Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/7E99CA814A6D62B66266BB747FA150A56BDE8657.mft
File:                     7E99CA814A6D62B66266BB747FA150A56BDE8657.mft (raw, json)
Hash identifier:          1El8dC8seEQeMz4A9zaKWtdsQttv6gV33BK0vfi6kPY=
Subject key identifier:   2A:89:B2:8C:6E:3A:5B:F8:ED:F0:69:BC:B9:07:FF:DE:6D:5E:C6:CE
Authority key identifier: 7E:99:CA:81:4A:6D:62:B6:62:66:BB:74:7F:A1:50:A5:6B:DE:86:57
Certificate issuer:       /CN=7E99CA814A6D62B66266BB747FA150A56BDE8657
Certificate serial:       3F996884A5264A04220B8047FD504F00BD4447EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E99CA814A6D62B66266BB747FA150A56BDE8657.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/7E99CA814A6D62B66266BB747FA150A56BDE8657.mft
Manifest number:          49
Signing time:             Sun 14 Apr 2024 18:53:33 +0000
Manifest this update:     Sun 14 Apr 2024 18:48:33 +0000
Manifest next update:     Mon 15 Apr 2024 19:56:33 +0000
Files and hashes:         1: 34352e342e3132342e302f32322d3332203d3e20323636303636.roa (hash: dX53MDDU3MY3ImmlbFkCvZY21NY5Kbh6a51WfiVcrCI=)
                          2: 7E99CA814A6D62B66266BB747FA150A56BDE8657.crl (hash: cM2QBlY1nIuiERbhzeouRLkrjwtSBQlDlGYJ4ICP0Eg=)
                          3: 323830343a336130383a3a2f33322d313238203d3e20323636303636.roa (hash: 5YdjV8Y/pauNZ+Vukb6mPF1BVuKlWZIWSGN9jbxcMXY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:99:68:84:a5:26:4a:04:22:0b:80:47:fd:50:4f:00:bd:44:47:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E99CA814A6D62B66266BB747FA150A56BDE8657
        Validity
            Not Before: Apr 14 18:48:33 2024 GMT
            Not After : Apr 15 19:56:33 2024 GMT
        Subject: CN=2A89B28C6E3A5BF8EDF069BCB907FFDE6D5EC6CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:02:7b:ec:0f:e5:75:42:5e:b2:bc:9c:13:eb:
                    b2:d2:2f:c8:62:b6:f9:db:e6:9a:ca:c0:6d:7a:af:
                    2f:a2:e3:d5:8b:22:48:ff:57:f2:ee:1c:99:f6:e5:
                    fb:32:36:69:ea:6b:e3:a2:66:92:cf:b9:82:f3:72:
                    f6:e7:94:2f:23:35:5c:72:92:34:08:f1:75:3f:1f:
                    01:a2:60:4e:59:67:db:6c:5c:fc:5e:83:86:6c:40:
                    8c:47:71:b0:5b:98:38:47:4b:8e:12:6b:f2:f7:c9:
                    80:9f:12:39:19:44:05:d2:42:bc:6c:c2:cb:fa:d0:
                    6b:5d:3f:78:ba:b0:a1:11:ef:15:ab:1f:c6:68:19:
                    d0:27:9c:a1:1b:0e:9a:f5:52:1d:77:0c:aa:3d:19:
                    95:12:6d:4d:37:a3:ea:b6:30:25:bc:46:b6:e6:fc:
                    ff:6b:18:3a:1d:e1:4f:67:be:4e:f7:5a:f4:f9:62:
                    f9:3a:f9:2f:8f:48:2c:67:9f:2b:06:a2:66:ab:fa:
                    ca:ef:c0:b2:90:c9:f1:69:f8:69:dc:99:84:32:0f:
                    84:43:2f:3a:3c:41:bd:de:d1:ae:4e:4a:5a:3f:f3:
                    31:2c:cf:2f:6f:da:31:d6:b6:11:b9:fa:f3:1f:ff:
                    96:04:a1:5c:e1:87:06:04:e8:be:43:e8:99:0c:ef:
                    72:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:89:B2:8C:6E:3A:5B:F8:ED:F0:69:BC:B9:07:FF:DE:6D:5E:C6:CE
            X509v3 Authority Key Identifier:
                keyid:7E:99:CA:81:4A:6D:62:B6:62:66:BB:74:7F:A1:50:A5:6B:DE:86:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/7E99CA814A6D62B66266BB747FA150A56BDE8657.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E99CA814A6D62B66266BB747FA150A56BDE8657.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/7E99CA814A6D62B66266BB747FA150A56BDE8657.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:95:e8:8e:4c:a2:72:04:fa:ce:5b:78:ed:bf:98:18:f3:ae:
         f2:08:98:9c:ef:a6:29:4b:14:1f:c7:70:61:50:06:0f:36:39:
         a4:49:be:4e:e0:a7:21:70:4e:f1:98:35:1b:71:ca:13:d6:2c:
         40:b6:39:f0:a5:72:0e:49:7b:f3:d1:c0:c4:aa:83:22:e2:2f:
         4e:6b:37:c9:2e:64:50:14:e4:d7:d0:2e:83:52:70:45:4b:c4:
         3d:3a:5f:22:62:ef:fd:56:86:ad:a1:87:73:8b:9a:3e:ac:c4:
         5c:8a:ba:9f:60:d2:8e:7f:27:f6:eb:a9:14:b2:89:3b:25:19:
         98:16:6a:d3:a9:e2:72:8c:9a:7f:f0:9f:d0:45:3f:e9:b5:0b:
         8f:49:8b:4e:7d:a9:57:2a:6c:7d:3a:e0:d8:e7:96:16:51:2c:
         71:f2:13:24:a4:35:e3:04:b5:41:4f:b0:b6:38:ab:a2:b8:4b:
         14:7c:b7:f2:05:8f:06:d3:d5:1b:f1:a1:42:54:e1:60:5a:25:
         04:fc:6f:be:92:b1:eb:ad:db:f6:22:72:5e:3c:d9:bc:fd:d1:
         03:bc:df:a3:47:f2:55:a8:8c:5c:0f:06:18:87:4b:07:55:7a:
         db:b4:ae:33:ce:2d:31:48:26:d0:ae:91:a4:09:af:46:d5:b7:
         53:f5:36:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----