Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7NQt1mPYaVDJHBsYYyY4QxwHehPHfDPNxWAHD8xZjSvt/0/FF18000AFA90AF95C4B08A72CBBFDCD49FE428FE.mft
File:                     FF18000AFA90AF95C4B08A72CBBFDCD49FE428FE.mft (raw, json)
Hash identifier:          K/OZCSaYeVDDFTnPFHbk87kwfV7xr3wnpFyR4NyJKJk=
Subject key identifier:   05:59:2E:4B:A9:BB:F8:54:E4:5C:50:DF:85:1F:4C:AC:16:61:A4:41
Authority key identifier: FF:18:00:0A:FA:90:AF:95:C4:B0:8A:72:CB:BF:DC:D4:9F:E4:28:FE
Certificate issuer:       /CN=FF18000AFA90AF95C4B08A72CBBFDCD49FE428FE
Certificate serial:       AA0B6919C0919D500B676B10A0B2A9B30C7B1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF18000AFA90AF95C4B08A72CBBFDCD49FE428FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NQt1mPYaVDJHBsYYyY4QxwHehPHfDPNxWAHD8xZjSvt/0/FF18000AFA90AF95C4B08A72CBBFDCD49FE428FE.mft
Manifest number:          0222
Signing time:             Mon 15 Apr 2024 08:59:53 +0000
Manifest this update:     Mon 15 Apr 2024 08:54:53 +0000
Manifest next update:     Tue 16 Apr 2024 09:19:53 +0000
Files and hashes:         1: FF18000AFA90AF95C4B08A72CBBFDCD49FE428FE.crl (hash: GcJTXOt8KHGWy4Jia409NIbVqd7Sp1wssaZpzaAS5WA=)
                          2: 323830343a383130343a3a2f33322d3334203d3e20323732343236.roa (hash: NgNoOyukPo+nevSn2djhjUFfdSqhlEs+/GOQg8hV+pY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            aa:0b:69:19:c0:91:9d:50:0b:67:6b:10:a0:b2:a9:b3:0c:7b:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF18000AFA90AF95C4B08A72CBBFDCD49FE428FE
        Validity
            Not Before: Apr 15 08:54:53 2024 GMT
            Not After : Apr 16 09:19:53 2024 GMT
        Subject: CN=05592E4BA9BBF854E45C50DF851F4CAC1661A441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e2:40:f7:35:ac:87:c0:8c:19:58:65:50:6f:
                    7d:88:4b:62:75:60:59:e0:da:f2:1a:2b:6c:94:2c:
                    c0:97:01:fc:c0:f5:16:ea:43:00:31:ec:87:0f:72:
                    f3:2a:11:bb:2d:80:48:1a:22:13:8e:2f:da:9e:c1:
                    1c:fa:37:85:7e:3a:88:8b:8e:fb:9a:a5:f8:fa:62:
                    74:d0:9c:9c:97:10:15:81:71:89:b5:87:77:15:2a:
                    72:88:c0:7e:af:c3:1d:28:c9:f9:53:ee:32:2d:3f:
                    80:58:6b:99:3f:3a:89:97:33:95:b3:3f:e8:83:69:
                    df:da:70:07:22:b5:ec:cd:c6:35:07:79:c6:51:79:
                    c7:5c:7a:7f:0c:65:e5:eb:2b:9d:33:ca:5a:b1:9d:
                    07:1f:4e:2b:20:5e:42:8e:1c:db:98:5b:48:35:08:
                    f0:c4:24:d3:2f:2c:cf:a8:69:81:b7:60:81:d1:7c:
                    00:00:b1:12:f4:03:50:68:64:21:ec:c8:b0:d9:0c:
                    11:3d:46:57:7e:ba:a2:29:90:98:86:77:03:89:03:
                    0f:2e:bf:d9:e4:77:83:d4:4d:85:b4:94:e8:5e:b0:
                    0d:b9:f4:e6:c5:dc:9e:fc:74:4e:95:61:cd:94:84:
                    c2:db:72:8b:34:88:1b:d7:ae:04:42:28:a5:19:24:
                    6b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:59:2E:4B:A9:BB:F8:54:E4:5C:50:DF:85:1F:4C:AC:16:61:A4:41
            X509v3 Authority Key Identifier:
                keyid:FF:18:00:0A:FA:90:AF:95:C4:B0:8A:72:CB:BF:DC:D4:9F:E4:28:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NQt1mPYaVDJHBsYYyY4QxwHehPHfDPNxWAHD8xZjSvt/0/FF18000AFA90AF95C4B08A72CBBFDCD49FE428FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF18000AFA90AF95C4B08A72CBBFDCD49FE428FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NQt1mPYaVDJHBsYYyY4QxwHehPHfDPNxWAHD8xZjSvt/0/FF18000AFA90AF95C4B08A72CBBFDCD49FE428FE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:46:0b:fe:14:25:46:f7:57:86:7d:23:b2:79:b0:0a:c5:25:
         ee:30:56:c9:f0:6c:68:64:f9:2d:8d:96:20:de:4b:c8:4c:64:
         d3:ba:47:c1:00:28:25:15:27:02:a9:27:1d:4d:f3:86:62:7b:
         b7:f8:b0:87:cf:58:d1:b5:7a:dd:40:75:3a:74:60:43:b4:a8:
         42:5c:e7:6f:23:10:79:20:cf:18:ca:bd:72:ee:84:8c:7c:ce:
         4d:f9:b4:8f:03:ea:6f:3c:ba:c5:7e:e7:c2:29:49:4a:d3:1e:
         36:de:86:45:9b:38:f9:9d:3d:57:f4:11:d8:92:6a:df:da:ff:
         d5:e8:11:44:6b:c2:06:80:1c:21:cf:b0:73:a1:18:ba:32:5e:
         33:a8:2c:7f:6e:de:b3:e0:91:43:1a:30:29:4f:6a:5b:75:52:
         d8:19:ed:bb:7a:32:e7:1a:89:43:d6:83:19:ca:e8:7a:10:76:
         8a:bf:68:cd:03:20:e7:02:0a:b9:e0:ba:64:78:d0:f3:cc:dc:
         b7:22:16:0e:ce:a2:7c:75:98:18:82:04:57:3e:74:10:6f:95:
         38:f5:7a:d0:ad:19:92:b4:b8:e8:c3:98:8e:ef:db:e5:b5:62:
         ce:86:dd:d7:24:fb:74:e2:a6:eb:86:76:7c:ba:89:72:43:d5:
         f9:f6:bf:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----