Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/1/70263C6B4E9B9CFA414F3898519C9B8B44D12959.mft
File:                     70263C6B4E9B9CFA414F3898519C9B8B44D12959.mft (raw, json)
Hash identifier:          PYhKj2mRoZMF0YC/7vSCuhh4p8U3lFNhZJfAVMQyuDQ=
Subject key identifier:   84:04:06:80:B1:B4:1F:BB:F6:28:47:53:D5:4F:6A:20:21:AD:09:83
Authority key identifier: 70:26:3C:6B:4E:9B:9C:FA:41:4F:38:98:51:9C:9B:8B:44:D1:29:59
Certificate issuer:       /CN=70263C6B4E9B9CFA414F3898519C9B8B44D12959
Certificate serial:       3A9001A40A1748831BD6C76EABB0DE3689B8CCC3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70263C6B4E9B9CFA414F3898519C9B8B44D12959.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/1/70263C6B4E9B9CFA414F3898519C9B8B44D12959.mft
Manifest number:          0121
Signing time:             Sun 14 Apr 2024 19:00:57 +0000
Manifest this update:     Sun 14 Apr 2024 18:55:57 +0000
Manifest next update:     Mon 15 Apr 2024 22:50:57 +0000
Files and hashes:         1: 3137392e3132352e31322e302f32322d3234203d3e20323731373337.roa (hash: athID6XlDWL5XMugb6AJtiCQnipt3ktaj+Cv0fsnclY=)
                          2: 323830343a383033383a3a2f33322d3336203d3e20323731373337.roa (hash: WzIng07AdAMwGBWAXCUoJi2b+Lx5rSJFj5gZn1drkSs=)
                          3: 70263C6B4E9B9CFA414F3898519C9B8B44D12959.crl (hash: hJKyMYxGQIHGZK7/7cibxku4hkuPWXgatWs3rBkJucY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:90:01:a4:0a:17:48:83:1b:d6:c7:6e:ab:b0:de:36:89:b8:cc:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70263C6B4E9B9CFA414F3898519C9B8B44D12959
        Validity
            Not Before: Apr 14 18:55:57 2024 GMT
            Not After : Apr 15 22:50:57 2024 GMT
        Subject: CN=84040680B1B41FBBF6284753D54F6A2021AD0983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f0:00:ac:79:92:52:cc:10:af:f3:f2:5d:03:
                    5c:c9:89:8e:77:53:d3:3e:7e:4a:e0:6e:4c:f4:a8:
                    15:fc:71:16:d1:03:57:18:b1:c2:41:7e:00:3c:f5:
                    f4:1a:a7:8c:f4:54:24:b0:e1:17:74:d1:5f:27:26:
                    5e:da:4e:72:6f:59:72:73:6f:55:a1:0f:05:3d:cc:
                    46:7e:be:1f:42:e2:f5:0d:38:9d:8c:df:5e:fa:79:
                    12:a1:92:90:52:d9:6f:76:2b:61:e4:d1:6f:6c:02:
                    ff:06:ab:93:1a:7b:64:d3:12:29:a3:f8:24:32:98:
                    50:84:bc:c2:3a:6a:22:ba:25:2c:43:e6:28:91:94:
                    4e:97:c6:c7:b5:7f:eb:c3:96:67:26:e6:ec:43:b8:
                    92:3d:ae:3e:43:5a:9e:97:6a:cb:d1:b7:40:85:0c:
                    3b:ae:16:96:02:97:11:e7:c6:b2:f4:4e:c2:c6:09:
                    07:07:75:9f:a8:b3:89:86:82:0b:25:0d:0f:c8:d1:
                    68:55:78:68:21:df:94:e6:02:c7:91:1b:3d:5a:2d:
                    da:ac:eb:25:fa:ab:d7:e7:2d:0f:f5:40:28:33:e2:
                    49:c5:2d:de:49:25:ef:90:2e:ff:36:b5:41:15:74:
                    6b:4b:32:06:37:22:02:0a:d3:30:b1:a8:63:f8:55:
                    97:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:04:06:80:B1:B4:1F:BB:F6:28:47:53:D5:4F:6A:20:21:AD:09:83
            X509v3 Authority Key Identifier:
                keyid:70:26:3C:6B:4E:9B:9C:FA:41:4F:38:98:51:9C:9B:8B:44:D1:29:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/1/70263C6B4E9B9CFA414F3898519C9B8B44D12959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70263C6B4E9B9CFA414F3898519C9B8B44D12959.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/1/70263C6B4E9B9CFA414F3898519C9B8B44D12959.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:fa:9f:03:c7:90:13:ea:b3:81:b5:1c:e4:c6:6e:3d:c9:c8:
         3c:2e:6d:03:fa:41:f4:a9:df:61:71:f4:c9:15:6b:94:a8:4d:
         0a:0b:d1:89:43:c0:cd:65:0d:3b:90:f7:d9:48:37:33:db:34:
         55:3f:20:97:3d:06:8b:06:e1:6e:2e:5f:e2:89:7a:9c:50:82:
         67:ec:cc:9e:8d:4a:c3:01:e2:54:f6:e0:69:30:e9:fe:99:1a:
         56:36:87:9a:71:27:44:ad:da:1b:57:99:bb:6a:e0:fa:fd:aa:
         15:93:94:8e:40:2c:e8:06:46:04:58:82:59:2d:8c:42:74:e1:
         22:d2:7c:6b:9a:7a:7d:58:ef:50:d2:95:c9:d5:de:07:e0:50:
         4f:3b:b2:6a:d8:6f:a3:51:4d:9c:80:4c:6a:05:e4:7e:4f:a1:
         7a:28:e2:d8:34:aa:c9:4a:92:89:b7:44:1c:e9:6a:bb:e9:65:
         bb:a4:ad:2f:9a:68:75:11:bf:ca:5d:83:0a:c7:bf:1e:29:10:
         64:0d:85:2d:87:87:0f:cf:a7:96:48:89:01:1b:31:ee:ef:28:
         74:e5:2c:64:c0:4d:69:ff:b7:39:24:34:f0:25:2d:dd:99:35:
         f7:95:8d:bb:c2:2f:5b:ee:8b:ae:2d:03:2d:bf:9f:51:10:86:
         0c:96:7e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----