Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/1/78E4939E3DE3675C531FBFCF65EDE6415EFDC25A.mft
File:                     78E4939E3DE3675C531FBFCF65EDE6415EFDC25A.mft (raw, json)
Hash identifier:          q+Omaymcxf+wX4w76ZItwarKBvVW1Skmlog5snZzL1U=
Subject key identifier:   2C:F0:D8:07:FC:8C:C3:D7:39:8A:D7:03:11:9D:D3:3D:2A:62:AD:D3
Authority key identifier: 78:E4:93:9E:3D:E3:67:5C:53:1F:BF:CF:65:ED:E6:41:5E:FD:C2:5A
Certificate issuer:       /CN=78E4939E3DE3675C531FBFCF65EDE6415EFDC25A
Certificate serial:       7BAD80DDB26A26F6006A35C15954CADA7F576297
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78E4939E3DE3675C531FBFCF65EDE6415EFDC25A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/1/78E4939E3DE3675C531FBFCF65EDE6415EFDC25A.mft
Manifest number:          1C
Signing time:             Sun 21 Apr 2024 18:40:00 +0000
Manifest this update:     Sun 21 Apr 2024 18:35:00 +0000
Manifest next update:     Mon 22 Apr 2024 18:40:00 +0000
Files and hashes:         1: 78E4939E3DE3675C531FBFCF65EDE6415EFDC25A.crl (hash: Mk5rix2tBTobZ3vzIs72ANimneEuAneb0Lq9osJwwH4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:ad:80:dd:b2:6a:26:f6:00:6a:35:c1:59:54:ca:da:7f:57:62:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78E4939E3DE3675C531FBFCF65EDE6415EFDC25A
        Validity
            Not Before: Apr 21 18:35:00 2024 GMT
            Not After : Apr 28 18:40:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:dc:91:b3:7d:d5:8b:c9:6b:1e:3a:ae:9d:7b:
                    92:a9:78:07:0e:22:a2:db:68:f2:e5:39:7d:b5:d9:
                    1b:8b:aa:86:9f:4b:09:b4:79:7f:74:e4:0c:57:f0:
                    5b:49:00:23:f0:51:a8:d1:86:fa:2d:ef:14:04:3e:
                    51:b8:47:04:ae:f2:94:0e:56:6f:a6:8c:ab:c1:40:
                    fd:69:8b:38:22:20:52:85:60:07:bf:26:dc:2e:f5:
                    54:26:e7:c7:70:b8:62:c0:fb:4c:8a:a7:b6:d7:19:
                    57:52:ad:92:ab:53:16:54:4d:22:29:00:87:b7:2a:
                    d4:2c:4e:ab:1f:6d:c9:a6:1e:08:a2:3d:47:76:c4:
                    32:c0:e7:fa:ca:28:fe:23:98:2c:c9:62:52:d1:bd:
                    24:9f:ce:7a:fe:de:42:75:25:11:98:37:18:25:b8:
                    9f:51:2a:ae:39:73:7b:17:a3:a3:10:cb:4d:28:91:
                    c4:35:43:07:cd:64:19:5a:b5:8a:43:cb:59:89:55:
                    39:18:fb:b5:10:af:b7:55:c8:46:d5:23:c6:6a:b3:
                    d8:7e:e7:70:47:49:5a:78:8c:55:2f:a7:24:91:10:
                    92:cc:19:48:b8:65:8d:59:a7:74:d4:38:0f:ce:a8:
                    f9:33:4e:04:6c:27:79:04:9d:b7:ed:ae:70:b0:29:
                    4e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F0:D8:07:FC:8C:C3:D7:39:8A:D7:03:11:9D:D3:3D:2A:62:AD:D3
            X509v3 Authority Key Identifier:
                keyid:78:E4:93:9E:3D:E3:67:5C:53:1F:BF:CF:65:ED:E6:41:5E:FD:C2:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/1/78E4939E3DE3675C531FBFCF65EDE6415EFDC25A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78E4939E3DE3675C531FBFCF65EDE6415EFDC25A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/1/78E4939E3DE3675C531FBFCF65EDE6415EFDC25A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:69:84:40:02:65:9b:aa:f7:97:dd:b5:fa:43:e8:60:87:a7:
         f9:a7:77:ce:02:03:4a:2b:fa:60:73:8c:f3:ce:f4:da:45:93:
         b3:98:2f:ea:95:c0:b7:ce:c9:69:8b:0a:6c:28:7c:8e:34:32:
         8a:68:e7:f1:7a:33:73:44:42:b6:71:51:c9:ed:43:b6:6d:eb:
         4b:18:19:35:60:45:12:5f:aa:f3:36:ac:e0:5d:8c:f1:c9:08:
         44:db:48:b6:62:23:e9:a4:99:f5:e5:f7:f1:08:2b:dc:92:96:
         94:8b:fe:7a:e6:4e:fa:3f:4c:4e:34:32:e3:3e:07:1f:81:f4:
         24:19:8e:af:fe:e3:40:71:21:4d:c5:30:3b:48:28:df:f6:82:
         d2:a8:e3:82:3c:39:dc:3d:84:df:5c:59:ff:41:52:3f:5f:fa:
         25:11:8c:3e:51:0b:6b:8b:a5:ac:44:2e:0d:81:86:aa:c3:ce:
         7c:e8:76:72:4a:a0:cc:4b:ac:28:2f:f6:64:06:f4:24:ed:b5:
         bd:d5:cb:a4:ea:d4:e2:6b:51:e5:f5:5b:da:d7:20:a3:5e:c4:
         82:09:d8:f0:2a:6f:81:bf:4c:cc:35:16:b1:3b:43:65:bf:e2:
         71:6d:10:bc:ff:96:e8:e3:55:b0:1e:33:8e:27:0e:9f:f9:f8:
         56:db:2b:d0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----