Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C2LDajWWHoJXmfj6T2WNHFuAKtERWzKe9CUawCMLkZpo/0/7FAA1BD04E1DF2F06CFFF3D8DB64D27A3F4B6DF2.mft
File:                     7FAA1BD04E1DF2F06CFFF3D8DB64D27A3F4B6DF2.mft (raw, json)
Hash identifier:          p0EuzUtvRos0KAS4kZuoEpdBr+6bs0ZAXBU6zarWado=
Subject key identifier:   45:BF:E7:28:39:88:BC:ED:BC:C1:CB:E2:45:46:FF:DB:E6:AA:30:7B
Authority key identifier: 7F:AA:1B:D0:4E:1D:F2:F0:6C:FF:F3:D8:DB:64:D2:7A:3F:4B:6D:F2
Certificate issuer:       /CN=7FAA1BD04E1DF2F06CFFF3D8DB64D27A3F4B6DF2
Certificate serial:       7BD2BB0213730233129DD7EC85E3A66790E4F87D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7FAA1BD04E1DF2F06CFFF3D8DB64D27A3F4B6DF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C2LDajWWHoJXmfj6T2WNHFuAKtERWzKe9CUawCMLkZpo/0/7FAA1BD04E1DF2F06CFFF3D8DB64D27A3F4B6DF2.mft
Manifest number:          1B
Signing time:             Mon 15 Apr 2024 03:38:06 +0000
Manifest this update:     Mon 15 Apr 2024 03:33:06 +0000
Manifest next update:     Tue 16 Apr 2024 07:05:06 +0000
Files and hashes:         1: 323830343a316231633a3a2f33322d3438203d3e203631373039.roa (hash: M9mmE3B/+dMf9CJzXmKAikv2CqHE0tf5wNcfzPci1jk=)
                          2: 7FAA1BD04E1DF2F06CFFF3D8DB64D27A3F4B6DF2.crl (hash: vqiHj8DpKW+DxlEOoXzEkVs3hgZ6sCGaJJkGLQ8t9Oo=)
                          3: 3133312e302e3232382e302f32322d3234203d3e203631373039.roa (hash: CenwyFPWrX+sn9sewvUyJ1RVlqcSOa/C6ThchLSEsog=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:d2:bb:02:13:73:02:33:12:9d:d7:ec:85:e3:a6:67:90:e4:f8:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FAA1BD04E1DF2F06CFFF3D8DB64D27A3F4B6DF2
        Validity
            Not Before: Apr 15 03:33:06 2024 GMT
            Not After : Apr 16 07:05:06 2024 GMT
        Subject: CN=45BFE7283988BCEDBCC1CBE24546FFDBE6AA307B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:c8:43:8e:70:d5:e7:04:53:dc:3b:51:c1:63:
                    63:bf:5f:74:de:5c:08:ca:fd:60:99:31:a3:9b:99:
                    29:98:45:40:8e:32:fb:4e:d9:e5:3a:70:6c:02:c3:
                    35:f1:ab:d7:45:27:b2:4e:15:c5:87:6c:f4:7f:f3:
                    12:e2:7e:50:9c:15:01:ba:e7:18:4c:4f:d5:27:e3:
                    3f:be:ac:d8:30:a7:98:6d:ca:3f:26:f6:eb:ae:e0:
                    ee:6c:f9:b1:55:76:b7:6b:28:a2:bc:90:2f:eb:6b:
                    f2:86:2f:c8:48:3a:89:56:95:d5:f0:d6:0a:c8:9a:
                    fc:02:47:a1:e4:fb:1b:78:a9:cf:39:9b:51:99:ed:
                    e0:3b:13:36:e6:aa:2c:38:10:cc:5f:f7:e2:6e:88:
                    93:98:93:fa:47:f4:ce:8c:a4:17:dd:68:01:00:9b:
                    e3:2f:65:48:c7:f1:a8:d8:99:31:84:d1:e8:37:cb:
                    72:03:6d:d3:d8:80:43:bf:23:f1:06:f7:60:f0:58:
                    8c:bb:fa:af:f5:75:b1:cc:fd:d0:bf:47:2f:12:94:
                    6c:a0:17:60:2e:8b:e2:66:a9:f7:e0:45:fb:0c:66:
                    a9:53:cf:05:7d:d7:5e:33:2c:37:d0:e1:e0:e7:7a:
                    3e:f0:27:f3:82:71:99:08:be:b6:1e:1a:3d:15:b6:
                    6f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:BF:E7:28:39:88:BC:ED:BC:C1:CB:E2:45:46:FF:DB:E6:AA:30:7B
            X509v3 Authority Key Identifier:
                keyid:7F:AA:1B:D0:4E:1D:F2:F0:6C:FF:F3:D8:DB:64:D2:7A:3F:4B:6D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C2LDajWWHoJXmfj6T2WNHFuAKtERWzKe9CUawCMLkZpo/0/7FAA1BD04E1DF2F06CFFF3D8DB64D27A3F4B6DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7FAA1BD04E1DF2F06CFFF3D8DB64D27A3F4B6DF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C2LDajWWHoJXmfj6T2WNHFuAKtERWzKe9CUawCMLkZpo/0/7FAA1BD04E1DF2F06CFFF3D8DB64D27A3F4B6DF2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:5d:90:29:d8:ad:09:ec:42:b1:55:d1:88:72:c3:50:7c:94:
         5a:97:10:7f:73:5e:8a:04:87:89:32:c7:6f:6b:39:5c:c1:10:
         87:8d:a6:f8:39:ff:6b:fa:54:b9:3b:b7:52:a7:8f:6c:03:f0:
         df:cb:57:6b:68:e3:88:72:91:d6:ac:de:d9:e8:c2:a5:2e:96:
         30:63:7a:87:4e:c7:e9:15:17:09:f7:0e:01:85:22:58:a8:b7:
         13:15:45:9b:7c:6f:2d:ed:d9:b6:c0:33:f8:bf:fd:fb:3c:48:
         7c:a8:17:9a:b2:48:27:97:86:3b:0f:cd:32:55:a6:0b:7d:ae:
         da:be:2e:8c:76:a6:48:51:be:db:e5:4c:e5:0b:cf:10:45:a8:
         94:e3:76:b0:ba:ef:62:08:ee:a8:0b:38:f8:28:04:64:ef:db:
         4c:84:56:2c:90:a1:73:cb:4c:83:e6:b5:55:b8:d2:25:62:c0:
         06:52:81:f4:31:d5:49:0f:95:a5:96:f4:14:70:a9:1c:0c:b8:
         70:91:86:67:cf:8c:bb:22:5d:1f:80:97:72:71:09:50:5f:83:
         f3:d4:83:d5:a0:4c:81:6a:82:04:4a:a0:06:40:df:4e:3a:d7:
         d9:c4:61:7f:f1:ba:5b:46:bc:bb:4d:93:12:6b:f8:00:a6:66:
         aa:06:f6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----