Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/0/D7CECD4025A2731E62E96333D09FB4C510D5C76D.mft
File:                     D7CECD4025A2731E62E96333D09FB4C510D5C76D.mft (raw, json)
Hash identifier:          ioDDaMT8MHn3UVdstLJDKET/rbFIs5HZqJgA4ajrPnw=
Subject key identifier:   33:81:E7:B9:D9:62:B8:77:79:A6:03:82:83:FF:A3:8C:98:7B:F0:AB
Authority key identifier: D7:CE:CD:40:25:A2:73:1E:62:E9:63:33:D0:9F:B4:C5:10:D5:C7:6D
Certificate issuer:       /CN=D7CECD4025A2731E62E96333D09FB4C510D5C76D
Certificate serial:       4E558FB28A4785B9D575F67671C90813E033D750
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7CECD4025A2731E62E96333D09FB4C510D5C76D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/0/D7CECD4025A2731E62E96333D09FB4C510D5C76D.mft
Manifest number:          0217
Signing time:             Tue 09 Jan 2024 11:25:08 +0000
Manifest this update:     Tue 09 Jan 2024 11:20:08 +0000
Manifest next update:     Wed 10 Jan 2024 11:48:08 +0000
Files and hashes:         1: 323830343a383037343a3a2f33322d3335203d3e20323731373531.roa (hash: qPlzukgJjMjdcwXwD7cmwdNo9ikKn7z2xELC/1fi/cc=)
                          2: D7CECD4025A2731E62E96333D09FB4C510D5C76D.crl (hash: wkXHOBaaO2aSH1v1ew/jHUShca+4b6ZUkX8RSrC+XuQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:55:8f:b2:8a:47:85:b9:d5:75:f6:76:71:c9:08:13:e0:33:d7:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7CECD4025A2731E62E96333D09FB4C510D5C76D
        Validity
            Not Before: Jan  9 11:20:08 2024 GMT
            Not After : Jan 10 11:48:08 2024 GMT
        Subject: CN=3381E7B9D962B87779A6038283FFA38C987BF0AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:48:bf:18:5c:0b:7e:14:88:29:40:e9:ad:be:
                    06:65:6e:4c:26:45:4a:c8:e6:b6:3e:58:77:f3:09:
                    02:53:af:b7:9d:26:ee:63:0b:69:a6:63:6f:57:7c:
                    9d:c7:11:1b:bc:b0:2f:88:07:42:4e:24:01:6d:dc:
                    f1:a5:9e:55:4b:91:15:a1:33:b2:63:5e:af:9c:a9:
                    ab:3d:3a:59:b7:88:43:d0:5b:ea:d5:22:27:22:77:
                    13:9c:13:f6:eb:26:b9:d5:f0:20:7a:4f:2a:b0:b5:
                    dd:49:4e:dc:8b:27:18:92:f7:e5:1c:0c:aa:d4:b2:
                    fd:20:88:ba:19:66:73:f5:a1:a0:4c:1e:de:30:2f:
                    db:06:90:25:f6:f3:66:c5:aa:97:8e:03:60:a1:b7:
                    ca:8e:0f:9d:67:93:3b:b6:23:42:61:e1:29:b5:25:
                    19:85:a1:ed:bc:75:5e:58:54:68:21:79:14:c3:a0:
                    bc:b7:65:5b:30:8b:52:5c:c1:07:9b:3c:fc:34:0d:
                    05:49:cf:ab:05:af:cb:46:e1:d9:47:3d:25:3f:ab:
                    6e:26:70:5f:1c:bc:dc:91:fe:ac:40:91:b6:b5:27:
                    e0:68:90:41:1c:11:ae:32:a2:df:0f:2c:1c:20:e5:
                    94:fc:74:8b:85:c2:35:f5:74:12:1e:c4:41:93:9a:
                    1d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:81:E7:B9:D9:62:B8:77:79:A6:03:82:83:FF:A3:8C:98:7B:F0:AB
            X509v3 Authority Key Identifier:
                keyid:D7:CE:CD:40:25:A2:73:1E:62:E9:63:33:D0:9F:B4:C5:10:D5:C7:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/0/D7CECD4025A2731E62E96333D09FB4C510D5C76D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7CECD4025A2731E62E96333D09FB4C510D5C76D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/0/D7CECD4025A2731E62E96333D09FB4C510D5C76D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:7d:52:cc:c9:b7:fe:11:2f:96:82:8e:c7:36:86:b2:a2:d0:
         2d:01:08:67:bf:26:b6:61:69:8b:98:c5:ba:ec:c1:93:9f:6a:
         e0:38:84:01:ae:19:a1:70:e2:a3:ea:90:e4:6c:2f:c8:8f:a6:
         7d:36:5b:df:0f:d7:73:b8:3d:01:ff:0e:6a:15:e2:dd:b0:d5:
         9d:fe:a3:79:45:70:a5:f3:a3:40:29:5d:7c:83:96:ee:d5:16:
         b7:b2:68:4b:fc:af:14:3e:2d:90:e8:fd:09:a1:a6:9b:fa:9a:
         8d:ae:0a:09:97:ca:02:70:cf:6d:60:09:d5:8f:7a:0b:57:e9:
         44:f7:5b:f1:bf:b1:92:15:cb:af:a3:fb:8e:84:5c:c6:8d:98:
         62:f7:42:f6:01:08:30:01:9f:8f:46:cb:49:c3:70:66:f2:60:
         79:8f:c9:f9:87:2f:3e:36:4e:48:48:40:2d:20:40:bd:5a:1c:
         b8:4f:e8:cb:1a:25:a5:d1:b0:3d:4c:96:c0:d6:6d:f2:c6:c2:
         4c:5e:b5:cc:24:b0:13:f7:ec:d1:b6:24:dc:a0:90:df:78:6d:
         90:1b:56:c2:e7:4f:98:85:55:1a:13:88:3c:e8:93:4b:10:1c:
         43:5c:fa:81:d9:56:c4:28:9b:88:7f:95:c3:18:9f:d8:37:93:
         45:c9:e3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----