Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9ht26HaBZhSFaihwFaf77APSWoBuaX62hnVSo355dJER/0/F23A64D629D322F288435383AFCCA6FF1CB50078.mft
File:                     F23A64D629D322F288435383AFCCA6FF1CB50078.mft (raw, json)
Hash identifier:          JDJ0dfTlLOfFxSgO8MP/ZawPx8NNYateOsNBnKD6NGc=
Subject key identifier:   B8:FE:B6:3D:C6:D8:90:B5:44:25:55:87:F2:95:8F:66:78:0A:CC:96
Authority key identifier: F2:3A:64:D6:29:D3:22:F2:88:43:53:83:AF:CC:A6:FF:1C:B5:00:78
Certificate issuer:       /CN=F23A64D629D322F288435383AFCCA6FF1CB50078
Certificate serial:       31D34A29752342D5D24D89ACF4D63AB9EEDD789B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F23A64D629D322F288435383AFCCA6FF1CB50078.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ht26HaBZhSFaihwFaf77APSWoBuaX62hnVSo355dJER/0/F23A64D629D322F288435383AFCCA6FF1CB50078.mft
Manifest number:          073A
Signing time:             Mon 15 Apr 2024 05:38:02 +0000
Manifest this update:     Mon 15 Apr 2024 05:33:02 +0000
Manifest next update:     Tue 16 Apr 2024 08:48:02 +0000
Files and hashes:         1: F23A64D629D322F288435383AFCCA6FF1CB50078.crl (hash: ScVtpvfWVZ9ap8DubPPNvWDlf/g42Gec+th0TPrgXwg=)
                          2: 34352e3233332e35322e302f32322d3234203d3e20323637323939.roa (hash: 17su2WLSZAjBc/r6nR9ml+CYxjNAGXqllCIeoX960oM=)
                          3: 323830343a346235383a3a2f33322d3334203d3e20323637323939.roa (hash: 5oFu+VBuffrJNDFtamt6lskJlX3bNpE/Ps1/ANB/uIY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d3:4a:29:75:23:42:d5:d2:4d:89:ac:f4:d6:3a:b9:ee:dd:78:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F23A64D629D322F288435383AFCCA6FF1CB50078
        Validity
            Not Before: Apr 15 05:33:02 2024 GMT
            Not After : Apr 16 08:48:02 2024 GMT
        Subject: CN=B8FEB63DC6D890B544255587F2958F66780ACC96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:90:07:e0:cb:7c:0b:d1:ec:f3:ce:d9:d4:99:
                    61:62:1d:05:51:f0:f8:50:c5:47:40:a3:18:5f:12:
                    0b:5b:79:d1:fc:ee:d7:48:0a:5a:b2:e6:59:00:16:
                    fa:76:af:97:04:45:53:ed:46:f8:df:51:04:d0:87:
                    10:3e:99:2c:76:8f:6d:13:71:88:6d:a9:75:48:96:
                    1e:fa:eb:ab:cd:18:3a:86:5e:f3:82:60:ba:5a:86:
                    79:82:3c:ef:1f:b0:a4:9d:29:f8:fc:92:93:47:0a:
                    59:ac:69:43:cf:0c:c1:bc:22:a4:91:fc:73:44:88:
                    d4:4f:20:c7:4d:43:5d:d0:cd:eb:57:1a:aa:20:b3:
                    98:46:5f:96:aa:52:02:5d:b5:fb:91:55:7a:05:c8:
                    b3:98:34:e0:ac:5f:ed:1d:c0:e9:04:3f:ca:7b:19:
                    81:ab:53:d4:77:95:f5:7d:26:e0:75:89:ca:5e:29:
                    ee:dc:8c:eb:12:44:02:3f:d2:b3:c1:59:e1:de:b6:
                    f3:f1:c8:ea:d0:76:9e:03:ba:03:25:df:c9:5b:83:
                    19:83:81:9e:de:4f:49:fd:fa:9d:3f:1f:ae:08:b7:
                    74:f6:74:2c:f5:50:c4:9a:de:20:26:77:0a:3d:8e:
                    79:8f:61:7c:0e:41:24:5f:b5:d8:ee:c0:63:84:74:
                    7d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FE:B6:3D:C6:D8:90:B5:44:25:55:87:F2:95:8F:66:78:0A:CC:96
            X509v3 Authority Key Identifier:
                keyid:F2:3A:64:D6:29:D3:22:F2:88:43:53:83:AF:CC:A6:FF:1C:B5:00:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ht26HaBZhSFaihwFaf77APSWoBuaX62hnVSo355dJER/0/F23A64D629D322F288435383AFCCA6FF1CB50078.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F23A64D629D322F288435383AFCCA6FF1CB50078.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ht26HaBZhSFaihwFaf77APSWoBuaX62hnVSo355dJER/0/F23A64D629D322F288435383AFCCA6FF1CB50078.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:5b:59:10:40:e5:07:33:ed:76:e9:60:e8:63:c5:28:60:7f:
         8b:59:53:eb:bb:83:f3:04:d8:b0:50:45:14:01:a3:ae:45:28:
         7d:c6:a9:b0:88:40:7a:a1:91:1a:5f:10:70:f4:83:8b:22:02:
         0c:57:5f:1c:fb:ab:77:98:4a:cf:33:02:39:4a:18:ef:67:6b:
         10:b1:d5:76:2a:ba:af:81:ce:7d:5c:02:4f:97:63:1e:8c:1d:
         f8:60:f9:9a:a2:ce:40:68:09:b3:7d:ac:5d:b0:81:81:d3:c9:
         1c:07:f8:f4:94:0c:a5:d1:56:2f:97:09:92:c2:67:72:5c:00:
         37:16:87:e7:b9:6a:36:4c:34:9a:72:6a:ad:49:3f:29:05:57:
         6d:f8:d3:4e:a6:35:76:e9:76:d5:4c:1c:e1:26:45:be:45:30:
         52:be:a6:b8:f9:e0:3c:48:d1:d2:9a:62:b8:d3:77:cb:e6:7f:
         e3:3a:2c:08:89:a1:53:19:ec:17:51:1a:3e:a1:c1:bd:de:34:
         65:9b:df:b4:22:12:63:33:f3:60:68:74:43:cf:b2:6a:0f:91:
         8a:9f:f6:19:d1:38:97:34:d3:05:5d:5a:0f:38:40:76:cd:54:
         65:ba:eb:05:ac:0f:80:f2:ca:f2:8d:32:db:62:f2:2d:52:46:
         62:78:41:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----