Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/F5Fmj9EGcbrrt88ZA1gK9hMej3mzrX5ktxAj9L4ureWm/0/7E6045AB7A15F2073A2CCE34EDD7C6A6EB04DC68.mft
File:                     7E6045AB7A15F2073A2CCE34EDD7C6A6EB04DC68.mft (raw, json)
Hash identifier:          1dw4R7Mn9z89APAqn71fXLm76mUWwd/YsGBu4XbL4xk=
Subject key identifier:   C0:79:51:3C:39:36:0E:36:36:28:48:CB:0D:AF:4E:D8:47:D0:CB:6B
Authority key identifier: 7E:60:45:AB:7A:15:F2:07:3A:2C:CE:34:ED:D7:C6:A6:EB:04:DC:68
Certificate issuer:       /CN=7E6045AB7A15F2073A2CCE34EDD7C6A6EB04DC68
Certificate serial:       235A2353C475BFEEECA73862E7F1BE342F6C7D18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E6045AB7A15F2073A2CCE34EDD7C6A6EB04DC68.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F5Fmj9EGcbrrt88ZA1gK9hMej3mzrX5ktxAj9L4ureWm/0/7E6045AB7A15F2073A2CCE34EDD7C6A6EB04DC68.mft
Manifest number:          0328
Signing time:             Mon 15 Apr 2024 05:06:23 +0000
Manifest this update:     Mon 15 Apr 2024 05:01:23 +0000
Manifest next update:     Tue 16 Apr 2024 05:36:23 +0000
Files and hashes:         1: 323830343a353235303a3a2f33322d3438203d3e20323638353130.roa (hash: iBBYUrujEEp8/2Pdrot1i0hGvdy6ym9gLqegC8ZGNM8=)
                          2: 34352e3136312e3134342e302f32322d3234203d3e20323638353130.roa (hash: HyG5Bjs2+tLb0q+yGrTkTAKOld7Ypz9dWawhFgqVTcM=)
                          3: 7E6045AB7A15F2073A2CCE34EDD7C6A6EB04DC68.crl (hash: jbbZk6H6YqVdvkDjkJjc2VnF6CrWAf+4maONjcSAndk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:5a:23:53:c4:75:bf:ee:ec:a7:38:62:e7:f1:be:34:2f:6c:7d:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E6045AB7A15F2073A2CCE34EDD7C6A6EB04DC68
        Validity
            Not Before: Apr 15 05:01:23 2024 GMT
            Not After : Apr 16 05:36:23 2024 GMT
        Subject: CN=C079513C39360E36362848CB0DAF4ED847D0CB6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ba:90:03:c6:d0:17:a1:ac:aa:96:20:84:76:
                    ce:cf:d9:45:a7:e8:bd:89:92:22:fe:87:2e:ed:03:
                    bd:94:89:d3:22:3b:4c:4e:04:66:a0:8e:61:16:e7:
                    c6:a3:91:12:91:80:dc:ce:9e:e7:03:b1:0f:1a:19:
                    4c:ae:65:2a:a8:19:df:45:54:c0:8c:ec:36:98:0f:
                    fa:68:9e:9f:b9:63:4e:d3:79:ca:13:f3:e1:0e:89:
                    0a:ad:74:25:79:6f:69:00:6b:f4:d7:e9:a9:f6:12:
                    92:38:42:b0:c4:c0:a5:01:8d:c8:b0:ba:0a:ef:0a:
                    8b:34:c8:ef:0d:bf:e3:18:59:41:9f:78:0a:6b:6c:
                    a3:eb:44:e6:8d:71:3b:ea:51:d8:31:ac:58:53:25:
                    a5:aa:42:37:7c:95:eb:82:99:05:63:0a:d8:2c:4a:
                    ce:e9:be:a4:c4:2f:35:d5:6a:f6:59:80:b8:5b:d9:
                    c3:56:8a:92:31:09:b9:d0:13:b7:99:4e:1a:22:db:
                    0f:da:2b:4e:66:84:cd:d7:19:09:57:b2:6a:f8:52:
                    2a:4f:a8:eb:ab:41:ac:09:f5:2e:43:c6:b7:bb:da:
                    8b:aa:da:0e:ca:ba:2d:aa:97:73:85:1d:60:16:24:
                    90:3e:12:50:e0:ee:35:59:53:77:1a:ee:3d:89:92:
                    66:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:79:51:3C:39:36:0E:36:36:28:48:CB:0D:AF:4E:D8:47:D0:CB:6B
            X509v3 Authority Key Identifier:
                keyid:7E:60:45:AB:7A:15:F2:07:3A:2C:CE:34:ED:D7:C6:A6:EB:04:DC:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F5Fmj9EGcbrrt88ZA1gK9hMej3mzrX5ktxAj9L4ureWm/0/7E6045AB7A15F2073A2CCE34EDD7C6A6EB04DC68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E6045AB7A15F2073A2CCE34EDD7C6A6EB04DC68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F5Fmj9EGcbrrt88ZA1gK9hMej3mzrX5ktxAj9L4ureWm/0/7E6045AB7A15F2073A2CCE34EDD7C6A6EB04DC68.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:96:5f:ef:33:f4:3b:68:3e:7c:44:ee:a2:12:16:28:f9:73:
         bb:2c:a1:aa:01:0a:72:7a:b8:51:36:cd:73:f9:af:79:d9:85:
         a0:1a:5e:b3:f1:9f:59:70:63:fe:98:ad:3a:38:e8:51:46:5a:
         1e:64:ca:ac:9d:0b:83:d5:32:94:5a:5d:7a:b6:b5:72:49:51:
         00:50:01:bf:27:07:5c:f4:13:ab:25:90:9f:59:0d:d5:97:3d:
         b3:ce:1a:23:2a:42:44:3a:7a:db:97:6f:76:c0:89:96:fa:8b:
         c8:8f:15:7b:a9:a2:f5:ce:70:2e:c6:cb:3a:d5:a3:57:1d:7d:
         2d:9d:b5:66:06:50:c9:de:be:d5:06:1a:17:fc:36:96:56:49:
         e8:90:4a:71:18:10:30:1b:d0:7d:0e:07:51:da:34:85:12:c0:
         87:09:6b:14:bb:a1:b1:b1:30:04:cd:39:75:51:21:a4:94:28:
         27:8d:3b:a4:9b:86:df:48:e2:f2:36:6f:d4:08:61:a1:9c:d8:
         77:5e:2c:dd:1f:90:30:8a:ee:bd:36:9c:5f:26:4d:71:af:61:
         9a:8b:54:86:9c:63:6c:70:94:2f:8f:c9:a1:46:ca:e5:99:59:
         49:91:6b:fe:50:04:65:d6:2a:99:2d:cb:26:0d:70:ed:81:ff:
         f2:a6:42:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----