Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/BF652E17B3291B414822FC2655D630BB3554E09E.mft
File:                     BF652E17B3291B414822FC2655D630BB3554E09E.mft (raw, json)
Hash identifier:          WycyIeejg09TXmp/l76maRMnc07nL87VeGS/qtYV7WI=
Subject key identifier:   75:35:94:0F:F0:CD:D1:5F:BA:D8:58:0D:85:60:F1:6A:8F:05:CE:58
Authority key identifier: BF:65:2E:17:B3:29:1B:41:48:22:FC:26:55:D6:30:BB:35:54:E0:9E
Certificate issuer:       /CN=BF652E17B3291B414822FC2655D630BB3554E09E
Certificate serial:       0BACB9811F0F00F3FDD7CA6400E49B7CD74F49EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF652E17B3291B414822FC2655D630BB3554E09E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/BF652E17B3291B414822FC2655D630BB3554E09E.mft
Manifest number:          0341
Signing time:             Mon 15 Apr 2024 00:50:35 +0000
Manifest this update:     Mon 15 Apr 2024 00:45:35 +0000
Manifest next update:     Tue 16 Apr 2024 02:12:35 +0000
Files and hashes:         1: 34352e3233372e3230302e302f32322d3234203d3e20323638323839.roa (hash: 05kgHC59Dik7x8uYO5RAT3+viuNiikWTAmUp0raZpNU=)
                          2: 323830343a346565343a3a2f33322d3338203d3e20323638323839.roa (hash: g//crxyvYzEoKtzCG5vadmOD1H6iXov/8gig/zv+9C0=)
                          3: BF652E17B3291B414822FC2655D630BB3554E09E.crl (hash: VJxSVIGbHK+JFeC8+v0ogf49zQs4FZ7e/rNsaT2Zkt0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ac:b9:81:1f:0f:00:f3:fd:d7:ca:64:00:e4:9b:7c:d7:4f:49:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF652E17B3291B414822FC2655D630BB3554E09E
        Validity
            Not Before: Apr 15 00:45:35 2024 GMT
            Not After : Apr 16 02:12:35 2024 GMT
        Subject: CN=7535940FF0CDD15FBAD8580D8560F16A8F05CE58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:36:17:4c:e7:e1:b1:34:97:fb:83:6a:41:e9:
                    80:76:3f:8c:dd:37:72:6a:8e:f1:8d:40:aa:5f:26:
                    56:f5:52:3a:be:82:66:40:50:82:4a:1f:c1:ae:02:
                    96:b6:dc:68:99:3c:1c:77:ee:dd:61:71:d7:b2:01:
                    b5:79:6e:16:15:3a:e0:dc:88:9d:59:ea:45:83:31:
                    82:e0:1b:08:5e:40:2a:65:48:cd:b3:63:b0:27:02:
                    2d:a6:92:5d:35:8b:e7:3f:66:4b:d0:14:51:5d:b5:
                    df:c2:d5:b6:46:78:69:b9:e1:40:e3:78:5b:cb:64:
                    43:28:f9:c4:c2:89:c6:6b:49:2f:bd:41:5d:6c:7b:
                    39:31:f4:cb:da:0f:43:a0:7b:5b:b1:33:a7:df:aa:
                    d9:0c:d5:b5:f5:00:40:a2:81:65:0f:94:63:46:40:
                    bc:e6:24:d9:fe:ef:1d:bb:ea:a6:e3:7c:80:05:4f:
                    33:15:f5:c8:96:53:a6:54:83:16:7f:f3:15:5b:09:
                    a2:d3:e4:c8:ae:f6:6a:70:8e:a2:38:1f:5c:82:4b:
                    6f:42:1e:8d:2a:f3:a4:6f:ff:83:83:c7:4d:bf:a2:
                    27:c7:0f:b5:18:9b:80:d5:f4:87:f2:49:6a:b4:be:
                    15:96:b7:8c:b9:b3:bb:9e:81:63:17:03:0a:63:6f:
                    7e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:35:94:0F:F0:CD:D1:5F:BA:D8:58:0D:85:60:F1:6A:8F:05:CE:58
            X509v3 Authority Key Identifier:
                keyid:BF:65:2E:17:B3:29:1B:41:48:22:FC:26:55:D6:30:BB:35:54:E0:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/BF652E17B3291B414822FC2655D630BB3554E09E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF652E17B3291B414822FC2655D630BB3554E09E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/BF652E17B3291B414822FC2655D630BB3554E09E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:85:55:2d:ff:2d:c6:06:63:dd:b1:95:e7:0a:1a:ab:41:0e:
         f9:65:31:19:58:c8:10:bf:4b:a2:e5:bd:2c:48:98:7e:35:96:
         09:de:16:9d:76:af:92:8b:3a:1f:94:37:51:f7:01:33:49:77:
         3b:c0:0d:10:b7:d5:54:d6:07:34:2c:19:08:78:4a:21:2f:d4:
         f9:af:a0:94:2f:ef:57:98:5c:c4:95:c4:de:73:79:dd:8f:b9:
         fb:7d:fa:e1:a4:48:d4:e2:e9:17:ac:eb:79:ab:28:ce:a1:64:
         a8:ee:60:20:c7:e0:c7:83:91:64:cf:da:ce:6b:67:02:4e:bd:
         0c:f0:17:31:cc:d3:84:85:f3:f9:a5:0e:c5:de:46:be:67:eb:
         8f:15:e3:a7:41:96:d6:14:2b:b7:3a:6e:5a:1a:a8:4a:0d:af:
         2f:20:9a:90:b4:6d:a9:db:29:89:de:f8:2f:8f:a4:f6:66:e0:
         09:7d:c4:3f:84:1d:ad:61:6b:90:02:92:82:cb:db:5d:b6:51:
         48:ed:b7:be:8f:fd:ee:96:b4:8e:01:2c:fa:8a:37:7a:0c:e6:
         50:27:16:65:7d:a3:d9:e0:f6:10:82:54:63:42:fe:47:58:86:
         bb:fb:84:06:ca:ea:0d:d1:96:d2:db:ef:6c:c4:17:fa:ed:b6:
         ea:de:9f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----