52:A5:7B:05:B3:2A:86
            X509v3 Authority Key Identifier:
                keyid:66:89:37:F0:37:AE:FC:AE:E4:6A:ED:89:C7:57:C7:8F:4A:31:B6:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATPVmXwY6zqHTYx5AuztY1wd7ZYWk3sazUnwx4oQyhny/0/668937F037AEFCAEE46AED89C757C78F4A31B6C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/668937F037AEFCAEE46AED89C757C78F4A31B6C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATPVmXwY6zqHTYx5AuztY1wd7ZYWk3sazUnwx4oQyhny/0/668937F037AEFCAEE46AED89C757C78F4A31B6C9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:04:40:2b:22:21:a0:32:3b:89:39:dd:29:7d:52:3b:cb:4a:
         de:6b:ad:db:06:7d:45:f5:7c:36:53:ad:37:5b:50:91:66:e2:
         5b:93:74:bf:5e:c3:ad:69:c9:0a:7a:3d:a3:20:11:1e:65:57:
         8e:fb:d3:45:b6:8b:cb:1e:1b:f4:2e:e2:dc:ce:23:a8:35:66:
         95:30:e4:53:48:09:25:ab:52:19:e8:6d:59:8f:cb:1f:c3:fe:
         6c:c8:25:e2:27:18:b7:e4:55:e0:e8:88:c6:bd:66:48:70:3b:
         08:37:70:da:93:de:b7:0b:92:fb:9f:b8:b1:5d:36:6a:56:7e:
         d8:6d:37:8d:c6:16:ec:62:c7:5e:c5:11:fb:40:1c:6a:1c:93:
         47:e3:10:13:aa:82:1a:1a:09:0d:8c:58:10:4d:d9:cb:10:a7:
         f1:38:cb:6c:3f:e9:3a:a2:74:e9:c2:ef:a6:6a:ad:d6:54:9b:
         f4:a0:c7:0f:a8:94:f6:32:8f:3c:5b:2c:22:72:36:5c:be:55:
         57:42:25:f3:34:ef:91:cb:c0:7a:1f:e3:15:0e:2c:5a:8c:75:
         88:f5:4b:ea:1e:f6:96:d8:fc:6c:16:13:a1:44:92:8d:37:c8:
         3b:64:45:1f:dd:11:01:c5:14:ec:68:4b:4e:31:82:2c:54:f5:
         29:86:fb:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----