Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ETm9SHjuk1Y4e78y5pPtETXRECkjNRi7FB5zX5cv6uNs/1/D7777CF78CDF2EE6438090DAD56980390A48B2FD.mft
File:                     D7777CF78CDF2EE6438090DAD56980390A48B2FD.mft (raw, json)
Hash identifier:          BoQzJPfo/r8OsQ8dYAZBjN6brbkNwyelxXv1u+8cxa4=
Subject key identifier:   0D:CD:4E:67:AE:35:67:80:8D:B9:30:E1:01:D3:44:72:5B:7F:37:64
Authority key identifier: D7:77:7C:F7:8C:DF:2E:E6:43:80:90:DA:D5:69:80:39:0A:48:B2:FD
Certificate issuer:       /CN=D7777CF78CDF2EE6438090DAD56980390A48B2FD
Certificate serial:       4DBFA1B188F5172C248EF7A9CC4BDCD635EF2DDD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7777CF78CDF2EE6438090DAD56980390A48B2FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ETm9SHjuk1Y4e78y5pPtETXRECkjNRi7FB5zX5cv6uNs/1/D7777CF78CDF2EE6438090DAD56980390A48B2FD.mft
Manifest number:          1D
Signing time:             Wed 24 Apr 2024 11:44:29 +0000
Manifest this update:     Wed 24 Apr 2024 11:39:29 +0000
Manifest next update:     Thu 25 Apr 2024 13:27:29 +0000
Files and hashes:         1: D7777CF78CDF2EE6438090DAD56980390A48B2FD.crl (hash: dT5ABA1B66imeb9105Qi9rT4wrptjMr4Vdgj/8LclBw=)
                          2: 3137302e37382e3132382e302f32322d3234203d3e20323636323739.roa (hash: Kly0aCH8xhQCdYf15Rb1J1K4eirB3BVsPNNl6zjTCjI=)
                          3: 323830343a333534383a3a2f33322d3334203d3e20323636323739.roa (hash: RMA7nEeLImw6AwzCDif9XBwq27oHlVOQXOZckc5cEE4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:bf:a1:b1:88:f5:17:2c:24:8e:f7:a9:cc:4b:dc:d6:35:ef:2d:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7777CF78CDF2EE6438090DAD56980390A48B2FD
        Validity
            Not Before: Apr 24 11:39:29 2024 GMT
            Not After : Apr 25 13:27:29 2024 GMT
        Subject: CN=0DCD4E67AE3567808DB930E101D344725B7F3764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:69:62:2c:f1:37:99:d4:28:df:4c:c0:81:19:
                    68:b8:a8:91:59:ee:ab:a6:7f:4d:98:e0:1a:87:78:
                    56:81:60:9f:0e:c7:bd:ae:12:63:fe:94:42:dc:9f:
                    6b:1a:e7:00:c8:67:ca:41:c1:d5:20:d0:f6:a0:d9:
                    84:7e:26:4f:56:a9:45:82:f5:78:57:6b:23:3c:29:
                    12:68:23:c2:0d:7a:75:2a:d2:36:2f:d0:7f:2c:ec:
                    9a:17:19:81:4c:70:c2:dd:31:bc:2f:48:3c:8b:05:
                    70:ca:53:b9:e5:9b:d2:a9:a6:88:da:e2:a8:ba:f4:
                    2a:d2:1f:66:96:c7:69:1b:a4:e3:82:24:74:2a:03:
                    a1:4f:c1:40:e6:3e:2f:7c:a3:af:84:8b:79:99:6f:
                    b7:c6:e4:1f:e7:d2:4e:84:db:b6:15:f9:f0:0b:86:
                    cf:ac:e1:d6:0f:a3:a2:fb:af:61:b9:58:56:5d:85:
                    23:83:be:cc:c9:bd:bc:52:62:98:a3:2d:88:ea:7f:
                    b9:1c:01:1f:43:3e:d5:b0:6b:e0:04:35:51:71:38:
                    a1:45:8b:ae:f9:ab:da:29:a7:7d:c2:23:9f:12:b5:
                    a3:14:d3:a2:42:81:c2:fd:70:22:b4:2b:e0:79:9d:
                    a2:e9:42:09:ae:00:f6:d7:b7:96:a0:ce:d0:c8:37:
                    db:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CD:4E:67:AE:35:67:80:8D:B9:30:E1:01:D3:44:72:5B:7F:37:64
            X509v3 Authority Key Identifier:
                keyid:D7:77:7C:F7:8C:DF:2E:E6:43:80:90:DA:D5:69:80:39:0A:48:B2:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ETm9SHjuk1Y4e78y5pPtETXRECkjNRi7FB5zX5cv6uNs/1/D7777CF78CDF2EE6438090DAD56980390A48B2FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7777CF78CDF2EE6438090DAD56980390A48B2FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETm9SHjuk1Y4e78y5pPtETXRECkjNRi7FB5zX5cv6uNs/1/D7777CF78CDF2EE6438090DAD56980390A48B2FD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:56:d6:12:06:b6:cb:b8:1c:16:9f:7e:da:ed:58:2c:1f:9f:
         49:90:95:8e:b6:32:fd:39:88:ef:eb:ef:4f:38:eb:c2:a5:6b:
         53:f8:16:44:dd:7a:2d:7f:67:4a:fc:73:1e:69:1b:fa:5f:d1:
         a7:65:3c:d7:a1:5b:3c:91:d3:79:a8:48:27:55:78:27:e8:6a:
         13:84:1f:af:c6:40:ae:a7:b1:86:6c:31:a0:76:f5:7a:ee:21:
         f6:9e:56:b6:00:ce:40:37:47:70:5f:b9:77:1c:d8:d2:9f:e7:
         9e:27:56:47:c2:fc:6d:0a:cc:f5:a7:68:29:59:7e:0d:0e:1e:
         7f:18:e4:f3:d5:49:c7:c9:ce:99:ed:ab:93:80:ac:fb:d8:82:
         b4:7d:67:1d:10:ea:57:e9:9a:15:79:ac:01:e0:55:eb:38:07:
         bc:05:f4:08:f5:a6:df:21:30:48:cd:3d:3b:cb:09:34:60:cc:
         ee:a6:da:b6:c4:08:fa:37:79:70:ec:a8:56:0b:31:d4:33:01:
         bd:68:6e:d3:82:e6:65:63:02:5a:5a:07:68:2e:60:15:27:6b:
         24:45:e1:d6:2a:38:32:08:53:7b:8e:45:dc:a8:57:93:21:0f:
         0c:15:1e:22:cd:a2:da:5b:95:5b:bc:da:43:0b:d7:d9:6b:85:
         e7:df:49:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----