Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/1/0F73309BD187659C71CCBDC81E84964AD6C5AEEA.mft
File:                     0F73309BD187659C71CCBDC81E84964AD6C5AEEA.mft (raw, json)
Hash identifier:          T7HYUtUPxzl9IGOM4Y8t7GFrHlk/UJx87dTeRXK7qZE=
Subject key identifier:   31:4D:76:4B:16:8F:0C:1C:DA:27:95:1D:EB:F5:F9:B2:95:C9:9A:F0
Authority key identifier: 0F:73:30:9B:D1:87:65:9C:71:CC:BD:C8:1E:84:96:4A:D6:C5:AE:EA
Certificate issuer:       /CN=0F73309BD187659C71CCBDC81E84964AD6C5AEEA
Certificate serial:       0848ABD1E677888FC06BF9F5FE3D5C604902201D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F73309BD187659C71CCBDC81E84964AD6C5AEEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/1/0F73309BD187659C71CCBDC81E84964AD6C5AEEA.mft
Manifest number:          0B
Signing time:             Sun 14 Apr 2024 18:15:40 +0000
Manifest this update:     Sun 14 Apr 2024 18:10:40 +0000
Manifest next update:     Mon 15 Apr 2024 20:24:40 +0000
Files and hashes:         1: 0F73309BD187659C71CCBDC81E84964AD6C5AEEA.crl (hash: 1/OIy2xLYhYR9ul7FHJuSw5GVrDuPZxJOOOYhA8TyEE=)
                          2: 3133312e302e34382e302f32322d3234203d3e203631383832.roa (hash: f8pRf9a5oKvFKLpz4UpmUuxOHtpDUQ8sLtQQfxX4Tl4=)
                          3: 323830343a316162633a3a2f33322d3438203d3e203631383832.roa (hash: 5T3rNg9VTJQV4/aAa9zfypfv5c4QXfa+57aWVrsPbqE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:48:ab:d1:e6:77:88:8f:c0:6b:f9:f5:fe:3d:5c:60:49:02:20:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F73309BD187659C71CCBDC81E84964AD6C5AEEA
        Validity
            Not Before: Apr 14 18:10:40 2024 GMT
            Not After : Apr 15 20:24:40 2024 GMT
        Subject: CN=314D764B168F0C1CDA27951DEBF5F9B295C99AF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1f:b4:b3:3b:81:ec:88:c0:91:00:d6:f4:a6:
                    3d:38:ea:d0:3d:d5:07:bd:32:d4:65:4a:68:19:2f:
                    15:10:55:a5:db:38:42:4b:18:e1:a7:a3:55:94:79:
                    f3:05:59:90:94:af:9c:07:7e:0b:e9:11:bf:5b:03:
                    e6:cb:a8:44:cf:0c:f7:c7:05:4b:08:49:70:a9:f9:
                    48:b0:6b:9d:6a:00:a1:8c:ad:dc:1d:a3:fc:ff:f1:
                    8b:02:27:34:23:df:39:e5:c0:80:7c:6d:ec:d0:35:
                    e2:0f:85:d1:30:9d:f2:ce:16:22:a5:93:d3:28:90:
                    6d:24:7b:f7:c9:5b:94:77:ba:81:6f:87:41:b0:e4:
                    0a:20:9e:7e:d2:af:12:08:d7:fe:1b:b2:6a:36:29:
                    ca:dd:a1:9d:0e:0d:5f:b2:56:c9:c6:e3:6f:94:68:
                    64:0f:a1:11:bd:39:16:d9:58:4d:5f:fa:8b:6c:b5:
                    d6:36:d4:62:ee:c3:4b:11:d1:bd:7a:59:be:10:06:
                    62:3b:a1:03:87:88:0c:f2:c8:c5:3e:60:97:9a:3a:
                    3f:7b:ab:a3:d8:c5:57:51:8d:34:64:e0:17:21:ae:
                    33:26:a4:d1:81:de:47:39:75:4c:02:eb:30:06:65:
                    2e:c0:97:45:fa:8c:32:f3:fa:35:1b:42:73:bf:26:
                    59:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:4D:76:4B:16:8F:0C:1C:DA:27:95:1D:EB:F5:F9:B2:95:C9:9A:F0
            X509v3 Authority Key Identifier:
                keyid:0F:73:30:9B:D1:87:65:9C:71:CC:BD:C8:1E:84:96:4A:D6:C5:AE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/1/0F73309BD187659C71CCBDC81E84964AD6C5AEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F73309BD187659C71CCBDC81E84964AD6C5AEEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/1/0F73309BD187659C71CCBDC81E84964AD6C5AEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:79:1a:1f:8d:5d:04:c1:ad:a3:88:8a:f6:6a:a7:5d:3b:b0:
         43:ab:92:0d:b8:92:21:2d:f8:b2:36:62:da:94:51:6d:12:7d:
         30:b9:13:79:e5:6f:47:73:83:1c:93:9b:15:31:47:60:53:94:
         a6:11:c6:e8:ea:19:67:b1:a2:d4:5d:6d:dc:4e:cd:ae:58:c5:
         ad:bd:64:cb:5c:ab:b1:f8:4e:57:2c:9f:bb:f4:91:45:4b:bb:
         71:57:f3:7a:ac:8d:47:63:2c:1c:db:70:87:de:38:b8:9c:cf:
         ea:8e:01:1e:31:4f:ff:54:2a:38:a0:6b:20:10:db:37:52:d6:
         83:76:0e:dc:1d:ab:ae:e0:eb:2d:5f:6d:31:d2:b7:c8:82:24:
         23:2e:55:b1:65:07:07:ab:b6:8a:c1:d7:52:1d:f0:bc:41:fc:
         f6:5b:f9:72:ca:56:66:2f:98:64:40:7c:1a:37:1b:f9:b3:30:
         6a:69:d1:67:b5:77:0b:80:13:f1:91:11:8a:3c:1c:34:f6:4a:
         a2:cd:24:d4:ff:8a:90:d9:42:f9:00:84:23:82:28:1c:f4:51:
         ed:6b:72:65:1e:6c:c0:89:5e:8e:c0:34:55:3f:87:ac:7c:67:
         e1:70:f6:f8:98:bd:0a:44:3b:b5:c6:f3:d5:f5:3f:9b:1c:a7:
         5d:dd:4a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----