Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BVmmP1zJWMspCJaL4aACFUFqMe1NTLiWaKe2gjKL7TQv/0/0FDB72B67FE4DF33626D853A654F9E3393BEEF54.mft
File:                     0FDB72B67FE4DF33626D853A654F9E3393BEEF54.mft (raw, json)
Hash identifier:          OkNoZrbppUqRLjFRIc7z1BrqlSM6+8OQMBOGsdLDbVU=
Subject key identifier:   6F:E8:DE:FB:5E:5A:31:63:B6:22:BE:14:CA:37:29:92:2D:43:7F:CF
Authority key identifier: 0F:DB:72:B6:7F:E4:DF:33:62:6D:85:3A:65:4F:9E:33:93:BE:EF:54
Certificate issuer:       /CN=0FDB72B67FE4DF33626D853A654F9E3393BEEF54
Certificate serial:       356C07D4645B86DFC62C9BBC8FE962E1398AE9DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FDB72B67FE4DF33626D853A654F9E3393BEEF54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVmmP1zJWMspCJaL4aACFUFqMe1NTLiWaKe2gjKL7TQv/0/0FDB72B67FE4DF33626D853A654F9E3393BEEF54.mft
Manifest number:          3C
Signing time:             Thu 22 Feb 2024 16:41:50 +0000
Manifest this update:     Thu 22 Feb 2024 16:36:50 +0000
Manifest next update:     Fri 23 Feb 2024 20:02:50 +0000
Files and hashes:         1: 0FDB72B67FE4DF33626D853A654F9E3393BEEF54.crl (hash: j1gNhzo8Cz/23NDdezOQXwiOuBPrAgqTKDubKBnnNg0=)
                          2: 34352e3138312e3134302e302f32332d3233203d3e20323639313837.roa (hash: 8/bZwVFRdpB2IeCMIU4fwwjVQrBBDgBm69UooOZI0h8=)
                          3: 323830343a363062633a3a2f33322d3332203d3e20323639313837.roa (hash: grGBW1xWBIo6eqR4NuYLf63RTUh5K4QOATcHAX+kfZ8=)
                          4: 34352e3138312e3134302e302f32322d3232203d3e20323639313837.roa (hash: up3gX3GyBTHzpT5wasf0AEYhlf82Yw+rj4Pr6N9s83Q=)
                          5: 323830343a363062633a3a2f33332d3333203d3e20323639313837.roa (hash: S2D29w3/9wiGBHQDNJ8Y4cVX7xERx+d5Kj2cwZsLMsg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:6c:07:d4:64:5b:86:df:c6:2c:9b:bc:8f:e9:62:e1:39:8a:e9:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FDB72B67FE4DF33626D853A654F9E3393BEEF54
        Validity
            Not Before: Feb 22 16:36:50 2024 GMT
            Not After : Feb 23 20:02:50 2024 GMT
        Subject: CN=6FE8DEFB5E5A3163B622BE14CA3729922D437FCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d4:af:44:b5:7d:09:b2:0d:7b:56:07:b2:05:
                    38:10:34:cd:3c:81:70:d0:93:40:e8:72:81:bf:67:
                    44:bd:de:7c:3f:ed:b6:d5:f1:09:a0:77:2f:b3:18:
                    48:da:9c:94:61:2d:8c:dd:8a:c8:99:53:8a:df:c8:
                    b7:7a:8b:a5:f7:c3:99:0c:ff:3c:b3:75:ed:d2:16:
                    00:7a:4a:5b:95:ae:2c:28:a5:45:89:bb:e0:0b:85:
                    5a:6a:c4:d1:a5:08:30:41:45:c5:f3:28:dd:fb:17:
                    8d:22:09:24:65:f3:10:24:ba:b6:fc:a2:ba:a0:8a:
                    ab:a3:6f:41:cd:20:d7:6e:94:3c:57:0f:a0:19:3b:
                    73:03:be:30:8b:3b:ed:54:b5:a8:b5:14:6f:7f:ec:
                    76:78:0c:bb:c2:cf:3b:a9:c7:ff:62:fa:b2:00:a4:
                    25:0d:96:d5:03:81:e5:61:4e:d9:59:60:b5:ca:18:
                    d8:00:28:dd:23:b3:41:f9:41:9d:5b:28:2c:15:44:
                    69:5d:e5:7a:c8:82:5f:97:b5:8f:f7:f5:5d:a4:26:
                    0e:8a:97:fc:2d:3b:0a:12:ae:1e:16:a7:98:8f:eb:
                    ed:de:12:eb:df:15:f2:c3:fc:2c:a4:fa:bc:70:d7:
                    e7:6d:94:f5:4f:81:a0:33:d4:b6:f2:af:ce:80:97:
                    e2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E8:DE:FB:5E:5A:31:63:B6:22:BE:14:CA:37:29:92:2D:43:7F:CF
            X509v3 Authority Key Identifier:
                keyid:0F:DB:72:B6:7F:E4:DF:33:62:6D:85:3A:65:4F:9E:33:93:BE:EF:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVmmP1zJWMspCJaL4aACFUFqMe1NTLiWaKe2gjKL7TQv/0/0FDB72B67FE4DF33626D853A654F9E3393BEEF54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FDB72B67FE4DF33626D853A654F9E3393BEEF54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVmmP1zJWMspCJaL4aACFUFqMe1NTLiWaKe2gjKL7TQv/0/0FDB72B67FE4DF33626D853A654F9E3393BEEF54.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:4e:05:99:20:bd:2c:44:b0:b7:4f:21:4e:3c:a4:d7:a4:ad:
         52:2a:35:39:f7:66:4b:b3:98:5e:57:8f:80:96:4c:1b:f3:b3:
         ec:ef:22:2d:f5:f9:d9:37:52:02:3e:ae:f3:06:59:73:cb:71:
         91:26:ac:a9:af:34:b1:66:ee:83:e4:d0:d2:38:85:d3:90:80:
         4c:8d:6d:8d:59:5f:89:4a:15:e1:ef:ae:5a:c8:18:20:21:55:
         33:15:00:cf:28:c8:19:c9:98:0a:0f:05:9f:e9:fc:dd:ee:44:
         b6:3b:4c:db:62:70:82:4c:da:e0:c5:f9:cc:57:0a:4f:4a:b1:
         d7:0e:b5:61:75:90:49:6b:41:2e:48:85:bd:7c:72:c6:25:bd:
         58:f4:d9:4b:49:8a:4a:c2:da:e0:66:5c:c5:82:7a:86:d3:b0:
         a4:ff:64:f0:0d:84:96:11:9f:10:c6:5f:b5:e1:7b:fd:a0:84:
         58:f6:d9:fe:7c:d4:f8:8d:e8:1b:e5:54:0b:23:0c:45:f3:ca:
         b0:5c:18:8e:fa:86:b4:75:61:d9:6d:e6:58:95:76:4d:35:cd:
         1d:d5:85:c5:af:cf:90:8d:75:b9:c9:26:87:ee:48:95:f2:f6:
         1a:4f:20:3d:01:7f:44:4b:8a:8f:8c:e4:d1:f4:d1:23:28:e9:
         62:8f:6d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----