Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6etm44QjWrR5EfTWAV3qzNSnqZHTSM9JM6c27XkWkag1/0/0FA7C84927E81447CBE8A0F3C5AB1AD18C8D2567.mft
File:                     0FA7C84927E81447CBE8A0F3C5AB1AD18C8D2567.mft (raw, json)
Hash identifier:          abaYY+EzbvPd45gMuV8FTctqf5/ncH/8TVwV2zO2mDU=
Subject key identifier:   A4:59:BB:8E:50:58:F6:5A:7A:5A:FF:1E:F6:66:96:5C:C8:81:47:45
Authority key identifier: 0F:A7:C8:49:27:E8:14:47:CB:E8:A0:F3:C5:AB:1A:D1:8C:8D:25:67
Certificate issuer:       /CN=0FA7C84927E81447CBE8A0F3C5AB1AD18C8D2567
Certificate serial:       14CBBBC5BBACAB4F66D82F4848869A314F76401C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FA7C84927E81447CBE8A0F3C5AB1AD18C8D2567.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6etm44QjWrR5EfTWAV3qzNSnqZHTSM9JM6c27XkWkag1/0/0FA7C84927E81447CBE8A0F3C5AB1AD18C8D2567.mft
Manifest number:          0286
Signing time:             Mon 15 Apr 2024 00:42:02 +0000
Manifest this update:     Mon 15 Apr 2024 00:37:02 +0000
Manifest next update:     Tue 16 Apr 2024 00:59:02 +0000
Files and hashes:         1: 3133382e39392e37362e302f32322d3234203d3e20323634313537.roa (hash: Nphz9ZvbZ8FgTs/wVyIs5heTci1ElJIm6MGA3hmBAMc=)
                          2: 0FA7C84927E81447CBE8A0F3C5AB1AD18C8D2567.crl (hash: LQMe1PE4W3tKMlkoPWlN/KRIBf8CoDX4hR6lkuLdCz4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:cb:bb:c5:bb:ac:ab:4f:66:d8:2f:48:48:86:9a:31:4f:76:40:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FA7C84927E81447CBE8A0F3C5AB1AD18C8D2567
        Validity
            Not Before: Apr 15 00:37:02 2024 GMT
            Not After : Apr 16 00:59:02 2024 GMT
        Subject: CN=A459BB8E5058F65A7A5AFF1EF666965CC8814745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a9:f0:03:33:f7:26:ea:7d:6f:b2:43:85:17:
                    dc:d1:cd:60:33:24:2d:13:e1:b0:3f:1f:b6:14:1f:
                    38:73:b5:2e:da:3a:ea:e8:4b:74:d4:03:3a:54:fb:
                    6f:71:e8:f0:07:4b:70:cd:7e:45:47:7d:c7:d7:0a:
                    ea:b3:00:93:28:88:ab:76:43:18:46:1f:1c:d4:ae:
                    6b:2b:33:76:b4:9c:c5:72:63:c5:f2:be:09:e3:84:
                    69:93:40:32:15:27:8c:ca:a1:6e:d3:54:1f:84:77:
                    94:9e:55:eb:19:59:6c:41:f4:99:57:e4:ac:49:e7:
                    72:07:15:87:65:e8:b0:3a:75:3d:57:c5:bd:a8:0a:
                    b9:ef:39:46:6d:d9:ba:87:4b:78:5d:ee:da:58:7a:
                    47:e5:46:06:ba:21:02:44:b4:69:85:f5:03:d8:b8:
                    a9:e1:61:43:e9:a3:35:57:ae:9d:74:18:f2:7e:ba:
                    e8:af:75:37:3b:85:e4:7c:29:20:c8:f0:6d:5f:b9:
                    59:a0:d6:d3:c6:87:21:8d:05:ea:1f:bc:5b:9e:b2:
                    22:09:3d:2a:ac:fc:42:86:27:ec:0b:66:67:6b:af:
                    4b:aa:d8:5e:7a:e5:47:e7:3d:45:75:c4:e9:7c:94:
                    6b:14:7e:92:c7:80:45:05:00:91:4a:cd:8f:af:f4:
                    39:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:59:BB:8E:50:58:F6:5A:7A:5A:FF:1E:F6:66:96:5C:C8:81:47:45
            X509v3 Authority Key Identifier:
                keyid:0F:A7:C8:49:27:E8:14:47:CB:E8:A0:F3:C5:AB:1A:D1:8C:8D:25:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6etm44QjWrR5EfTWAV3qzNSnqZHTSM9JM6c27XkWkag1/0/0FA7C84927E81447CBE8A0F3C5AB1AD18C8D2567.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FA7C84927E81447CBE8A0F3C5AB1AD18C8D2567.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6etm44QjWrR5EfTWAV3qzNSnqZHTSM9JM6c27XkWkag1/0/0FA7C84927E81447CBE8A0F3C5AB1AD18C8D2567.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:8b:25:3e:ba:f9:48:e4:c2:59:82:ce:8d:28:78:11:a5:cc:
         92:9e:17:36:cb:e3:6f:b2:58:96:81:d0:17:d9:f0:2e:4b:57:
         56:5a:e3:fc:6b:90:0f:0d:c1:96:ed:e4:89:66:da:6c:49:89:
         8b:72:8c:a3:3f:93:a7:ad:16:ac:10:e5:c4:a8:b4:2f:5e:ab:
         d9:1b:2a:cc:95:65:e0:a4:fe:75:62:fb:6d:fb:81:0b:8b:b0:
         8e:a4:18:03:2d:e3:56:6b:dd:98:d8:0a:4a:45:51:c4:46:78:
         0f:68:bd:22:26:5f:a2:79:da:6e:21:6f:a6:07:3b:d0:50:c5:
         e9:18:68:58:65:b2:ce:f8:ee:5e:a5:f4:3a:86:cd:fa:2d:0c:
         0b:10:3a:30:e5:f0:37:57:c1:0f:29:04:ea:ea:7c:d9:31:2e:
         0b:c9:8d:f8:8a:36:08:44:ad:ed:ea:8e:7f:ed:24:6a:2e:42:
         e1:c0:6d:49:9a:bf:1a:a0:9a:fe:fc:78:19:22:36:8f:b1:dd:
         3d:c8:ec:08:f8:78:3b:1b:3a:d6:38:18:39:b0:a7:6b:d2:d8:
         a7:55:e2:fa:ef:ad:1a:92:c7:ca:0b:5f:5a:28:4e:f8:da:08:
         c3:f5:57:b9:a9:bb:99:32:16:d6:c0:c0:13:13:28:ac:67:94:
         8c:5b:9e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----