Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/E959984352554C0376C5B30DDCD3D08AC7EC938F.mft
File:                     E959984352554C0376C5B30DDCD3D08AC7EC938F.mft (raw, json)
Hash identifier:          tntQUD24i+lxlxZM70PYUmZZ83vxStDHyA22K5josBA=
Subject key identifier:   FF:0D:23:15:60:08:F3:EE:77:54:E1:F5:8D:74:A1:8A:F3:50:4F:B0
Authority key identifier: E9:59:98:43:52:55:4C:03:76:C5:B3:0D:DC:D3:D0:8A:C7:EC:93:8F
Certificate issuer:       /CN=E959984352554C0376C5B30DDCD3D08AC7EC938F
Certificate serial:       39EBB20191012EEC8C991D368FDDCC555D8F127A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E959984352554C0376C5B30DDCD3D08AC7EC938F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/E959984352554C0376C5B30DDCD3D08AC7EC938F.mft
Manifest number:          04FC
Signing time:             Mon 15 Apr 2024 11:31:20 +0000
Manifest this update:     Mon 15 Apr 2024 11:26:20 +0000
Manifest next update:     Tue 16 Apr 2024 15:30:20 +0000
Files and hashes:         1: 3133382e3235352e3138382e302f32322d3234203d3e20323633393838.roa (hash: mha/Pzxb+14RBIKv//3my0oDKaX2x3SYhrU5Zk3LTlM=)
                          2: E959984352554C0376C5B30DDCD3D08AC7EC938F.crl (hash: Zkb4iXoUsSxqimQ5CderJAfcnoSN7yBPJ7RiZBMtJsI=)
                          3: 323830343a323866303a3a2f33322d3332203d3e20323633393838.roa (hash: WTIrce7JqX+N0LbBUFio7hx5LkxbuX9Pkv5i6kMyKVw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:eb:b2:01:91:01:2e:ec:8c:99:1d:36:8f:dd:cc:55:5d:8f:12:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E959984352554C0376C5B30DDCD3D08AC7EC938F
        Validity
            Not Before: Apr 15 11:26:20 2024 GMT
            Not After : Apr 16 15:30:20 2024 GMT
        Subject: CN=FF0D23156008F3EE7754E1F58D74A18AF3504FB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:97:5e:29:9e:96:9b:5e:75:ef:cf:bd:46:dd:
                    d4:49:38:29:6d:70:ac:ba:7f:63:cb:32:66:7c:32:
                    b2:ed:15:60:5d:77:96:37:7f:83:12:00:e7:85:09:
                    f1:74:1f:01:23:bd:4a:2f:bd:e5:99:0c:33:f8:af:
                    00:17:80:d0:e4:c3:75:73:1e:6e:99:fd:4e:9a:e0:
                    ee:a3:d9:cd:11:d1:f7:3d:ed:98:0e:a1:fc:69:79:
                    ad:80:85:86:f9:9d:eb:55:20:5d:40:91:d6:74:26:
                    66:7d:95:b3:ce:c4:d3:55:ab:98:8a:fa:8c:1c:34:
                    b6:2a:a8:9e:c3:07:38:fe:a6:f7:01:ae:88:83:ef:
                    cb:77:e7:ba:4b:3b:a9:40:98:2a:ad:f8:16:c8:8d:
                    73:b9:8a:1e:52:54:24:00:6f:44:57:d1:eb:26:60:
                    42:a1:c3:ff:c2:b8:62:61:ab:49:c9:88:b8:e3:2d:
                    05:46:b7:1c:b4:3f:1f:95:aa:2a:d4:93:6b:8f:85:
                    a1:bf:c2:07:02:23:5f:8f:ee:b3:a3:67:e8:c2:13:
                    eb:4a:68:27:a5:a1:ab:91:3d:96:0b:71:67:e4:14:
                    d8:97:59:b3:7a:b5:f0:95:a9:ef:4d:88:1d:4f:68:
                    dc:76:4e:99:13:a9:39:a6:16:d0:30:97:94:ef:33:
                    ce:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:0D:23:15:60:08:F3:EE:77:54:E1:F5:8D:74:A1:8A:F3:50:4F:B0
            X509v3 Authority Key Identifier:
                keyid:E9:59:98:43:52:55:4C:03:76:C5:B3:0D:DC:D3:D0:8A:C7:EC:93:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/E959984352554C0376C5B30DDCD3D08AC7EC938F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E959984352554C0376C5B30DDCD3D08AC7EC938F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/E959984352554C0376C5B30DDCD3D08AC7EC938F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:cf:81:68:11:f8:d1:ca:47:68:cf:3e:b7:de:b7:8b:cd:de:
         7e:b6:27:1e:dd:fb:f4:0f:5c:81:2d:a2:2d:aa:85:69:e0:14:
         da:b6:d8:3e:d5:62:11:be:c0:1d:c5:fb:91:af:f5:82:43:b2:
         39:01:7a:48:9d:a1:83:56:5e:7a:93:61:cc:a3:62:6e:07:16:
         31:52:68:e2:2c:48:14:79:f0:ff:19:e6:93:ab:d3:d6:76:7e:
         a7:8e:0c:4a:4c:34:e8:ad:3f:57:ef:c3:11:0e:d8:a7:40:b6:
         d4:19:95:cb:46:48:06:94:f3:2f:4e:40:7a:85:c6:6a:8c:3b:
         bb:d7:1f:65:b4:b7:b4:af:5f:95:9e:d8:6c:a9:04:4b:a4:c5:
         d4:36:b8:90:38:c6:56:51:37:16:d9:b8:db:3f:56:b2:b2:60:
         31:b2:09:5a:11:2f:76:a3:47:fa:a9:21:92:e4:34:a3:0e:f6:
         f2:60:93:91:91:49:1c:fa:d3:3a:2d:54:0d:f4:3a:be:5b:0e:
         4f:79:fd:e6:b3:e7:8d:2b:7f:30:11:8b:40:a1:f3:15:7a:e4:
         4c:96:11:ad:4b:61:4e:dd:1b:a9:b1:b3:c6:d2:79:88:a5:e3:
         ec:82:e1:bf:9b:d2:77:68:06:08:9c:2e:8d:9e:39:86:a8:6b:
         e9:b7:96:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----