Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/C029FDEBC355A6F8F14668EE1EFBD41E3EC6F003.mft
File:                     C029FDEBC355A6F8F14668EE1EFBD41E3EC6F003.mft (raw, json)
Hash identifier:          uvwQ96GPHl1saDSN7LMbGM7Qfp3bRsXA/FcGIf0KYoY=
Subject key identifier:   8F:2C:12:2B:25:1A:12:21:91:DE:F6:D2:7C:18:4E:F8:BE:DE:C0:20
Authority key identifier: C0:29:FD:EB:C3:55:A6:F8:F1:46:68:EE:1E:FB:D4:1E:3E:C6:F0:03
Certificate issuer:       /CN=C029FDEBC355A6F8F14668EE1EFBD41E3EC6F003
Certificate serial:       7DF07D0A2CF3A2672CB5E5799620F244F71F0D04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C029FDEBC355A6F8F14668EE1EFBD41E3EC6F003.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/C029FDEBC355A6F8F14668EE1EFBD41E3EC6F003.mft
Manifest number:          A5
Signing time:             Sun 14 Apr 2024 20:50:43 +0000
Manifest this update:     Sun 14 Apr 2024 20:45:43 +0000
Manifest next update:     Mon 15 Apr 2024 20:50:43 +0000
Files and hashes:         1: 3230302e31312e3132302e302f32322d3332203d3e20323730343339.roa (hash: l2SIMbcuXU1VK/O7fVdWd4ldf/aSs7GQL+JomI4KWjY=)
                          2: 323830343a366330303a3a2f33322d313238203d3e20323730343339.roa (hash: JqscGKp8gZ1SK4D4Fc9+sP+Q5saaptwvDw5NdRKBFEI=)
                          3: C029FDEBC355A6F8F14668EE1EFBD41E3EC6F003.crl (hash: aJHAreYN5fUasuP1NoOJ7CVvFJbT3RpbqSo4JGOSDTo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:f0:7d:0a:2c:f3:a2:67:2c:b5:e5:79:96:20:f2:44:f7:1f:0d:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C029FDEBC355A6F8F14668EE1EFBD41E3EC6F003
        Validity
            Not Before: Apr 14 20:45:43 2024 GMT
            Not After : Apr 15 20:50:43 2024 GMT
        Subject: CN=8F2C122B251A122191DEF6D27C184EF8BEDEC020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:58:ab:6c:63:67:f2:af:47:ba:15:9c:12:46:
                    a8:f5:fa:b1:25:2c:69:77:48:26:81:ac:ae:b3:17:
                    ca:f8:46:0a:60:fd:c5:04:09:7f:4a:00:d4:4d:a9:
                    7b:ab:c4:1b:29:43:fc:e8:a4:a2:3d:4e:e7:58:9a:
                    2f:d5:4a:93:c7:fd:74:01:2a:02:be:d0:02:55:ee:
                    21:1e:ba:63:c6:77:5e:b1:aa:4c:53:63:5e:17:bc:
                    3c:a5:48:d1:35:9f:17:06:df:3f:7d:a3:aa:8c:98:
                    3e:70:bf:97:d5:5c:c8:73:ea:df:48:3c:d4:6f:11:
                    33:60:9c:ad:0c:d9:95:54:bc:34:af:be:df:0a:19:
                    1a:05:91:7d:21:41:cf:2a:7e:f4:3c:15:c1:e2:ff:
                    d0:c2:c3:aa:13:26:d3:df:bc:50:71:ec:88:e0:1f:
                    75:19:3e:81:b1:c1:44:83:a2:2e:3b:2d:b4:f4:dc:
                    3e:29:c3:e7:f0:a8:4e:20:11:04:c0:72:27:4c:e1:
                    66:7a:0a:28:ff:fa:3f:6f:fd:4f:73:cc:ad:7d:74:
                    b6:3e:79:11:6e:97:ae:16:cc:51:ab:20:d1:bc:9c:
                    87:c5:97:2d:9e:3f:a0:2d:c6:11:d4:a3:5d:b5:ce:
                    16:9c:c0:2b:2c:ef:18:39:d6:cf:52:80:4e:df:22:
                    03:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:2C:12:2B:25:1A:12:21:91:DE:F6:D2:7C:18:4E:F8:BE:DE:C0:20
            X509v3 Authority Key Identifier:
                keyid:C0:29:FD:EB:C3:55:A6:F8:F1:46:68:EE:1E:FB:D4:1E:3E:C6:F0:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/C029FDEBC355A6F8F14668EE1EFBD41E3EC6F003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C029FDEBC355A6F8F14668EE1EFBD41E3EC6F003.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/C029FDEBC355A6F8F14668EE1EFBD41E3EC6F003.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:d3:3b:26:45:5e:fa:dd:98:2d:ad:f4:58:ac:15:e1:6e:bf:
         08:d8:20:95:d7:99:e2:1e:60:19:8d:2c:53:85:b2:1f:b3:35:
         06:84:c0:2f:46:fb:ec:57:e2:ef:4d:d6:10:74:3b:3f:04:62:
         82:aa:16:ad:5b:a6:4d:eb:0c:f8:7f:e5:87:b0:14:e4:50:46:
         6c:51:e6:74:8b:b0:75:56:ca:bf:aa:b4:a9:b4:7b:4d:3a:6c:
         6f:7c:42:b8:08:0c:06:f4:0d:5b:46:39:ed:ae:2a:1a:15:b2:
         3c:dc:50:4f:71:1d:f5:a1:ab:c9:57:12:cd:40:07:b0:f6:b3:
         d2:c6:01:06:0c:57:fa:24:44:16:89:a4:b7:21:b9:75:a3:a9:
         e9:6c:85:5e:89:68:a2:58:88:f8:59:b7:7f:64:17:e3:7d:78:
         cf:2d:e3:f4:ca:61:01:0c:f4:07:96:eb:8d:69:b8:0e:1c:04:
         15:9c:ac:48:e9:f3:64:d9:d1:08:45:7e:a5:0d:b9:ef:15:0a:
         9d:55:ce:9b:eb:87:ec:32:c6:56:bc:e0:99:5b:0f:5d:8f:11:
         12:b4:9d:9e:c1:45:13:3c:71:73:8c:50:04:2f:ad:1c:59:ad:
         8f:af:40:96:e9:23:5d:71:72:db:c2:58:21:1a:ce:ee:ff:ac:
         23:b7:4c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----