Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/B7D95016B720FE7ECA7F19DD5EAE4BBA4BFB5E1B.mft
File:                     B7D95016B720FE7ECA7F19DD5EAE4BBA4BFB5E1B.mft (raw, json)
Hash identifier:          ce7l1n94mqz2BsK+VKQ2M1P42HJLn+9lHBNq5wvCHPs=
Subject key identifier:   0B:90:CD:72:99:59:21:A3:41:02:2C:0B:63:CC:EC:F1:1B:A1:7A:32
Authority key identifier: B7:D9:50:16:B7:20:FE:7E:CA:7F:19:DD:5E:AE:4B:BA:4B:FB:5E:1B
Certificate issuer:       /CN=B7D95016B720FE7ECA7F19DD5EAE4BBA4BFB5E1B
Certificate serial:       7BC3D8DE180F1CB0579C42D53D9E191F956B0B21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7D95016B720FE7ECA7F19DD5EAE4BBA4BFB5E1B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/B7D95016B720FE7ECA7F19DD5EAE4BBA4BFB5E1B.mft
Manifest number:          44
Signing time:             Thu 11 Jul 2024 08:22:59 +0000
Manifest this update:     Thu 11 Jul 2024 08:17:59 +0000
Manifest next update:     Fri 12 Jul 2024 11:58:59 +0000
Files and hashes:         1: B7D95016B720FE7ECA7F19DD5EAE4BBA4BFB5E1B.crl (hash: tJub2nUc4knXA95Dcv+r1QMcXjcwwKor7aA63rlUbds=)
                          2: 3139312e3234322e3233322e302f32312d3234203d3e20323633343834.roa (hash: 3GzHtlifWOmrwKHods+Lkwf1uUtKvzoLLYX5FZeoDQc=)
                          3: 323830343a313239303a3a2f33322d3334203d3e20323633343834.roa (hash: +5HjlLV141zth6ekpGOsk59K/EiXPefi/fdIcoNzeQw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:c3:d8:de:18:0f:1c:b0:57:9c:42:d5:3d:9e:19:1f:95:6b:0b:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7D95016B720FE7ECA7F19DD5EAE4BBA4BFB5E1B
        Validity
            Not Before: Jul 11 08:17:59 2024 GMT
            Not After : Jul 12 11:58:59 2024 GMT
        Subject: CN=0B90CD72995921A341022C0B63CCECF11BA17A32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5e:27:cb:22:27:47:74:c6:09:dc:86:28:14:
                    e5:df:fb:0e:24:16:58:22:db:63:35:b7:32:30:2f:
                    5f:a1:a3:f1:15:e3:5c:63:a7:90:d1:15:bc:da:11:
                    40:d8:aa:f3:4c:02:cf:61:a1:a6:5f:5f:a0:0d:af:
                    a0:78:3c:f0:38:06:f1:70:7d:a7:b4:57:d2:c3:9b:
                    ff:90:ac:6c:5b:72:23:ec:85:49:0d:52:10:53:38:
                    60:c1:ac:6f:f2:e0:b5:e2:09:f3:af:fa:40:63:4b:
                    af:3d:a8:2b:a2:5d:25:aa:d9:08:20:e5:54:aa:40:
                    58:15:13:38:c5:c0:23:b1:2a:b5:80:78:f3:5e:21:
                    58:0c:63:b9:c7:37:5c:e8:5a:a5:6d:36:16:2e:75:
                    18:bd:0b:3e:8c:1c:44:2a:97:d8:49:0e:4f:22:c4:
                    61:86:c6:d3:c7:bb:35:e5:55:0e:3f:ee:06:76:20:
                    d8:c4:a5:46:65:78:df:f9:7e:e2:9c:e9:bd:53:e0:
                    2b:ee:45:ff:cb:d6:01:9f:a5:61:0b:75:c8:b8:bf:
                    f9:b8:5f:ab:f1:7d:a7:9b:f0:d0:79:37:d8:e2:d1:
                    9d:0d:6e:4a:95:f0:0b:bf:92:18:54:13:ac:11:73:
                    94:d8:d4:4f:ac:51:73:ea:da:42:77:63:5d:a6:0f:
                    dd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:90:CD:72:99:59:21:A3:41:02:2C:0B:63:CC:EC:F1:1B:A1:7A:32
            X509v3 Authority Key Identifier:
                keyid:B7:D9:50:16:B7:20:FE:7E:CA:7F:19:DD:5E:AE:4B:BA:4B:FB:5E:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/B7D95016B720FE7ECA7F19DD5EAE4BBA4BFB5E1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7D95016B720FE7ECA7F19DD5EAE4BBA4BFB5E1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/B7D95016B720FE7ECA7F19DD5EAE4BBA4BFB5E1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:6a:b9:8a:16:a6:b3:c3:eb:79:14:51:a5:1e:a4:cc:ad:98:
         ce:ab:a8:39:5e:89:c3:09:b2:10:cf:81:a8:80:85:0a:2d:02:
         c8:f5:df:e7:fc:0b:2a:2f:2e:5d:27:58:e3:a9:88:66:86:c7:
         d3:32:16:53:81:70:14:23:06:8f:fa:ef:77:a6:d8:67:b8:be:
         0e:78:38:a4:69:db:d4:1a:38:30:70:82:bc:1f:df:f6:1f:e3:
         54:4a:7f:83:d2:48:5a:d6:94:c8:7e:61:dc:0a:ec:1d:79:c1:
         00:a6:9b:d1:34:0d:87:d5:6b:ee:1b:35:1d:9c:03:96:4e:dd:
         b2:5a:f0:43:92:45:3b:69:9d:7b:19:f1:df:bb:85:6d:9d:14:
         16:16:5b:23:4b:ad:59:4f:01:cd:6e:96:30:9c:5e:52:14:99:
         ef:f3:fd:ed:8c:13:2a:ae:bf:a2:0b:fd:91:d0:c1:49:05:63:
         6a:ae:9a:be:1b:6c:5b:33:f7:85:48:0c:d1:d3:0d:ec:79:03:
         aa:fa:40:7a:f7:ef:32:4d:ef:98:05:22:2e:35:30:df:c5:c6:
         ce:f3:07:6c:7b:46:b4:13:93:63:3d:9c:64:03:cc:72:90:95:
         21:f3:99:c7:61:e7:b8:67:7d:9a:b7:74:30:e3:fc:4d:d7:23:
         e5:78:d0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----