Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/0/7BB4174D2314B9F74F7F2E3D2C189CF2D3643E68.mft
File:                     7BB4174D2314B9F74F7F2E3D2C189CF2D3643E68.mft (raw, json)
Hash identifier:          9bTTouKj6kD9uj18k88S0WbnK5zesOAoEdppaV4WSSA=
Subject key identifier:   72:AC:16:CF:1D:94:45:AE:11:B7:15:A7:67:97:4D:4B:E8:DC:C7:F8
Authority key identifier: 7B:B4:17:4D:23:14:B9:F7:4F:7F:2E:3D:2C:18:9C:F2:D3:64:3E:68
Certificate issuer:       /CN=7BB4174D2314B9F74F7F2E3D2C189CF2D3643E68
Certificate serial:       4B1967FD176269C27BAA31312B6540953670323A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BB4174D2314B9F74F7F2E3D2C189CF2D3643E68.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/0/7BB4174D2314B9F74F7F2E3D2C189CF2D3643E68.mft
Manifest number:          6F
Signing time:             Mon 15 Apr 2024 08:59:58 +0000
Manifest this update:     Mon 15 Apr 2024 08:54:58 +0000
Manifest next update:     Tue 16 Apr 2024 09:23:58 +0000
Files and hashes:         1: 7BB4174D2314B9F74F7F2E3D2C189CF2D3643E68.crl (hash: WgTunKqvxh5sYz2SS50lggsaI4hwhZVeTaux6kn3V10=)
                          2: 3137372e38342e32302e302f32322d3234203d3e203532373135.roa (hash: E/UIScDTjTr0tgMiHUMNf0I0w/rA8Uz1rV077gZhPso=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:19:67:fd:17:62:69:c2:7b:aa:31:31:2b:65:40:95:36:70:32:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BB4174D2314B9F74F7F2E3D2C189CF2D3643E68
        Validity
            Not Before: Apr 15 08:54:58 2024 GMT
            Not After : Apr 16 09:23:58 2024 GMT
        Subject: CN=72AC16CF1D9445AE11B715A767974D4BE8DCC7F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cd:84:c4:66:b5:6d:a1:db:39:d0:7f:0f:5f:
                    71:02:5e:cf:e4:41:d1:a0:7b:43:29:3d:69:63:24:
                    88:5b:91:31:39:83:02:18:88:d3:7c:14:cd:64:8c:
                    ed:6b:37:f7:87:b6:72:80:e1:83:a0:99:c3:97:55:
                    78:49:c3:b8:8f:b9:91:dc:16:da:28:b1:3c:ae:50:
                    e3:b8:64:c4:e0:7e:ed:b4:99:df:68:79:d4:68:8a:
                    31:4e:ad:bb:16:72:de:31:57:67:d1:9f:bd:74:f8:
                    f6:13:4c:de:3c:eb:30:22:c8:f6:78:5e:91:97:6f:
                    e6:ee:cd:f9:84:07:7b:29:c8:9d:bd:28:69:12:2b:
                    7b:10:08:e2:1e:2c:65:51:90:11:f4:1b:33:6f:3e:
                    74:47:0a:59:07:b1:9a:f2:0a:07:70:c5:39:e2:b4:
                    d4:f0:02:52:16:a5:ad:a4:13:7a:72:ab:e2:56:a0:
                    fe:c2:a2:82:ff:56:84:ba:e4:ba:db:4b:05:f1:2f:
                    4e:ef:5c:e1:4d:de:3d:3b:d1:c8:d2:59:7a:f9:85:
                    4d:e8:cf:63:34:43:f7:6c:3c:2f:c6:ab:57:58:f3:
                    d2:54:7d:91:54:43:1c:76:83:e6:8f:72:dd:e3:c7:
                    1b:d0:bb:1d:6b:5c:2e:d7:64:1b:5e:ae:cb:fa:38:
                    c0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:AC:16:CF:1D:94:45:AE:11:B7:15:A7:67:97:4D:4B:E8:DC:C7:F8
            X509v3 Authority Key Identifier:
                keyid:7B:B4:17:4D:23:14:B9:F7:4F:7F:2E:3D:2C:18:9C:F2:D3:64:3E:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/0/7BB4174D2314B9F74F7F2E3D2C189CF2D3643E68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BB4174D2314B9F74F7F2E3D2C189CF2D3643E68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/0/7BB4174D2314B9F74F7F2E3D2C189CF2D3643E68.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:c5:b4:f9:e0:cc:c4:a8:16:87:32:d2:c4:8b:73:18:9d:96:
         9f:44:c4:3d:c9:68:47:f8:8d:81:df:1a:75:0b:51:ce:12:1c:
         ab:ea:7b:48:8b:93:10:d1:b7:d4:12:6a:80:27:15:5c:99:75:
         95:a1:65:e7:86:e0:48:29:93:db:95:d8:ee:fb:58:fe:3b:fb:
         ac:88:26:65:21:30:eb:e2:63:0d:2e:98:f1:2c:03:15:ae:8b:
         e9:0c:92:8b:f2:19:57:4b:e1:ae:99:a2:55:90:ad:39:1f:cb:
         95:2b:5f:5e:d9:90:86:d3:f1:bf:b7:f0:e8:ec:96:9e:5e:f4:
         9d:76:16:f5:8d:43:f5:ac:fd:e1:31:58:d7:fa:ce:c5:fc:bb:
         48:93:f6:40:11:62:10:d1:87:07:30:58:64:bf:6b:21:23:0a:
         89:4e:8b:47:e0:9a:1e:51:eb:f7:f8:07:1a:ea:9e:83:96:81:
         e5:a4:7b:e4:83:f2:54:d9:0a:b3:ce:e7:83:af:a4:58:35:97:
         b5:fd:2a:21:76:0e:34:df:36:fe:a4:c7:55:c2:94:64:7f:a9:
         ca:47:b4:9f:00:0e:61:26:79:e0:60:ae:11:5e:00:fa:f1:5a:
         09:65:be:0b:06:b8:81:60:b6:bc:71:6a:34:4f:31:47:5a:97:
         f2:1a:e3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----