Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/157A1AA878EF7E6D1D534328AAB6FD833E1DBE6A.mft
File:                     157A1AA878EF7E6D1D534328AAB6FD833E1DBE6A.mft (raw, json)
Hash identifier:          CCUw69Y0027sSzCytqdhJ4eJZcMze50uG81UuiM3FQM=
Subject key identifier:   C1:09:64:40:F0:04:D2:B8:E0:A8:18:E9:CF:D7:EC:40:18:64:7A:35
Authority key identifier: 15:7A:1A:A8:78:EF:7E:6D:1D:53:43:28:AA:B6:FD:83:3E:1D:BE:6A
Certificate issuer:       /CN=157A1AA878EF7E6D1D534328AAB6FD833E1DBE6A
Certificate serial:       2D5494DB6CB114F548CCC86400FD497988AB6152
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/157A1AA878EF7E6D1D534328AAB6FD833E1DBE6A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/157A1AA878EF7E6D1D534328AAB6FD833E1DBE6A.mft
Manifest number:          1F
Signing time:             Wed 03 Jul 2024 21:57:02 +0000
Manifest this update:     Wed 03 Jul 2024 21:52:02 +0000
Manifest next update:     Fri 05 Jul 2024 00:57:02 +0000
Files and hashes:         1: 34352e3136302e31362e302f32322d3234203d3e20323638343032.roa (hash: zUVD+q83Xr3C81mSu5CU2CCyziwtoM9b/50aqf/VXWY=)
                          2: 323830343a353061383a3a2f33322d3336203d3e20323638343032.roa (hash: Zh65QpeEE39skyIbjmRqQJ9YqPWX5AbfoJGLnTufNHE=)
                          3: 157A1AA878EF7E6D1D534328AAB6FD833E1DBE6A.crl (hash: 2KpFf5oTpXzduF1NoGkPzmowt03j9t0+PQE/XlAMGcw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:54:94:db:6c:b1:14:f5:48:cc:c8:64:00:fd:49:79:88:ab:61:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=157A1AA878EF7E6D1D534328AAB6FD833E1DBE6A
        Validity
            Not Before: Jul  3 21:52:02 2024 GMT
            Not After : Jul  5 00:57:02 2024 GMT
        Subject: CN=C1096440F004D2B8E0A818E9CFD7EC4018647A35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:0a:f1:ce:bb:c5:13:0b:4a:4f:b2:b3:f9:00:
                    2f:14:68:e9:3a:06:87:32:d8:55:77:62:6a:7c:6a:
                    2d:74:75:af:2d:44:34:cd:17:07:b4:d7:a7:dd:c6:
                    d8:9e:05:97:08:44:eb:7a:c2:f6:6b:d4:1b:5f:99:
                    ae:40:43:0e:dc:45:17:c4:00:fe:c1:c5:8d:30:bc:
                    88:38:ed:63:3a:e2:67:51:56:83:65:62:56:7f:72:
                    19:f0:52:65:81:a8:32:7b:53:1e:b8:cf:cc:79:a7:
                    64:7e:9c:1b:cf:71:d4:36:eb:11:5e:d4:6a:e2:6f:
                    8a:a3:61:46:a2:54:06:36:32:50:fb:e5:f0:12:db:
                    c3:47:db:3b:29:99:0f:1a:a0:83:01:22:79:10:d5:
                    6d:96:4d:5b:d8:b8:66:97:e1:e0:f1:fb:24:6d:80:
                    92:f1:7d:50:fe:c5:09:19:11:f7:ba:f8:f7:b3:f6:
                    c6:ad:3f:79:b1:fb:bb:10:d0:9e:9f:4d:b4:0f:19:
                    bf:2b:50:8b:31:e9:4c:e9:c4:6e:3f:bd:0e:8c:2e:
                    7f:59:22:fd:8f:1f:be:e0:ef:c9:62:7d:50:af:72:
                    fc:6f:82:79:eb:38:77:16:d5:0e:89:e1:66:2a:90:
                    51:cb:d1:57:2e:20:f9:f0:99:44:22:e3:3c:14:02:
                    c6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:09:64:40:F0:04:D2:B8:E0:A8:18:E9:CF:D7:EC:40:18:64:7A:35
            X509v3 Authority Key Identifier:
                keyid:15:7A:1A:A8:78:EF:7E:6D:1D:53:43:28:AA:B6:FD:83:3E:1D:BE:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/157A1AA878EF7E6D1D534328AAB6FD833E1DBE6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/157A1AA878EF7E6D1D534328AAB6FD833E1DBE6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/157A1AA878EF7E6D1D534328AAB6FD833E1DBE6A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:d6:09:54:75:22:91:f5:63:73:e4:8a:5f:0f:70:68:d9:d5:
         55:31:bf:a7:a6:fb:ad:eb:2a:da:d3:41:2d:d2:a4:b7:81:0a:
         e6:ea:fe:3f:4e:82:39:b2:a9:0b:38:69:fa:f2:65:61:3a:9f:
         e5:d1:e1:02:e1:c0:f6:73:62:9d:0c:0b:b9:58:23:25:e6:e8:
         72:68:81:4f:ba:36:91:39:bf:3c:c5:e2:92:23:91:05:da:2b:
         18:f1:31:87:27:82:f3:32:f4:5f:65:f0:04:a4:14:f0:ed:4e:
         54:6c:a9:ca:7c:d6:9a:bd:7a:2f:27:0d:5b:4c:81:30:86:63:
         68:2f:92:8c:fa:09:ff:14:3b:18:30:43:cc:14:a7:66:86:eb:
         00:41:98:7c:ba:eb:6d:fb:47:57:4b:80:cc:54:c3:c0:2b:2b:
         51:5d:3a:52:bb:a6:ca:21:97:15:6d:02:9a:e0:f0:5c:2e:14:
         c7:fa:9e:f4:d7:c7:a9:db:15:77:d6:67:17:26:48:d4:94:d2:
         08:f0:df:79:19:bc:fb:1b:19:f1:98:5e:c4:32:2f:e2:b3:89:
         0e:fa:30:f5:ca:fe:4c:95:35:76:0d:0d:df:4b:66:61:05:c5:
         e6:cf:d7:4d:f0:dc:78:60:15:21:4d:93:0e:e5:11:79:32:6b:
         5d:66:9b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 21:15:23 2024 by rpki-client on console-fra.rpki-client.org