Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/29072BA890B785A2AF87059E92B220B8E949DDB0.mft
File:                     29072BA890B785A2AF87059E92B220B8E949DDB0.mft (raw, json)
Hash identifier:          5WtBOWVRY8jd6EwGRSERDtOBF8kkpBw3a96rIUsW0Hw=
Subject key identifier:   0C:4A:9B:33:86:45:3C:2D:28:96:A2:FB:61:83:08:47:DD:7B:91:5A
Authority key identifier: 29:07:2B:A8:90:B7:85:A2:AF:87:05:9E:92:B2:20:B8:E9:49:DD:B0
Certificate issuer:       /CN=29072BA890B785A2AF87059E92B220B8E949DDB0
Certificate serial:       75F9BF2B9AFDF48E47B67BEB89593ABF6CC42A87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/29072BA890B785A2AF87059E92B220B8E949DDB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/29072BA890B785A2AF87059E92B220B8E949DDB0.mft
Manifest number:          97
Signing time:             Mon 27 Mar 2023 21:55:55 +0000
Manifest this update:     Mon 27 Mar 2023 21:50:55 +0000
Manifest next update:     Wed 29 Mar 2023 01:22:55 +0000
Files and hashes:         1: 323830343a353838633a3a2f33322d3332203d3e20323638313335.roa (hash: g2Kxf9RWR6A6uPcz0BmWsXdFy9gucPpKiFvL5oyp4G8=)
                          2: 34352e3137302e342e302f32322d3232203d3e20323638313335.roa (hash: hoVSHQBIAnFbEs0282jjf34rRHtHhkP9FFfSNlR9Vlg=)
                          3: 34352e3137302e372e302f32342d3234203d3e20323638313335.roa (hash: AiDymZBzSWclwuJ1mbsgGGN1RVCVqJ5EXNOhE1UUQOE=)
                          4: 323830343a353838633a3a2f33332d3333203d3e20323638313335.roa (hash: TlZTnVOxZhDduUhliKxH8stWVDqtA9lxLXZBoH5BHJM=)
                          5: 323830343a353838633a383030303a3a2f33332d3333203d3e20323638313335.roa (hash: foAqS0ZmQtr7NUMKCJaf0gZWm9dISA9W4Gx97d0j6q0=)
                          6: 29072BA890B785A2AF87059E92B220B8E949DDB0.crl (hash: xVK/+Mc+v3vv/vo24EEQSt17wlSTZPycv4Q86I+VG4A=)
                          7: 34352e3137302e362e302f32342d3234203d3e20323638313335.roa (hash: kLAsmuli25iR/Zg7MQYKDbYqkPeurNrEWZD0X5JHRT4=)
                          8: 34352e3137302e362e302f32332d3233203d3e20323638313335.roa (hash: OjkqC43mphymi1tmkH1odCtsdGdi7dn9LdejA7SD9w4=)
                          9: 34352e3137302e352e302f32342d3234203d3e20323638313335.roa (hash: fOHkpYCk9Dtqa6KNZTMZT8Yby9n3pBS+H6sal+BQn3g=)
                          10: 34352e3137302e342e302f32342d3234203d3e20323638313335.roa (hash: t6Dr8ejwVnCMg/ENHGOYYAPFG5vTPGecx+DnoKwOYCY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f9:bf:2b:9a:fd:f4:8e:47:b6:7b:eb:89:59:3a:bf:6c:c4:2a:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29072BA890B785A2AF87059E92B220B8E949DDB0
        Validity
            Not Before: Mar 27 21:50:55 2023 GMT
            Not After : Mar 29 01:22:55 2023 GMT
        Subject: CN=0C4A9B3386453C2D2896A2FB61830847DD7B915A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3a:3e:b3:42:6a:bd:f0:64:61:5b:dd:c6:81:
                    7a:11:e2:f0:74:3b:d3:8f:bb:20:e6:ec:8c:b4:48:
                    fc:ef:6b:6a:e5:52:b5:92:ba:e1:e5:05:bd:20:78:
                    78:d4:eb:4e:57:76:ea:86:b7:4e:19:be:b5:25:4b:
                    aa:b9:ce:23:86:4d:12:aa:35:08:e4:0e:9d:24:d7:
                    75:7d:7e:d2:1b:59:f3:48:53:38:27:cc:9d:de:02:
                    07:9c:0b:5f:a4:ec:86:86:86:1d:d6:af:14:98:3c:
                    66:95:0c:f8:3a:da:ce:e3:17:32:c8:09:92:fa:71:
                    f6:f4:87:6f:03:85:8b:58:c3:bc:ba:69:b2:aa:97:
                    34:b5:7a:ce:a4:08:3e:eb:a8:a6:4a:4a:fc:f4:77:
                    7b:30:81:de:77:a4:69:61:8a:63:96:9f:6b:cb:90:
                    37:c1:03:d4:7d:51:21:4a:87:ec:6d:dc:55:79:65:
                    8d:dd:38:79:cf:21:b8:c9:14:b1:80:cf:0e:36:da:
                    f6:c2:b2:da:fe:46:e9:6a:4a:87:58:fa:56:c9:11:
                    87:49:41:4e:16:34:6d:e7:4a:a5:f5:b7:1b:2e:3b:
                    7b:40:85:c8:2f:45:08:ac:21:d5:f7:05:b2:6c:91:
                    80:de:75:95:49:ef:92:17:b2:4c:2b:3b:8e:01:5a:
                    f7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:4A:9B:33:86:45:3C:2D:28:96:A2:FB:61:83:08:47:DD:7B:91:5A
            X509v3 Authority Key Identifier:
                keyid:29:07:2B:A8:90:B7:85:A2:AF:87:05:9E:92:B2:20:B8:E9:49:DD:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/29072BA890B785A2AF87059E92B220B8E949DDB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/29072BA890B785A2AF87059E92B220B8E949DDB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/29072BA890B785A2AF87059E92B220B8E949DDB0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:ef:e7:d5:63:1f:21:a4:cd:46:f2:cb:0f:5b:07:5b:27:f4:
         3f:cc:a6:ab:6f:77:45:4c:d9:4a:fd:2b:c3:53:9e:53:07:50:
         53:fe:fe:2c:04:de:68:72:b7:f3:65:61:24:5e:6e:a0:5f:ed:
         4d:7e:0d:7a:04:f4:2b:04:71:05:9b:63:ae:f3:2c:80:43:d0:
         a8:6c:0c:3f:2b:34:bd:b0:dc:62:95:6b:a4:4a:a7:54:b1:b1:
         0e:d9:b6:e9:22:2d:f2:fa:04:fb:42:db:71:91:6d:44:da:41:
         78:c8:5e:3f:e8:50:fc:6b:d3:b8:b7:9b:7f:8c:d8:ba:f9:41:
         89:a2:0b:dc:ee:6f:9c:e9:0f:cb:62:b5:b7:69:59:3f:b1:c9:
         32:c4:3f:79:a6:01:fe:1f:e1:07:ec:ff:cd:2c:94:6a:8c:d2:
         54:5f:1a:78:7b:13:22:b6:00:52:39:0e:03:6e:f7:b3:c5:9b:
         16:19:12:81:ac:ad:68:66:c3:b9:1c:54:ec:85:d4:70:54:4c:
         46:13:fe:cc:eb:24:21:a2:b7:b2:3d:45:85:9c:8f:66:b6:c7:
         3c:31:fd:f4:11:1c:72:3e:ac:3c:f4:13:b7:19:42:19:22:00:
         3a:7d:e0:54:04:7a:a0:93:a9:17:e2:70:10:80:02:8c:cb:c5:
         69:e0:27:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----