Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/0/1BC7F4D885BA6381BB4AB613A65BC60075643F9A.mft
File:                     1BC7F4D885BA6381BB4AB613A65BC60075643F9A.mft (raw, json)
Hash identifier:          0c8lGCSmBckrk056Dpf7OYiKnzq9Np9l24LCJMvreRY=
Subject key identifier:   97:15:D5:4A:E0:6B:1E:A5:5F:65:41:66:40:D5:15:27:A8:CB:6C:7B
Authority key identifier: 1B:C7:F4:D8:85:BA:63:81:BB:4A:B6:13:A6:5B:C6:00:75:64:3F:9A
Certificate issuer:       /CN=1BC7F4D885BA6381BB4AB613A65BC60075643F9A
Certificate serial:       7C8529B15A66781DC25DD77717EE39E9F61719DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BC7F4D885BA6381BB4AB613A65BC60075643F9A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/0/1BC7F4D885BA6381BB4AB613A65BC60075643F9A.mft
Manifest number:          0667
Signing time:             Mon 15 Apr 2024 01:23:19 +0000
Manifest this update:     Mon 15 Apr 2024 01:18:19 +0000
Manifest next update:     Tue 16 Apr 2024 03:39:19 +0000
Files and hashes:         1: 1BC7F4D885BA6381BB4AB613A65BC60075643F9A.crl (hash: qkxOr5/rFHrZwdImnOGI25l5Pgn9lCXMMew9w7Bfq6k=)
                          2: 323830343a326433303a3a2f33322d3438203d3e20323635323635.roa (hash: YI1d11/bbCaJG8M36Lz9cdeERXTfbp7Pu0L4TnlLbSU=)
                          3: 3136382e302e3139362e302f32322d3234203d3e20323635323635.roa (hash: aRD8zZnvB5ekrm1vtKkoydBHUKVDbhYlg2k5fX7hf8A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:85:29:b1:5a:66:78:1d:c2:5d:d7:77:17:ee:39:e9:f6:17:19:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BC7F4D885BA6381BB4AB613A65BC60075643F9A
        Validity
            Not Before: Apr 15 01:18:19 2024 GMT
            Not After : Apr 16 03:39:19 2024 GMT
        Subject: CN=9715D54AE06B1EA55F65416640D51527A8CB6C7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ba:61:c2:6e:80:ee:1d:bf:93:47:cd:ae:83:
                    8b:0c:64:1e:73:11:8c:9d:c7:05:52:f2:be:ef:d2:
                    35:37:6f:95:94:d5:9e:66:70:e2:0a:9c:01:d6:7a:
                    76:c4:aa:4d:55:fd:84:84:bb:2c:9b:4c:15:40:01:
                    1e:85:17:40:57:9e:a8:7c:52:e3:6b:16:57:88:97:
                    03:26:af:df:84:5d:93:db:3a:f3:aa:45:9d:ec:8e:
                    7b:05:37:ab:64:8d:dd:64:e8:d3:b9:0e:b6:40:c3:
                    fa:eb:8b:5d:59:26:06:57:43:36:17:4b:8c:ee:d9:
                    d9:da:1e:8c:12:02:b1:64:4a:74:00:c3:a0:a9:7b:
                    f4:fc:5f:cf:e5:1c:e7:97:9c:59:17:41:46:86:96:
                    8b:b3:23:e3:46:09:21:86:01:ed:95:b5:84:ec:c6:
                    78:0e:f9:41:45:ad:5a:bf:7b:eb:92:db:60:fa:0a:
                    2b:d3:75:55:50:1e:d0:bb:34:50:10:e3:34:84:21:
                    eb:ad:8e:04:1a:30:2a:2b:bd:91:a3:e6:38:a3:a5:
                    d8:23:7f:18:96:06:08:3a:41:76:5e:88:8e:90:34:
                    03:db:b5:af:25:f2:d4:94:29:66:12:f3:08:05:ca:
                    f7:3b:36:8e:d7:5f:c7:73:74:e2:6e:89:10:35:02:
                    88:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:15:D5:4A:E0:6B:1E:A5:5F:65:41:66:40:D5:15:27:A8:CB:6C:7B
            X509v3 Authority Key Identifier:
                keyid:1B:C7:F4:D8:85:BA:63:81:BB:4A:B6:13:A6:5B:C6:00:75:64:3F:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/0/1BC7F4D885BA6381BB4AB613A65BC60075643F9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BC7F4D885BA6381BB4AB613A65BC60075643F9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/0/1BC7F4D885BA6381BB4AB613A65BC60075643F9A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:de:11:ff:b7:e8:48:a0:af:65:a2:dd:1f:76:e9:04:18:b2:
         98:82:e9:ab:a0:15:ae:68:77:64:3b:8f:fb:cb:20:e4:fd:68:
         f5:ca:00:f8:91:0a:3c:73:46:a4:09:f5:83:e9:33:a0:12:b7:
         5f:c9:d6:bb:1c:ec:29:26:eb:a6:63:c3:5f:b0:54:fc:79:d7:
         b3:bb:60:81:5a:bd:07:bb:35:84:92:d7:99:0c:d7:2e:c1:62:
         c1:01:1f:a1:26:4a:93:53:cd:f4:a5:28:17:90:cf:76:ec:12:
         ca:17:27:ab:ea:1f:de:67:07:56:4f:17:41:80:71:42:7f:e0:
         1e:35:31:62:8f:47:f0:43:2a:36:ca:35:01:02:59:76:ed:77:
         45:22:a7:10:57:32:27:85:95:a8:2e:28:21:9a:f6:a2:b8:93:
         80:10:70:bb:87:77:97:fa:a1:50:3f:13:85:b6:ad:12:b9:82:
         6e:0c:f7:0e:6c:6d:6e:b5:38:2b:d2:e4:e0:3a:f8:c1:3e:86:
         29:47:87:e7:a4:5f:28:64:bc:88:51:cb:9d:42:64:fc:02:09:
         6b:f3:55:00:e9:53:4a:4e:4e:12:b6:3e:e8:db:a6:49:77:7c:
         ff:9d:43:e3:03:e7:c4:a8:1f:0c:7c:6a:ab:0c:e2:9c:53:f8:
         09:f5:b8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----