Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/7A0953BD58B8C434DA48A1143F71B91212A5614B.mft
File:                     7A0953BD58B8C434DA48A1143F71B91212A5614B.mft (raw, json)
Hash identifier:          rFGTZQByJLkL+FIY3sfz7CVNQtjHiIGATYXflyA/88U=
Subject key identifier:   1C:AF:F4:72:E3:1C:54:17:5C:C1:50:99:58:CC:48:B6:21:7F:54:E4
Authority key identifier: 7A:09:53:BD:58:B8:C4:34:DA:48:A1:14:3F:71:B9:12:12:A5:61:4B
Certificate issuer:       /CN=7A0953BD58B8C434DA48A1143F71B91212A5614B
Certificate serial:       695BFE93C370ABEBE41C24A9C9C9E99F8ED27D4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A0953BD58B8C434DA48A1143F71B91212A5614B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/7A0953BD58B8C434DA48A1143F71B91212A5614B.mft
Manifest number:          3D
Signing time:             Mon 15 Apr 2024 08:04:51 +0000
Manifest this update:     Mon 15 Apr 2024 07:59:51 +0000
Manifest next update:     Tue 16 Apr 2024 09:22:51 +0000
Files and hashes:         1: 3133382e39372e3139362e302f32322d3332203d3e20323634313935.roa (hash: iP7f1Y5B1sial1ySSLEv84z3TEfIVhsiDJzB8T1emZY=)
                          2: 323830343a323430303a3a2f33322d313238203d3e20323634313935.roa (hash: l8GuleAWIYF0BuS8m92zHdPkmWaYEdCSSb/lcgi5I2I=)
                          3: 7A0953BD58B8C434DA48A1143F71B91212A5614B.crl (hash: ZuxyrgoJBcKqMMjpjNrH4WsnPH6/Lx/n5abZ/cL9NH8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:5b:fe:93:c3:70:ab:eb:e4:1c:24:a9:c9:c9:e9:9f:8e:d2:7d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A0953BD58B8C434DA48A1143F71B91212A5614B
        Validity
            Not Before: Apr 15 07:59:51 2024 GMT
            Not After : Apr 16 09:22:51 2024 GMT
        Subject: CN=1CAFF472E31C54175CC1509958CC48B6217F54E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f0:5c:8c:81:e6:43:9f:b9:17:43:9e:ba:73:
                    01:83:65:2a:84:94:80:43:5a:14:b7:36:70:55:84:
                    71:de:be:98:ee:65:00:f5:b8:7c:22:cf:f1:83:fa:
                    f3:55:31:be:f9:5b:d1:e3:e5:56:8a:ae:ea:94:45:
                    8d:82:0a:e4:8e:9a:1b:20:4c:8b:05:51:9d:48:ca:
                    f4:f1:67:01:c2:a5:a1:f6:fa:6b:46:bb:5a:2c:60:
                    0a:f5:f4:2c:d3:10:d4:19:44:f5:2d:05:5a:f6:2f:
                    73:ca:44:58:6f:2b:8c:3d:e1:8c:9b:29:b8:af:8f:
                    48:5b:8b:9e:87:d8:eb:44:36:fc:b2:f0:df:ec:ad:
                    30:bf:d7:8c:35:01:ee:a7:39:56:0d:77:1a:4b:e7:
                    35:84:54:df:76:ad:51:4e:a8:71:e1:ce:d3:6d:19:
                    6c:57:30:73:3e:21:52:6c:05:8d:1e:5e:db:51:3a:
                    22:49:ce:6a:13:8d:65:e7:e2:de:8a:b8:10:4c:45:
                    97:13:6a:d3:20:9e:24:83:5f:d2:31:49:8d:09:9a:
                    4f:57:a6:57:27:53:31:22:e8:32:66:04:68:1b:7e:
                    67:54:8d:68:16:3a:27:85:24:a9:98:65:b2:8b:f2:
                    df:16:51:93:03:a5:39:c6:61:1f:15:d5:05:73:11:
                    8a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:AF:F4:72:E3:1C:54:17:5C:C1:50:99:58:CC:48:B6:21:7F:54:E4
            X509v3 Authority Key Identifier:
                keyid:7A:09:53:BD:58:B8:C4:34:DA:48:A1:14:3F:71:B9:12:12:A5:61:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/7A0953BD58B8C434DA48A1143F71B91212A5614B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A0953BD58B8C434DA48A1143F71B91212A5614B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/7A0953BD58B8C434DA48A1143F71B91212A5614B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:68:d3:58:4d:9b:36:2f:ca:2d:2e:a0:f6:bb:47:36:dd:0e:
         2f:f3:a8:8c:b2:95:8a:dc:1a:cc:5d:96:40:4c:91:03:a9:d1:
         12:8d:a7:94:d5:15:47:42:57:a0:5a:01:12:4d:79:e1:43:54:
         2c:a4:d6:57:f8:67:8c:05:bb:53:aa:ee:af:bf:1b:24:60:ee:
         c6:1f:9a:b6:88:ec:77:80:00:52:56:aa:9e:d1:f9:d0:f7:ef:
         31:d5:0b:25:f2:e8:0c:bd:61:98:eb:ac:20:04:45:09:7d:94:
         3c:24:f3:8a:73:b1:22:d7:2f:d4:0a:7e:45:5d:05:66:bb:da:
         31:ae:79:e2:46:e1:06:d0:d4:96:f8:f4:d4:ec:0a:33:eb:70:
         71:13:2d:61:46:87:d0:d9:d0:3e:8c:a5:07:6e:30:28:8b:bf:
         bd:8b:f3:28:b0:e8:cf:7f:e6:23:0f:b4:77:70:23:41:2c:db:
         0f:e5:85:80:21:b3:e5:cf:d8:69:91:06:ec:03:57:9d:cb:a9:
         51:d1:16:9c:92:be:7e:96:ba:2f:b1:f0:aa:a9:dc:25:3c:97:
         b0:5e:44:65:72:5c:d9:db:af:b9:fe:db:8e:8f:d9:ff:89:06:
         e7:f9:2d:b5:9b:a6:82:1e:3a:bf:48:f1:9a:60:92:ef:85:86:
         bc:9b:c4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----