Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/0/037CFBEF4360D939B791BA110ABD4575EA3F3A7E.mft
File:                     037CFBEF4360D939B791BA110ABD4575EA3F3A7E.mft (raw, json)
Hash identifier:          wyBgjrbmqD9MApc3G0LBGTyI6Y/5txWUkrv7/lbS6gs=
Subject key identifier:   E2:4F:1C:EA:4B:79:8A:C3:60:81:2E:05:B4:E8:80:6F:9D:FE:B3:C6
Authority key identifier: 03:7C:FB:EF:43:60:D9:39:B7:91:BA:11:0A:BD:45:75:EA:3F:3A:7E
Certificate issuer:       /CN=037CFBEF4360D939B791BA110ABD4575EA3F3A7E
Certificate serial:       78DC9054F68267C9A798AABAC63168B06EE349A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/037CFBEF4360D939B791BA110ABD4575EA3F3A7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/0/037CFBEF4360D939B791BA110ABD4575EA3F3A7E.mft
Manifest number:          0238
Signing time:             Sun 14 Apr 2024 17:49:07 +0000
Manifest this update:     Sun 14 Apr 2024 17:44:07 +0000
Manifest next update:     Mon 15 Apr 2024 20:59:07 +0000
Files and hashes:         1: 323830343a346262383a3a2f33322d3438203d3e20323637333236.roa (hash: kye8vzmH/lALDyOr2Zm9g1I1hG7Rl0jKatWXt9dxOYY=)
                          2: 34352e3233332e3138342e302f32322d3234203d3e20323637333236.roa (hash: b1Q+dtU9b5y4jgEgo6PZ3f80rXnm02RptopKCP59w0I=)
                          3: 037CFBEF4360D939B791BA110ABD4575EA3F3A7E.crl (hash: 6lEs0liNX8n2HhqFOX62oLokoJNazsUEpWt3BAOJa1g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:dc:90:54:f6:82:67:c9:a7:98:aa:ba:c6:31:68:b0:6e:e3:49:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037CFBEF4360D939B791BA110ABD4575EA3F3A7E
        Validity
            Not Before: Apr 14 17:44:07 2024 GMT
            Not After : Apr 15 20:59:07 2024 GMT
        Subject: CN=E24F1CEA4B798AC360812E05B4E8806F9DFEB3C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b5:c6:df:a3:45:a0:16:2f:3c:07:11:77:76:
                    14:2e:6a:6d:19:b6:ee:e8:2e:88:bd:d2:cc:35:3c:
                    e0:65:b8:8b:27:96:48:c5:ad:32:39:db:90:7c:fa:
                    cc:2c:5d:fc:3a:09:d8:3d:f4:b0:ba:b1:96:24:5a:
                    26:60:db:5f:45:94:77:f2:10:dc:24:d4:b1:e1:6f:
                    dd:99:fa:3f:c9:1b:82:e0:3b:51:04:e1:39:f9:99:
                    16:77:1c:e1:ff:c7:c8:c3:3c:27:c5:54:50:92:82:
                    24:d3:e5:7e:ce:6b:90:b8:02:bd:7a:bb:fa:50:10:
                    51:f5:ba:e4:6f:ff:12:59:f8:c0:9e:fc:51:1a:f0:
                    76:27:54:14:84:6f:27:96:7e:0b:04:23:1d:a6:96:
                    70:fc:f9:26:41:6f:78:91:0f:99:9f:0f:5b:5e:e8:
                    51:90:fd:a7:f6:c2:6a:64:03:12:bb:65:21:11:6a:
                    b7:6d:9f:9d:1b:c0:90:aa:75:7f:98:88:85:4f:d0:
                    bf:39:83:27:be:32:94:1e:78:c4:05:bb:8b:91:33:
                    eb:9f:88:34:aa:42:ae:7c:b1:94:23:d0:84:a2:cc:
                    c2:44:16:1f:0a:f8:7c:68:42:1f:11:b9:9f:89:2e:
                    b5:e2:4a:61:3f:7b:8f:ae:d5:04:fd:80:6d:2a:81:
                    51:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:4F:1C:EA:4B:79:8A:C3:60:81:2E:05:B4:E8:80:6F:9D:FE:B3:C6
            X509v3 Authority Key Identifier:
                keyid:03:7C:FB:EF:43:60:D9:39:B7:91:BA:11:0A:BD:45:75:EA:3F:3A:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/0/037CFBEF4360D939B791BA110ABD4575EA3F3A7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/037CFBEF4360D939B791BA110ABD4575EA3F3A7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/0/037CFBEF4360D939B791BA110ABD4575EA3F3A7E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:f6:16:c1:91:35:c1:16:14:0e:00:44:87:8f:eb:e6:6e:35:
         c8:ff:4d:9a:16:6f:ed:36:c3:a8:b6:19:47:b5:35:40:a6:cf:
         5a:8c:b5:4e:3a:b5:51:0f:6b:9d:28:e3:00:d0:07:08:1f:35:
         95:dc:12:08:0f:d3:57:a5:a3:4c:03:af:e5:58:8b:53:f4:db:
         82:20:0f:45:0c:0a:70:78:4d:f6:2b:19:64:d6:5e:e4:84:c7:
         81:25:2b:fa:ef:9c:39:db:ac:73:f5:81:25:95:06:4f:f3:77:
         2e:1e:d0:47:a3:41:ca:42:63:60:4f:74:89:79:ad:8a:07:b1:
         99:51:6c:ba:fe:41:9c:af:72:b9:0e:f0:19:66:25:c1:61:e5:
         a2:af:9b:83:09:ba:70:d5:94:0c:10:f6:3c:ac:68:35:62:b4:
         65:42:55:08:e2:15:1b:d3:37:6d:9e:8c:46:9f:67:f8:ec:31:
         f7:ff:36:92:ed:7e:82:3e:30:25:7c:a9:d5:df:3e:b2:3a:52:
         72:95:d9:56:36:dd:b0:68:95:77:0a:3a:70:c0:60:fc:59:d1:
         f2:c6:2a:34:2f:3b:79:dc:de:3e:71:36:a1:78:39:d0:1c:fa:
         0b:c6:43:f3:13:00:93:2e:aa:46:8b:b6:b2:d1:1a:1f:26:95:
         85:4f:06:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----