Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/0/7D6D4B0ED16D14A94AC98715751FA685F25D5E15.mft
File:                     7D6D4B0ED16D14A94AC98715751FA685F25D5E15.mft (raw, json)
Hash identifier:          PSziF+5wrWpKObuhgWZneB/M1FBDsEk/1sg4QzDTRu8=
Subject key identifier:   5A:28:FB:97:A0:8E:88:36:81:23:8A:C9:CF:83:65:74:BB:89:D2:53
Authority key identifier: 7D:6D:4B:0E:D1:6D:14:A9:4A:C9:87:15:75:1F:A6:85:F2:5D:5E:15
Certificate issuer:       /CN=7D6D4B0ED16D14A94AC98715751FA685F25D5E15
Certificate serial:       1CF0E1BA4BB66EC6A5900BE44C379457E725CB86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D6D4B0ED16D14A94AC98715751FA685F25D5E15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/0/7D6D4B0ED16D14A94AC98715751FA685F25D5E15.mft
Manifest number:          0287
Signing time:             Mon 15 Apr 2024 03:32:41 +0000
Manifest this update:     Mon 15 Apr 2024 03:27:40 +0000
Manifest next update:     Tue 16 Apr 2024 05:12:40 +0000
Files and hashes:         1: 3137372e38372e34342e302f32322d3234203d3e203532353839.roa (hash: oQIWCyYtoohvc0pQejAbhYqaEEuFvUg+k0pnd5ewA0k=)
                          2: 323830343a316164383a3a2f33322d3438203d3e203532353839.roa (hash: SdLCL4+ZqtxOZzJrUMb+ZispGg04FfuazCF0jE+55TU=)
                          3: 7D6D4B0ED16D14A94AC98715751FA685F25D5E15.crl (hash: tpJojG6KoHpJxlvt8jpaZ+oHEqDJ3JXMOsNHfyPxbbo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:f0:e1:ba:4b:b6:6e:c6:a5:90:0b:e4:4c:37:94:57:e7:25:cb:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D6D4B0ED16D14A94AC98715751FA685F25D5E15
        Validity
            Not Before: Apr 15 03:27:40 2024 GMT
            Not After : Apr 16 05:12:40 2024 GMT
        Subject: CN=5A28FB97A08E883681238AC9CF836574BB89D253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:de:ae:d5:74:4c:0c:c6:90:bf:aa:6f:0f:11:
                    b7:19:53:39:e8:00:ee:e8:f8:4c:54:c4:4e:db:e4:
                    18:76:66:e1:56:fd:f7:1c:5f:5a:60:ca:f5:a1:22:
                    44:c5:73:fa:dc:61:40:78:0d:6e:d3:6a:d6:6b:c7:
                    d0:6f:c0:c2:20:92:f2:03:d5:1f:ac:66:c1:e0:4c:
                    38:a5:64:f1:47:b5:6f:a9:7c:3a:36:2f:b3:1b:41:
                    e2:06:91:71:5d:d7:26:44:fe:57:64:e3:9a:54:21:
                    44:5a:b4:00:1d:c0:9c:c9:bf:ab:3a:2f:8a:26:70:
                    b1:b1:98:7b:94:cd:81:60:be:fc:df:67:cb:73:cd:
                    24:56:6a:8d:f4:55:6e:9e:54:70:7c:bd:8c:70:0a:
                    01:34:45:d4:b6:77:41:09:33:84:fc:c7:f5:4a:a5:
                    a1:98:de:b2:29:c9:93:42:32:30:85:ab:c9:ef:41:
                    df:3a:e1:ca:33:18:ed:45:5c:70:80:76:51:de:d7:
                    7c:ae:28:c8:b1:da:8e:6c:67:3a:31:9d:17:3f:14:
                    37:1c:da:79:81:93:82:8a:a4:c9:45:41:10:ee:1e:
                    af:d5:a1:b9:5e:4e:a9:6c:fe:30:a0:76:8b:b3:06:
                    64:2d:97:e4:4e:77:97:50:7b:1c:c2:46:2d:40:54:
                    61:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:28:FB:97:A0:8E:88:36:81:23:8A:C9:CF:83:65:74:BB:89:D2:53
            X509v3 Authority Key Identifier:
                keyid:7D:6D:4B:0E:D1:6D:14:A9:4A:C9:87:15:75:1F:A6:85:F2:5D:5E:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/0/7D6D4B0ED16D14A94AC98715751FA685F25D5E15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D6D4B0ED16D14A94AC98715751FA685F25D5E15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/0/7D6D4B0ED16D14A94AC98715751FA685F25D5E15.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:f7:9a:53:1d:2b:4a:dd:83:04:09:13:04:61:ca:4f:d5:13:
         ae:ed:f6:12:4b:7a:44:44:21:bf:95:ea:0e:92:7e:0f:60:e4:
         ff:19:0c:d2:69:89:d3:99:9b:32:b0:e0:8f:89:83:a6:06:1e:
         3f:37:d6:4f:f9:d6:54:c1:40:5f:fa:a2:04:dc:fb:8d:1f:7e:
         9b:27:1c:fd:10:53:a9:28:86:f1:76:91:55:dc:34:38:06:22:
         86:4b:c0:af:23:c8:17:dc:f3:10:43:ff:7f:67:27:0e:b0:41:
         17:ce:ff:91:f3:1f:bb:b0:f9:a5:30:53:f6:fd:27:fc:91:55:
         c2:39:cb:7f:b1:21:c6:32:37:57:e4:a8:d3:b0:c9:c5:7b:be:
         a1:c8:3e:57:e3:a6:a2:aa:bd:e4:12:4e:94:3a:29:2d:a4:d8:
         40:67:55:6e:b7:fa:14:9c:97:3a:19:96:03:5f:63:4f:7f:c2:
         4f:b3:c5:24:ea:97:56:1e:12:00:55:7b:ee:a9:2c:8d:a2:a9:
         bb:f7:26:15:9b:7b:20:0c:44:21:98:11:67:0f:ee:42:f8:30:
         57:0d:20:63:73:61:09:6e:19:18:9f:79:ba:49:a1:91:51:ef:
         f1:99:85:b4:89:d0:d3:f7:3e:93:12:49:0e:df:3d:0a:41:7b:
         0b:be:c3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----