Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/0/135AE876E6C6DE65386EB266C9EEC0A2E23574DE.mft
File:                     135AE876E6C6DE65386EB266C9EEC0A2E23574DE.mft (raw, json)
Hash identifier:          J6JQqij4kKIVfJNdYuZqv0M/EaMrPvXN11NAa+31SHE=
Subject key identifier:   36:62:4E:77:26:B8:D1:02:F7:BC:9A:E2:08:FF:40:1C:5E:7D:26:39
Authority key identifier: 13:5A:E8:76:E6:C6:DE:65:38:6E:B2:66:C9:EE:C0:A2:E2:35:74:DE
Certificate issuer:       /CN=135AE876E6C6DE65386EB266C9EEC0A2E23574DE
Certificate serial:       6FD490143AD2173CAC1215EE5ADF60E7AA353694
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/135AE876E6C6DE65386EB266C9EEC0A2E23574DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/0/135AE876E6C6DE65386EB266C9EEC0A2E23574DE.mft
Manifest number:          0174
Signing time:             Sun 14 Apr 2024 22:52:25 +0000
Manifest this update:     Sun 14 Apr 2024 22:47:24 +0000
Manifest next update:     Tue 16 Apr 2024 01:39:24 +0000
Files and hashes:         1: 3137372e32332e35312e302f32342d3234203d3e20323730383638.roa (hash: NI64s6g1QVKa4JtYdRYRwHSL1krdwvEVnYNv0Qyjepc=)
                          2: 3137372e32332e34392e302f32342d3234203d3e20323730383638.roa (hash: Ynrwj39sVLSNz3beEEUi1DVlpuOyWzBNeHcbiWrWmbU=)
                          3: 323830343a373261633a3a2f33322d3332203d3e20323730383638.roa (hash: 25/S4UZGwYyCh5S1LiWU8ziBRuiufSZMMk3I3368FoY=)
                          4: 323830343a373261633a633030303a3a2f33342d3334203d3e20323730383638.roa (hash: LGVXlyU/P2WaT2u55VsNbosahMVHwEzrOpf8re8Bv44=)
                          5: 3137372e32332e35302e302f32342d3234203d3e20323730383638.roa (hash: An9OvOkKiIy0sgwtbQl4SsD8lWrFWLk74/FwPbIEXvk=)
                          6: 135AE876E6C6DE65386EB266C9EEC0A2E23574DE.crl (hash: EPVPZHeaTPIUU9NdLWQqDgUufsNqVbDuARKRHUP0HP0=)
                          7: 3137372e32332e34382e302f32322d3232203d3e20323730383638.roa (hash: r6D8TXry2xoXxKkle59IJ/SsUcR/8Bfm/fRdikM7log=)
                          8: 3137372e32332e34382e302f32342d3234203d3e20323730383638.roa (hash: UxFx7rKzfZIdFn/I33DHrooo2RhjJTcyVy1DidfD2Nw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:d4:90:14:3a:d2:17:3c:ac:12:15:ee:5a:df:60:e7:aa:35:36:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135AE876E6C6DE65386EB266C9EEC0A2E23574DE
        Validity
            Not Before: Apr 14 22:47:24 2024 GMT
            Not After : Apr 16 01:39:24 2024 GMT
        Subject: CN=36624E7726B8D102F7BC9AE208FF401C5E7D2639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d5:ce:ca:ae:f4:df:1e:1c:90:ae:7e:b3:18:
                    b7:5f:66:8f:82:96:8d:5a:5f:9c:1a:66:4e:8e:d9:
                    f5:25:a6:f0:36:8a:97:b4:84:8f:cf:78:56:7d:1e:
                    f2:83:17:82:83:ef:ce:c5:67:ef:7c:8c:87:60:e8:
                    2b:0e:e5:52:b6:5d:0f:00:33:ec:c9:85:47:af:4d:
                    9e:68:06:c6:9c:61:28:f7:5c:48:06:99:3f:df:0d:
                    fe:52:43:72:cb:61:40:66:65:30:9a:6b:89:fc:28:
                    a5:b6:18:fd:50:ef:8d:ad:87:6e:4f:7e:29:cb:ab:
                    df:81:4c:e1:08:d6:07:41:3d:26:23:a4:b8:03:3a:
                    f7:82:8c:5c:b5:89:4e:ec:ee:80:67:92:de:85:34:
                    5c:e9:e5:f6:c7:71:0c:3b:88:9c:4d:f5:5e:c2:be:
                    01:ec:84:37:40:42:d6:f2:40:5c:a2:ee:5b:21:01:
                    2a:fd:15:30:1d:90:3f:d1:bd:0f:90:da:76:ca:1a:
                    56:9f:5c:37:98:db:5e:36:4c:1a:dc:5d:77:ae:c6:
                    57:88:8a:9d:e8:34:08:fb:46:dd:55:f9:4a:67:0e:
                    7e:93:e6:83:08:5e:37:2f:91:8e:02:cd:fd:b0:3d:
                    36:8e:a5:29:ca:9a:18:d4:6a:8d:46:f3:60:ee:a1:
                    7c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:62:4E:77:26:B8:D1:02:F7:BC:9A:E2:08:FF:40:1C:5E:7D:26:39
            X509v3 Authority Key Identifier:
                keyid:13:5A:E8:76:E6:C6:DE:65:38:6E:B2:66:C9:EE:C0:A2:E2:35:74:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/0/135AE876E6C6DE65386EB266C9EEC0A2E23574DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/135AE876E6C6DE65386EB266C9EEC0A2E23574DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/0/135AE876E6C6DE65386EB266C9EEC0A2E23574DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:55:cb:6c:d1:28:62:42:c9:30:24:b7:f3:7d:df:e6:3e:77:
         b1:0b:45:6b:fc:3d:34:7f:ed:1c:7a:69:09:42:1a:13:18:e3:
         5f:26:b3:9c:52:bd:28:95:a3:3d:5f:1c:44:1e:e7:b4:8b:50:
         b3:38:0f:e6:46:0a:b2:44:ab:ca:9f:de:5e:1a:98:9d:06:7b:
         33:3a:a1:fa:95:9a:f3:06:c1:62:be:18:78:72:dc:c5:66:bf:
         f8:3a:dc:c9:96:fd:ec:e9:74:78:74:6e:9f:f2:cc:f4:d0:e1:
         8e:51:a2:f6:d6:36:2f:32:ef:a4:e3:e0:9b:04:04:a5:05:3a:
         e2:b8:e9:64:21:94:d7:eb:0e:fd:3a:34:3d:30:1a:94:5b:78:
         78:56:13:f9:38:66:ee:48:bd:93:3d:79:8c:ab:bf:9a:16:a7:
         7c:e9:1e:aa:85:68:7e:47:16:74:1b:aa:ff:61:8d:57:e0:47:
         73:54:e1:79:c9:6a:a9:c8:e8:b8:55:31:22:8a:15:ec:01:b0:
         2d:e2:b6:b8:26:6b:94:ff:ce:0d:78:1f:bf:a2:93:a4:84:9a:
         40:a3:31:e5:b9:fb:24:03:22:d6:97:23:e6:2a:a5:a5:92:44:
         5c:a0:78:f3:19:2a:79:67:52:3b:31:24:e8:5c:be:5d:91:c2:
         50:b9:70:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----