Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/1/D507DF5060B22CF2B1E590338AF7A4C9C7A1A6F7.mft
File:                     D507DF5060B22CF2B1E590338AF7A4C9C7A1A6F7.mft (raw, json)
Hash identifier:          n+BOsS4VLQfQ5J7omKtD17zqiXCFNviSpSanCd0bAwQ=
Subject key identifier:   AD:B0:40:49:A7:44:12:D8:26:7D:E2:64:C4:85:38:5C:C4:4D:49:CD
Authority key identifier: D5:07:DF:50:60:B2:2C:F2:B1:E5:90:33:8A:F7:A4:C9:C7:A1:A6:F7
Certificate issuer:       /CN=D507DF5060B22CF2B1E590338AF7A4C9C7A1A6F7
Certificate serial:       0C515EFC07F3551249639850A8BC8E4CB634DAFD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D507DF5060B22CF2B1E590338AF7A4C9C7A1A6F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/1/D507DF5060B22CF2B1E590338AF7A4C9C7A1A6F7.mft
Manifest number:          97
Signing time:             Wed 24 Jul 2024 09:41:50 +0000
Manifest this update:     Wed 24 Jul 2024 09:36:50 +0000
Manifest next update:     Thu 25 Jul 2024 09:45:50 +0000
Files and hashes:         1: 34352e3136352e3138302e302f32322d3232203d3e20323731353832.roa (hash: zcdDA3rIRM1iDaOD450f+amu/hEHvOLfX79YJ7fjpeY=)
                          2: 323830343a376463383a3a2f33322d3332203d3e20323731353832.roa (hash: 0p6l+DICWtvczl2ytT78L/nJYYvcaPjVijkPI99s9jo=)
                          3: D507DF5060B22CF2B1E590338AF7A4C9C7A1A6F7.crl (hash: 4T7yKacRtPj0XYJDlOFekw3iHqVDxKYmNz0cNl71qNk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:51:5e:fc:07:f3:55:12:49:63:98:50:a8:bc:8e:4c:b6:34:da:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D507DF5060B22CF2B1E590338AF7A4C9C7A1A6F7
        Validity
            Not Before: Jul 24 09:36:50 2024 GMT
            Not After : Jul 25 09:45:50 2024 GMT
        Subject: CN=ADB04049A74412D8267DE264C485385CC44D49CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a4:68:76:42:77:46:b4:05:92:2c:09:38:93:
                    e7:07:7f:9a:67:ff:8b:f0:08:b9:cc:37:11:45:7f:
                    7a:61:b6:fe:77:74:f6:e1:0b:47:cc:71:86:e5:2f:
                    88:b4:95:e9:e5:f7:18:47:24:bd:70:9e:4b:05:bc:
                    2f:5b:95:29:51:4d:00:bd:34:8a:9b:6e:d0:75:a5:
                    67:f7:39:cc:39:f8:2e:81:31:d5:34:e5:4a:b2:a5:
                    16:3f:04:b2:09:b1:c4:79:7e:d7:82:b8:32:9d:36:
                    7b:bd:db:ee:63:9f:49:1d:ee:e1:12:f0:22:13:e2:
                    3c:0c:c8:f8:cc:d5:5b:25:fe:a5:21:ed:d0:e6:a0:
                    41:58:a6:f9:3a:a7:3e:dd:27:f9:33:e5:6b:1f:d9:
                    c8:c8:53:21:ff:e8:4e:32:91:af:b0:74:55:83:71:
                    14:83:d1:14:3b:7f:67:79:86:13:18:04:6b:4e:a2:
                    67:1b:6a:42:6c:dd:64:e6:31:fd:dd:e5:ec:a8:3b:
                    49:f3:3c:bf:65:97:ca:69:58:36:35:44:fb:ef:2d:
                    77:aa:dd:f3:7f:69:8c:99:67:02:a0:63:7b:67:d3:
                    8f:77:16:90:71:c1:0f:74:3e:10:30:14:9f:90:0b:
                    98:10:50:13:7a:4b:88:02:b7:be:cc:01:7d:77:0c:
                    fc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B0:40:49:A7:44:12:D8:26:7D:E2:64:C4:85:38:5C:C4:4D:49:CD
            X509v3 Authority Key Identifier:
                keyid:D5:07:DF:50:60:B2:2C:F2:B1:E5:90:33:8A:F7:A4:C9:C7:A1:A6:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/1/D507DF5060B22CF2B1E590338AF7A4C9C7A1A6F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D507DF5060B22CF2B1E590338AF7A4C9C7A1A6F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/1/D507DF5060B22CF2B1E590338AF7A4C9C7A1A6F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:04:7f:d6:4b:8d:c9:e1:2a:1f:5f:00:39:77:06:b2:8f:c9:
         64:f5:ed:e1:cf:29:ec:00:c4:e9:b2:ac:e0:ce:db:01:a8:d6:
         55:2d:d6:6c:92:c6:4d:31:0f:85:d3:b6:54:d4:c3:30:18:0d:
         25:2a:4b:f2:3d:e6:22:3e:42:c4:28:9e:eb:53:30:76:1b:ae:
         22:a2:53:d6:8e:f2:61:44:cd:f0:51:96:ba:fb:b9:ec:07:00:
         a9:c7:c1:a3:dc:e2:23:00:2f:03:2c:63:60:53:3c:c8:52:82:
         16:9b:31:60:4c:26:c4:45:0a:9d:b5:e7:1e:25:44:72:04:a9:
         89:d0:f8:76:ee:7b:70:67:23:1d:c2:d5:40:42:87:da:aa:bf:
         99:5f:d4:f5:6b:b7:35:79:66:03:b1:fa:ba:c4:a3:4c:d5:f5:
         d2:5a:2f:6d:39:28:cf:b0:2c:b2:40:31:ef:ac:29:d3:53:a4:
         29:b8:4e:07:a1:94:04:e1:97:24:88:89:9e:63:6f:5d:31:84:
         c2:79:6e:5f:48:10:ee:98:fc:59:f5:08:3d:94:8a:6b:91:78:
         d5:18:e5:a5:37:5c:db:a5:bc:43:1d:cc:48:1f:9f:c8:f1:5b:
         eb:47:62:68:1f:fa:94:66:cd:ec:04:6c:ef:f9:88:83:ea:76:
         0a:eb:aa:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----