Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/1/D1FE02A4C126A3FA7B9D44BEA18A15962D71BF70.mft
File:                     D1FE02A4C126A3FA7B9D44BEA18A15962D71BF70.mft (raw, json)
Hash identifier:          vPDs5KP0UpV3MD43wO0omO8mDG70NMq8OMyYFV5GRig=
Subject key identifier:   B4:3E:32:7A:68:78:E9:59:76:7E:5E:E2:50:C9:C3:A0:3D:0D:23:B7
Authority key identifier: D1:FE:02:A4:C1:26:A3:FA:7B:9D:44:BE:A1:8A:15:96:2D:71:BF:70
Certificate issuer:       /CN=D1FE02A4C126A3FA7B9D44BEA18A15962D71BF70
Certificate serial:       29D60B4E1270D279B92B4D6F3A02B99B69948351
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FE02A4C126A3FA7B9D44BEA18A15962D71BF70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/1/D1FE02A4C126A3FA7B9D44BEA18A15962D71BF70.mft
Manifest number:          74
Signing time:             Sat 29 Jun 2024 06:05:53 +0000
Manifest this update:     Sat 29 Jun 2024 06:00:53 +0000
Manifest next update:     Sun 30 Jun 2024 07:01:53 +0000
Files and hashes:         1: 323830343a3831633a3a2f33322d3438203d3e20323632333436.roa (hash: hZu2G4nb8hWlTLiDgOSiqjUQPMX+NzE486kx6wQOe0w=)
                          2: D1FE02A4C126A3FA7B9D44BEA18A15962D71BF70.crl (hash: q7kTqfpZ0fB54fQlx3Kg/oo+sqZhjcE5JqS5KpparC0=)
                          3: 3137392e3130372e35362e302f32312d3234203d3e20323632333436.roa (hash: x3ec5mU0z7jmSRQTz6sgoBUQbanQPGZ8e3kZvFYqhgQ=)
                          4: 3137372e3132352e3230342e302f32322d3234203d3e20323632333436.roa (hash: OiuH6ZF99sTEum+LdT+S7yIPQkEugL4RaxnesFrJGqs=)
                          5: 3137302e3135302e3130302e302f32322d3234203d3e20323632333436.roa (hash: 0vPGcVIWlBFyiwzUiftb4roc7HnoyWhXUs+2e7l1YGg=)
                          6: 3133382e39372e302e302f32322d3234203d3e20323632333436.roa (hash: VDmtBHPR2DoIaTXx1M4l2BtOEBEa7HU0bcA/M1iqOlw=)
                          7: 3134332e3230322e3232342e302f32322d3234203d3e20323632333436.roa (hash: +qu4aJxdBupY74tzXnORZCiGA3aOuZbwmbiPWaFRglk=)
                          8: 3137372e3132352e3136302e302f32312d3234203d3e20323632333436.roa (hash: Zery1MZJD9+0oYZto/fP7oJPm6Tnc/3LUD6XV55dBwo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:d6:0b:4e:12:70:d2:79:b9:2b:4d:6f:3a:02:b9:9b:69:94:83:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1FE02A4C126A3FA7B9D44BEA18A15962D71BF70
        Validity
            Not Before: Jun 29 06:00:53 2024 GMT
            Not After : Jun 30 07:01:53 2024 GMT
        Subject: CN=B43E327A6878E959767E5EE250C9C3A03D0D23B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:da:2a:88:8b:50:43:66:fb:b5:67:92:22:b3:
                    59:a4:12:d7:04:43:ec:ef:79:ec:04:4b:a3:4a:f2:
                    a0:77:9f:56:ec:b4:2b:7f:a0:bf:ac:3d:25:40:42:
                    1a:55:58:8e:81:fb:b1:b4:7e:97:1b:16:ad:7a:84:
                    c8:59:97:00:67:50:fd:e0:73:75:84:c9:68:ea:af:
                    b5:ca:49:ad:af:fe:08:4a:84:c5:2c:1c:79:16:06:
                    e0:3d:1b:aa:28:ac:c9:6a:b4:a8:32:e1:ef:79:fe:
                    74:b6:cb:4f:b8:2c:c0:18:6f:a2:f2:9b:5c:f3:d9:
                    3d:54:8e:4c:9e:1b:27:17:83:7e:e4:1b:1b:ff:89:
                    f2:50:ae:fd:5d:5b:b1:53:49:f6:a7:37:5d:7e:78:
                    0b:3c:17:9c:ba:32:62:75:2a:b5:02:cc:eb:99:91:
                    5f:a2:e1:eb:91:04:ef:02:f7:64:c8:92:cf:f9:36:
                    c9:32:fb:30:34:56:a6:18:24:19:3d:7d:42:42:95:
                    ff:3a:01:9d:49:01:58:01:15:65:e9:a9:44:11:33:
                    90:d0:a6:e9:f0:dc:c9:86:60:9a:50:d8:bd:6d:be:
                    4b:f2:0b:cf:f9:7e:1c:8c:b8:58:1f:5a:12:56:90:
                    c4:ad:bf:e9:3b:c9:a3:31:22:84:db:9d:86:f8:c9:
                    76:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3E:32:7A:68:78:E9:59:76:7E:5E:E2:50:C9:C3:A0:3D:0D:23:B7
            X509v3 Authority Key Identifier:
                keyid:D1:FE:02:A4:C1:26:A3:FA:7B:9D:44:BE:A1:8A:15:96:2D:71:BF:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/1/D1FE02A4C126A3FA7B9D44BEA18A15962D71BF70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FE02A4C126A3FA7B9D44BEA18A15962D71BF70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/1/D1FE02A4C126A3FA7B9D44BEA18A15962D71BF70.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:4f:74:a4:0a:a4:ce:d2:45:36:fd:c7:6a:22:67:73:0d:24:
         2a:e5:bb:81:b7:e7:f4:33:f1:4f:f2:79:9e:58:b3:a7:0f:5c:
         22:cf:d6:3c:0a:1b:4e:76:f6:5d:9f:24:26:d8:a3:4f:87:59:
         2d:f1:72:7c:1b:ee:37:5f:b0:46:ca:7a:d2:a2:f6:88:7f:06:
         83:a1:4f:ea:5f:a3:ba:ce:df:0b:a3:a1:9e:32:72:14:c9:ab:
         3a:d2:0a:17:e6:07:71:64:cd:bb:4b:c3:04:d4:32:10:64:f8:
         77:53:a3:7f:5d:6c:41:ca:af:18:1e:28:8d:74:f0:f4:b8:57:
         32:56:f7:f5:11:35:bc:7f:18:7d:d2:61:71:cf:a5:94:47:34:
         59:70:2e:91:61:62:5b:f9:d2:8d:da:ed:d4:1a:90:d2:32:b9:
         32:cc:23:b5:b4:dc:b5:a2:93:42:9a:c4:85:2f:42:41:60:3c:
         33:6a:b2:d2:62:b9:3f:70:c6:36:d9:28:aa:9e:fa:75:cc:3a:
         6d:68:b5:3e:fb:3a:8b:26:68:f0:de:09:78:d9:fd:9f:5c:76:
         12:61:72:c4:21:7d:72:4a:8a:b8:97:25:f9:55:73:e0:55:33:
         27:ee:28:0d:83:a9:bf:22:ed:b6:d4:24:e4:6c:93:68:1a:75:
         c6:77:c4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----