Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/0/77F958717D0A9CCDFCFA2B83A02ABDA1B3406580.mft
File:                     77F958717D0A9CCDFCFA2B83A02ABDA1B3406580.mft (raw, json)
Hash identifier:          4CH4yPFJCsNla0odS5Y6b8zT9w99x0TU95N7wAkKpQE=
Subject key identifier:   D4:41:06:67:9D:EE:C1:B3:B5:FD:DD:70:9A:26:1A:8F:03:8A:26:1C
Authority key identifier: 77:F9:58:71:7D:0A:9C:CD:FC:FA:2B:83:A0:2A:BD:A1:B3:40:65:80
Certificate issuer:       /CN=77F958717D0A9CCDFCFA2B83A02ABDA1B3406580
Certificate serial:       3CA9619E0E825488D6469A0D35C37323A190BFEA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77F958717D0A9CCDFCFA2B83A02ABDA1B3406580.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/0/77F958717D0A9CCDFCFA2B83A02ABDA1B3406580.mft
Manifest number:          020C
Signing time:             Sun 14 Apr 2024 22:14:04 +0000
Manifest this update:     Sun 14 Apr 2024 22:09:04 +0000
Manifest next update:     Mon 15 Apr 2024 23:09:04 +0000
Files and hashes:         1: 34352e3138392e31362e302f32322d3234203d3e20323639353438.roa (hash: AIVE0pnzCmSCaFNGA6Fl46iOuFoOkArp42sTnp7zwBg=)
                          2: 323830343a363635303a3a2f33322d3438203d3e20323639353438.roa (hash: /dQI1/fSaN8CuJLegitzkVGDI+1xOPL1/Gd+Hv0HvEA=)
                          3: 77F958717D0A9CCDFCFA2B83A02ABDA1B3406580.crl (hash: cKUw0u4QyAUgTLojXa4JYl5Jtv56OsX8ihvYgEsfyHY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a9:61:9e:0e:82:54:88:d6:46:9a:0d:35:c3:73:23:a1:90:bf:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F958717D0A9CCDFCFA2B83A02ABDA1B3406580
        Validity
            Not Before: Apr 14 22:09:04 2024 GMT
            Not After : Apr 15 23:09:04 2024 GMT
        Subject: CN=D44106679DEEC1B3B5FDDD709A261A8F038A261C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:49:a4:d9:2d:59:d9:c0:9e:cf:1b:c3:5e:b7:
                    20:cc:af:91:8d:d0:c3:ae:11:05:b5:11:32:14:2c:
                    be:c8:8e:bb:ec:f7:60:4d:d5:1f:08:3f:47:7d:49:
                    a9:3f:bd:17:ce:83:84:4d:d1:5a:38:85:04:5d:0f:
                    d1:6d:76:4b:05:e9:a1:22:ba:ed:04:8e:5c:89:fa:
                    cf:0b:bb:2f:71:bf:35:fc:d4:92:a8:03:5a:b1:86:
                    a5:68:f0:81:6d:ef:58:61:2d:36:8c:0a:ee:d9:56:
                    d2:30:9a:5d:d6:00:9f:1c:e8:6c:e9:f4:04:1c:46:
                    7b:13:f9:5f:c4:af:ce:58:a9:d2:68:9e:54:a5:6a:
                    f7:61:9e:8c:34:e8:aa:c5:af:4b:f8:a3:a9:44:ca:
                    45:f4:0c:ae:7a:e2:93:bc:77:3f:6a:44:90:81:08:
                    40:36:9e:84:3b:02:be:08:a7:3d:82:fe:20:31:63:
                    01:bf:3c:c8:90:47:01:06:86:93:09:ea:5e:9d:17:
                    a1:99:cf:bf:ee:71:d5:b7:66:f0:9a:79:56:bb:df:
                    72:a1:9f:58:2d:dd:ae:5f:5c:63:67:df:e8:bb:ec:
                    1a:67:86:ff:4b:f9:9d:2e:21:29:55:d7:42:24:e2:
                    e3:fe:6f:15:bc:7a:e3:28:5c:87:79:8a:9c:9d:32:
                    2b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:41:06:67:9D:EE:C1:B3:B5:FD:DD:70:9A:26:1A:8F:03:8A:26:1C
            X509v3 Authority Key Identifier:
                keyid:77:F9:58:71:7D:0A:9C:CD:FC:FA:2B:83:A0:2A:BD:A1:B3:40:65:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/0/77F958717D0A9CCDFCFA2B83A02ABDA1B3406580.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77F958717D0A9CCDFCFA2B83A02ABDA1B3406580.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/0/77F958717D0A9CCDFCFA2B83A02ABDA1B3406580.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:cb:11:98:96:8a:f1:ce:dd:4f:31:6a:17:6e:26:d1:ae:c0:
         4d:76:73:ae:34:76:cd:16:eb:e9:68:bd:77:87:96:08:a0:80:
         1a:33:8a:02:ff:aa:30:e1:e1:e7:40:ac:e4:51:7f:2a:b6:ff:
         d0:c5:de:c7:f2:d2:28:96:84:bf:29:67:9b:15:d9:3a:40:1c:
         bb:c5:df:8e:9e:9c:d8:f1:b2:fc:b1:33:da:8b:43:c3:b2:c9:
         97:46:4b:ae:19:59:80:0c:fb:84:78:20:00:a8:23:51:24:77:
         0c:c1:57:46:41:0b:6e:6a:69:8a:0d:df:1a:d2:7a:a5:4f:a3:
         1e:4c:36:ae:f7:d3:d3:5b:47:a0:d7:c8:fb:26:27:aa:90:00:
         8c:ee:e0:f6:19:9a:8b:3f:56:62:31:10:da:47:33:0d:15:9d:
         3e:87:c4:6c:2c:5d:ae:9f:d3:ec:22:91:6d:74:84:cc:65:a6:
         ac:a5:c9:b9:97:49:1c:75:f2:1c:48:a5:f2:65:f6:6f:a6:24:
         8d:7e:a2:42:eb:50:12:f0:ee:6d:b7:92:4f:f1:f0:d6:a9:db:
         6b:e7:87:1e:7f:db:9a:9a:bf:57:cd:23:12:8e:86:07:70:45:
         62:64:63:c6:61:cd:75:87:97:04:63:f3:c3:b9:18:f0:48:78:
         6c:3e:ec:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----