Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/0/B96B0A6083B862C27D011654CF18FB16A3C983B7.mft
File:                     B96B0A6083B862C27D011654CF18FB16A3C983B7.mft (raw, json)
Hash identifier:          +R5+hoV6btcAUfNtxICY50nr+oAu1vObTFc1MUFVztA=
Subject key identifier:   55:89:2F:B3:40:0F:B8:C1:BA:A3:F2:F3:7F:1A:BE:69:0D:BA:86:EA
Authority key identifier: B9:6B:0A:60:83:B8:62:C2:7D:01:16:54:CF:18:FB:16:A3:C9:83:B7
Certificate issuer:       /CN=B96B0A6083B862C27D011654CF18FB16A3C983B7
Certificate serial:       2086996D285ABB7170E5B235CD7179A1BEB6ECD7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B96B0A6083B862C27D011654CF18FB16A3C983B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/0/B96B0A6083B862C27D011654CF18FB16A3C983B7.mft
Manifest number:          0253
Signing time:             Mon 15 Apr 2024 06:10:02 +0000
Manifest this update:     Mon 15 Apr 2024 06:05:02 +0000
Manifest next update:     Tue 16 Apr 2024 09:52:02 +0000
Files and hashes:         1: 3132382e3230312e35322e302f32332d3233203d3e20323636363238.roa (hash: DSpjXZ+sGGUbIJMlPyDAh1OHkj2egkHmPAThXFickOY=)
                          2: 3132382e3230312e35322e302f32322d3232203d3e20323636363238.roa (hash: YVhiT4pxK5aWx5sXhkUB4aRbW3YPp542Z2mM3tLUmj8=)
                          3: 3132382e3230312e35342e302f32332d3233203d3e20323636363238.roa (hash: U0CVsT7VK6HLrT+3bkwYAG722S62ME1fJ6W7P3MpUKk=)
                          4: B96B0A6083B862C27D011654CF18FB16A3C983B7.crl (hash: ACY6+BUwvUoxGCiy5X1TZ8g7t916r7p1FKC0xA+jI4I=)
                          5: 323830343a336565383a3a2f33322d3332203d3e20323636363238.roa (hash: 44aigJwrKc+rJsFST4pSZklaBXl6SlNzo4dna2z5CTw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:86:99:6d:28:5a:bb:71:70:e5:b2:35:cd:71:79:a1:be:b6:ec:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96B0A6083B862C27D011654CF18FB16A3C983B7
        Validity
            Not Before: Apr 15 06:05:02 2024 GMT
            Not After : Apr 16 09:52:02 2024 GMT
        Subject: CN=55892FB3400FB8C1BAA3F2F37F1ABE690DBA86EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:36:5b:9a:38:bf:a5:cc:36:50:3e:01:c5:33:
                    25:d6:fc:dd:e6:f2:ae:d2:df:0e:fd:bd:18:67:df:
                    d3:a0:6b:d5:27:96:42:59:ad:81:30:21:56:6a:42:
                    04:5d:e3:08:eb:ab:f9:59:fc:b4:62:53:c4:02:4e:
                    88:8c:75:da:00:d4:62:d7:1d:2a:ba:83:4b:62:c4:
                    9a:b7:c6:da:2c:82:8a:67:a7:bd:33:0d:ac:e6:72:
                    f2:ab:74:01:ed:fd:7b:4b:1f:eb:f0:01:4d:ab:b2:
                    64:d5:95:f0:f2:cf:3e:8b:93:08:4f:69:19:18:b7:
                    3b:3a:bd:5d:4c:f9:a2:8f:05:94:a7:8e:c4:32:5f:
                    c1:95:04:29:a8:42:6e:ae:5d:e9:0b:4a:d8:b2:40:
                    b2:8a:ff:2a:cb:da:b8:7c:5b:38:bb:29:4f:dc:26:
                    ad:58:c5:62:05:2e:6d:57:40:8a:fe:6b:2c:4d:28:
                    cd:fc:4a:92:3e:dc:3f:69:bf:e2:07:6a:dc:59:f5:
                    70:b1:2d:f3:3a:91:ab:e6:61:dd:1c:6c:65:81:26:
                    80:4b:fd:b3:8a:fd:d5:84:ed:f9:fc:86:14:7e:d5:
                    21:f5:a8:e8:96:4b:8f:12:8d:7e:c4:3e:98:5d:08:
                    2e:e0:04:9e:89:49:85:73:00:40:53:c5:bf:cd:b1:
                    94:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:89:2F:B3:40:0F:B8:C1:BA:A3:F2:F3:7F:1A:BE:69:0D:BA:86:EA
            X509v3 Authority Key Identifier:
                keyid:B9:6B:0A:60:83:B8:62:C2:7D:01:16:54:CF:18:FB:16:A3:C9:83:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/0/B96B0A6083B862C27D011654CF18FB16A3C983B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B96B0A6083B862C27D011654CF18FB16A3C983B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/0/B96B0A6083B862C27D011654CF18FB16A3C983B7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:a9:d6:a8:53:fe:7b:69:26:a9:01:f3:35:0e:cb:42:5e:2f:
         37:cd:73:94:73:6c:0d:8d:9f:24:5c:3b:05:35:c9:34:05:4a:
         5b:d3:40:e8:27:5c:1d:7b:f5:5c:25:d3:39:21:91:a8:1d:c4:
         04:ca:31:3d:dc:e8:ec:d3:64:a6:02:6d:6f:68:af:79:46:61:
         64:4e:79:07:2e:d4:9e:de:83:a9:34:a4:27:59:bb:2e:22:fe:
         a0:1b:61:c8:98:09:a6:dd:68:aa:87:9d:40:1c:cc:c5:74:58:
         8b:47:e6:dd:93:b9:cf:5e:0d:69:ec:07:e5:ee:3d:57:4a:f4:
         bb:e6:18:61:9c:6f:59:bb:b4:35:39:38:83:3a:31:88:a8:34:
         65:96:7d:94:0d:16:9f:1b:cb:33:87:46:b8:f5:0b:a4:23:15:
         3b:ca:79:c7:2d:cb:9e:8c:0e:ce:14:e8:3f:bf:0c:91:95:12:
         07:57:d7:85:c8:c2:7a:84:6d:33:c0:17:91:19:f8:0a:96:4e:
         74:98:86:c0:d4:d4:ed:af:cb:20:48:d3:52:cc:ca:01:7a:a5:
         54:26:2b:a7:41:89:fb:68:ca:ea:87:9c:27:20:85:8f:4c:c6:
         00:33:e4:5e:3d:2f:39:3c:1a:0c:82:f6:0f:cb:2d:3f:ca:9d:
         be:86:f2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----