Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/B09F555E338DACE2F046F7B3C94528216109B8C5.mft
File:                     B09F555E338DACE2F046F7B3C94528216109B8C5.mft (raw, json)
Hash identifier:          HgvOs0RLwofydX8aA7cHc3P4TzFDburJcDAuEYbr1Os=
Subject key identifier:   BE:25:E8:2C:EF:43:2D:4A:D6:80:98:C8:2A:53:1D:1F:95:6D:7D:AC
Authority key identifier: B0:9F:55:5E:33:8D:AC:E2:F0:46:F7:B3:C9:45:28:21:61:09:B8:C5
Certificate issuer:       /CN=B09F555E338DACE2F046F7B3C94528216109B8C5
Certificate serial:       4BE87D84CC4E2F10CEFD7356F2AB59F49E843548
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B09F555E338DACE2F046F7B3C94528216109B8C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/B09F555E338DACE2F046F7B3C94528216109B8C5.mft
Manifest number:          0301
Signing time:             Sun 14 Apr 2024 19:58:36 +0000
Manifest this update:     Sun 14 Apr 2024 19:53:36 +0000
Manifest next update:     Mon 15 Apr 2024 22:02:36 +0000
Files and hashes:         1: 323830343a333461633a3a2f33322d3334203d3e20323635343732.roa (hash: OcYzWvjBpqjCbqGmiRVGDjjQUGMYbazaUkMxPxUPAgU=)
                          2: 3136382e3139362e3231322e302f32322d3234203d3e20323635343732.roa (hash: sdXNCmu3eYLC2JSpnkKaIlnTbyFcc/bIbzjDXTV2cIs=)
                          3: B09F555E338DACE2F046F7B3C94528216109B8C5.crl (hash: 7mJbPpJCNbShK8Tt/X9fg1Qoc3LUa/TsUuiDQUjbUtE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e8:7d:84:cc:4e:2f:10:ce:fd:73:56:f2:ab:59:f4:9e:84:35:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B09F555E338DACE2F046F7B3C94528216109B8C5
        Validity
            Not Before: Apr 14 19:53:36 2024 GMT
            Not After : Apr 15 22:02:36 2024 GMT
        Subject: CN=BE25E82CEF432D4AD68098C82A531D1F956D7DAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:37:fa:df:e5:f5:31:cc:f2:09:60:ff:77:a4:
                    13:0e:fd:f2:d3:c3:a3:3d:77:32:e3:34:f4:66:89:
                    d8:4f:b9:3a:71:73:c2:9c:11:5d:93:70:3d:8e:cf:
                    ac:3e:f1:67:65:12:53:61:bf:aa:76:0e:f7:b6:de:
                    d3:37:45:99:ec:36:3d:77:30:25:be:40:21:71:39:
                    6e:ac:63:58:fc:b2:82:0f:7c:a1:13:6e:41:e8:7c:
                    e4:0c:da:17:52:f9:5a:28:c8:ad:57:da:18:aa:57:
                    32:f3:fe:78:95:b3:c7:ac:58:47:28:db:84:b7:40:
                    17:63:03:9e:eb:86:55:32:98:12:4f:7a:12:0d:58:
                    21:d7:68:b3:0f:14:dd:f2:fb:ec:26:49:09:9b:d6:
                    09:58:d6:24:98:ed:21:f1:c2:a9:4f:f4:54:61:f3:
                    4d:6c:02:87:56:8a:4e:7e:c3:67:72:fe:03:c2:98:
                    94:b9:7b:da:ef:cb:f9:94:d7:f3:c5:6e:a5:7a:7f:
                    aa:68:af:1b:04:41:a4:14:25:35:68:0e:20:4b:38:
                    9b:c8:fa:3a:ce:1f:c4:69:65:41:b9:d2:3a:36:43:
                    c4:17:61:04:ba:7e:5e:73:1a:c7:f1:43:9b:86:61:
                    a8:14:aa:14:0c:0d:38:d7:4e:b7:d8:75:17:22:80:
                    4a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:25:E8:2C:EF:43:2D:4A:D6:80:98:C8:2A:53:1D:1F:95:6D:7D:AC
            X509v3 Authority Key Identifier:
                keyid:B0:9F:55:5E:33:8D:AC:E2:F0:46:F7:B3:C9:45:28:21:61:09:B8:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/B09F555E338DACE2F046F7B3C94528216109B8C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B09F555E338DACE2F046F7B3C94528216109B8C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/B09F555E338DACE2F046F7B3C94528216109B8C5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:58:fe:58:f0:c4:3b:47:e0:bf:65:d3:9f:17:37:04:28:55:
         de:d0:c8:1a:f6:6d:d4:6f:19:4d:02:e1:a4:ab:a2:3a:88:c6:
         af:67:e9:72:97:9c:04:49:20:3f:ee:a7:92:e3:41:45:2d:06:
         d2:4a:55:46:d4:da:a2:97:38:82:df:ea:69:20:91:17:f1:d0:
         56:66:68:7a:f8:bc:4d:82:f0:3a:0e:17:d9:5a:9d:45:f7:a5:
         9c:c3:73:cc:5c:41:4e:bc:4d:8a:cb:d1:36:23:30:a2:75:9a:
         fd:d7:ff:c3:d6:24:b9:d5:e6:62:cc:13:da:b7:e7:6c:68:8d:
         63:67:1a:bb:d2:01:d4:fe:9b:d7:08:1d:65:82:09:3d:c7:b9:
         3d:d7:66:80:d5:24:43:13:97:c0:36:11:bb:c0:d2:39:3f:93:
         f5:5c:e8:5f:59:a6:3e:ee:ca:31:83:59:14:a6:cc:00:6b:3f:
         11:9c:bf:c3:9e:29:9a:c4:fa:9f:c1:50:55:9d:25:bc:b7:85:
         07:67:41:7d:68:ac:2d:d8:f6:43:dc:02:b9:52:87:17:9c:24:
         0a:40:df:fa:ef:15:82:3b:bd:7d:30:3a:88:0a:66:2b:4f:86:
         9d:d3:2d:3a:e8:c8:ad:b1:33:38:70:70:1f:2b:c1:fa:ad:aa:
         68:3b:45:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----