Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BmEm8ExER7rrs7FrSJBP6DkKqwvkK65hVds3jU3GLrwX/1/679A1A74FD52C509FA787D3C276F759F064A02F1.mft
File:                     679A1A74FD52C509FA787D3C276F759F064A02F1.mft (raw, json)
Hash identifier:          LFqkxopqBsTbkOG9tG9QdSBbcBNtPbt7Ygv61c9JNMU=
Subject key identifier:   E8:BD:7F:57:60:40:03:7E:9B:4C:8B:F3:6C:82:2A:53:53:CC:26:4D
Authority key identifier: 67:9A:1A:74:FD:52:C5:09:FA:78:7D:3C:27:6F:75:9F:06:4A:02:F1
Certificate issuer:       /CN=679A1A74FD52C509FA787D3C276F759F064A02F1
Certificate serial:       7007080EFBD23AF0B79BF59F31B84B15A164735B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/679A1A74FD52C509FA787D3C276F759F064A02F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BmEm8ExER7rrs7FrSJBP6DkKqwvkK65hVds3jU3GLrwX/1/679A1A74FD52C509FA787D3C276F759F064A02F1.mft
Manifest number:          10
Signing time:             Wed 17 Apr 2024 08:34:08 +0000
Manifest this update:     Wed 17 Apr 2024 08:29:08 +0000
Manifest next update:     Thu 18 Apr 2024 09:51:08 +0000
Files and hashes:         1: 679A1A74FD52C509FA787D3C276F759F064A02F1.crl (hash: Dy0kmvJibbTpnU+1c80pG7LT09fiXgGOPYt1PRx3i+Q=)
                          2: 323830343a356666343a3a2f33322d3438203d3e20323639313336.roa (hash: A4AJHbkaEBLq+p5pU+KMZuTCG6SV1vkM35woBbUXp2U=)
                          3: 34352e3138302e3133362e302f32322d3234203d3e20323639313336.roa (hash: SovcFJrm4SCTbEPodnfMMa7V/zhvZytQXDflhKVaCWU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:07:08:0e:fb:d2:3a:f0:b7:9b:f5:9f:31:b8:4b:15:a1:64:73:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=679A1A74FD52C509FA787D3C276F759F064A02F1
        Validity
            Not Before: Apr 17 08:29:08 2024 GMT
            Not After : Apr 18 09:51:08 2024 GMT
        Subject: CN=E8BD7F576040037E9B4C8BF36C822A5353CC264D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:17:ab:6b:d2:8c:c3:3e:d4:da:4b:e9:83:cd:
                    b7:ad:77:e6:9b:54:37:8d:c7:8b:bc:56:40:9e:bc:
                    67:91:9a:c5:a3:94:0e:29:5e:b2:6d:44:9f:f6:63:
                    e2:c7:83:db:e2:89:2e:61:35:c4:7e:8e:8b:4a:99:
                    ce:af:83:9c:00:df:ea:8d:ac:ab:e7:f7:6d:ca:f3:
                    17:84:8c:ca:7e:b7:fb:40:7c:96:8c:3a:4d:3e:ef:
                    8f:64:dd:98:6e:c5:41:8e:6d:78:bc:0c:1e:1d:f6:
                    2f:bd:ea:ee:cb:ef:f1:e1:39:da:25:09:62:9b:cf:
                    a6:2f:de:64:42:79:8b:fb:d1:20:bf:cd:ed:ce:a3:
                    46:7f:0e:a1:76:a0:0e:6e:4f:4b:97:dd:30:d0:3a:
                    77:6e:a3:1e:fa:74:47:da:dc:d2:34:42:f6:ee:8e:
                    3f:a6:42:ec:6f:2c:1f:18:48:b0:f6:9d:e5:ea:6c:
                    9f:ae:13:4f:a8:ab:76:85:eb:02:23:93:52:de:62:
                    61:47:0e:4b:7f:85:49:c9:79:eb:5b:88:81:14:82:
                    0a:72:e4:d6:66:b0:41:3f:d1:52:f5:54:de:77:26:
                    44:4d:55:c2:52:96:67:d0:2e:f2:6a:d5:b9:86:65:
                    6e:72:7d:8a:d4:2c:a2:ef:73:f6:28:f9:bd:1a:fc:
                    b3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:BD:7F:57:60:40:03:7E:9B:4C:8B:F3:6C:82:2A:53:53:CC:26:4D
            X509v3 Authority Key Identifier:
                keyid:67:9A:1A:74:FD:52:C5:09:FA:78:7D:3C:27:6F:75:9F:06:4A:02:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BmEm8ExER7rrs7FrSJBP6DkKqwvkK65hVds3jU3GLrwX/1/679A1A74FD52C509FA787D3C276F759F064A02F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/679A1A74FD52C509FA787D3C276F759F064A02F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BmEm8ExER7rrs7FrSJBP6DkKqwvkK65hVds3jU3GLrwX/1/679A1A74FD52C509FA787D3C276F759F064A02F1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:e2:dc:93:fd:02:23:85:98:49:e6:03:14:43:63:61:a5:49:
         06:f0:03:a3:25:84:a9:89:c2:18:cc:cb:b2:ba:d7:a7:20:55:
         f0:40:01:3d:df:23:7f:ca:ba:e1:94:90:d5:70:b4:7d:e1:d4:
         59:db:a5:b6:95:91:1c:03:17:db:58:8d:f0:5f:a2:a2:cb:14:
         f8:31:19:94:d7:bf:50:7c:5e:50:b6:17:24:10:e1:fe:c3:ba:
         e4:c0:2d:da:26:96:52:ad:64:63:c6:1d:74:0b:f6:b7:52:f8:
         c3:1a:a0:27:13:fe:9f:7f:f9:01:32:ce:bf:eb:ad:8c:92:4d:
         cd:24:16:92:17:01:23:cf:1a:7c:11:85:e6:97:6c:4b:d2:73:
         6f:26:de:6b:35:4d:87:92:52:21:95:11:65:5a:85:ca:73:73:
         55:0b:16:15:eb:49:69:1c:fd:cb:06:e4:a2:86:ad:e6:b3:e4:
         6f:4b:0c:20:79:dd:14:0c:10:e1:89:fe:09:1b:e2:da:b7:18:
         92:66:a1:04:ea:b3:c7:06:c3:bc:92:44:86:11:1f:9b:d3:3e:
         f3:c7:b2:b1:8b:cf:f0:8b:ec:78:41:31:e4:9a:bc:21:62:3a:
         90:f2:06:56:52:77:66:28:24:a7:dd:80:11:3c:f2:7d:b9:cd:
         42:c5:b7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----