Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/173D80B7F844B5ACF5FE6739453CBE860C0FE753.mft
File:                     173D80B7F844B5ACF5FE6739453CBE860C0FE753.mft (raw, json)
Hash identifier:          E2jHqVJF/mi7O0HKTIBvOs8tUeyCpzkPGGecB3SUvko=
Subject key identifier:   B6:A5:09:4D:9A:56:25:84:56:99:A1:13:D9:3E:3A:F4:C9:9D:76:FE
Authority key identifier: 17:3D:80:B7:F8:44:B5:AC:F5:FE:67:39:45:3C:BE:86:0C:0F:E7:53
Certificate issuer:       /CN=173D80B7F844B5ACF5FE6739453CBE860C0FE753
Certificate serial:       5C242A59619211CABB4FB315C39A54E2010F5FA2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/173D80B7F844B5ACF5FE6739453CBE860C0FE753.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/173D80B7F844B5ACF5FE6739453CBE860C0FE753.mft
Manifest number:          F2
Signing time:             Mon 15 Apr 2024 03:15:05 +0000
Manifest this update:     Mon 15 Apr 2024 03:10:05 +0000
Manifest next update:     Tue 16 Apr 2024 06:28:05 +0000
Files and hashes:         1: 3137302e38342e3131322e302f32322d3234203d3e20323633303439.roa (hash: vhpOtL+Wbw4NsXrBd1sNAOH6aHu+ymoCjzBNHlngAc8=)
                          2: 323830343a6665303a3a2f33322d3333203d3e20323633303439.roa (hash: QR6B+v+0B4ON2LoXFzN8hYaRDwtKRjZISvDssRRz8fg=)
                          3: 3137372e3133362e3130342e302f32312d3234203d3e20323633303439.roa (hash: 26Ix/wABO/A6S9tv92zHDOQ14X4xBFHmh99DskBwExs=)
                          4: 3137372e3132392e3232342e302f32322d3234203d3e20323633303439.roa (hash: EAO4ldXfG2EVPmzNFufvwPYGCJXvQ5wOmeevzX5ghoY=)
                          5: 323830343a6665303a313838303a3a2f34312d3431203d3e20323633303439.roa (hash: xLAz+ePB2mKfZwbSqHzMAeKeDoJt+oopWx2FSHEN8Q8=)
                          6: 173D80B7F844B5ACF5FE6739453CBE860C0FE753.crl (hash: Cf4onDBuopH/BBWXR9sh0NE7V6Br9KGQSsPc0ktxpK8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:24:2a:59:61:92:11:ca:bb:4f:b3:15:c3:9a:54:e2:01:0f:5f:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=173D80B7F844B5ACF5FE6739453CBE860C0FE753
        Validity
            Not Before: Apr 15 03:10:05 2024 GMT
            Not After : Apr 16 06:28:05 2024 GMT
        Subject: CN=B6A5094D9A5625845699A113D93E3AF4C99D76FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:63:af:83:e9:e1:3d:ef:32:17:b4:ab:00:ec:
                    82:d4:bc:5e:85:b4:a3:a8:0a:57:82:66:5d:52:d0:
                    0e:f2:b3:23:5c:db:43:71:6d:4e:77:19:8e:2a:25:
                    75:9c:14:02:b7:14:0c:40:91:65:e4:7d:49:88:6b:
                    b2:68:5f:66:ee:ed:bb:ad:ed:94:4a:fe:af:fa:80:
                    58:99:b2:da:82:be:f0:50:93:f1:07:6e:99:33:15:
                    d0:64:7b:4a:bb:53:06:f6:2c:09:65:46:37:15:c2:
                    c8:34:1c:17:17:40:9c:dc:b5:07:d0:ea:d8:00:ad:
                    3c:3d:c7:eb:f5:62:c7:d9:67:a9:9a:f8:33:d5:07:
                    6c:f8:ee:5c:73:64:f7:96:ef:ef:81:07:ef:5e:b3:
                    fc:01:68:69:42:09:5d:83:41:b1:e4:d7:76:a6:24:
                    1e:b2:8e:62:1b:19:f4:25:71:2f:bb:5f:aa:5e:b0:
                    5d:4d:9c:25:cd:8f:a9:cf:04:d2:2b:63:26:94:20:
                    1b:41:55:6a:84:1b:0d:cf:22:16:56:16:64:4b:b6:
                    89:b8:a6:45:68:2d:cd:20:b5:87:9d:4c:a2:b6:6c:
                    d0:bf:bd:86:5d:99:6b:bf:97:88:52:c9:2f:c5:ad:
                    ae:f7:4a:c1:f7:2f:d3:91:43:78:e2:c9:13:b6:6f:
                    cc:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A5:09:4D:9A:56:25:84:56:99:A1:13:D9:3E:3A:F4:C9:9D:76:FE
            X509v3 Authority Key Identifier:
                keyid:17:3D:80:B7:F8:44:B5:AC:F5:FE:67:39:45:3C:BE:86:0C:0F:E7:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/173D80B7F844B5ACF5FE6739453CBE860C0FE753.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/173D80B7F844B5ACF5FE6739453CBE860C0FE753.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/173D80B7F844B5ACF5FE6739453CBE860C0FE753.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:e3:c2:6a:3d:1b:90:06:50:56:82:e2:3a:24:85:3b:bd:61:
         cb:05:44:67:39:f8:7c:ef:b7:75:98:ef:76:9a:52:a5:6c:9b:
         b7:ef:20:0b:d6:64:ae:77:7e:1c:bf:dd:15:6e:8c:7c:04:4d:
         fe:f4:57:a0:0c:be:0b:50:b8:8e:30:5b:5f:c9:f3:1a:f1:4c:
         17:f6:75:8c:41:36:86:d1:ef:ed:c5:40:4c:18:7e:62:bd:21:
         02:ec:26:7b:68:ea:75:e5:95:0c:d0:df:86:b2:f8:20:8e:77:
         7f:24:dc:ac:5f:be:51:76:ec:40:81:fa:db:e4:de:de:cb:58:
         b4:c6:ab:ad:38:c0:09:88:0f:ae:90:60:14:04:96:5d:89:3c:
         1a:c0:79:a8:5f:2c:e8:da:fc:6c:ae:e5:59:dc:68:3b:1b:63:
         96:fb:c9:3e:ab:5b:97:31:0b:f4:da:6f:4c:88:7a:61:26:3d:
         f5:dc:c8:f4:0a:4e:79:1b:04:77:8b:f3:73:4a:8c:06:fa:5d:
         02:10:18:28:83:b4:77:c1:4b:2b:3c:21:35:48:de:c5:db:ac:
         d9:75:56:68:5d:9c:70:70:eb:b9:0e:d6:aa:26:a8:d9:0f:83:
         98:1e:8b:56:4b:dd:10:56:7e:11:d0:0c:1e:0c:74:bd:ef:fe:
         67:e1:33:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----