Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/0/F220AC26EF920D90F2FDAD8C8F43587AA6142B09.mft
File:                     F220AC26EF920D90F2FDAD8C8F43587AA6142B09.mft (raw, json)
Hash identifier:          rkkIuEOlwLTB3FG8YgX1XaLlz0gh7FDmXmSyQQGU0KI=
Subject key identifier:   66:B7:C7:03:E4:AE:98:CF:5A:79:83:A1:A3:6D:22:05:DB:8D:FF:48
Authority key identifier: F2:20:AC:26:EF:92:0D:90:F2:FD:AD:8C:8F:43:58:7A:A6:14:2B:09
Certificate issuer:       /CN=F220AC26EF920D90F2FDAD8C8F43587AA6142B09
Certificate serial:       59E9D0A05A484D6F2AAF7E5CB8D8D84C5E1669FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F220AC26EF920D90F2FDAD8C8F43587AA6142B09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/0/F220AC26EF920D90F2FDAD8C8F43587AA6142B09.mft
Manifest number:          01C0
Signing time:             Mon 15 Apr 2024 05:20:34 +0000
Manifest this update:     Mon 15 Apr 2024 05:15:34 +0000
Manifest next update:     Tue 16 Apr 2024 07:30:34 +0000
Files and hashes:         1: 3230302e3130372e3131322e302f32322d3234203d3e20323730323439.roa (hash: TlmMPGXdGcx1WgVGE1fJ1q84yyspLZNyJYrPLoIF1gI=)
                          2: 3230302e3130372e3131342e302f32332d3233203d3e20323730323439.roa (hash: pF7RQ9XWL4TP+QrinUeyOX2rmr6C8bEftdSFBmBzRFo=)
                          3: 323830343a363931633a3a2f33322d313238203d3e20323730323439.roa (hash: laUL63eQnqRFJ9uWwQCuNFGtCEZd1u6GPghwxlkeCHI=)
                          4: F220AC26EF920D90F2FDAD8C8F43587AA6142B09.crl (hash: Tmr/75GzGLVwdutZywjlcIBxRpthqGwicFoXQZCjvqA=)
                          5: 3230302e3130372e3131322e302f32322d3232203d3e20323730323439.roa (hash: 5FJ/L+H9SroVliq0j8o2aAjfvvN8praj4hEKEnoDTZQ=)
                          6: 3230302e3130372e3131322e302f32332d3233203d3e20323730323439.roa (hash: HoQNeY9RiqScCKEf5Qw2Era0FjVn3Rhm2GgfCpSWWsg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e9:d0:a0:5a:48:4d:6f:2a:af:7e:5c:b8:d8:d8:4c:5e:16:69:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F220AC26EF920D90F2FDAD8C8F43587AA6142B09
        Validity
            Not Before: Apr 15 05:15:34 2024 GMT
            Not After : Apr 16 07:30:34 2024 GMT
        Subject: CN=66B7C703E4AE98CF5A7983A1A36D2205DB8DFF48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:3d:95:d6:47:1c:24:a0:36:47:6a:72:97:cc:
                    b8:b9:34:3a:8c:91:30:4b:aa:f2:92:fa:8f:9f:81:
                    a0:83:48:25:03:34:02:b0:ab:71:93:5e:74:37:c4:
                    ec:44:85:b9:35:dc:4c:18:b6:41:84:e0:cf:06:65:
                    25:11:c1:e1:fc:fd:66:7c:fb:6e:d8:63:bb:de:3d:
                    bb:ec:b4:d8:7a:87:3f:09:1b:aa:dc:c0:bd:a1:54:
                    89:2b:7b:8f:ff:f2:a9:72:e9:3a:4d:b7:08:6c:7e:
                    cf:85:00:96:22:a3:5f:b1:cb:2b:05:41:a2:82:be:
                    f6:24:39:e9:3a:be:b1:f5:4b:ce:fe:61:a0:2c:73:
                    c8:ea:eb:13:60:f6:5d:fa:f9:3d:ba:0d:e1:de:3e:
                    bb:bc:7e:a0:b9:85:bc:2c:b3:39:f8:06:4f:3a:75:
                    83:f3:33:6c:17:db:ab:1b:66:a3:35:33:08:8d:2d:
                    30:b6:97:a4:d7:73:ee:0f:30:27:b9:3f:bb:24:61:
                    10:82:f8:07:13:b0:5b:cf:a3:72:91:ae:cf:ea:c6:
                    5d:9b:64:6b:73:d7:6f:d8:9d:06:19:0e:33:e1:3c:
                    71:4b:bb:8d:61:a1:9e:fe:23:28:bb:6d:7b:3b:98:
                    4d:88:a9:57:bd:12:27:3b:ba:03:39:ac:c6:db:52:
                    cf:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B7:C7:03:E4:AE:98:CF:5A:79:83:A1:A3:6D:22:05:DB:8D:FF:48
            X509v3 Authority Key Identifier:
                keyid:F2:20:AC:26:EF:92:0D:90:F2:FD:AD:8C:8F:43:58:7A:A6:14:2B:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/0/F220AC26EF920D90F2FDAD8C8F43587AA6142B09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F220AC26EF920D90F2FDAD8C8F43587AA6142B09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/0/F220AC26EF920D90F2FDAD8C8F43587AA6142B09.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:23:4e:54:ac:b4:be:39:42:33:a2:43:7f:4b:0c:a4:4a:14:
         7f:82:84:0f:7d:62:9b:71:7a:f4:e0:09:fb:f8:b5:14:0e:65:
         12:dc:9b:db:ff:2b:67:52:6f:99:d0:46:21:31:75:bb:a0:34:
         0e:76:cc:67:e8:c8:96:82:0d:01:98:4f:80:23:c3:7b:c7:85:
         76:45:5b:26:36:dc:48:8c:6a:29:0c:2e:4d:2d:d7:34:e9:f7:
         72:1f:86:cc:71:52:42:63:2a:50:6a:4f:4a:7a:09:0a:e7:85:
         1c:88:74:ee:30:0f:0a:ee:d1:d8:4f:2d:69:83:a7:62:0f:35:
         a1:2a:3a:26:7b:7b:d7:9d:a4:17:94:65:1c:b5:df:bf:39:d0:
         b9:e8:50:23:65:3c:5b:f1:de:c5:52:c8:28:b3:cf:94:a4:da:
         47:68:ad:76:21:ec:52:c9:7f:c6:37:ab:56:f9:2f:68:bb:64:
         d4:56:2b:99:10:9f:fa:5b:86:9f:c1:05:49:f8:cf:57:4f:2d:
         86:65:24:17:c3:a5:30:8b:89:a7:cf:f9:b4:f2:2c:98:4b:d7:
         c7:48:af:23:54:b8:ab:99:24:0e:b8:4b:55:e0:6e:89:e6:bc:
         84:ea:e2:2e:9e:7d:7c:de:71:11:9e:4b:d9:be:3f:25:57:81:
         2d:96:96:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----