Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/0/5F7AB34C4F3BDBEC6B2D84F00641EB1CE1DE080D.mft
File:                     5F7AB34C4F3BDBEC6B2D84F00641EB1CE1DE080D.mft (raw, json)
Hash identifier:          HB8iNb/tUJANqNNT1SqxzxcZZMGsTlu+dvmJ9KBo2I8=
Subject key identifier:   74:76:BB:E3:BC:38:79:C7:39:8F:D6:08:F9:FE:E8:70:EA:73:E6:3A
Authority key identifier: 5F:7A:B3:4C:4F:3B:DB:EC:6B:2D:84:F0:06:41:EB:1C:E1:DE:08:0D
Certificate issuer:       /CN=5F7AB34C4F3BDBEC6B2D84F00641EB1CE1DE080D
Certificate serial:       509D0950110C25CBDC42CD4B460C088B8D213FA0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5F7AB34C4F3BDBEC6B2D84F00641EB1CE1DE080D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/0/5F7AB34C4F3BDBEC6B2D84F00641EB1CE1DE080D.mft
Manifest number:          0331
Signing time:             Sun 14 Apr 2024 23:12:53 +0000
Manifest this update:     Sun 14 Apr 2024 23:07:53 +0000
Manifest next update:     Tue 16 Apr 2024 02:43:53 +0000
Files and hashes:         1: 3138372e36332e3134382e302f32322d3234203d3e20323731343535.roa (hash: dVHyN87qldBQmv3Sa8XZ511ggjC1j89D8ulvReZdZ+A=)
                          2: 5F7AB34C4F3BDBEC6B2D84F00641EB1CE1DE080D.crl (hash: UgtTCtc07pqXcMoH6so+vhEAgl4CAbQ2vNHH+2oJ85o=)
                          3: 323830343a376263633a3a2f33322d3438203d3e20323731343535.roa (hash: +CLpsrhB3l8nJRfuTxDBzYXF8zg86CqZmnGL65Ez558=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:9d:09:50:11:0c:25:cb:dc:42:cd:4b:46:0c:08:8b:8d:21:3f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F7AB34C4F3BDBEC6B2D84F00641EB1CE1DE080D
        Validity
            Not Before: Apr 14 23:07:53 2024 GMT
            Not After : Apr 16 02:43:53 2024 GMT
        Subject: CN=7476BBE3BC3879C7398FD608F9FEE870EA73E63A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8a:f3:58:54:7c:14:da:8f:65:11:c0:fe:9e:
                    c3:92:24:9f:a1:bb:92:12:cd:47:0b:dd:d1:77:06:
                    25:54:cd:a7:cf:8e:65:12:5d:38:99:94:53:ec:a3:
                    aa:b7:6a:df:8c:7a:09:29:48:3b:ef:a2:fe:7f:d4:
                    ac:57:28:86:04:99:70:dc:19:33:e6:b9:a0:9f:ca:
                    db:f0:61:e9:ab:98:15:f5:ed:64:cd:29:e0:82:b7:
                    18:73:72:a7:cc:a2:ce:e6:56:f5:31:2b:62:2b:23:
                    21:00:c1:8c:c3:8d:a7:63:cf:74:15:9a:f2:6b:37:
                    a2:d0:9d:5a:09:63:40:52:db:ce:9b:36:f2:f0:c1:
                    87:6e:b5:06:b8:29:7b:3c:5f:d1:da:2a:e7:22:86:
                    e2:bf:05:b9:2b:c6:2a:4e:ac:c0:96:f6:b1:ec:cd:
                    b2:f9:5f:28:94:ee:88:0e:20:0a:71:75:42:72:eb:
                    50:0a:23:e3:c6:b1:ff:f5:36:38:3b:67:a8:41:15:
                    34:d6:7b:ec:e6:ab:47:49:a0:52:ed:55:b2:ce:c1:
                    52:25:1e:73:13:67:fd:1b:c7:15:06:7f:b4:02:30:
                    01:82:38:e8:b4:d7:b3:1f:39:2e:cc:71:f3:4a:a6:
                    2f:a6:3c:e6:00:c7:4f:e2:6c:00:f8:e8:de:08:a3:
                    af:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:76:BB:E3:BC:38:79:C7:39:8F:D6:08:F9:FE:E8:70:EA:73:E6:3A
            X509v3 Authority Key Identifier:
                keyid:5F:7A:B3:4C:4F:3B:DB:EC:6B:2D:84:F0:06:41:EB:1C:E1:DE:08:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/0/5F7AB34C4F3BDBEC6B2D84F00641EB1CE1DE080D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5F7AB34C4F3BDBEC6B2D84F00641EB1CE1DE080D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/0/5F7AB34C4F3BDBEC6B2D84F00641EB1CE1DE080D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:87:0a:27:37:e6:b5:60:05:47:98:19:04:3b:37:96:cb:cc:
         01:66:1d:df:02:c4:43:39:f7:b3:b4:b7:e0:12:4b:67:f6:af:
         28:d1:26:72:6e:59:52:f6:65:e1:56:b5:bd:40:15:54:47:bc:
         e9:3a:1c:c7:cd:1d:a5:cb:b8:92:f1:c0:ec:ce:1e:1f:d7:7f:
         23:bd:14:80:95:09:94:34:54:d0:66:fb:0b:d6:ec:17:fa:db:
         3b:1b:f8:6e:c2:0b:f4:2e:0e:ba:7a:da:bb:9b:ae:c9:c2:0b:
         92:f1:fe:dd:74:ad:d5:21:63:70:7a:a7:62:24:2f:e3:a3:87:
         61:30:43:c6:20:6f:83:1e:06:c5:c2:68:63:6c:49:d1:b6:08:
         ce:d4:51:f9:5e:fa:b6:37:69:1c:e4:db:c5:dc:f6:20:db:ef:
         84:36:f2:ee:49:4c:15:40:51:60:86:ba:da:8e:d8:b2:44:d9:
         f5:25:27:aa:ef:da:6c:83:59:1c:d8:c4:50:35:45:42:97:b1:
         b4:9e:1d:d6:3f:ee:2b:36:79:e9:f5:56:6f:f6:eb:67:c7:25:
         23:a1:ae:4f:cd:9e:79:ac:0d:16:95:f8:88:08:eb:00:a0:2a:
         6b:14:ad:e7:fb:25:51:3e:c1:f0:39:74:3c:bb:47:43:30:f1:
         25:aa:61:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----