Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2fcryUt6tZxGMcsBWirDueP7pdVkKMZz3ZXoqe6uvR7m/0/5075EA9FA288700040BED023F3D40B2EAFF02ADE.mft
File:                     5075EA9FA288700040BED023F3D40B2EAFF02ADE.mft (raw, json)
Hash identifier:          KKUKvCjyXJEy4sEntmGSY4ufbk+ZxsUgYm73aPo9ZDM=
Subject key identifier:   2F:FF:9D:73:1C:3C:32:86:8D:CB:4B:4C:A8:CD:33:95:51:D2:6C:CE
Authority key identifier: 50:75:EA:9F:A2:88:70:00:40:BE:D0:23:F3:D4:0B:2E:AF:F0:2A:DE
Certificate issuer:       /CN=5075EA9FA288700040BED023F3D40B2EAFF02ADE
Certificate serial:       7B493A761B6DC4E314D6233B58BD70122721B632
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5075EA9FA288700040BED023F3D40B2EAFF02ADE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2fcryUt6tZxGMcsBWirDueP7pdVkKMZz3ZXoqe6uvR7m/0/5075EA9FA288700040BED023F3D40B2EAFF02ADE.mft
Manifest number:          FA
Signing time:             Mon 15 Apr 2024 09:03:51 +0000
Manifest this update:     Mon 15 Apr 2024 08:58:51 +0000
Manifest next update:     Tue 16 Apr 2024 10:12:51 +0000
Files and hashes:         1: 323830343a316436383a3a2f33322d3438203d3e20323634333637.roa (hash: ypqDOMCQ3guhCEYyxLV2Qi9XRCGpxUeyVa6LwqECLpo=)
                          2: 3136382e3139362e3133362e302f32322d3234203d3e20323634333637.roa (hash: lPUcojKXGILeX2yJNLklZi9/E9Fjf/ec+wcy2kY1MCM=)
                          3: 3133382e3138352e3231362e302f32322d3234203d3e20323634333637.roa (hash: ZLaC/xTq87H/w4f3cCTZAKE2/r6yNklfg+IHwyNxj8s=)
                          4: 3133312e3130382e33322e302f32322d3234203d3e20323634333637.roa (hash: WPNsvT3I0BEcMkKmdK082qZnRdl/rCsphoUZ/YstxFw=)
                          5: 5075EA9FA288700040BED023F3D40B2EAFF02ADE.crl (hash: O8sXBl23QrcJq+WofgjEJ/um7xeaVnZCOQJ70HpWMv8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:49:3a:76:1b:6d:c4:e3:14:d6:23:3b:58:bd:70:12:27:21:b6:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5075EA9FA288700040BED023F3D40B2EAFF02ADE
        Validity
            Not Before: Apr 15 08:58:51 2024 GMT
            Not After : Apr 16 10:12:51 2024 GMT
        Subject: CN=2FFF9D731C3C32868DCB4B4CA8CD339551D26CCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d9:a0:bb:43:0e:64:12:af:b5:ab:73:ef:a8:
                    56:e8:99:c2:d7:ee:85:bf:ae:ac:4e:b8:6e:21:6f:
                    fc:38:2b:13:f9:3d:be:6b:42:7f:75:6b:73:75:f0:
                    eb:07:bf:11:3d:2b:f9:88:e8:b3:1c:c4:45:08:ea:
                    b2:cf:bd:22:2f:bd:96:5a:a5:99:e3:5f:1e:29:52:
                    b4:66:22:7c:30:49:8b:16:de:9d:b3:f4:04:39:e8:
                    14:47:58:d4:dd:fb:2a:a0:a7:57:5c:d4:94:d4:11:
                    3f:51:53:03:39:fe:63:bf:02:ed:7c:3a:43:93:71:
                    bd:a7:54:4f:ab:20:95:34:63:58:f5:6e:ff:3d:4a:
                    09:5d:f1:a7:4e:a4:cc:37:70:62:a1:f8:dd:db:c2:
                    0c:b7:bc:93:94:8c:62:58:01:93:b6:c5:16:d3:0e:
                    c8:96:56:10:3f:60:0e:23:2e:12:2c:25:77:0b:07:
                    a0:f2:7f:15:a7:41:4e:6d:57:35:95:d6:ca:bb:51:
                    b2:8a:0b:34:ce:80:fc:4f:8d:b5:c9:a5:d7:ab:4e:
                    0f:b0:cf:62:7f:07:51:30:3a:1d:27:bf:0a:ab:50:
                    ec:17:eb:10:1b:19:7a:47:ed:c4:e9:4f:f6:b5:88:
                    b5:1e:fd:11:06:2e:9a:b5:f3:a9:64:db:bd:b0:09:
                    d5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:FF:9D:73:1C:3C:32:86:8D:CB:4B:4C:A8:CD:33:95:51:D2:6C:CE
            X509v3 Authority Key Identifier:
                keyid:50:75:EA:9F:A2:88:70:00:40:BE:D0:23:F3:D4:0B:2E:AF:F0:2A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2fcryUt6tZxGMcsBWirDueP7pdVkKMZz3ZXoqe6uvR7m/0/5075EA9FA288700040BED023F3D40B2EAFF02ADE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5075EA9FA288700040BED023F3D40B2EAFF02ADE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2fcryUt6tZxGMcsBWirDueP7pdVkKMZz3ZXoqe6uvR7m/0/5075EA9FA288700040BED023F3D40B2EAFF02ADE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:59:1a:7a:1e:a9:61:32:62:e2:3f:65:17:ba:7f:c5:eb:9e:
         af:66:31:0b:ae:19:43:17:f0:0e:a3:d7:af:74:31:f3:4d:72:
         90:bc:fd:9b:a7:08:6a:b0:71:a7:d5:19:06:6d:65:05:25:26:
         5a:58:79:77:d4:71:58:47:1b:14:6b:8d:ef:a4:f7:95:c5:85:
         aa:1c:07:23:da:4d:e8:8d:af:af:23:cb:6d:4a:b2:7c:8d:bd:
         ab:6a:c0:64:bb:0b:9e:ef:5d:68:77:d9:67:01:cd:b6:f5:07:
         fc:72:18:c2:ef:f8:5b:74:ac:69:fa:7f:5e:88:d5:cd:30:93:
         01:19:95:28:08:4d:08:4a:52:69:67:b9:58:5e:e6:a2:ac:3f:
         59:d2:44:c1:19:7c:0b:a3:30:c0:7c:e1:75:cf:f2:5e:07:42:
         5c:a5:b2:81:5b:12:f5:7c:03:72:31:6d:81:90:b4:28:26:90:
         b4:68:39:fd:fc:34:09:3e:a0:e0:a0:44:55:00:6c:aa:d8:ed:
         11:30:85:14:50:42:31:0a:7d:d4:10:32:11:e6:a0:8a:6b:23:
         7a:47:e8:80:93:79:94:3e:26:27:c5:41:16:d7:c4:16:6f:46:
         37:e9:aa:04:4f:61:7e:c5:b2:c3:9b:b1:eb:27:c5:1a:c6:13:
         90:34:37:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----