Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/CC6C02D5411702996F06CF38CD6ABA6E868E8757.mft
File:                     CC6C02D5411702996F06CF38CD6ABA6E868E8757.mft (raw, json)
Hash identifier:          mBhQAn8Vh0CgfS+Tifw0yIZFp3oWRf4Q0+ZzGQl+kOQ=
Subject key identifier:   F8:2B:46:90:9C:31:AC:26:CF:D6:DB:04:9A:F4:88:0E:8D:B2:F8:AF
Authority key identifier: CC:6C:02:D5:41:17:02:99:6F:06:CF:38:CD:6A:BA:6E:86:8E:87:57
Certificate issuer:       /CN=CC6C02D5411702996F06CF38CD6ABA6E868E8757
Certificate serial:       7BE73FE7750525AE25EE09012E8B9C78A28457A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC6C02D5411702996F06CF38CD6ABA6E868E8757.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/CC6C02D5411702996F06CF38CD6ABA6E868E8757.mft
Manifest number:          05
Signing time:             Thu 22 Feb 2024 14:26:16 +0000
Manifest this update:     Thu 22 Feb 2024 14:21:16 +0000
Manifest next update:     Fri 23 Feb 2024 16:07:16 +0000
Files and hashes:         1: 323830343a363538383a3a2f33322d3334203d3e20323639343937.roa (hash: 3nmRxbBideOOpPa2QsXUjQ3j1fILYL8nspS38Okh1T4=)
                          2: CC6C02D5411702996F06CF38CD6ABA6E868E8757.crl (hash: fGxV7x3/n2xHQHom8tZ4+Fzmd35yc96HSJ/Yq3KZ/Hc=)
                          3: 34352e3138372e3230342e302f32322d3234203d3e20323639343937.roa (hash: +QB7KUzwnSngyckfIZH5XPwxF07yIc/D9m5Sr1SBuAw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e7:3f:e7:75:05:25:ae:25:ee:09:01:2e:8b:9c:78:a2:84:57:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC6C02D5411702996F06CF38CD6ABA6E868E8757
        Validity
            Not Before: Feb 22 14:21:16 2024 GMT
            Not After : Feb 23 16:07:16 2024 GMT
        Subject: CN=F82B46909C31AC26CFD6DB049AF4880E8DB2F8AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a3:c1:ed:65:23:99:71:ef:e1:68:d6:02:d8:
                    2c:c6:e8:2c:58:db:f7:4b:50:9c:8c:71:77:2c:42:
                    a9:5d:ed:c6:d3:2f:be:27:b3:c7:f4:66:d0:aa:03:
                    c4:c7:9d:9f:b1:f7:85:9e:38:36:4c:97:f8:74:13:
                    59:3b:ff:92:e1:51:19:75:9d:93:91:de:3c:99:14:
                    b4:c4:7f:81:b6:90:68:40:1d:cf:9c:63:bf:74:15:
                    37:94:aa:d1:cd:cd:24:69:94:76:7b:6e:35:ec:8b:
                    08:4f:a7:8b:9e:64:ba:b9:0f:d8:f4:cd:3d:87:2b:
                    32:a4:11:fa:51:1b:91:83:d8:63:b6:ed:8c:b0:40:
                    10:fb:38:c3:b3:f2:e0:29:16:7a:18:a0:28:42:83:
                    01:6e:3c:09:91:21:d3:25:d2:c1:5d:92:53:94:9d:
                    66:a3:cf:65:a1:e7:e0:ad:c6:f4:48:d5:1c:d0:1e:
                    04:00:ce:7e:9e:23:88:f6:dc:0c:ac:9d:29:53:96:
                    46:98:67:2c:c0:fe:7d:62:aa:6f:84:bf:01:24:a1:
                    0d:5e:c3:dc:76:dd:80:66:88:94:b6:17:a6:b4:d0:
                    20:78:b2:03:05:42:b5:2f:0d:f9:60:02:21:10:65:
                    54:1a:c5:07:05:6e:ae:52:a2:3d:2c:70:8f:2e:60:
                    ed:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:2B:46:90:9C:31:AC:26:CF:D6:DB:04:9A:F4:88:0E:8D:B2:F8:AF
            X509v3 Authority Key Identifier:
                keyid:CC:6C:02:D5:41:17:02:99:6F:06:CF:38:CD:6A:BA:6E:86:8E:87:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/CC6C02D5411702996F06CF38CD6ABA6E868E8757.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC6C02D5411702996F06CF38CD6ABA6E868E8757.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/CC6C02D5411702996F06CF38CD6ABA6E868E8757.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:14:3d:ef:fc:4a:35:a9:a0:e0:bb:65:f5:71:32:a3:55:e7:
         49:f9:22:ce:44:cc:df:d2:d5:39:ce:b6:25:28:cd:8c:4a:09:
         74:c9:5d:cd:92:14:39:1c:03:e1:1b:49:29:61:68:a6:a1:22:
         65:7c:56:e3:1a:b2:60:35:8a:a4:ea:2b:cf:ef:80:30:a8:65:
         43:52:8a:c8:f1:04:97:e8:cb:cd:45:11:81:0b:31:fc:4f:d3:
         8c:af:b4:f3:0c:6e:4d:4f:ab:26:5a:2e:c3:42:ae:3c:2c:b3:
         24:50:a7:41:a9:e2:3c:b8:31:d0:f2:f0:81:bc:d5:0e:43:14:
         53:cb:f2:c8:d6:f3:0c:46:24:60:b8:20:09:48:c4:b1:0b:3f:
         dc:03:22:7c:cc:16:28:b8:68:d8:db:15:45:23:2d:dc:c1:dd:
         c3:f2:7e:15:a7:a7:b4:e3:31:2a:1d:af:af:44:55:49:41:4b:
         ea:0e:5a:d9:f2:af:73:8c:a5:56:bf:f2:81:90:52:f4:de:bb:
         69:07:8e:94:b3:9f:71:0e:b5:76:35:10:70:a5:80:1e:05:65:
         44:bc:07:f0:3b:31:5e:95:e4:5a:ea:09:54:dc:e9:ba:16:b6:
         bb:4f:7c:30:90:57:0a:c0:67:24:b1:41:a5:f1:ff:29:04:7a:
         f7:17:52:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----