Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/0/FA4B516160EDFD77769FEBDC569D37C3D8828626.mft
File:                     FA4B516160EDFD77769FEBDC569D37C3D8828626.mft (raw, json)
Hash identifier:          mHUXoafZ7RUEYquqP+EGCRm6AVBX9rfgZHUYIQctbQA=
Subject key identifier:   72:C4:5E:66:C2:11:1B:D0:45:C3:C8:A7:09:4F:A2:B7:93:BF:A7:59
Authority key identifier: FA:4B:51:61:60:ED:FD:77:76:9F:EB:DC:56:9D:37:C3:D8:82:86:26
Certificate issuer:       /CN=FA4B516160EDFD77769FEBDC569D37C3D8828626
Certificate serial:       4DABEE7BF4DBD34DBFE32E7894CC89F32BDDF477
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA4B516160EDFD77769FEBDC569D37C3D8828626.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/0/FA4B516160EDFD77769FEBDC569D37C3D8828626.mft
Manifest number:          0285
Signing time:             Sun 14 Apr 2024 20:06:04 +0000
Manifest this update:     Sun 14 Apr 2024 20:01:04 +0000
Manifest next update:     Mon 15 Apr 2024 20:28:04 +0000
Files and hashes:         1: FA4B516160EDFD77769FEBDC569D37C3D8828626.crl (hash: tNtemdGCe2JsDGjV0xxcMdmI5O7Y4O00BfGSWw8XjLs=)
                          2: 34352e3138372e3139362e302f32322d3234203d3e20323639353536.roa (hash: v0S9iXU7msL0JgME1jHZvEmG1xkJeRD3OgxKYClLOZw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:ab:ee:7b:f4:db:d3:4d:bf:e3:2e:78:94:cc:89:f3:2b:dd:f4:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA4B516160EDFD77769FEBDC569D37C3D8828626
        Validity
            Not Before: Apr 14 20:01:04 2024 GMT
            Not After : Apr 15 20:28:04 2024 GMT
        Subject: CN=72C45E66C2111BD045C3C8A7094FA2B793BFA759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d1:03:2e:7a:b7:86:2b:ac:77:76:c5:44:81:
                    3e:6e:b7:9f:f4:6c:f5:c9:63:bc:9d:a4:06:98:54:
                    6c:65:35:41:7f:83:ff:d6:ff:a9:21:fb:e3:1a:02:
                    b0:3c:c2:55:70:77:ef:1c:4b:b3:72:29:fa:74:e9:
                    fc:b6:8a:c7:87:99:0b:27:28:c6:d6:f3:08:1f:f2:
                    8e:31:be:9a:68:a1:38:18:b6:d6:bc:20:c4:09:5e:
                    b8:ce:09:14:51:59:08:0d:9a:28:1c:24:0b:97:be:
                    81:64:12:c5:eb:44:6b:52:05:20:0e:62:d4:bf:8c:
                    43:67:02:a8:35:cc:8a:c9:54:a6:88:8b:0a:28:a2:
                    b1:e9:51:1f:fb:8e:c1:12:78:43:56:a0:25:bf:c7:
                    03:1e:82:51:ba:8d:60:6b:77:6d:ea:4c:3e:3f:e7:
                    f5:b0:c8:1f:00:0d:50:ee:f3:9f:df:99:7f:d2:0e:
                    64:66:69:7e:ac:98:bb:f0:77:48:5f:f7:4e:17:e8:
                    13:a1:5a:d0:9d:a0:1a:ad:1a:45:c8:48:72:6c:8a:
                    2a:e6:56:a7:71:79:c9:83:09:16:12:23:bc:56:64:
                    6b:36:ee:2a:c4:22:2d:a3:bc:68:f4:3b:dc:98:59:
                    d1:d9:6b:c4:e8:a2:a0:e3:ad:5a:46:04:56:3b:75:
                    01:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C4:5E:66:C2:11:1B:D0:45:C3:C8:A7:09:4F:A2:B7:93:BF:A7:59
            X509v3 Authority Key Identifier:
                keyid:FA:4B:51:61:60:ED:FD:77:76:9F:EB:DC:56:9D:37:C3:D8:82:86:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/0/FA4B516160EDFD77769FEBDC569D37C3D8828626.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA4B516160EDFD77769FEBDC569D37C3D8828626.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/0/FA4B516160EDFD77769FEBDC569D37C3D8828626.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:4c:d3:02:17:8e:27:17:70:4f:bd:6d:a2:ff:9b:91:ec:99:
         20:9c:6c:48:c2:33:6a:aa:52:d2:49:2e:4a:b2:b2:a5:89:af:
         8f:bc:e1:26:f6:89:fd:c9:68:b1:87:18:a5:f6:05:5c:db:ac:
         d1:7e:cf:f6:8d:33:3b:2a:ce:e6:4d:8a:14:0f:a7:7b:1c:2d:
         c1:23:7b:54:57:11:ed:da:a5:1c:a6:74:65:28:7b:74:a5:ac:
         62:19:37:6f:b7:7c:83:e5:53:3f:87:f2:f4:bf:81:f0:1a:81:
         6d:ac:e3:22:77:14:a9:7a:0e:5b:bc:c3:72:e2:cb:11:de:79:
         c8:48:2d:71:ac:9f:a7:2d:bc:a9:63:a1:97:c7:67:65:eb:f1:
         76:d9:30:13:6a:d0:5b:90:87:9a:72:38:4d:03:50:31:aa:f1:
         19:10:94:9b:10:2f:f6:42:9d:c6:46:96:e8:6d:eb:f3:28:15:
         e9:e4:47:e3:cf:45:9d:35:05:ff:12:8c:6b:01:12:94:10:dd:
         89:e2:f3:fb:b9:04:d9:e3:f7:95:83:5d:b4:7a:98:fa:88:bc:
         69:e0:52:77:da:83:3b:5a:a2:2d:49:28:e6:e4:f0:c6:f0:91:
         bb:f6:16:d3:85:e0:0a:24:ab:f3:ee:f5:00:33:56:4a:39:4b:
         2b:2a:aa:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----