Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/0/77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584.mft
File:                     77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584.mft (raw, json)
Hash identifier:          GcwX4Q2RhlGTTveQFVMddV+/JZ03soqKGw77zwNB9Qk=
Subject key identifier:   33:5A:57:19:3A:6E:C5:6B:E9:9C:64:56:1F:9F:C3:38:A8:F3:A1:CA
Authority key identifier: 77:C4:A5:DA:4D:D0:85:BD:79:FC:AA:10:1C:5D:8E:57:3F:C9:F5:84
Certificate issuer:       /CN=77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584
Certificate serial:       6878F1668CCAC5A22F0ED45C4E3D56EBAF633312
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/0/77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584.mft
Manifest number:          052D
Signing time:             Mon 15 Apr 2024 01:33:36 +0000
Manifest this update:     Mon 15 Apr 2024 01:28:36 +0000
Manifest next update:     Tue 16 Apr 2024 02:22:36 +0000
Files and hashes:         1: 3132382e3230312e3138382e302f32322d3332203d3e20323635383936.roa (hash: J6W8718DP32XC6Tjxhj/Bq2u5C/ljL817hqhLmkTOS0=)
                          2: 323830343a336637633a3a2f33322d313238203d3e20323635383936.roa (hash: C64u0U0JuTEzBnHrRDKZ9qQcP4f7StXlt/+c0EJvRSU=)
                          3: 77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584.crl (hash: DNfL8kbpxFHxc+eu0G0GPjlyLw2lZFrWkvUC9UhcCdE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:78:f1:66:8c:ca:c5:a2:2f:0e:d4:5c:4e:3d:56:eb:af:63:33:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584
        Validity
            Not Before: Apr 15 01:28:36 2024 GMT
            Not After : Apr 16 02:22:36 2024 GMT
        Subject: CN=335A57193A6EC56BE99C64561F9FC338A8F3A1CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:69:81:33:c9:13:0d:a0:1f:a4:92:55:59:2b:
                    c8:d3:af:50:cf:4c:e4:ad:fb:6b:3e:70:3e:49:f9:
                    ec:5b:4b:26:08:ad:5f:e4:64:e3:91:5f:ce:3f:0f:
                    7b:c9:d7:0b:08:be:15:71:c2:c2:8a:e3:14:9f:7e:
                    25:fd:fd:61:d6:5d:d2:29:3a:8a:1e:74:c3:5a:8e:
                    4f:88:82:ea:b3:5c:b1:24:ac:f2:b0:70:91:95:7d:
                    5e:23:e9:24:25:6d:df:de:48:e0:0a:9c:ce:05:4d:
                    70:9e:ab:57:93:14:42:d3:13:6a:06:c7:e7:18:89:
                    64:ea:8e:b6:e2:6d:12:96:1d:82:16:c5:31:31:6f:
                    bd:4d:54:2b:28:f1:cb:b2:87:e7:26:13:a2:fa:0b:
                    84:50:fb:1d:e8:5d:a9:dd:65:16:ee:19:b8:39:0c:
                    98:c5:8d:4a:0b:35:71:ed:f4:8d:f9:a3:07:2f:0d:
                    43:d2:8e:cb:7e:33:34:dc:34:e0:5b:c4:9a:ba:de:
                    1e:d4:54:99:6d:ee:41:1f:bc:08:52:aa:0d:73:74:
                    ca:e4:10:37:85:29:dd:b2:8b:ba:93:26:28:30:2b:
                    46:ab:08:01:9d:3c:1e:97:20:b2:cb:29:39:af:db:
                    5f:7f:db:9a:f1:97:bf:76:3b:b5:38:09:a0:bd:dc:
                    c6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:5A:57:19:3A:6E:C5:6B:E9:9C:64:56:1F:9F:C3:38:A8:F3:A1:CA
            X509v3 Authority Key Identifier:
                keyid:77:C4:A5:DA:4D:D0:85:BD:79:FC:AA:10:1C:5D:8E:57:3F:C9:F5:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/0/77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/0/77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:a9:99:50:39:fe:65:4b:3e:72:85:5e:fb:bd:01:ba:85:93:
         3c:38:3a:29:f8:a4:a6:df:06:2c:4b:cd:15:04:d7:7e:23:a3:
         a0:03:92:2a:5f:2b:04:e4:75:75:35:38:46:8d:40:05:91:4d:
         88:52:75:88:07:3e:85:6a:c3:dc:b9:a5:56:57:bb:ee:93:c3:
         e9:86:2e:24:98:2a:07:f9:fe:a8:a4:a1:3e:47:40:71:b0:86:
         48:8f:b9:25:9f:d6:8a:24:e4:cb:22:9e:be:26:41:7a:ef:85:
         b6:f3:b9:49:76:98:47:05:50:67:26:8b:77:ab:a2:bb:d4:ac:
         85:1c:e0:a3:93:e8:20:47:88:55:ef:00:7c:34:b6:26:0e:46:
         c6:f8:2a:03:1f:70:c7:61:44:b9:2b:77:d7:cb:73:6e:c8:7d:
         79:a8:0c:f6:5a:94:7f:3d:e9:e5:20:da:47:15:aa:42:38:ad:
         da:8e:45:b8:dc:63:3a:3f:9e:a4:40:be:f3:6c:9a:b7:66:13:
         45:e1:ce:ba:7e:38:6d:7d:29:41:da:24:07:93:6f:5b:a0:6b:
         e0:57:09:b8:19:46:ab:18:74:e8:18:ae:22:3a:91:90:9e:23:
         da:fa:96:ae:9a:1e:77:b9:33:8a:54:5c:b4:c5:d8:c9:6c:a0:
         95:5a:43:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----