Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/1/C71FCA85C3B8D76FDF2AFBC9FD1852358AC556BB.mft
File:                     C71FCA85C3B8D76FDF2AFBC9FD1852358AC556BB.mft (raw, json)
Hash identifier:          SHFKQxRD3kPYdbMxU3U53Q0jkCCKffWPs+paFsoFQiA=
Subject key identifier:   EF:AE:D0:58:14:70:A0:FA:29:D0:D5:3A:0F:2B:A4:9C:77:07:FE:40
Authority key identifier: C7:1F:CA:85:C3:B8:D7:6F:DF:2A:FB:C9:FD:18:52:35:8A:C5:56:BB
Certificate issuer:       /CN=C71FCA85C3B8D76FDF2AFBC9FD1852358AC556BB
Certificate serial:       37B3828B100E9AA77D71231E9C09BC3A3EC5582E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C71FCA85C3B8D76FDF2AFBC9FD1852358AC556BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/1/C71FCA85C3B8D76FDF2AFBC9FD1852358AC556BB.mft
Manifest number:          7C
Signing time:             Thu 04 Jul 2024 22:07:12 +0000
Manifest this update:     Thu 04 Jul 2024 22:02:12 +0000
Manifest next update:     Fri 05 Jul 2024 22:50:12 +0000
Files and hashes:         1: 323830343a323439303a3a2f33322d3438203d3e20323634323330.roa (hash: R/A8Ov3zAgLR/ulaSHpfqJdeMo9Tj/sq8ADRxHqmqQM=)
                          2: 3139302e3130392e38382e302f32322d3234203d3e20323633393131.roa (hash: /l4/gjQhyWKvyU7Zr2k7n9rb7OdAG80E2ptJPb33fhw=)
                          3: C71FCA85C3B8D76FDF2AFBC9FD1852358AC556BB.crl (hash: Sw+i3DhQKKnw3KQNPu5XsbVBQ4hH/WB3aAp6d7XsI+4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:b3:82:8b:10:0e:9a:a7:7d:71:23:1e:9c:09:bc:3a:3e:c5:58:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C71FCA85C3B8D76FDF2AFBC9FD1852358AC556BB
        Validity
            Not Before: Jul  4 22:02:12 2024 GMT
            Not After : Jul  5 22:50:12 2024 GMT
        Subject: CN=EFAED0581470A0FA29D0D53A0F2BA49C7707FE40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:22:b9:c7:14:68:89:9f:df:53:65:19:92:e8:
                    0f:6a:32:ee:8c:c9:5e:b8:d0:29:6b:79:d8:cf:94:
                    1b:f3:eb:8f:cb:42:aa:7e:e2:37:f0:7c:fd:be:2a:
                    40:38:fc:16:ac:70:c1:f4:df:c5:31:7f:5c:be:f1:
                    db:8a:d0:9c:7b:48:f7:0d:1d:d8:ae:fc:3a:03:0c:
                    fd:31:20:49:af:14:90:8f:51:73:df:39:d1:52:5e:
                    13:1c:5a:aa:a6:7c:ba:5a:f7:e2:ee:43:a4:c2:49:
                    47:a2:7c:b1:36:7a:1f:8f:29:bb:0e:2b:81:e7:50:
                    46:cb:9c:d3:3a:11:a2:30:37:92:cf:de:16:03:42:
                    fe:9a:87:fe:82:90:65:14:ea:c4:1f:ff:2e:90:a3:
                    19:ea:15:44:5f:67:09:d8:ef:0f:dc:2d:c3:b4:76:
                    d7:d7:73:84:05:f6:d3:9d:aa:d8:e6:5a:9d:26:fe:
                    86:2e:d6:60:94:d4:a0:59:c4:aa:0b:7a:c9:d4:79:
                    b8:2b:a6:46:59:ed:67:69:8d:5a:7d:82:b7:92:7d:
                    9d:27:06:dc:64:8a:74:f8:8b:77:8b:92:21:91:c8:
                    e8:c3:7e:48:b3:4a:27:79:ef:56:e0:60:1e:da:82:
                    89:e1:ab:14:7d:9c:50:49:25:db:ab:61:59:18:c0:
                    49:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:AE:D0:58:14:70:A0:FA:29:D0:D5:3A:0F:2B:A4:9C:77:07:FE:40
            X509v3 Authority Key Identifier:
                keyid:C7:1F:CA:85:C3:B8:D7:6F:DF:2A:FB:C9:FD:18:52:35:8A:C5:56:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/1/C71FCA85C3B8D76FDF2AFBC9FD1852358AC556BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C71FCA85C3B8D76FDF2AFBC9FD1852358AC556BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/1/C71FCA85C3B8D76FDF2AFBC9FD1852358AC556BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:09:d4:e4:52:c2:de:24:2c:a0:f1:e0:b7:ce:5e:f2:67:56:
         f5:0b:86:d2:72:a4:4b:0a:65:6d:6b:e2:68:fb:9b:74:82:4b:
         3f:20:8b:23:7b:8c:53:bd:dc:d6:87:8a:43:7c:e5:17:fd:7d:
         08:87:33:50:03:b9:c4:c9:d7:b7:26:e3:e8:53:d5:db:28:63:
         66:e4:e3:20:d3:cd:58:19:64:f3:d1:07:99:22:e0:0d:4d:7b:
         10:94:2a:03:ef:96:00:34:21:9c:28:f3:c3:a5:68:1a:aa:df:
         49:e3:7b:d1:55:66:4e:ba:e5:fa:7a:1f:a5:0d:c4:34:18:bf:
         16:2b:a9:30:39:e9:6f:69:2e:49:b3:fd:58:47:f1:8e:50:8d:
         ff:71:86:f7:bf:7c:c8:26:7e:7a:51:72:4a:5e:8e:9a:df:b9:
         1e:de:99:0a:7b:27:8f:6e:4d:9c:d7:3d:44:68:b2:50:5f:1c:
         da:c1:9a:59:8e:07:f7:df:f6:95:df:16:62:11:8f:d7:63:5e:
         b0:eb:3b:b9:28:c4:c7:44:98:57:2b:c1:53:38:8a:e2:61:ed:
         bf:3c:4e:70:75:e5:ef:48:ed:d3:7e:f5:93:b6:e7:cd:63:c5:
         6a:35:7e:74:ee:22:7c:fa:45:7e:f4:64:4e:7c:80:c8:8c:d0:
         ab:a6:6d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----