Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/F4A538D51018B64785720A1F4F2377DE184D1023.mft
File:                     F4A538D51018B64785720A1F4F2377DE184D1023.mft (raw, json)
Hash identifier:          ZnkEgsEcbVprl/Z0S44pj1qE2iHPiewK22eh8CtAqDs=
Subject key identifier:   41:40:55:6E:3C:AE:45:B6:61:FD:F2:F7:85:9D:59:27:CF:84:5A:05
Authority key identifier: F4:A5:38:D5:10:18:B6:47:85:72:0A:1F:4F:23:77:DE:18:4D:10:23
Certificate issuer:       /CN=F4A538D51018B64785720A1F4F2377DE184D1023
Certificate serial:       5F8E42B95BCFC699AC68D3FE0F725E4687190310
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4A538D51018B64785720A1F4F2377DE184D1023.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/F4A538D51018B64785720A1F4F2377DE184D1023.mft
Manifest number:          70
Signing time:             Mon 15 Apr 2024 01:49:57 +0000
Manifest this update:     Mon 15 Apr 2024 01:44:57 +0000
Manifest next update:     Tue 16 Apr 2024 04:20:57 +0000
Files and hashes:         1: 3133382e39372e32302e302f32322d3234203d3e20323634313132.roa (hash: E8dh/MLuZ7Lav8zzuHSRqLXPTSHuQzylBhfRCIljRf4=)
                          2: F4A538D51018B64785720A1F4F2377DE184D1023.crl (hash: 6vxGNJX+Qx8E2CkoYB2nqENR5Z5gbdNXBC6rDFJxzDc=)
                          3: 3137302e38332e3136302e302f32322d3232203d3e20323634313132.roa (hash: 3pSi/Q/zW5p53BjFafBjsJwzo5ECHKB9P8H3cHxaui4=)
                          4: 323830343a323261303a3a2f33322d3335203d3e20323634313132.roa (hash: 3XGrWcWzM7WXrmd3WbRZ8kA5APYrpvMb9gBDWneKZD4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:8e:42:b9:5b:cf:c6:99:ac:68:d3:fe:0f:72:5e:46:87:19:03:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4A538D51018B64785720A1F4F2377DE184D1023
        Validity
            Not Before: Apr 15 01:44:57 2024 GMT
            Not After : Apr 16 04:20:57 2024 GMT
        Subject: CN=4140556E3CAE45B661FDF2F7859D5927CF845A05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:12:75:6b:52:a1:f9:e5:d1:94:c7:5c:f1:f0:
                    13:c8:3d:38:ee:c8:e3:7b:ca:57:31:b4:81:20:a7:
                    04:de:0f:b4:f2:1f:88:c7:6a:47:bf:96:01:58:44:
                    f1:26:8d:5e:99:e5:9a:b5:60:1a:37:f3:7c:8b:aa:
                    f1:5a:68:a5:cb:24:17:fb:d3:35:a0:c1:99:5e:d0:
                    e7:29:3a:4c:11:26:08:16:79:10:1a:79:3a:be:16:
                    bd:ce:fa:35:54:5c:29:9a:cd:a3:da:14:95:1d:80:
                    e1:87:fa:f7:84:e6:11:ac:10:8b:07:f5:9c:0a:1c:
                    2c:bb:16:3f:fd:e7:bc:9e:e6:a6:55:20:2d:22:3e:
                    5e:d7:d7:2e:ef:d8:c9:24:97:7c:8c:df:78:0a:09:
                    96:f5:b8:12:b0:b6:9a:11:b6:9a:5c:9c:28:98:0e:
                    fd:ce:bf:f2:42:6b:20:cb:c9:5a:d6:3c:5e:7e:4c:
                    e8:93:a2:df:b4:a6:7e:31:86:d6:f3:e0:41:66:6a:
                    0c:a0:8c:02:6a:96:72:9d:66:86:59:3d:fc:3c:0d:
                    4a:c2:19:a3:54:80:98:6c:43:54:75:ee:cf:51:d1:
                    f0:39:cf:ff:81:06:c6:85:71:32:68:52:5d:30:2e:
                    55:ef:a2:11:0f:53:50:bf:dd:0a:25:53:ac:9a:70:
                    28:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:40:55:6E:3C:AE:45:B6:61:FD:F2:F7:85:9D:59:27:CF:84:5A:05
            X509v3 Authority Key Identifier:
                keyid:F4:A5:38:D5:10:18:B6:47:85:72:0A:1F:4F:23:77:DE:18:4D:10:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/F4A538D51018B64785720A1F4F2377DE184D1023.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4A538D51018B64785720A1F4F2377DE184D1023.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/F4A538D51018B64785720A1F4F2377DE184D1023.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:e0:9a:f1:70:7f:1e:b7:4b:e8:43:7b:59:94:35:95:17:71:
         6e:fe:43:c0:ae:c6:43:5f:4d:07:c4:fe:ca:c2:2d:ef:9e:9b:
         7e:8b:9a:6a:a5:f3:7e:08:cc:41:5d:4d:51:6b:43:c3:4a:73:
         b7:a7:6c:8e:c1:31:36:d4:a9:41:5f:de:dc:c6:88:03:20:ea:
         72:df:1b:49:91:aa:ea:6d:b0:5e:d6:50:1f:2e:c8:69:4f:e4:
         d0:9c:a7:f7:31:b3:9a:6d:e6:3b:17:b8:88:bf:99:10:33:49:
         fe:b9:57:6b:f7:2d:dd:14:f5:96:3d:31:b1:2d:17:e3:d6:07:
         7e:2e:71:b0:11:9e:f9:ed:e7:96:b2:2d:dc:82:ab:b6:17:79:
         e4:2b:eb:27:a9:81:4b:1b:0f:75:b7:8c:65:2a:89:ec:97:21:
         1d:1c:67:9f:67:f7:2f:bf:b9:74:d9:a5:f6:90:f2:19:d0:df:
         af:03:4c:13:ee:32:bc:26:c0:8d:a2:86:3f:a5:04:1c:3a:33:
         69:f0:e6:f0:35:4a:bf:ba:ee:13:4a:e2:b9:3f:92:b7:a5:3c:
         3b:8d:de:c2:c7:1d:76:89:26:3e:81:2e:ec:ab:89:36:7c:55:
         92:21:05:b2:8f:7f:c6:e6:11:d5:ab:e0:0b:a7:b5:9a:5b:1d:
         01:b4:0d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----