Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/1/BB7AF2631F65C6E5A57ACF0DBA13E887EE7F74AA.mft
File:                     BB7AF2631F65C6E5A57ACF0DBA13E887EE7F74AA.mft (raw, json)
Hash identifier:          sqscKnYVEYMCcP9PG2J8fNQzk7iappQu10ufubEFmP4=
Subject key identifier:   FB:93:FF:22:B4:49:4D:91:21:EE:AB:8E:B4:63:B0:97:B5:FA:C0:D8
Authority key identifier: BB:7A:F2:63:1F:65:C6:E5:A5:7A:CF:0D:BA:13:E8:87:EE:7F:74:AA
Certificate issuer:       /CN=BB7AF2631F65C6E5A57ACF0DBA13E887EE7F74AA
Certificate serial:       46E28FBAB5983E57C9691F0365F16564E8AE61FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB7AF2631F65C6E5A57ACF0DBA13E887EE7F74AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/1/BB7AF2631F65C6E5A57ACF0DBA13E887EE7F74AA.mft
Manifest number:          FC
Signing time:             Thu 10 Oct 2024 12:00:42 +0000
Manifest this update:     Thu 10 Oct 2024 11:55:42 +0000
Manifest next update:     Fri 11 Oct 2024 13:35:42 +0000
Files and hashes:         1: 3139302e3131312e3138342e302f32322d3234203d3e20323730343238.roa (hash: 8yRlAEkOksuvgKuI7z5JNLv1THXQvD/T+Q0izpD5xHs=)
                          2: BB7AF2631F65C6E5A57ACF0DBA13E887EE7F74AA.crl (hash: Jyn3jesrv1016V6a21mElmW7o+xb0iMTbW2b5pGEHuU=)
                          3: 323830343a366264343a3a2f33322d3336203d3e20323730343238.roa (hash: hsYXHbCRcKHac7ZI+0QE+Sm5OVsFUgMtaPKV6eqAjF0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:e2:8f:ba:b5:98:3e:57:c9:69:1f:03:65:f1:65:64:e8:ae:61:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB7AF2631F65C6E5A57ACF0DBA13E887EE7F74AA
        Validity
            Not Before: Oct 10 11:55:42 2024 GMT
            Not After : Oct 11 13:35:42 2024 GMT
        Subject: CN=FB93FF22B4494D9121EEAB8EB463B097B5FAC0D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:30:85:46:1b:c5:60:3b:99:39:e9:dc:04:e1:
                    87:1d:74:61:47:da:d1:01:20:44:5b:4a:8f:3a:d7:
                    8d:cc:9e:9e:87:83:78:cd:da:8c:0e:e5:f9:45:c2:
                    2d:b4:e5:7e:2d:10:21:42:f5:2c:c7:28:31:03:a9:
                    a5:54:8c:ba:0f:6a:5b:b2:2a:88:b3:6d:3c:c3:ae:
                    91:cc:e6:da:f8:bb:12:06:10:64:f9:74:7e:2a:a2:
                    cd:b4:b5:a3:6f:70:10:ca:88:28:4a:9f:cb:3f:88:
                    9f:a7:89:19:96:a8:e5:3e:d1:a1:68:e0:e2:da:bb:
                    64:cf:76:a1:81:2d:b2:cf:bf:ce:8b:b7:81:10:8e:
                    44:a6:cc:b6:7d:00:c3:0a:23:0f:38:10:34:cf:69:
                    5b:65:fe:29:36:6f:44:1a:f2:7f:25:95:32:80:d6:
                    01:82:19:a9:b8:85:5e:31:e4:95:78:79:0a:5b:cd:
                    7a:43:46:15:ff:b7:b5:c2:2b:fc:78:3a:75:e5:61:
                    d1:ca:e4:fa:bf:a1:55:0d:08:7c:3b:b0:0a:ae:a2:
                    7b:10:5f:04:80:3d:a5:da:2b:37:56:dc:13:ab:12:
                    bc:08:8f:21:3f:d3:13:13:8d:2a:22:6c:97:ba:72:
                    8c:cd:b6:de:90:17:7b:09:80:cb:e1:c6:91:fe:54:
                    8c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:93:FF:22:B4:49:4D:91:21:EE:AB:8E:B4:63:B0:97:B5:FA:C0:D8
            X509v3 Authority Key Identifier:
                keyid:BB:7A:F2:63:1F:65:C6:E5:A5:7A:CF:0D:BA:13:E8:87:EE:7F:74:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/1/BB7AF2631F65C6E5A57ACF0DBA13E887EE7F74AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB7AF2631F65C6E5A57ACF0DBA13E887EE7F74AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/1/BB7AF2631F65C6E5A57ACF0DBA13E887EE7F74AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:c2:87:7c:73:35:8b:f9:35:d4:d6:44:9e:79:ab:f9:54:c7:
         e7:3d:e8:9c:7f:f1:cd:c2:2e:9f:65:3a:b9:d7:05:7d:87:6d:
         b2:9d:46:5b:35:b8:ae:f6:5e:8a:2f:a7:25:de:fa:cd:45:df:
         17:3a:45:37:47:c0:89:b8:cc:ed:49:14:70:2d:bc:30:ef:02:
         1d:db:d1:3e:71:5b:10:0c:3a:8e:94:e6:36:c1:c3:ae:8e:d0:
         65:09:aa:56:0c:9f:8c:68:eb:f8:32:38:f4:7b:61:df:5c:ec:
         39:5c:d6:6b:25:f2:dd:c6:ed:81:67:65:52:8e:fb:7a:d0:47:
         99:be:5c:a0:a4:00:fa:65:a9:19:e0:da:40:da:fb:de:68:e7:
         b2:43:43:70:af:55:e5:bb:f7:27:bc:bc:01:58:2a:9e:d2:27:
         ce:82:eb:94:70:a2:8a:0d:c9:a2:54:d8:c4:1b:e7:3e:49:0a:
         86:4d:15:e5:a4:89:31:73:a1:8b:e8:35:e1:9d:62:00:16:ba:
         92:dd:1a:32:99:f6:3a:03:12:94:29:15:03:63:b3:d7:1e:0b:
         8d:aa:f0:fe:7e:a1:b4:47:a2:75:04:74:54:12:4d:0f:e1:df:
         be:75:a5:a0:b7:f0:e6:4b:57:c3:93:22:9f:a6:c5:ff:70:fd:
         4f:a0:5d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----