Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/0/F9B67129BDC3BD0CFBB3A4E693BAA3407622FDAA.mft
File:                     F9B67129BDC3BD0CFBB3A4E693BAA3407622FDAA.mft (raw, json)
Hash identifier:          dkbtUHQzcSm8/qUEx2/mm7d0QW1X9/sXc1QDzLMocVI=
Subject key identifier:   84:AF:B0:9B:3E:E4:9E:52:FD:44:57:DA:99:A6:FB:C4:78:A4:B3:04
Authority key identifier: F9:B6:71:29:BD:C3:BD:0C:FB:B3:A4:E6:93:BA:A3:40:76:22:FD:AA
Certificate issuer:       /CN=F9B67129BDC3BD0CFBB3A4E693BAA3407622FDAA
Certificate serial:       3BECB315CDEAD2A4D5D7F50A69D9FE4C3EBF9B8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9B67129BDC3BD0CFBB3A4E693BAA3407622FDAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/0/F9B67129BDC3BD0CFBB3A4E693BAA3407622FDAA.mft
Manifest number:          0523
Signing time:             Mon 15 Apr 2024 01:30:00 +0000
Manifest this update:     Mon 15 Apr 2024 01:25:00 +0000
Manifest next update:     Tue 16 Apr 2024 01:30:00 +0000
Files and hashes:         1: 34352e3139312e37382e302f32342d3234203d3e20323639373030.roa (hash: 5iEkdfI1lO1oELc/Gpci+0AkKCPMvWJMgngm+ZJbzPI=)
                          2: 323830343a363838633a383030303a3a2f33342d3334203d3e20323639373030.roa (hash: +8dCairg9UZUp2/BvGmJihc11LdDmmanQSNMcMXKAaY=)
                          3: 34352e3139312e37382e302f32332d3233203d3e20323639373030.roa (hash: pZI2yYKRb37Zwt8+0hYCiYmYHU6VdaYvwLWo4vFkkTk=)
                          4: 34352e3139312e37372e302f32342d3234203d3e20323639373030.roa (hash: wzt0iu4sKe5bp/y0p2y5B2rd7gKDrsoTJ0xzcegtCJk=)
                          5: 34352e3139312e37392e302f32342d3234203d3e20323639373030.roa (hash: b+IY+ePtA+qfAB6toFdzQM476ngLGWQ0ofYnKRx+t6g=)
                          6: 323830343a363838633a3a2f33322d3332203d3e20323639373030.roa (hash: amWg1k6LoQKHjxoc2cr8DAzDRD22ajjfSz1R8Shqbr4=)
                          7: 323830343a363838633a633030303a3a2f34302d3430203d3e20323639373030.roa (hash: pokhD7c1Re0Mh+dzpxKZoP0bE5jIeA9n4P0Xtc582E4=)
                          8: F9B67129BDC3BD0CFBB3A4E693BAA3407622FDAA.crl (hash: k4hrw/o/yr1qflA0zX7Tby6qXndi5zx/hcW/uqYgOm4=)
                          9: 34352e3139312e37362e302f32342d3234203d3e20323639373030.roa (hash: ajkiJWuOU/pI8XjY+V6e5KsN9Z9CbB73/TUbcpJo8og=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ec:b3:15:cd:ea:d2:a4:d5:d7:f5:0a:69:d9:fe:4c:3e:bf:9b:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9B67129BDC3BD0CFBB3A4E693BAA3407622FDAA
        Validity
            Not Before: Apr 15 01:25:00 2024 GMT
            Not After : Apr 16 01:30:00 2024 GMT
        Subject: CN=3082010A0282010100C449DAFD64B060C4DFB18601DE395434930E16C40EABC7588621E0E419E7890433E99899D3F7D8A024B304EEFD27F4D1B12420DC58DF1CFCEC00AB8EB19B1BCCF8648BFD998AF4AD106A7A801370DAC860FD56B436AE324ABE739F07673BD0CA835B22A2407F9A121373D0E9384D72F5DD5F57BA700C6B02A7A0D3148B3E7D8BA1D2A0A23EC4040A754C09439A1AEA91C690AF44C2108F4C6BE70B71A28DFBC5142F8CBBBB1E4193F8968938E71BB778FBDD40B9EC2196E371D8C8F8F506549DCA537EB340AC1B15D71E7F653078AEDB1364ED19BEB7EBCA20B421B13F1401F6555EB9EB12D4C27F068155132966FE4892FCF96A34A7BEF72B177E364972BD5D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:49:da:fd:64:b0:60:c4:df:b1:86:01:de:39:
                    54:34:93:0e:16:c4:0e:ab:c7:58:86:21:e0:e4:19:
                    e7:89:04:33:e9:98:99:d3:f7:d8:a0:24:b3:04:ee:
                    fd:27:f4:d1:b1:24:20:dc:58:df:1c:fc:ec:00:ab:
                    8e:b1:9b:1b:cc:f8:64:8b:fd:99:8a:f4:ad:10:6a:
                    7a:80:13:70:da:c8:60:fd:56:b4:36:ae:32:4a:be:
                    73:9f:07:67:3b:d0:ca:83:5b:22:a2:40:7f:9a:12:
                    13:73:d0:e9:38:4d:72:f5:dd:5f:57:ba:70:0c:6b:
                    02:a7:a0:d3:14:8b:3e:7d:8b:a1:d2:a0:a2:3e:c4:
                    04:0a:75:4c:09:43:9a:1a:ea:91:c6:90:af:44:c2:
                    10:8f:4c:6b:e7:0b:71:a2:8d:fb:c5:14:2f:8c:bb:
                    bb:1e:41:93:f8:96:89:38:e7:1b:b7:78:fb:dd:40:
                    b9:ec:21:96:e3:71:d8:c8:f8:f5:06:54:9d:ca:53:
                    7e:b3:40:ac:1b:15:d7:1e:7f:65:30:78:ae:db:13:
                    64:ed:19:be:b7:eb:ca:20:b4:21:b1:3f:14:01:f6:
                    55:5e:b9:eb:12:d4:c2:7f:06:81:55:13:29:66:fe:
                    48:92:fc:f9:6a:34:a7:be:f7:2b:17:7e:36:49:72:
                    bd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:AF:B0:9B:3E:E4:9E:52:FD:44:57:DA:99:A6:FB:C4:78:A4:B3:04
            X509v3 Authority Key Identifier:
                keyid:F9:B6:71:29:BD:C3:BD:0C:FB:B3:A4:E6:93:BA:A3:40:76:22:FD:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/0/F9B67129BDC3BD0CFBB3A4E693BAA3407622FDAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9B67129BDC3BD0CFBB3A4E693BAA3407622FDAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/0/F9B67129BDC3BD0CFBB3A4E693BAA3407622FDAA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:ee:a7:da:56:14:3c:fe:ac:3b:ac:00:bc:d8:a7:97:bd:db:
         e6:5d:c8:7b:26:2b:a2:cd:20:7c:00:e0:30:3b:58:e5:7d:9b:
         7b:89:f6:cf:7b:6f:3a:fd:6e:95:da:aa:22:46:87:84:ed:39:
         3f:ac:36:91:7f:9c:f1:8f:3e:e9:59:92:b8:94:d7:4a:6a:0c:
         5f:9c:bb:1d:8c:44:e8:e0:04:27:eb:a6:14:af:4c:03:ea:7b:
         98:61:59:0e:38:a4:bd:74:97:3a:2e:57:1e:22:9b:cb:c0:5d:
         6b:ce:00:f2:e2:1a:e6:dc:8e:37:91:a0:7b:32:1f:3d:60:80:
         90:8f:fb:86:e7:45:5b:13:51:b3:8c:e0:5d:d5:4d:03:3f:9f:
         a2:b1:d9:5b:a7:e8:07:71:cb:be:fa:3a:a4:2f:74:de:1f:49:
         d5:92:38:f0:15:b3:a6:0c:0f:63:17:0a:b4:31:cd:ea:d7:81:
         dd:f7:a8:c1:bb:6b:36:0f:0f:a9:2f:7d:b1:67:fd:77:6a:0f:
         40:8f:bb:20:7f:6b:1d:86:75:58:16:a7:50:6a:ef:82:61:75:
         21:85:4d:8a:8d:fb:28:af:95:af:fc:23:e9:3d:2d:1e:85:2d:
         79:fd:97:b5:ee:37:de:02:62:4e:68:c2:a7:06:0d:a0:05:94:
         bc:51:9d:cb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----