Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/0/F5F3745DEB269E2D80E0F448EA1DA1D49F93AEF4.mft
File:                     F5F3745DEB269E2D80E0F448EA1DA1D49F93AEF4.mft (raw, json)
Hash identifier:          DmLPn7p7siwwEUmeFEEixGFIrHH7skimyEQ7Krt+s3w=
Subject key identifier:   3F:54:D9:87:CE:9F:41:9D:5E:06:D2:A4:1D:FD:E4:4E:6E:DC:C8:51
Authority key identifier: F5:F3:74:5D:EB:26:9E:2D:80:E0:F4:48:EA:1D:A1:D4:9F:93:AE:F4
Certificate issuer:       /CN=F5F3745DEB269E2D80E0F448EA1DA1D49F93AEF4
Certificate serial:       1B386784B51E0E7F3FB44B3642A9404A79429CD5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5F3745DEB269E2D80E0F448EA1DA1D49F93AEF4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/0/F5F3745DEB269E2D80E0F448EA1DA1D49F93AEF4.mft
Manifest number:          1C
Signing time:             Sun 14 Apr 2024 19:19:49 +0000
Manifest this update:     Sun 14 Apr 2024 19:14:49 +0000
Manifest next update:     Mon 15 Apr 2024 21:01:49 +0000
Files and hashes:         1: 323830343a363538633a323030303a3a2f34382d3438203d3e20323639343939.roa (hash: ebXZF1+m1R9OeEwZ8XdVNy9Rth83n3wbfcgq9FSLQPY=)
                          2: 34352e3138362e3135362e302f32322d3234203d3e20323639343939.roa (hash: 132IIXoZtXb50dGayt+t7E7s5Kow3BeUcUcMFNxJ2Wo=)
                          3: F5F3745DEB269E2D80E0F448EA1DA1D49F93AEF4.crl (hash: 8xUgmnjpuz0O5JGGNY98LZx8GsM78kqiv4UOU/YXEnY=)
                          4: 323830343a363538633a3a2f33322d3430203d3e20323639343939.roa (hash: S202lPBcS0QQ+kPoFiVOC7ydxesXFHoI0nahqT2F4J8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:38:67:84:b5:1e:0e:7f:3f:b4:4b:36:42:a9:40:4a:79:42:9c:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5F3745DEB269E2D80E0F448EA1DA1D49F93AEF4
        Validity
            Not Before: Apr 14 19:14:49 2024 GMT
            Not After : Apr 15 21:01:49 2024 GMT
        Subject: CN=3F54D987CE9F419D5E06D2A41DFDE44E6EDCC851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:51:b5:0c:96:19:c1:89:e0:50:08:7b:0a:57:
                    3b:2f:17:b3:5b:66:32:97:59:56:ef:da:a9:58:60:
                    a2:95:9a:ca:9d:f6:cc:ad:5a:04:54:45:74:fa:21:
                    03:d2:b2:88:14:a3:16:57:d5:bc:ec:cc:d0:4c:a5:
                    3e:2c:63:e8:b7:3c:af:da:11:63:53:03:e1:d6:13:
                    93:20:47:da:98:fd:17:ec:1d:65:a9:3d:13:77:95:
                    46:65:e2:7d:32:24:9b:cd:61:9f:80:4e:4d:90:6c:
                    35:40:62:f5:ee:19:0b:34:0a:d3:a7:6a:4a:b7:72:
                    6b:74:05:c9:f3:fb:cd:ae:eb:c9:75:b3:03:d6:c8:
                    f6:41:49:69:43:24:fc:f7:5e:33:8b:a3:c5:03:92:
                    8f:f6:a6:38:89:ad:74:da:42:e6:49:2e:da:a5:14:
                    ee:67:b6:c1:fb:5a:98:46:47:b7:e4:79:37:95:f0:
                    22:05:8a:ef:fb:af:dc:3a:55:7a:43:0d:cd:33:ee:
                    96:ef:b9:72:40:a3:f2:a1:66:c7:ab:44:44:18:4a:
                    b2:6f:a8:23:28:6c:31:04:3a:07:b6:b2:36:52:45:
                    ea:d5:d5:77:d5:eb:a0:c9:02:71:5a:b7:b0:d4:0c:
                    ba:20:9f:ec:81:71:a3:16:b9:67:43:71:70:e2:95:
                    22:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:54:D9:87:CE:9F:41:9D:5E:06:D2:A4:1D:FD:E4:4E:6E:DC:C8:51
            X509v3 Authority Key Identifier:
                keyid:F5:F3:74:5D:EB:26:9E:2D:80:E0:F4:48:EA:1D:A1:D4:9F:93:AE:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/0/F5F3745DEB269E2D80E0F448EA1DA1D49F93AEF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5F3745DEB269E2D80E0F448EA1DA1D49F93AEF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/0/F5F3745DEB269E2D80E0F448EA1DA1D49F93AEF4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:28:b0:29:8b:d5:a0:f3:ea:00:d2:88:87:9c:47:ea:6f:f8:
         38:20:63:47:df:e9:c3:ac:8f:84:e9:b1:47:39:c7:a4:97:ce:
         de:2d:e3:84:3e:61:75:78:12:db:48:c3:8f:93:56:b3:f5:bd:
         58:1f:42:18:c3:74:9d:da:76:fd:a9:e3:df:bd:0f:4c:d7:1a:
         68:6b:59:f5:b8:15:a9:f5:7c:e7:4f:0b:2f:aa:09:74:ff:22:
         23:55:45:87:2f:f3:f4:75:ce:95:94:d7:73:77:bc:71:6c:0e:
         59:66:d5:a9:85:2b:8e:e2:c3:97:82:3e:08:4c:b8:c1:c0:e6:
         c6:8e:b3:4c:8a:f3:ce:2a:25:35:cc:f6:c9:d1:52:d3:98:22:
         40:b0:f6:82:11:e6:c2:e1:f4:f0:64:4e:ed:bf:d6:43:ae:db:
         93:e4:5d:b1:b9:04:94:f3:48:cb:56:22:b5:f7:28:64:ec:89:
         eb:cc:a8:16:d2:f3:b9:4e:51:3f:9f:a8:c5:9d:02:2a:b2:05:
         7c:9e:e5:e7:d9:fe:50:c8:ac:a0:0f:c5:5c:53:29:da:a2:e4:
         e7:dd:53:78:51:2e:ce:bb:87:e5:dc:ee:aa:26:f0:ff:ca:9e:
         1f:50:4d:92:2c:f0:9b:24:5a:a5:00:14:da:a6:5c:a2:ce:b3:
         a6:1e:68:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----