Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/E73CC4133445C1C02209E8161C57A8F199365464.mft
File:                     E73CC4133445C1C02209E8161C57A8F199365464.mft (raw, json)
Hash identifier:          hqyU+CrWeNxULWe4y7g6B+CCYEDEhlgE1ql0lfhCUTw=
Subject key identifier:   F3:B6:1A:B3:20:F9:22:A0:18:6F:EA:87:A4:61:80:BD:F7:3A:E1:C7
Authority key identifier: E7:3C:C4:13:34:45:C1:C0:22:09:E8:16:1C:57:A8:F1:99:36:54:64
Certificate issuer:       /CN=E73CC4133445C1C02209E8161C57A8F199365464
Certificate serial:       4D24841264E7DC47324B0F3F92164FBD10D489CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E73CC4133445C1C02209E8161C57A8F199365464.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/E73CC4133445C1C02209E8161C57A8F199365464.mft
Manifest number:          1C
Signing time:             Tue 28 May 2024 02:16:35 +0000
Manifest this update:     Tue 28 May 2024 02:11:35 +0000
Manifest next update:     Wed 29 May 2024 05:20:35 +0000
Files and hashes:         1: E73CC4133445C1C02209E8161C57A8F199365464.crl (hash: fxX6X3Ym4OeLZbKKfAnp7PNL78XmuzFG1dReDjYefBE=)
                          2: 323830313a38303a323265303a3a2f34382d3438203d3e20323637303836.roa (hash: KGOWUrwec4xckViqPzXMOMr9pE0YIKptGux9/pgQI20=)
                          3: 34352e3232342e3138352e302f32342d3234203d3e20323637303836.roa (hash: x5g09FLRfdNagQRVFCFR+AwhbGPMpFVmDIzb3W2vX78=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:24:84:12:64:e7:dc:47:32:4b:0f:3f:92:16:4f:bd:10:d4:89:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E73CC4133445C1C02209E8161C57A8F199365464
        Validity
            Not Before: May 28 02:11:35 2024 GMT
            Not After : May 29 05:20:35 2024 GMT
        Subject: CN=F3B61AB320F922A0186FEA87A46180BDF73AE1C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:45:ee:ba:9f:6d:d3:b1:e8:eb:ca:5b:03:81:
                    0e:a5:8d:0d:8b:9b:fc:73:bf:11:84:8a:68:02:c2:
                    9b:bb:38:2c:14:6c:a3:d9:d0:68:3b:c8:7c:4c:7b:
                    f2:d6:ce:4e:b2:03:c6:b3:a5:e7:9a:a2:dc:56:4b:
                    86:d0:92:1c:a0:09:e9:f9:fc:0a:84:9a:4b:7a:de:
                    df:ac:a8:8d:bb:13:f2:ca:60:7e:15:f4:1b:51:33:
                    1b:77:ef:ff:a9:c8:2a:b6:6c:d0:24:14:15:46:8d:
                    a4:89:1e:cf:38:6b:ab:e2:71:33:bb:f9:20:e6:d2:
                    2d:b0:3b:15:49:40:c0:6b:d0:90:92:04:56:06:be:
                    31:b5:2e:d1:fd:a5:20:ca:06:e2:c9:10:bd:24:c3:
                    84:9b:39:92:87:e4:33:a0:41:b0:3e:93:c8:ae:1d:
                    a9:e5:75:95:7b:01:58:28:5f:ac:41:7b:5f:1d:1a:
                    d9:60:f3:54:0a:9e:aa:45:09:1b:1b:02:2b:2d:e7:
                    ca:dc:2f:09:3f:e3:0e:15:68:4b:77:97:6c:52:21:
                    23:d3:9f:c0:78:a4:b1:a4:0d:a1:51:a7:9d:d5:9c:
                    56:04:ff:a3:c4:76:62:d8:a2:99:56:16:09:43:3c:
                    da:59:5e:56:79:bf:b7:8a:92:9a:58:24:82:79:dc:
                    b7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B6:1A:B3:20:F9:22:A0:18:6F:EA:87:A4:61:80:BD:F7:3A:E1:C7
            X509v3 Authority Key Identifier:
                keyid:E7:3C:C4:13:34:45:C1:C0:22:09:E8:16:1C:57:A8:F1:99:36:54:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/E73CC4133445C1C02209E8161C57A8F199365464.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E73CC4133445C1C02209E8161C57A8F199365464.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/E73CC4133445C1C02209E8161C57A8F199365464.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:4e:5c:50:39:1a:2d:f1:90:a8:5c:a4:51:db:14:c8:a5:4a:
         56:5a:65:9a:50:bb:67:9a:53:da:99:79:04:11:b7:81:77:e7:
         e5:87:83:66:a5:f8:22:f7:a8:15:4c:8c:05:ba:89:53:e9:af:
         fc:c5:d1:e9:8a:d4:3f:8d:6c:91:6c:4d:d2:8c:68:d3:f7:5a:
         a4:98:9a:c6:e9:cd:03:1f:4e:dc:b4:38:84:06:23:ee:7f:18:
         e0:53:b8:b5:e0:1e:ea:a1:18:d6:f3:de:dd:39:19:02:b9:0e:
         0a:c2:4e:45:9e:26:0a:09:a0:b5:8f:b3:ed:2b:cb:b6:c2:8d:
         5c:f3:58:2a:61:cd:17:c5:42:a2:5d:e8:9e:81:1a:a5:fc:fa:
         7e:cf:54:da:20:0f:28:f0:6d:ca:3f:2e:30:1f:f1:22:a6:86:
         50:bb:e0:e5:b9:4f:70:4a:0e:6b:e1:46:eb:ae:56:8f:8b:f1:
         8a:0f:8a:92:a3:95:d8:9b:f4:bb:76:ad:84:70:85:93:9d:c1:
         c4:7b:33:93:52:11:18:cf:f7:8f:d1:2c:d5:ba:a5:8e:9e:13:
         61:e2:78:bf:e5:96:a8:84:2b:c5:ea:66:43:2d:09:a8:b2:86:
         d9:5e:36:38:ee:fe:24:38:99:72:8d:85:d4:7d:3c:06:f9:48:
         2b:4e:42:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----