Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/0/D78AB6EBF2B6BF018794346C88788B0C3780E915.mft
File:                     D78AB6EBF2B6BF018794346C88788B0C3780E915.mft (raw, json)
Hash identifier:          rTEFEETBbtRw8jtH3mqv6UVPZyRHVEB50+zeIu3+yxU=
Subject key identifier:   3D:C6:22:1C:26:92:25:3F:7C:26:5B:85:59:96:13:EB:25:71:05:BB
Authority key identifier: D7:8A:B6:EB:F2:B6:BF:01:87:94:34:6C:88:78:8B:0C:37:80:E9:15
Certificate issuer:       /CN=D78AB6EBF2B6BF018794346C88788B0C3780E915
Certificate serial:       0110F1766A035B2EF3A19939E84C792DD09D4E26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D78AB6EBF2B6BF018794346C88788B0C3780E915.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/0/D78AB6EBF2B6BF018794346C88788B0C3780E915.mft
Manifest number:          07
Signing time:             Sun 10 Dec 2023 07:23:18 +0000
Manifest this update:     Sun 10 Dec 2023 07:18:18 +0000
Manifest next update:     Mon 11 Dec 2023 10:00:18 +0000
Files and hashes:         1: D78AB6EBF2B6BF018794346C88788B0C3780E915.crl (hash: Jei2ieQKtt1NfDTg3kF5VY/3uXT9Idp9VjDPMMRYNrM=)
                          2: 323830343a333564383a3a2f33322d3332203d3e20323636333130.roa (hash: E4w78E/NgLlwuSq78DsPqziIN8z4mpZiF0t9m5znpKw=)
                          3: 3137302e37392e3139362e302f32322d3232203d3e20323636333130.roa (hash: NKG/KWl7BSumr6Rj8dh1DawzWYPjL9nuKf0RQF/gWaM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:10:f1:76:6a:03:5b:2e:f3:a1:99:39:e8:4c:79:2d:d0:9d:4e:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D78AB6EBF2B6BF018794346C88788B0C3780E915
        Validity
            Not Before: Dec 10 07:18:18 2023 GMT
            Not After : Dec 11 10:00:18 2023 GMT
        Subject: CN=3DC6221C2692253F7C265B85599613EB257105BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c2:b3:53:ce:14:ea:24:3e:bf:4f:c1:c3:31:
                    61:36:ff:04:cd:54:91:73:61:73:06:ed:9e:51:76:
                    50:ed:f3:d2:b8:05:ee:f1:4e:ae:b4:5b:7e:89:28:
                    70:ea:79:07:5e:91:3c:05:b9:2f:03:2e:d4:e7:e5:
                    fd:f8:5e:71:7d:96:1e:f5:43:e5:1f:5a:cd:3f:2f:
                    c1:eb:90:86:e8:cc:cf:2a:94:76:f1:55:0a:4f:d7:
                    04:7b:76:18:3c:42:dd:1b:37:e1:41:8f:1e:59:26:
                    a1:dd:a7:53:d9:df:5c:17:92:0a:40:41:44:88:36:
                    d4:d2:2f:20:a4:20:e8:c0:35:72:03:9b:18:1e:f0:
                    5a:9d:86:50:60:5d:d6:88:d4:39:61:ae:20:47:ab:
                    c8:54:0e:07:de:de:2b:e8:b5:f9:10:16:79:7c:77:
                    a0:2f:e0:b0:64:c6:1b:4d:4a:26:d1:15:fa:3a:9c:
                    74:ce:ac:ad:66:75:f8:82:b3:d6:05:c2:f6:d8:d4:
                    9d:12:dd:f1:e1:70:14:3f:c6:d6:4d:bc:50:f8:1d:
                    e6:b8:e7:f1:04:11:a5:46:b6:0f:c9:e0:d9:1f:b6:
                    41:18:81:d0:65:43:78:e2:ca:38:7b:74:92:33:cd:
                    c6:6b:a0:35:c1:ac:a7:31:3d:b2:a1:38:18:88:66:
                    04:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C6:22:1C:26:92:25:3F:7C:26:5B:85:59:96:13:EB:25:71:05:BB
            X509v3 Authority Key Identifier:
                keyid:D7:8A:B6:EB:F2:B6:BF:01:87:94:34:6C:88:78:8B:0C:37:80:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/0/D78AB6EBF2B6BF018794346C88788B0C3780E915.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D78AB6EBF2B6BF018794346C88788B0C3780E915.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/0/D78AB6EBF2B6BF018794346C88788B0C3780E915.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:4d:23:e6:02:88:40:20:7e:0b:21:15:d4:07:fa:6b:07:2e:
         1b:ad:ec:f0:93:dd:f7:bc:1b:af:f2:97:71:58:b8:63:81:dd:
         49:1a:ea:98:23:21:9d:17:90:a2:01:75:e9:7d:5c:15:72:df:
         74:5d:86:b7:8d:6f:31:bd:c5:be:24:ad:ca:37:1d:33:25:55:
         e0:7d:c1:e5:28:87:27:1b:7d:36:52:ac:b3:51:87:95:6e:56:
         b8:4e:72:da:62:a7:7e:70:70:cc:58:9e:e2:93:c3:fb:30:e2:
         d1:79:11:ff:da:38:01:56:f8:6b:0e:31:9e:bc:88:fb:15:c8:
         e5:f3:9e:81:f2:62:64:4a:df:59:db:ea:19:8e:8d:83:db:96:
         da:f5:c8:28:0b:fa:30:12:19:0a:aa:98:72:35:1d:6d:d9:fd:
         44:f3:a2:95:c9:fb:0c:d9:2e:5e:56:03:07:2b:90:65:73:ba:
         36:65:54:3d:e5:27:99:15:00:1d:6f:a8:5f:7c:69:6d:5b:4d:
         ff:c3:af:20:b3:ee:32:4a:ff:bc:62:2a:c5:8b:ef:39:4e:7c:
         d2:00:c5:ee:58:5c:ba:ce:6f:fe:05:53:46:b7:a4:e4:08:78:
         96:09:17:4f:95:10:d8:bc:63:7f:77:ed:bd:c4:f5:3b:6f:c5:
         8b:30:46:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----