Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/7DFF427372CF9267D0C32ECF96D46120B0C379E1.mft
File:                     7DFF427372CF9267D0C32ECF96D46120B0C379E1.mft (raw, json)
Hash identifier:          ovrzPsEL7FASZWdem53eAXz0UOJIgWwsplp5+wEmV44=
Subject key identifier:   EA:E9:E3:C9:79:55:18:11:FE:63:FE:80:DC:3A:FC:DF:55:5F:99:92
Authority key identifier: 7D:FF:42:73:72:CF:92:67:D0:C3:2E:CF:96:D4:61:20:B0:C3:79:E1
Certificate issuer:       /CN=7DFF427372CF9267D0C32ECF96D46120B0C379E1
Certificate serial:       3CC79BFC772EA05DC049BB84D7677630978279E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7DFF427372CF9267D0C32ECF96D46120B0C379E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/7DFF427372CF9267D0C32ECF96D46120B0C379E1.mft
Manifest number:          87
Signing time:             Thu 22 Feb 2024 01:43:08 +0000
Manifest this update:     Thu 22 Feb 2024 01:38:08 +0000
Manifest next update:     Fri 23 Feb 2024 04:21:08 +0000
Files and hashes:         1: 323830343a353061383a3a2f33322d3336203d3e20323638343032.roa (hash: WmxsvLGM8SDo9J0w8+YTiGy+aaUu6cntCsJeaVpY6R0=)
                          2: 7DFF427372CF9267D0C32ECF96D46120B0C379E1.crl (hash: mzCt11V/UFZhlLxVfwt62OhGjtEEJ3YOQSpogCvMsec=)
                          3: 34352e3136302e31362e302f32322d3234203d3e20323638343032.roa (hash: V3Fw66sCSGUUYrCMpLTIj0oFm746yZuHWLngviatZdg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:c7:9b:fc:77:2e:a0:5d:c0:49:bb:84:d7:67:76:30:97:82:79:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DFF427372CF9267D0C32ECF96D46120B0C379E1
        Validity
            Not Before: Feb 22 01:38:08 2024 GMT
            Not After : Feb 23 04:21:08 2024 GMT
        Subject: CN=EAE9E3C979551811FE63FE80DC3AFCDF555F9992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b2:8c:7a:1c:46:73:ca:98:cd:ea:6f:28:14:
                    30:a1:4b:0c:9f:fe:70:6a:36:c2:89:81:b7:f2:20:
                    ac:de:57:03:52:62:1f:25:3e:3d:47:69:b2:0c:0f:
                    b4:65:3d:4a:8e:10:9e:f5:1e:fa:f9:26:88:42:82:
                    50:ca:c2:85:82:b1:9d:29:19:88:ef:d8:07:5b:fe:
                    ed:02:fb:22:f5:e6:d3:af:ee:88:62:ee:c2:5a:87:
                    35:4f:0a:31:4b:3a:93:30:fb:db:88:c0:f8:36:a9:
                    7c:e0:ff:53:78:12:f7:dd:64:ff:72:e2:47:5e:3c:
                    5a:87:7a:5b:22:81:89:8e:63:78:c9:f3:de:1e:41:
                    49:df:bf:59:1b:ac:11:ad:01:5b:a6:d6:19:cf:77:
                    44:9a:ea:d9:4f:59:65:03:ca:11:36:29:0f:94:e8:
                    70:91:44:64:6a:39:bb:5c:08:c3:96:83:77:7d:30:
                    64:9d:b2:b8:af:e0:28:52:84:8a:e6:67:7e:d0:74:
                    fc:29:a0:b3:01:b2:36:90:94:13:4e:ed:1d:f3:d9:
                    ae:7e:a6:a7:ba:06:5c:44:37:13:b5:89:60:dd:9f:
                    30:33:f0:71:ac:4d:b0:5c:c7:19:c5:34:a2:51:4f:
                    29:e9:8a:d5:c0:3a:b8:3a:b2:d8:7c:08:de:bc:91:
                    cd:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E9:E3:C9:79:55:18:11:FE:63:FE:80:DC:3A:FC:DF:55:5F:99:92
            X509v3 Authority Key Identifier:
                keyid:7D:FF:42:73:72:CF:92:67:D0:C3:2E:CF:96:D4:61:20:B0:C3:79:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/7DFF427372CF9267D0C32ECF96D46120B0C379E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7DFF427372CF9267D0C32ECF96D46120B0C379E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/7DFF427372CF9267D0C32ECF96D46120B0C379E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:21:e7:5c:20:b9:cc:b7:d1:1b:46:c8:e1:54:2e:bf:b0:72:
         93:2e:8a:15:15:fc:09:cc:47:fe:26:4e:24:71:8f:14:3c:42:
         27:c5:fe:33:36:23:8f:60:3e:ec:46:6e:33:ae:5f:d4:f8:7d:
         37:38:a6:f0:1d:90:be:5b:72:d2:c0:df:33:9c:dc:e7:6a:78:
         41:98:a0:d1:02:a2:66:56:3f:0b:cb:72:02:6d:c1:b1:95:3a:
         97:c8:e0:01:8d:ec:64:de:88:54:84:d4:59:1a:87:17:56:83:
         c8:92:ff:a2:a8:95:b6:70:9a:f5:1c:d1:2c:67:54:fb:c9:74:
         1c:6d:b4:aa:b3:62:93:53:09:52:22:5d:d6:26:92:05:f9:d4:
         90:89:d9:fe:90:dc:cb:fe:71:e0:36:6b:2c:88:64:63:19:62:
         d0:ff:19:f8:fc:fc:ff:e2:e3:21:84:95:9f:79:2d:f7:95:ea:
         fe:3a:24:3a:36:2b:aa:fa:bf:40:c9:e6:61:9f:25:3c:22:34:
         f8:56:6e:06:87:29:97:51:5a:e2:ef:55:5a:6c:b8:3d:f8:20:
         b8:f9:79:3e:7c:1a:2d:6a:71:94:b9:e5:63:81:17:a9:24:ca:
         75:94:7d:6a:a6:e2:13:a1:2d:57:72:92:87:f0:f4:ff:7b:91:
         a4:17:72:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----