Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4HufT6zCNxXBAE32P7QyppzpwE6Qxx6DbaXotG9agcm7/0/0BFB53DEE29C7D1978AB6A0F9CCB8EED832AD000.mft
File:                     0BFB53DEE29C7D1978AB6A0F9CCB8EED832AD000.mft (raw, json)
Hash identifier:          Zp1D3GOY0EtC9rZIpHIdYBELW8A1dCB5wS7+GAa8Igw=
Subject key identifier:   65:A3:1B:C1:02:D5:FE:49:02:43:C8:1F:70:42:C5:0E:7B:49:8A:6C
Authority key identifier: 0B:FB:53:DE:E2:9C:7D:19:78:AB:6A:0F:9C:CB:8E:ED:83:2A:D0:00
Certificate issuer:       /CN=0BFB53DEE29C7D1978AB6A0F9CCB8EED832AD000
Certificate serial:       103648645FD9CD9C4A2E2D49090AD7869F1CD72E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0BFB53DEE29C7D1978AB6A0F9CCB8EED832AD000.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HufT6zCNxXBAE32P7QyppzpwE6Qxx6DbaXotG9agcm7/0/0BFB53DEE29C7D1978AB6A0F9CCB8EED832AD000.mft
Manifest number:          0148
Signing time:             Mon 18 Dec 2023 22:06:34 +0000
Manifest this update:     Mon 18 Dec 2023 22:01:34 +0000
Manifest next update:     Tue 19 Dec 2023 22:20:34 +0000
Files and hashes:         1: 3139322e3134312e3139362e302f32322d3234203d3e20323637343734.roa (hash: tacBoRzhsQdmGCSv6bS2/XEspDLzmoq7hsya0XMinNo=)
                          2: 323830343a343230633a3a2f33322d3438203d3e20323637343734.roa (hash: m5uxFH3OxfOGTHhPYP5S73Z3WZqxHH2yq1IrEU9ejAo=)
                          3: 0BFB53DEE29C7D1978AB6A0F9CCB8EED832AD000.crl (hash: 23j1OpyJCvs2d07UO9LiO+YNwJrZqH5rDKzRDEUlXSo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:36:48:64:5f:d9:cd:9c:4a:2e:2d:49:09:0a:d7:86:9f:1c:d7:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BFB53DEE29C7D1978AB6A0F9CCB8EED832AD000
        Validity
            Not Before: Dec 18 22:01:34 2023 GMT
            Not After : Dec 19 22:20:34 2023 GMT
        Subject: CN=65A31BC102D5FE490243C81F7042C50E7B498A6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:cb:4f:9a:59:76:62:51:38:59:95:c8:6a:58:
                    58:6d:a7:e9:14:7f:15:66:8f:ec:bf:4f:d3:8b:08:
                    7b:d4:c8:c3:45:a8:18:60:9c:cd:60:21:9f:9d:ee:
                    e1:dd:f9:15:4f:16:42:8d:36:4d:6c:e6:1e:99:a0:
                    e3:d6:d0:fd:56:e2:ae:29:a0:33:41:f9:1f:23:2a:
                    39:1d:c6:4c:ce:5e:70:e7:ec:c3:0f:21:93:25:53:
                    70:b4:03:7e:c7:29:92:f2:bc:58:5b:83:7c:31:09:
                    c1:f0:82:e2:ec:10:22:73:17:e1:c6:3a:a4:5e:5d:
                    e2:01:12:2e:f0:28:bc:b8:ee:b3:0b:ba:df:27:82:
                    3a:c5:62:80:48:54:1a:d5:ef:d9:55:b0:11:3a:5d:
                    4e:89:4a:8b:b1:ec:23:eb:7e:67:64:14:37:ef:d6:
                    9b:89:a3:32:5f:82:70:32:91:69:3f:67:fa:cf:9b:
                    b2:51:90:f8:42:1d:3c:a9:59:a1:74:98:fb:f2:de:
                    d4:a2:21:0f:f1:df:d4:c7:c9:66:06:45:e4:1c:bb:
                    9c:d9:bc:6e:40:de:66:5f:fa:3e:62:22:ae:ed:14:
                    87:40:47:c3:6a:b4:cf:24:f5:2f:5a:80:3b:f6:a2:
                    3f:df:dd:a2:6f:89:9f:7c:7d:d6:ed:9f:13:44:a1:
                    2e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A3:1B:C1:02:D5:FE:49:02:43:C8:1F:70:42:C5:0E:7B:49:8A:6C
            X509v3 Authority Key Identifier:
                keyid:0B:FB:53:DE:E2:9C:7D:19:78:AB:6A:0F:9C:CB:8E:ED:83:2A:D0:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HufT6zCNxXBAE32P7QyppzpwE6Qxx6DbaXotG9agcm7/0/0BFB53DEE29C7D1978AB6A0F9CCB8EED832AD000.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0BFB53DEE29C7D1978AB6A0F9CCB8EED832AD000.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HufT6zCNxXBAE32P7QyppzpwE6Qxx6DbaXotG9agcm7/0/0BFB53DEE29C7D1978AB6A0F9CCB8EED832AD000.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:b2:e2:01:0d:e4:5d:6e:d2:88:c4:61:6d:3c:bc:7a:10:d3:
         d5:db:5b:c8:46:f5:2b:f3:8e:5e:14:7f:f6:bf:78:7c:aa:52:
         62:c9:01:45:a3:a5:58:c8:3a:49:fa:ce:d7:2f:96:a4:87:85:
         99:4b:da:08:21:ff:a1:3b:28:30:1d:59:31:56:1d:c6:31:7d:
         31:51:26:ba:6b:83:c9:f2:20:4f:be:b6:2e:09:fc:17:6b:b3:
         b5:33:05:51:2a:5a:36:73:3b:67:79:92:67:5c:0c:4a:60:2e:
         24:04:5a:ab:5b:9d:de:93:a1:7d:8c:71:a3:82:69:1f:11:fe:
         4e:72:3a:69:0e:9f:0b:88:f7:18:a6:b7:72:d4:8c:b2:3f:95:
         c1:4f:40:3e:fd:d5:63:ad:de:91:52:79:29:5c:77:fe:0c:1f:
         92:5f:04:25:c2:b9:51:59:64:7e:b4:77:14:04:27:6e:5e:a2:
         20:b3:be:bc:92:22:93:04:b7:b6:7d:05:f8:0f:17:a9:70:2c:
         cf:eb:79:88:6a:08:db:1a:c2:20:ae:38:56:d9:86:bd:9c:01:
         ab:64:04:0e:9d:34:fe:52:78:fa:d6:d2:25:46:dc:be:10:7f:
         4b:60:4c:2e:72:9a:1e:1a:76:cb:33:ca:ec:b5:3f:98:59:48:
         cb:11:a5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----