Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/371XwPGVbALNHEq2HbyHF2uDkHZrrqWTfNvLxpjbiHVv/0/0F795F829D8772373D28F4F133F1C6CB68224275.mft
File:                     0F795F829D8772373D28F4F133F1C6CB68224275.mft (raw, json)
Hash identifier:          OAzAZuVtoXnfyWC/m73kP9Smj9W5HainVdYnDxXZAzw=
Subject key identifier:   BD:FF:E0:01:44:8A:1A:FC:AC:BA:83:A3:6B:EA:13:B8:D2:35:1A:2E
Authority key identifier: 0F:79:5F:82:9D:87:72:37:3D:28:F4:F1:33:F1:C6:CB:68:22:42:75
Certificate issuer:       /CN=0F795F829D8772373D28F4F133F1C6CB68224275
Certificate serial:       3F8ED34D313EF77EF18493B3DC59713717178EC9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F795F829D8772373D28F4F133F1C6CB68224275.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/371XwPGVbALNHEq2HbyHF2uDkHZrrqWTfNvLxpjbiHVv/0/0F795F829D8772373D28F4F133F1C6CB68224275.mft
Manifest number:          05
Signing time:             Wed 24 May 2023 05:49:04 +0000
Manifest this update:     Wed 24 May 2023 05:44:04 +0000
Manifest next update:     Thu 25 May 2023 07:56:04 +0000
Files and hashes:         1: 0F795F829D8772373D28F4F133F1C6CB68224275.crl (hash: +zJGSyh/4L7hgYeSqjCvID+a6iMhfUYkV6MjA2H1lqU=)
                          2: 323830343a3236303a3a2f33322d313238203d3e203533323134.roa (hash: 1bWwQ0RBS8rlgTk8Copcdr0rEwtNPfSxv8kEx4i1Xm8=)
                          3: 3138372e34392e3234302e302f32312d3332203d3e203533323134.roa (hash: 5O2x4s8Kr7hhe/JdZ4RtclJUkwtmfHe1Y3+mmZUVOTQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:8e:d3:4d:31:3e:f7:7e:f1:84:93:b3:dc:59:71:37:17:17:8e:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F795F829D8772373D28F4F133F1C6CB68224275
        Validity
            Not Before: May 24 05:44:04 2023 GMT
            Not After : May 25 07:56:04 2023 GMT
        Subject: CN=BDFFE001448A1AFCACBA83A36BEA13B8D2351A2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:99:a4:1a:f4:16:ea:db:90:4d:e4:65:61:22:
                    fc:0b:cd:d5:3c:ad:61:39:3e:d0:67:77:c8:20:3f:
                    47:a8:5c:93:b2:d1:3c:f2:7a:37:0b:b9:70:5b:af:
                    bf:fe:74:5a:6c:18:5b:8b:8a:32:26:a9:58:28:a8:
                    66:18:c6:43:53:5a:84:08:99:7e:71:e4:83:d0:c3:
                    95:56:fe:e8:86:c0:28:fa:99:cb:c1:a2:21:7d:10:
                    cc:29:b3:9f:c2:29:4b:1a:ef:1a:88:06:c3:c2:9d:
                    96:74:37:d2:c6:54:1a:2e:ee:03:0f:aa:f4:6d:c7:
                    46:58:c7:cb:18:7c:09:f4:7e:f6:e7:a2:92:33:c8:
                    3e:f8:9b:ba:aa:61:c2:8a:99:f2:c4:01:ee:7b:86:
                    25:96:ae:0a:3d:45:f0:ae:6a:26:6d:7a:96:72:06:
                    f2:6e:24:60:fa:86:0b:2c:8b:26:e4:dc:f3:96:12:
                    8a:e9:00:56:f7:c6:ec:19:1a:87:0e:76:84:07:9a:
                    31:7d:63:2d:04:f0:a1:03:85:e9:9f:e4:bb:59:bb:
                    34:a9:52:f9:e4:1c:af:86:3e:e7:d2:d0:7f:0b:ca:
                    ba:0d:03:9e:86:81:66:2e:74:96:fb:7f:15:52:9a:
                    6a:aa:21:d4:e3:87:74:29:76:52:69:33:39:f9:f1:
                    cf:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:FF:E0:01:44:8A:1A:FC:AC:BA:83:A3:6B:EA:13:B8:D2:35:1A:2E
            X509v3 Authority Key Identifier:
                keyid:0F:79:5F:82:9D:87:72:37:3D:28:F4:F1:33:F1:C6:CB:68:22:42:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/371XwPGVbALNHEq2HbyHF2uDkHZrrqWTfNvLxpjbiHVv/0/0F795F829D8772373D28F4F133F1C6CB68224275.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F795F829D8772373D28F4F133F1C6CB68224275.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/371XwPGVbALNHEq2HbyHF2uDkHZrrqWTfNvLxpjbiHVv/0/0F795F829D8772373D28F4F133F1C6CB68224275.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:80:3d:70:79:e0:96:08:7c:4b:7c:81:46:f3:c3:df:84:3e:
         70:4a:d7:80:15:19:d3:fd:67:51:86:28:73:cd:b8:08:89:7d:
         ee:52:83:e2:7d:05:28:0d:86:53:c1:c7:58:11:4e:3e:af:c5:
         a1:99:a1:a8:6e:b5:f9:13:af:85:67:f2:b4:f3:13:24:95:8e:
         68:2b:aa:64:bd:92:ef:9f:6f:3c:ec:79:c9:ea:82:38:c4:9e:
         42:76:ab:4b:bd:3c:56:25:d0:04:2b:1a:e2:ef:f8:14:a9:88:
         83:07:7b:86:8e:d0:47:23:91:a0:cb:09:1f:7d:05:46:ff:5a:
         73:0c:4c:d0:80:fd:7c:7f:cd:e0:58:b0:51:ba:f1:b1:17:0e:
         fe:53:78:96:69:9b:da:f9:55:94:a3:66:e4:f4:d3:b2:e4:49:
         35:d7:d3:b7:da:09:81:8b:06:bd:dc:cb:62:09:ae:ee:c0:18:
         23:c8:78:13:5c:6d:5b:92:a0:8a:ed:92:e7:22:bf:1f:c5:d3:
         9e:02:a9:c6:a8:35:15:0e:74:35:fc:67:8e:e2:4e:b8:0e:19:
         04:c4:53:22:e2:20:6d:3f:f5:40:8e:5f:57:bf:79:20:0b:08:
         96:e8:51:d3:b2:98:ec:b9:87:91:a5:bf:7b:07:fb:6d:8c:ef:
         3c:14:48:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----