Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AZw9gFBAj76afWDcGPH9ZugTGhjmUQFBSDwuxAT3YHeG/0/12B87BFA502E06DB713C283545989FF27FAEA392.mft
File:                     12B87BFA502E06DB713C283545989FF27FAEA392.mft (raw, json)
Hash identifier:          ShGRLevLgQ1EOkFL87Rs2gBQQp523ruwHhvAawmXY1I=
Subject key identifier:   B5:B3:17:E8:53:63:0B:21:70:AE:15:95:1B:CB:DA:BA:7A:2F:9D:47
Authority key identifier: 12:B8:7B:FA:50:2E:06:DB:71:3C:28:35:45:98:9F:F2:7F:AE:A3:92
Certificate issuer:       /CN=12B87BFA502E06DB713C283545989FF27FAEA392
Certificate serial:       620A428F2B90A9C88AC24D0B7158359EA05F8991
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/12B87BFA502E06DB713C283545989FF27FAEA392.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZw9gFBAj76afWDcGPH9ZugTGhjmUQFBSDwuxAT3YHeG/0/12B87BFA502E06DB713C283545989FF27FAEA392.mft
Manifest number:          0198
Signing time:             Sun 14 Apr 2024 18:44:59 +0000
Manifest this update:     Sun 14 Apr 2024 18:39:59 +0000
Manifest next update:     Mon 15 Apr 2024 21:36:59 +0000
Files and hashes:         1: 323830313a38303a3237303a3a2f34382d3438203d3e20323632353135.roa (hash: 5vOxLvsruIoIgyo5WH/u8W+CU0gihmVGEK6PEH7T990=)
                          2: 3137372e38352e3233372e302f32342d3234203d3e20323632353135.roa (hash: aWVO/8IN2RtYDX1fayHCS9SOzgQWk0stkmEhudNqqZI=)
                          3: 3137372e38352e3233362e302f32332d3233203d3e20323632353135.roa (hash: Rsofip3MVynOcuVL79u8tUCNni/8/wojbK3vjZQcTok=)
                          4: 12B87BFA502E06DB713C283545989FF27FAEA392.crl (hash: sX6wpArqAYYYN4vBxZgaRzdc30hh/3qnVGpWKIVYKnA=)
                          5: 3137372e38352e3233362e302f32342d3234203d3e20323632353135.roa (hash: e30yhch261P8QOj1P7g8SDJVX+GfqBsmgtF6/6PLbpI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:0a:42:8f:2b:90:a9:c8:8a:c2:4d:0b:71:58:35:9e:a0:5f:89:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12B87BFA502E06DB713C283545989FF27FAEA392
        Validity
            Not Before: Apr 14 18:39:59 2024 GMT
            Not After : Apr 15 21:36:59 2024 GMT
        Subject: CN=B5B317E853630B2170AE15951BCBDABA7A2F9D47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:57:b6:b8:e2:54:67:d0:be:2a:69:0b:b9:53:
                    77:6e:ca:58:c1:41:88:35:9b:7f:3f:e4:21:81:af:
                    90:f7:4e:2f:84:a3:f2:39:72:21:0b:4f:3f:ee:f8:
                    1e:2e:10:a7:b1:c4:58:56:2d:e4:a7:b7:95:37:f8:
                    8d:ed:27:b3:86:d1:05:6b:a6:64:ad:13:2c:7f:4f:
                    08:14:f9:26:b3:11:ff:3e:11:40:76:12:41:93:dd:
                    02:26:e5:9d:b5:c4:bc:16:3b:88:40:b1:3d:49:5d:
                    8c:21:77:7e:03:be:ef:32:07:90:bc:c2:2f:f4:3e:
                    02:7d:2f:a7:19:dc:02:3c:56:37:2b:3b:eb:79:8f:
                    58:09:a8:4a:a6:f5:8d:d2:02:f1:52:ce:e5:bd:7e:
                    4b:87:6f:ee:c0:f8:8a:30:70:dc:1f:bf:9a:f4:09:
                    25:28:6e:20:23:21:cf:09:7e:2e:0f:25:27:ad:c8:
                    16:57:5b:96:21:52:69:41:67:71:95:d5:2a:d1:83:
                    ee:36:17:2b:9d:ec:5b:9f:f0:f2:98:79:72:1f:d3:
                    03:90:f5:da:c9:78:24:20:b8:83:53:26:a2:d6:0a:
                    03:d6:7a:b5:75:dd:ce:92:cd:8d:78:ae:c3:e0:08:
                    ff:94:d3:55:81:0f:12:14:a3:ba:b0:e1:af:c6:1c:
                    ec:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B3:17:E8:53:63:0B:21:70:AE:15:95:1B:CB:DA:BA:7A:2F:9D:47
            X509v3 Authority Key Identifier:
                keyid:12:B8:7B:FA:50:2E:06:DB:71:3C:28:35:45:98:9F:F2:7F:AE:A3:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZw9gFBAj76afWDcGPH9ZugTGhjmUQFBSDwuxAT3YHeG/0/12B87BFA502E06DB713C283545989FF27FAEA392.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/12B87BFA502E06DB713C283545989FF27FAEA392.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZw9gFBAj76afWDcGPH9ZugTGhjmUQFBSDwuxAT3YHeG/0/12B87BFA502E06DB713C283545989FF27FAEA392.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:57:63:5e:2a:16:f5:1d:b4:3e:11:f7:d6:a9:7f:0e:0e:2f:
         8f:a4:81:6e:8a:f5:21:53:11:e2:9d:9a:9c:95:d3:84:fd:6d:
         cd:50:b9:73:3c:64:1a:50:7e:24:66:b3:02:03:9c:be:a5:35:
         f2:26:e1:8f:54:ed:da:3f:5d:6e:d3:89:39:f6:f2:de:8a:f8:
         c1:59:be:80:ec:29:54:69:32:98:79:f2:fa:af:a0:b1:ec:2f:
         4c:81:bd:a5:c8:d3:a2:a1:b2:a4:d1:f7:37:90:15:68:bf:aa:
         c1:b8:9e:21:0d:dd:98:c1:22:f3:c0:16:a7:17:e0:85:cd:06:
         f5:56:e0:d4:41:d7:c4:4d:d9:80:5c:5d:7e:99:2d:cb:40:7d:
         91:a1:bf:d1:99:bc:13:04:40:93:67:98:34:a1:a4:12:60:bd:
         a5:96:16:52:5f:3a:8b:67:13:03:2f:8f:bd:df:d7:75:4c:f8:
         e9:5e:66:9e:86:95:72:5c:a1:dd:a3:ec:e1:cd:a8:ca:92:00:
         ce:1e:9f:a2:14:0a:1f:e8:f0:50:5c:b9:2f:13:4c:40:34:c6:
         2c:3a:a9:9e:9c:a5:41:79:2d:d1:29:18:04:e8:ca:13:4d:74:
         83:ab:3e:dd:e1:ce:1d:86:04:1e:ef:e9:fd:c1:1d:f5:d2:0e:
         bf:54:ed:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----