Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BCusuW53nNcZVj6Jt55c39Gk1qtsTSfHUD9G5nVZg2rR/0/7FD5A0FF623119B8974387FB5C14E5A564074C0E.mft
File:                     7FD5A0FF623119B8974387FB5C14E5A564074C0E.mft (raw, json)
Hash identifier:          IaZyBR7/LLFbjJARreHmR+a5DBnM5MbfNsQeESKxM64=
Subject key identifier:   13:CA:CA:93:25:75:4E:46:3F:4B:BD:30:FA:04:A0:36:BA:79:6A:07
Authority key identifier: 7F:D5:A0:FF:62:31:19:B8:97:43:87:FB:5C:14:E5:A5:64:07:4C:0E
Certificate issuer:       /CN=7FD5A0FF623119B8974387FB5C14E5A564074C0E
Certificate serial:       4D3CB28F9E0E39C9A8CD0AC8E86F509DB57B9BD9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7FD5A0FF623119B8974387FB5C14E5A564074C0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCusuW53nNcZVj6Jt55c39Gk1qtsTSfHUD9G5nVZg2rR/0/7FD5A0FF623119B8974387FB5C14E5A564074C0E.mft
Manifest number:          A8
Signing time:             Fri 12 Jan 2024 19:38:24 +0000
Manifest this update:     Fri 12 Jan 2024 19:33:24 +0000
Manifest next update:     Sat 13 Jan 2024 20:54:24 +0000
Files and hashes:         1: 323830343a316138633a3a2f33322d313238203d3e203631383635.roa (hash: RC+Z89fUinv7L5b7uZM6sbwxfBjJjzARNnbtoSbt1Cc=)
                          2: 3230312e3134382e3136342e302f32322d3332203d3e203631383635.roa (hash: Qqan3MCBaEDV8UF7nQFuz8usLOnhd6xv0kM3Lb/bLUA=)
                          3: 7FD5A0FF623119B8974387FB5C14E5A564074C0E.crl (hash: HBuN7QdTZIFar6YP74ZM56VgzFwCl7v89fRQZ2jJh94=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:3c:b2:8f:9e:0e:39:c9:a8:cd:0a:c8:e8:6f:50:9d:b5:7b:9b:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FD5A0FF623119B8974387FB5C14E5A564074C0E
        Validity
            Not Before: Jan 12 19:33:24 2024 GMT
            Not After : Jan 13 20:54:24 2024 GMT
        Subject: CN=13CACA9325754E463F4BBD30FA04A036BA796A07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:60:66:5d:7b:2d:e1:08:14:cb:de:d5:e6:96:
                    31:10:3f:4e:14:73:d0:25:40:10:32:aa:d8:8e:f6:
                    b5:26:91:92:ba:1f:af:b9:ec:0b:ae:df:a6:e9:f3:
                    73:a3:b5:31:ce:e5:ec:7d:6d:68:87:1a:df:0c:ee:
                    43:a8:2f:1e:f9:6e:b6:4d:ab:8b:e6:ee:18:2c:a3:
                    68:6c:7f:d4:59:45:64:dc:26:01:dc:7d:51:9a:2c:
                    fd:50:13:26:ae:34:a7:a7:c5:71:21:38:5c:22:89:
                    9e:f7:6f:fa:d2:0c:14:9f:ee:8d:8b:51:82:ca:fc:
                    70:07:cb:a3:7e:e0:e6:8b:55:15:32:ef:09:75:93:
                    2e:b5:ee:2c:1c:93:1b:eb:3d:89:cc:18:7a:f9:db:
                    79:67:94:c8:ba:d1:e6:4e:ff:45:7f:c9:64:e5:14:
                    56:bb:6d:ba:9b:51:b1:e5:a3:6f:7c:2f:94:8d:8b:
                    12:af:8d:2b:bc:35:f9:52:7a:86:14:ff:ed:67:a5:
                    14:a7:66:59:7b:f5:a0:5b:c6:92:ca:b3:b5:a0:2f:
                    a4:5e:78:da:92:3f:46:ef:43:0d:be:52:c0:60:5f:
                    7d:c6:7c:ee:ec:95:11:29:17:c1:c6:c7:47:82:f9:
                    a4:ab:94:07:4e:c3:a2:ab:df:a4:a8:c5:de:80:19:
                    3a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:CA:CA:93:25:75:4E:46:3F:4B:BD:30:FA:04:A0:36:BA:79:6A:07
            X509v3 Authority Key Identifier:
                keyid:7F:D5:A0:FF:62:31:19:B8:97:43:87:FB:5C:14:E5:A5:64:07:4C:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCusuW53nNcZVj6Jt55c39Gk1qtsTSfHUD9G5nVZg2rR/0/7FD5A0FF623119B8974387FB5C14E5A564074C0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7FD5A0FF623119B8974387FB5C14E5A564074C0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCusuW53nNcZVj6Jt55c39Gk1qtsTSfHUD9G5nVZg2rR/0/7FD5A0FF623119B8974387FB5C14E5A564074C0E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:fe:f6:58:f1:2c:cd:72:69:5c:03:22:df:0c:45:6c:ee:e9:
         f7:18:2d:21:36:e0:6e:4b:33:a7:10:ae:2f:32:fe:91:8d:0e:
         4c:5d:fb:cf:a7:50:a6:46:0c:38:5a:fe:47:db:57:b3:68:ed:
         46:94:41:a8:13:77:e2:4d:bf:ee:e9:22:46:dd:fa:27:f4:81:
         f9:30:f8:63:e8:1e:bb:49:15:a8:74:88:15:73:6f:d2:01:d6:
         b2:0b:70:86:3b:0d:05:f5:b7:de:62:69:ee:6b:ea:da:f5:74:
         68:3e:ac:3b:48:2d:6e:bb:c6:ed:eb:14:77:b9:11:a6:8d:ff:
         ce:4b:b5:ca:b7:f9:7f:c8:54:7b:ef:21:c4:66:36:1d:f6:28:
         ce:08:c6:ce:fe:ab:47:fa:f3:69:f1:57:a0:2c:84:89:87:23:
         6c:4c:2f:fb:a9:32:dd:41:82:ed:01:85:13:09:94:87:7e:5e:
         35:8f:47:eb:2f:01:0f:e0:6d:a9:6e:0d:84:09:3b:0f:90:05:
         b3:4e:50:1d:4e:bb:97:00:00:44:6f:1f:a8:42:b5:c3:11:44:
         37:59:98:ae:82:f9:96:0e:cb:21:8a:02:da:cc:c0:98:df:d2:
         86:dd:40:42:e0:15:ee:cc:24:82:3c:9c:98:b1:5e:12:82:1b:
         3f:45:43:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----