Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CiLRDdtgpLjBPbxqjYKbYewZSayYtRQPGn87PU36TpyS/0/07FE68F794C265F8A584F6B6E39BC90CF4FD82F2.mft
File:                     07FE68F794C265F8A584F6B6E39BC90CF4FD82F2.mft (raw, json)
Hash identifier:          ZuXCzeGQFh7UGbjAYhY+JhggOH038sutwjvgHFihk/g=
Subject key identifier:   B1:37:BB:A0:24:B4:55:66:64:83:08:FE:D7:51:E4:93:09:43:09:C4
Authority key identifier: 07:FE:68:F7:94:C2:65:F8:A5:84:F6:B6:E3:9B:C9:0C:F4:FD:82:F2
Certificate issuer:       /CN=07FE68F794C265F8A584F6B6E39BC90CF4FD82F2
Certificate serial:       5726A6300D699A247C0BAD7639F2AE1C76498EAB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/07FE68F794C265F8A584F6B6E39BC90CF4FD82F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CiLRDdtgpLjBPbxqjYKbYewZSayYtRQPGn87PU36TpyS/0/07FE68F794C265F8A584F6B6E39BC90CF4FD82F2.mft
Manifest number:          0591
Signing time:             Mon 15 Apr 2024 01:06:53 +0000
Manifest this update:     Mon 15 Apr 2024 01:01:53 +0000
Manifest next update:     Tue 16 Apr 2024 02:52:53 +0000
Files and hashes:         1: 3137372e3132382e38302e302f32312d3234203d3e20323632333635.roa (hash: 5EEKv+U4LWcQgwGv+Y1arehH9x6vAt7K3KwVm9LBfTY=)
                          2: 323830343a3835383a3a2f33322d3438203d3e20323632333635.roa (hash: p8T4/mOy1HUdyFOr9VO+DPffT3WWiu1JvkDrvIOJdUY=)
                          3: 07FE68F794C265F8A584F6B6E39BC90CF4FD82F2.crl (hash: xVnSai95PooKc2/1BfJ3QGEE4lL7z2VgTa39bcLdWwY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:26:a6:30:0d:69:9a:24:7c:0b:ad:76:39:f2:ae:1c:76:49:8e:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07FE68F794C265F8A584F6B6E39BC90CF4FD82F2
        Validity
            Not Before: Apr 15 01:01:53 2024 GMT
            Not After : Apr 16 02:52:53 2024 GMT
        Subject: CN=B137BBA024B45566648308FED751E493094309C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:9b:d0:9a:6a:e8:6e:5f:90:82:62:b9:01:4e:
                    b7:9c:d3:7b:70:69:e9:a5:d8:cd:53:f5:ea:1f:1f:
                    43:2e:80:dd:8b:05:10:4c:2b:66:62:90:78:43:1a:
                    62:94:26:1e:fa:ea:7a:9e:3b:73:3d:e5:d2:2e:d6:
                    3d:91:94:c4:3f:24:9a:f9:bd:e9:4e:92:e0:45:b8:
                    1c:e3:01:1c:c3:cd:03:dd:04:a7:80:22:21:93:c4:
                    09:26:2c:70:f3:44:da:12:2b:38:e2:41:bc:fe:77:
                    a3:1d:49:e8:e9:ac:7a:7c:01:48:c8:7d:6a:b2:9b:
                    a1:93:ec:1c:e5:4b:de:d7:38:0d:2c:a9:23:1e:60:
                    ee:d8:bb:9c:b4:9b:7a:93:c6:76:94:71:ed:2c:2f:
                    1a:d4:46:2b:e2:82:a4:31:f3:78:f3:75:b1:85:5c:
                    0c:68:34:68:bf:48:05:2a:c6:b4:51:5a:61:b4:82:
                    f1:e1:2c:d0:e7:d4:12:d6:ab:44:b4:63:8e:39:bb:
                    aa:12:76:4f:77:34:cf:27:23:88:a8:c7:42:9c:02:
                    5e:21:8c:47:c1:db:b5:5f:6d:9c:79:1b:ea:6f:6f:
                    42:54:44:e9:86:f8:5e:65:53:e0:43:3f:78:d7:b5:
                    23:d9:1d:da:75:77:0e:37:a3:77:3f:60:f0:f5:a9:
                    d9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:37:BB:A0:24:B4:55:66:64:83:08:FE:D7:51:E4:93:09:43:09:C4
            X509v3 Authority Key Identifier:
                keyid:07:FE:68:F7:94:C2:65:F8:A5:84:F6:B6:E3:9B:C9:0C:F4:FD:82:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CiLRDdtgpLjBPbxqjYKbYewZSayYtRQPGn87PU36TpyS/0/07FE68F794C265F8A584F6B6E39BC90CF4FD82F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/07FE68F794C265F8A584F6B6E39BC90CF4FD82F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CiLRDdtgpLjBPbxqjYKbYewZSayYtRQPGn87PU36TpyS/0/07FE68F794C265F8A584F6B6E39BC90CF4FD82F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:a7:6c:15:7d:46:be:0f:52:13:a1:96:5d:05:71:bc:2e:ea:
         c1:b8:a6:e8:b2:0f:c7:0e:42:09:41:1d:a1:d9:5c:d0:7a:85:
         3b:29:fd:68:3b:66:c6:e7:29:83:da:b2:7b:ed:e8:3e:30:b5:
         b0:67:7a:97:99:88:4f:63:5d:cb:e3:e8:54:bc:f8:7c:f5:b0:
         1b:e8:29:4f:1f:82:75:49:f9:e2:3e:83:76:4b:26:04:dc:ae:
         1b:8e:57:6f:e5:33:75:eb:5e:30:05:ec:bf:48:95:4f:2e:c1:
         ec:56:9b:9e:09:e6:3e:30:6d:77:b9:4f:bc:3a:cc:b5:48:fa:
         ac:94:f3:a4:10:43:be:f8:06:db:e1:f0:8d:6c:70:d6:61:a9:
         79:94:61:74:6d:f9:94:32:b3:1d:7b:68:88:88:8b:ff:1e:9c:
         54:ea:2e:7e:61:8a:a7:78:9d:57:bc:03:c4:03:99:9a:0f:c7:
         13:0a:ec:32:c0:67:ae:67:94:fa:43:67:da:3b:35:ad:96:6b:
         6d:f6:c6:d7:b6:11:44:2e:d0:1e:a2:00:11:7f:e1:0f:d0:3d:
         a6:5e:d8:e5:43:ab:9b:67:f8:b6:1f:63:aa:86:cd:bd:0b:af:
         2a:10:ea:06:65:f7:db:c0:58:28:ab:c8:ac:6d:8b:c9:f9:bb:
         e8:53:91:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----