Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ax3sGfduTBhgk2muSHiAccSTThuASzZLZ9JFTY1Law7m/0/7979B5C5D5EF0988CC5D8FF5F80CFBEAADBF96BA.mft
File:                     7979B5C5D5EF0988CC5D8FF5F80CFBEAADBF96BA.mft (raw, json)
Hash identifier:          1zwsoE/TiCvT6rqoDB2b8jmLG7c+gMUpATowGR4bvnY=
Subject key identifier:   AA:BF:98:94:B8:55:65:18:BA:88:38:1C:4B:36:FA:F9:B3:55:B7:75
Authority key identifier: 79:79:B5:C5:D5:EF:09:88:CC:5D:8F:F5:F8:0C:FB:EA:AD:BF:96:BA
Certificate issuer:       /CN=7979B5C5D5EF0988CC5D8FF5F80CFBEAADBF96BA
Certificate serial:       19A9171D18EE7B0A90E18AC9DCB03F9EA17DC9A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7979B5C5D5EF0988CC5D8FF5F80CFBEAADBF96BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ax3sGfduTBhgk2muSHiAccSTThuASzZLZ9JFTY1Law7m/0/7979B5C5D5EF0988CC5D8FF5F80CFBEAADBF96BA.mft
Manifest number:          66
Signing time:             Mon 15 Apr 2024 10:32:31 +0000
Manifest this update:     Mon 15 Apr 2024 10:27:31 +0000
Manifest next update:     Tue 16 Apr 2024 13:07:31 +0000
Files and hashes:         1: 34352e362e3234342e302f32322d3234203d3e20323731303738.roa (hash: Q4pIZ7K8fE+pJiRL0D8r2TU31Y3AYZeoAbcipc1YzXM=)
                          2: 7979B5C5D5EF0988CC5D8FF5F80CFBEAADBF96BA.crl (hash: xi85h7f1ElHmpVlRj7vyutmCi0jox+oHVTDJb8rkWHY=)
                          3: 323830343a373565633a3a2f33322d3536203d3e20323731303738.roa (hash: qk8o3f2hSatL8YKvhIJv579smNMUEMKae0UFJT5x8Hc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:a9:17:1d:18:ee:7b:0a:90:e1:8a:c9:dc:b0:3f:9e:a1:7d:c9:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7979B5C5D5EF0988CC5D8FF5F80CFBEAADBF96BA
        Validity
            Not Before: Apr 15 10:27:31 2024 GMT
            Not After : Apr 16 13:07:31 2024 GMT
        Subject: CN=AABF9894B8556518BA88381C4B36FAF9B355B775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e9:4e:47:5b:2f:cf:5b:6d:70:62:b4:d6:60:
                    3a:80:ef:73:7c:84:7f:c2:22:15:9a:00:f8:d9:f0:
                    74:23:aa:8b:e2:7a:eb:91:9e:2d:80:1a:87:bb:0e:
                    cb:3c:2b:f3:a8:c2:46:a7:2e:3c:7f:1e:1d:ca:0a:
                    c9:6d:33:11:24:01:83:07:bf:29:b6:04:42:3d:fd:
                    aa:4a:09:c3:5c:f9:4f:a9:7c:6f:44:73:35:17:80:
                    dd:1c:a0:96:c2:70:a0:e2:42:7b:bb:fa:e4:ef:59:
                    09:ce:15:c2:37:35:87:74:dc:f0:c5:ec:58:28:24:
                    94:87:68:cf:74:37:6b:b2:a4:36:cc:aa:d0:fe:32:
                    69:6f:cc:58:51:4f:29:3d:0b:0c:14:24:be:82:06:
                    37:60:84:5e:56:f6:23:e4:6f:05:ac:88:2e:39:a0:
                    f8:d2:47:d8:4d:95:03:4f:60:34:89:ae:99:ba:0f:
                    09:83:3a:b4:cf:5c:d8:0d:ca:9a:8e:73:45:0d:bd:
                    b3:2a:df:a9:0e:d6:d7:c5:30:a2:3b:a0:be:c5:53:
                    67:f2:2a:32:c5:70:0b:9c:2e:6e:7f:72:9b:e0:20:
                    fa:b1:c2:5c:e0:99:aa:5d:04:de:dd:c6:ee:07:e5:
                    6a:c1:08:36:ba:16:05:97:fe:25:0d:01:be:e7:e8:
                    33:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:BF:98:94:B8:55:65:18:BA:88:38:1C:4B:36:FA:F9:B3:55:B7:75
            X509v3 Authority Key Identifier:
                keyid:79:79:B5:C5:D5:EF:09:88:CC:5D:8F:F5:F8:0C:FB:EA:AD:BF:96:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ax3sGfduTBhgk2muSHiAccSTThuASzZLZ9JFTY1Law7m/0/7979B5C5D5EF0988CC5D8FF5F80CFBEAADBF96BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7979B5C5D5EF0988CC5D8FF5F80CFBEAADBF96BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ax3sGfduTBhgk2muSHiAccSTThuASzZLZ9JFTY1Law7m/0/7979B5C5D5EF0988CC5D8FF5F80CFBEAADBF96BA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:f8:9d:e9:51:26:59:aa:e0:72:c1:e4:4c:1f:23:62:c9:d3:
         8f:37:cf:e9:46:76:9a:06:95:67:c4:cd:22:8e:f1:11:07:ac:
         87:0f:47:91:5e:26:ce:7a:af:de:3b:06:cb:93:17:c8:b9:cc:
         6f:8c:ea:e0:9d:b6:01:64:c2:a1:b4:23:c8:79:94:ca:45:7c:
         34:bf:41:15:a2:6f:0b:01:6e:15:4d:b0:9a:a6:78:51:03:82:
         06:1d:52:31:84:bf:91:40:a5:ac:7d:0d:e5:b0:94:4c:ef:f9:
         11:3c:f1:f5:d1:14:a8:32:38:80:dc:26:58:00:1e:2f:6b:68:
         f0:55:50:40:a1:59:91:45:cb:49:84:a4:80:e9:dd:9a:bf:b1:
         0b:3f:a7:4b:02:ee:f0:78:15:f8:a1:72:2b:0c:2c:c5:ce:89:
         30:e1:2b:21:1b:4b:2d:f2:e2:c8:df:49:2f:26:4e:b7:a3:50:
         0d:97:06:1c:f2:2d:52:27:80:9a:17:6b:5f:a8:23:5f:23:ce:
         47:56:7c:80:89:19:09:a7:dd:0f:e0:11:63:e2:12:cd:f5:b3:
         bf:15:8f:45:e0:5b:b0:2d:71:77:a6:03:b4:d8:93:1f:f1:d1:
         6c:f8:34:93:9e:d2:e9:56:9b:70:13:b5:f9:7e:27:6d:d1:5e:
         e2:e6:08:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----