Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0/0CFF9CCBB4AECED875432DE67D4D72CB1AF6FCF0.mft
File:                     0CFF9CCBB4AECED875432DE67D4D72CB1AF6FCF0.mft (raw, json)
Hash identifier:          xdXrfqW0AuBFYMeBnyppUO8sfyq9JAb1/Os7hw36T0g=
Subject key identifier:   51:91:2E:65:A9:24:6D:E6:4D:CF:0B:7C:26:65:86:F0:3D:6E:29:D7
Authority key identifier: 0C:FF:9C:CB:B4:AE:CE:D8:75:43:2D:E6:7D:4D:72:CB:1A:F6:FC:F0
Certificate issuer:       /CN=0CFF9CCBB4AECED875432DE67D4D72CB1AF6FCF0
Certificate serial:       290B22BF6BAC08B64E2EF7B3ABB77CD7B4726750
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CFF9CCBB4AECED875432DE67D4D72CB1AF6FCF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0/0CFF9CCBB4AECED875432DE67D4D72CB1AF6FCF0.mft
Manifest number:          32
Signing time:             Sun 14 Apr 2024 22:08:13 +0000
Manifest this update:     Sun 14 Apr 2024 22:03:13 +0000
Manifest next update:     Mon 15 Apr 2024 22:31:13 +0000
Files and hashes:         1: 3138372e36332e3230382e302f32302d3233203d3e203533303937.roa (hash: jUVaIkf/U2DH4N5Q5qX9GQz6REOgotOILM7l6L9eWs4=)
                          2: 323830343a333139303a3a2f33322d3438203d3e203533303937.roa (hash: lBCdIIBqcDG+iBmbnOaP7SHCtGNwAoe0XuDGdqPCtwE=)
                          3: 0CFF9CCBB4AECED875432DE67D4D72CB1AF6FCF0.crl (hash: uu6sIDRcflgV+0SPaSPA37pdS/7WLbQwJLyIMZH6g+w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:0b:22:bf:6b:ac:08:b6:4e:2e:f7:b3:ab:b7:7c:d7:b4:72:67:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CFF9CCBB4AECED875432DE67D4D72CB1AF6FCF0
        Validity
            Not Before: Apr 14 22:03:13 2024 GMT
            Not After : Apr 15 22:31:13 2024 GMT
        Subject: CN=51912E65A9246DE64DCF0B7C266586F03D6E29D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e4:9e:16:aa:3b:19:3e:2e:59:fd:fe:74:df:
                    ad:90:fa:26:b6:e0:8e:93:0d:f5:bb:c5:ad:bd:36:
                    0e:07:83:b7:09:a7:1b:23:52:c4:40:bb:3a:87:ec:
                    b7:e8:cd:c7:13:50:c9:a5:d1:5e:ef:ef:14:98:6c:
                    f5:24:fe:b1:97:7e:47:97:6b:e8:17:15:97:83:3f:
                    7c:32:af:d1:53:9c:f4:17:54:51:97:13:9d:71:87:
                    59:7b:9f:e6:19:cf:22:8d:38:23:46:d0:3f:d9:9f:
                    f6:f9:5a:41:21:0a:fb:2d:fe:6f:08:e8:8c:be:93:
                    36:fb:de:02:47:ac:2c:0f:1e:5e:3c:f1:73:dd:1e:
                    05:e4:90:0d:a6:bb:31:00:41:d5:36:e8:c1:f6:54:
                    6b:67:a7:66:c6:72:b5:4a:fc:c8:b1:d0:48:f0:cb:
                    14:07:6f:49:36:a3:60:c0:ee:c7:f9:51:de:b0:bb:
                    00:e5:bb:6e:63:97:75:ec:fd:62:83:97:1e:ce:02:
                    4f:04:ba:71:96:74:cb:18:db:62:7a:7a:ff:72:7d:
                    ec:96:8c:a8:ee:90:f6:3e:20:76:7b:71:32:50:fa:
                    e4:bb:97:3b:29:a8:ee:36:c8:22:63:2f:e4:ab:d2:
                    4e:f6:5c:f4:37:22:7a:69:a1:04:8f:49:b5:c0:e6:
                    15:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:91:2E:65:A9:24:6D:E6:4D:CF:0B:7C:26:65:86:F0:3D:6E:29:D7
            X509v3 Authority Key Identifier:
                keyid:0C:FF:9C:CB:B4:AE:CE:D8:75:43:2D:E6:7D:4D:72:CB:1A:F6:FC:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0/0CFF9CCBB4AECED875432DE67D4D72CB1AF6FCF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CFF9CCBB4AECED875432DE67D4D72CB1AF6FCF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0/0CFF9CCBB4AECED875432DE67D4D72CB1AF6FCF0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:f4:6a:2a:64:90:ee:b3:c5:f8:c4:ce:9c:8e:80:5b:a5:62:
         f5:01:4c:ae:5f:89:9d:59:81:76:b0:af:b8:da:84:0a:05:16:
         01:4e:33:06:b1:1e:5a:ab:82:08:86:1c:64:cc:f8:57:f7:e8:
         c9:9a:3f:17:63:cc:a7:3c:c8:ce:8f:02:e7:a9:02:d3:2c:8a:
         36:3d:9f:4c:38:75:a1:0b:a6:6b:b9:2c:fe:51:27:50:c9:3d:
         74:d9:91:a4:f9:ea:d7:8a:5b:18:0b:b3:91:9b:46:2b:6a:53:
         c6:56:b4:c0:77:67:2d:fb:77:71:65:a0:e1:96:8e:4d:49:57:
         08:87:b4:48:de:31:6a:00:90:28:6c:5f:24:57:36:8b:9a:ba:
         d3:4a:60:ee:46:b0:28:8c:7e:6b:23:f8:2b:93:9a:3d:19:e3:
         ed:de:aa:3c:39:cf:4e:91:83:05:66:a3:ea:2c:d2:1a:18:79:
         bd:57:42:d2:a0:9e:37:e2:a7:aa:a3:a2:dd:80:03:1d:4e:85:
         b5:c3:0b:ec:3b:b0:3d:0e:f3:24:a3:ca:88:f1:bd:9c:c6:20:
         31:f9:a0:8e:66:83:06:99:70:ce:2f:82:ce:13:c9:1a:96:f1:
         8b:a9:59:52:6e:33:54:1b:15:a0:9f:6d:39:ae:5b:4b:07:d8:
         47:d2:29:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----