Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/F40AF1C5C61B436E7E0D0EDE58C133811B6B0153.mft
File:                     F40AF1C5C61B436E7E0D0EDE58C133811B6B0153.mft (raw, json)
Hash identifier:          Fan9AhDCykGuCGtgNRTpJJEYUNLF8vYf8Nu+AT47ml8=
Subject key identifier:   85:97:66:D4:B5:30:9A:97:EE:A2:99:B3:85:91:52:E3:86:5F:1A:D7
Authority key identifier: F4:0A:F1:C5:C6:1B:43:6E:7E:0D:0E:DE:58:C1:33:81:1B:6B:01:53
Certificate issuer:       /CN=F40AF1C5C61B436E7E0D0EDE58C133811B6B0153
Certificate serial:       02D0F10CF7C2BC0F6459A0DBE4BEDDF0B5EA19A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F40AF1C5C61B436E7E0D0EDE58C133811B6B0153.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/F40AF1C5C61B436E7E0D0EDE58C133811B6B0153.mft
Manifest number:          68
Signing time:             Sun 17 Dec 2023 16:06:01 +0000
Manifest this update:     Sun 17 Dec 2023 16:01:01 +0000
Manifest next update:     Mon 18 Dec 2023 16:35:01 +0000
Files and hashes:         1: 3230302e3132342e38342e302f32322d3332203d3e20323730323734.roa (hash: yCahIz6VRthr37Nz9WZgw7rdACct0kmJhT4kKW1WGFc=)
                          2: 323830343a363938303a3a2f33322d313238203d3e20323730323734.roa (hash: xOGIp/eiF73l427eBJ1FxBaxrsTnwAlQqSAA0ITkB8s=)
                          3: F40AF1C5C61B436E7E0D0EDE58C133811B6B0153.crl (hash: nUt+09XoQzUd3fTSacgDQGpKfiXRni1BttsygxKorPE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:d0:f1:0c:f7:c2:bc:0f:64:59:a0:db:e4:be:dd:f0:b5:ea:19:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F40AF1C5C61B436E7E0D0EDE58C133811B6B0153
        Validity
            Not Before: Dec 17 16:01:01 2023 GMT
            Not After : Dec 18 16:35:01 2023 GMT
        Subject: CN=859766D4B5309A97EEA299B3859152E3865F1AD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:14:48:04:87:1a:f4:56:ba:ad:fe:b2:de:31:
                    ad:70:13:c9:e7:3f:8d:ad:3d:df:05:cf:ac:3f:29:
                    89:8e:70:29:91:86:e3:2d:9b:ee:fa:11:d2:18:66:
                    b8:3f:13:63:8d:03:38:be:93:ad:37:ff:15:e2:e2:
                    3d:0c:10:ea:86:1b:f6:56:b9:53:b5:e6:21:7c:27:
                    af:e9:50:39:80:5e:7c:5b:e0:ad:0a:2f:a3:5e:99:
                    28:7a:37:3b:13:8f:0c:92:98:24:3c:24:be:79:d0:
                    20:9a:54:f9:b6:42:95:c0:ce:7b:72:a6:ef:f4:c4:
                    71:6d:38:7f:a6:49:28:f9:7a:09:40:1f:a9:35:8a:
                    39:a0:44:9d:c8:ac:ef:fc:8a:b7:bc:58:70:c9:3d:
                    a1:76:fe:c7:4b:98:93:43:d7:ff:ee:19:4c:bd:91:
                    70:60:ee:9c:2f:db:3f:64:73:66:31:3a:23:3c:16:
                    68:9f:6d:e3:44:e7:34:a6:59:30:75:e6:ba:bc:d6:
                    f2:f3:ca:de:87:53:fd:fd:54:5a:20:57:2e:3d:15:
                    30:a4:6b:a8:90:e2:8e:01:f1:92:94:a5:08:2c:b5:
                    44:50:30:ef:6e:05:5b:8b:c2:2b:0b:a5:4f:cf:54:
                    86:5b:5a:8c:02:61:f2:59:56:ea:a1:c4:a6:5e:97:
                    37:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:97:66:D4:B5:30:9A:97:EE:A2:99:B3:85:91:52:E3:86:5F:1A:D7
            X509v3 Authority Key Identifier:
                keyid:F4:0A:F1:C5:C6:1B:43:6E:7E:0D:0E:DE:58:C1:33:81:1B:6B:01:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/F40AF1C5C61B436E7E0D0EDE58C133811B6B0153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F40AF1C5C61B436E7E0D0EDE58C133811B6B0153.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/F40AF1C5C61B436E7E0D0EDE58C133811B6B0153.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:a1:1a:36:2a:52:50:48:1a:d9:e3:80:2c:26:04:5b:ce:4c:
         5e:a5:d8:43:75:fe:c0:45:78:98:6b:df:cb:05:f6:4c:4f:57:
         bb:86:1a:1a:66:d4:ac:e4:d5:53:d7:f5:34:db:59:6a:a1:e8:
         00:b5:9b:46:cc:44:35:37:b8:bc:56:55:14:39:14:69:0b:d4:
         03:d0:e5:a0:ca:1c:cd:01:a2:89:5d:d7:d9:e7:24:a8:b1:7d:
         5f:d0:b1:1a:3f:a9:32:aa:16:67:9c:61:e8:ff:f7:25:86:3b:
         c5:fe:90:7d:0b:0e:c6:4e:ca:3f:f6:c2:1c:ea:45:b3:1b:b9:
         f2:a8:10:30:9c:07:53:72:a0:e7:c8:21:54:fb:8a:0f:ae:ba:
         44:8a:ea:1b:57:7a:b6:27:c9:38:d4:5b:35:70:11:2d:9f:e2:
         fb:8c:22:ea:fd:a0:25:16:dc:8c:2f:6b:f9:60:bf:25:93:6f:
         9e:d5:91:83:41:6e:77:bd:8e:32:28:f1:b9:59:66:35:1e:40:
         82:d9:14:ba:7f:5a:1f:f9:af:50:3f:bd:dd:75:4b:d8:54:48:
         06:63:8b:f3:c2:73:b6:fb:e8:74:b9:63:fd:f8:98:a3:30:f9:
         66:f6:02:2b:dd:2e:28:c3:ee:ad:b9:2d:18:e8:55:9f:7a:a6:
         9e:09:df:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----