Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BjybTEAP24B7uZm7Gs5oENdFYGYgVo7xGAwgGcYurEe3/0/655FCA94DD95B4D522C66B2E706ADEF44EC9D77E.mft
File:                     655FCA94DD95B4D522C66B2E706ADEF44EC9D77E.mft (raw, json)
Hash identifier:          QwjYkzp32sRYa7mw8aaBU5d7B0WTX4DZ7M12xoOiIAY=
Subject key identifier:   F3:5F:72:2E:38:03:57:4D:43:F7:3F:24:F8:77:86:2E:FA:9C:61:E8
Authority key identifier: 65:5F:CA:94:DD:95:B4:D5:22:C6:6B:2E:70:6A:DE:F4:4E:C9:D7:7E
Certificate issuer:       /CN=655FCA94DD95B4D522C66B2E706ADEF44EC9D77E
Certificate serial:       3B0A4C65C65223BB134CF975BD2D6B2671890B4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/655FCA94DD95B4D522C66B2E706ADEF44EC9D77E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BjybTEAP24B7uZm7Gs5oENdFYGYgVo7xGAwgGcYurEe3/0/655FCA94DD95B4D522C66B2E706ADEF44EC9D77E.mft
Manifest number:          1A
Signing time:             Thu 15 Feb 2024 17:53:31 +0000
Manifest this update:     Thu 15 Feb 2024 17:48:31 +0000
Manifest next update:     Fri 16 Feb 2024 19:57:31 +0000
Files and hashes:         1: 323830343a353164303a3a2f33322d3438203d3e20323638343739.roa (hash: r6Jaujs+esLvRdliF/6r/5iP9kzef6/hNo3GspZqtVI=)
                          2: 655FCA94DD95B4D522C66B2E706ADEF44EC9D77E.crl (hash: McvWNr5XRibqN2+vdq3bPM5jMCNKjoWWB1KaT5W7vPw=)
                          3: 34352e3136312e3234302e302f32322d3234203d3e20323638343739.roa (hash: tDPVbDQ5xPJCdjUbo1pjvbK6R61OyRmPPsGyssLUWv0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:0a:4c:65:c6:52:23:bb:13:4c:f9:75:bd:2d:6b:26:71:89:0b:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=655FCA94DD95B4D522C66B2E706ADEF44EC9D77E
        Validity
            Not Before: Feb 15 17:48:31 2024 GMT
            Not After : Feb 16 19:57:31 2024 GMT
        Subject: CN=F35F722E3803574D43F73F24F877862EFA9C61E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:62:96:38:9b:0e:6a:91:ae:2b:c6:a3:c5:8f:
                    bb:34:3b:5f:ec:50:9f:8c:6e:c6:d7:dc:93:3d:17:
                    8c:dd:4a:39:28:48:01:33:2e:7d:5b:0b:c4:ae:3e:
                    53:44:3b:77:e4:3f:76:8b:7b:8f:a1:65:83:d5:9e:
                    94:d0:2c:55:6c:de:87:ef:08:09:82:d1:6b:21:ee:
                    83:1f:51:59:f8:6e:69:c2:d1:04:2e:f2:68:e8:ec:
                    d2:42:36:e2:a9:86:a1:04:1f:f7:ba:a8:37:51:9d:
                    5e:9a:a6:33:76:e6:af:63:f3:69:3c:31:90:7d:53:
                    64:49:04:48:6c:72:86:3f:a6:fa:bd:13:5f:95:62:
                    7c:cd:6e:15:f3:8b:f9:e7:82:af:c8:0f:8a:c3:e2:
                    15:b6:93:0d:3a:80:f3:68:b8:34:41:da:61:5f:7c:
                    53:1a:4e:ce:5a:42:dd:50:5f:25:14:b9:f4:7d:87:
                    59:8e:5e:48:c0:e0:7b:ca:cc:22:58:a2:09:50:0a:
                    ff:9a:13:e2:4b:70:da:c9:fc:ad:4d:29:8c:df:df:
                    46:8f:66:dc:7e:2e:27:db:70:50:8b:d5:85:6f:cc:
                    65:6c:6f:6b:f5:7b:e8:4e:ef:01:a7:eb:db:a3:c9:
                    fb:c5:8e:18:39:27:fe:78:55:01:f8:d1:fd:4c:ea:
                    f9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:5F:72:2E:38:03:57:4D:43:F7:3F:24:F8:77:86:2E:FA:9C:61:E8
            X509v3 Authority Key Identifier:
                keyid:65:5F:CA:94:DD:95:B4:D5:22:C6:6B:2E:70:6A:DE:F4:4E:C9:D7:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BjybTEAP24B7uZm7Gs5oENdFYGYgVo7xGAwgGcYurEe3/0/655FCA94DD95B4D522C66B2E706ADEF44EC9D77E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/655FCA94DD95B4D522C66B2E706ADEF44EC9D77E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BjybTEAP24B7uZm7Gs5oENdFYGYgVo7xGAwgGcYurEe3/0/655FCA94DD95B4D522C66B2E706ADEF44EC9D77E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:84:06:84:0a:36:5c:1d:95:a0:27:4f:5b:27:2d:b2:83:75:
         88:08:29:2c:03:30:ca:d1:64:33:1c:0e:0c:9a:98:60:78:b4:
         03:0d:0b:a2:64:b2:b9:50:ab:82:56:52:1e:3d:13:6f:be:1f:
         c4:ce:b4:e3:50:3d:96:6c:47:57:00:ce:0b:31:ab:9f:fa:fb:
         83:1c:97:5c:92:58:f1:c9:8c:0a:44:d6:43:9c:09:ae:73:c5:
         c6:93:5e:05:67:91:95:5c:03:9a:0f:65:54:57:22:51:be:2a:
         72:ac:24:12:cb:ad:54:8d:0e:37:da:8a:88:d5:a3:42:40:d0:
         15:40:de:01:a0:65:24:b2:32:4f:79:f4:60:8a:21:77:40:7e:
         47:cf:6d:d7:fd:ac:43:30:fa:b6:cb:0e:2c:ac:58:24:be:4f:
         39:13:c1:e7:4e:2f:7f:9b:bf:fa:c9:aa:18:2b:ed:79:03:b8:
         00:08:13:76:8a:96:f9:91:d5:65:93:21:e7:8a:46:c2:7d:9b:
         c4:89:7a:53:35:47:30:ce:7f:bf:0b:cf:d9:7d:e7:c8:6c:f7:
         16:02:88:8d:35:12:36:29:80:40:bc:6e:17:dc:cb:f9:2f:de:
         0c:47:2d:ef:df:39:cc:09:18:fb:51:22:ce:5c:86:0e:3a:f6:
         ee:38:7f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----