Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/0/0F047AA6C1AB573EF113512D5843094035A22397.mft
File:                     0F047AA6C1AB573EF113512D5843094035A22397.mft (raw, json)
Hash identifier:          Cbsu6Rv/8JLc0Jct1JGeytMbpHKldNKiEF9wdv5cmX0=
Subject key identifier:   F7:CD:8F:47:CA:A1:65:E8:F6:D9:77:70:63:8C:59:71:2E:F6:69:D9
Authority key identifier: 0F:04:7A:A6:C1:AB:57:3E:F1:13:51:2D:58:43:09:40:35:A2:23:97
Certificate issuer:       /CN=0F047AA6C1AB573EF113512D5843094035A22397
Certificate serial:       2C5FED14BCAEF0DFC53EA23D71B09A299CA43DEC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F047AA6C1AB573EF113512D5843094035A22397.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/0/0F047AA6C1AB573EF113512D5843094035A22397.mft
Manifest number:          021E
Signing time:             Wed 17 Jan 2024 18:25:01 +0000
Manifest this update:     Wed 17 Jan 2024 18:20:01 +0000
Manifest next update:     Thu 18 Jan 2024 21:37:01 +0000
Files and hashes:         1: 34352e3137342e34302e302f32322d3234203d3e20323638383432.roa (hash: qmHE/gYfREzJXFBGtJhzPj6s6/i+afmVYb3rQkbe7o8=)
                          2: 0F047AA6C1AB573EF113512D5843094035A22397.crl (hash: ++dnDrSvjmEqMApkeuueIXG8qrY0uTWYUCqEFvKiq1Q=)
                          3: 323830343a356236633a3a2f33322d3335203d3e20323638383432.roa (hash: 5oOozbce1xexsAEBfavZkEgR0MLPaprSbS7+P0OYva8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:5f:ed:14:bc:ae:f0:df:c5:3e:a2:3d:71:b0:9a:29:9c:a4:3d:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F047AA6C1AB573EF113512D5843094035A22397
        Validity
            Not Before: Jan 17 18:20:01 2024 GMT
            Not After : Jan 18 21:37:01 2024 GMT
        Subject: CN=F7CD8F47CAA165E8F6D97770638C59712EF669D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:19:91:fc:5d:7b:bf:1a:70:b7:a8:80:cd:9a:
                    9c:8c:bd:dc:05:ee:b7:45:aa:d7:58:47:2f:07:86:
                    1b:8a:c6:16:fc:a8:f5:06:83:06:6c:60:3a:39:0e:
                    3f:6b:2a:70:f9:d9:87:0d:37:15:8a:d4:e9:07:1c:
                    28:c5:3e:f7:63:9b:9f:fa:2e:4b:4d:36:20:8d:21:
                    5a:e6:06:e8:c8:cb:7e:a9:fd:5c:f1:f5:93:40:7b:
                    e6:32:2f:bb:0e:7e:f4:46:fe:e2:62:2b:8e:f5:de:
                    3f:55:25:80:e0:48:23:9f:56:c6:02:47:b1:1e:0f:
                    19:db:f7:a4:da:68:7e:86:6d:0e:e0:3d:0b:75:af:
                    3e:bd:5e:68:8b:59:f1:bf:0e:00:4a:ad:d4:4a:8c:
                    0d:5f:07:6b:26:4e:bc:0e:5b:d1:9f:16:36:54:01:
                    39:d8:5f:94:fd:ae:0b:21:dd:51:16:cb:6f:ff:30:
                    9b:ef:d9:1b:17:b2:ba:ed:77:86:88:13:5d:ab:4c:
                    e5:ab:94:d8:f3:95:d5:87:d4:ff:d0:b6:33:8d:33:
                    f2:7d:2d:c7:cb:ee:4d:1b:a9:28:c4:fe:34:9d:19:
                    c9:09:ef:84:e2:57:3c:6f:71:35:b3:2e:38:83:21:
                    d7:a0:01:74:03:70:1d:3b:8b:88:83:a0:a3:96:df:
                    ab:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:CD:8F:47:CA:A1:65:E8:F6:D9:77:70:63:8C:59:71:2E:F6:69:D9
            X509v3 Authority Key Identifier:
                keyid:0F:04:7A:A6:C1:AB:57:3E:F1:13:51:2D:58:43:09:40:35:A2:23:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/0/0F047AA6C1AB573EF113512D5843094035A22397.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F047AA6C1AB573EF113512D5843094035A22397.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/0/0F047AA6C1AB573EF113512D5843094035A22397.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:91:00:ac:d1:fa:30:c8:4b:d3:bf:c7:60:df:95:96:0c:1f:
         83:01:b5:45:6a:93:ef:64:f3:8a:e4:fb:d4:2b:27:84:c7:e8:
         44:ea:5f:ab:b1:e3:7c:ca:8c:29:fa:5d:6c:8b:b1:64:3b:01:
         70:a9:c4:86:c0:a3:9b:42:e5:05:6c:77:de:30:f6:c1:40:9a:
         ec:9b:f3:1e:79:a7:cf:f1:54:a9:06:51:d6:52:b0:f9:83:85:
         2d:aa:29:be:b2:8b:ad:bb:11:3c:42:47:64:f3:4b:53:d5:c6:
         5b:aa:57:cd:26:ac:c2:51:01:57:9e:2d:42:82:8b:21:d2:49:
         32:55:c6:43:34:d8:83:33:f4:ea:d7:e6:98:cc:fe:5f:d4:52:
         23:37:d2:25:f5:ad:4f:05:78:b1:b0:81:8a:4e:f9:c2:b9:ac:
         2c:e1:a3:5a:9e:70:62:ca:a0:9e:03:2f:a6:70:13:05:68:5b:
         76:3d:0a:b9:70:8b:88:64:0e:86:a4:72:c0:c7:bc:cd:c7:dd:
         cf:02:d9:c0:29:f1:0d:a7:16:cb:7e:9c:99:1b:4f:dd:71:5d:
         69:5b:cd:35:76:0e:49:23:e5:dd:b6:2d:55:59:b8:f9:4a:3b:
         6f:91:d5:ad:af:87:65:d3:c6:58:f8:fc:f1:52:9d:43:48:9e:
         fa:46:7d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----