Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C5S7R5AZN7FRZVPhY3NYX3m6Nh8CFqHTdBdEBnr31fFW/0/F2081B1BF74DF9007286D9742A07CCA72B21CFC2.mft
File:                     F2081B1BF74DF9007286D9742A07CCA72B21CFC2.mft (raw, json)
Hash identifier:          +sKVqfuPVL2XNRSXN7nb5lYyRxAGuljddkhqv9ei9fE=
Subject key identifier:   C8:7E:72:F8:20:77:5A:68:53:C0:C5:54:A2:E6:05:FB:53:17:6A:BA
Authority key identifier: F2:08:1B:1B:F7:4D:F9:00:72:86:D9:74:2A:07:CC:A7:2B:21:CF:C2
Certificate issuer:       /CN=F2081B1BF74DF9007286D9742A07CCA72B21CFC2
Certificate serial:       60AB891063D98281C3AC999C41F55C8D0D160002
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2081B1BF74DF9007286D9742A07CCA72B21CFC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5S7R5AZN7FRZVPhY3NYX3m6Nh8CFqHTdBdEBnr31fFW/0/F2081B1BF74DF9007286D9742A07CCA72B21CFC2.mft
Manifest number:          024F
Signing time:             Wed 24 May 2023 09:17:47 +0000
Manifest this update:     Wed 24 May 2023 09:12:47 +0000
Manifest next update:     Thu 25 May 2023 09:48:47 +0000
Files and hashes:         1: 323830343a363939633a3a2f33322d3438203d3e20323730323830.roa (hash: Y2nHIwsHzDjub45OM53mGYVmm0qY8sgSHR1whA6bp2E=)
                          2: 3230302e3132352e3137322e302f32322d3234203d3e20323730323830.roa (hash: xTyQpPQSkpybZenwBmvpkbvW7Mo9gSDrsTrK0qCu0XU=)
                          3: F2081B1BF74DF9007286D9742A07CCA72B21CFC2.crl (hash: 5s5QMExaUmjSRiBoE744RFf7n5i/SFhKBYQl/sITn40=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ab:89:10:63:d9:82:81:c3:ac:99:9c:41:f5:5c:8d:0d:16:00:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2081B1BF74DF9007286D9742A07CCA72B21CFC2
        Validity
            Not Before: May 24 09:12:47 2023 GMT
            Not After : May 25 09:48:47 2023 GMT
        Subject: CN=C87E72F820775A6853C0C554A2E605FB53176ABA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:6a:52:89:fa:e8:5a:64:59:87:0f:a5:b4:15:
                    2c:17:38:63:ca:0a:fb:bf:fa:4b:5c:b1:24:35:78:
                    60:24:8a:95:fe:4b:67:60:36:e6:3f:ae:b7:9a:93:
                    9f:1a:63:71:c0:ad:3b:69:dd:ef:0c:43:20:f4:74:
                    a3:e4:3c:ae:6f:94:2b:cb:89:9a:2d:a6:0e:3d:99:
                    3a:cb:f3:17:94:2a:f0:90:83:e7:18:ae:63:e3:d3:
                    d0:f9:ef:7a:b3:5a:c0:cb:78:e8:61:4e:26:b2:ad:
                    97:59:d7:da:47:b0:fa:a6:c0:3d:07:9d:d3:18:df:
                    bb:d9:56:c0:57:e8:a1:cb:5a:2c:49:86:6a:d7:f4:
                    26:4a:2a:94:7e:b3:9d:fa:82:14:77:bd:f9:42:3e:
                    67:82:55:17:85:44:4a:f7:6a:17:bf:0f:0b:c2:83:
                    e5:eb:61:52:04:a4:96:da:2f:79:ae:02:7a:da:85:
                    5a:e5:89:fd:6f:88:00:de:e4:a2:ff:74:00:0c:4c:
                    e2:9b:2c:bc:b3:4f:9d:a0:29:84:7b:1c:8e:d8:09:
                    e3:78:01:67:f3:24:ee:45:e1:85:55:ef:55:8e:9b:
                    f5:77:dd:af:45:16:cd:18:7e:64:bd:3e:0d:c0:35:
                    1f:dc:36:1a:96:11:5e:15:02:6e:38:99:45:0c:37:
                    8d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:7E:72:F8:20:77:5A:68:53:C0:C5:54:A2:E6:05:FB:53:17:6A:BA
            X509v3 Authority Key Identifier:
                keyid:F2:08:1B:1B:F7:4D:F9:00:72:86:D9:74:2A:07:CC:A7:2B:21:CF:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5S7R5AZN7FRZVPhY3NYX3m6Nh8CFqHTdBdEBnr31fFW/0/F2081B1BF74DF9007286D9742A07CCA72B21CFC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2081B1BF74DF9007286D9742A07CCA72B21CFC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5S7R5AZN7FRZVPhY3NYX3m6Nh8CFqHTdBdEBnr31fFW/0/F2081B1BF74DF9007286D9742A07CCA72B21CFC2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:96:bc:9e:a1:2a:9a:fd:27:f4:6d:8f:1d:43:9f:a8:a9:3d:
         33:9a:1a:d9:13:3e:ea:ea:82:c9:ee:ea:2b:9a:58:4a:28:eb:
         ff:7c:6d:3a:bb:14:41:a4:b0:2c:9e:dc:46:16:82:48:70:7f:
         fb:a1:43:06:22:98:84:c9:42:0c:5c:c3:6d:55:b7:bc:3e:99:
         07:7e:e0:2d:93:27:dc:6b:e1:f0:3c:3d:2c:da:79:c0:8d:2c:
         64:7a:e7:b6:fa:37:18:31:4c:2c:54:9c:76:fa:c3:b4:14:08:
         2d:a9:54:88:0a:8f:ed:a5:dd:6a:4c:80:02:8f:52:34:20:bb:
         b2:16:19:03:50:a7:84:69:83:f8:f6:f3:63:e1:4f:ce:d3:fa:
         1a:ab:be:f1:b1:f3:8d:26:52:b4:07:c1:a8:70:ec:d4:e2:d2:
         b8:ca:65:ba:c6:91:e0:6a:4f:db:eb:e4:d4:a3:20:f0:e7:1f:
         51:07:65:f6:ab:63:2a:b1:4d:5a:f2:95:e4:07:cd:4d:c4:4d:
         2e:13:be:7e:d7:73:98:44:26:f3:b2:b4:b5:46:44:de:5c:2c:
         55:8b:04:77:26:56:eb:05:66:8f:9d:57:45:3d:01:5b:e4:94:
         dd:43:a9:9b:ef:3d:e1:20:df:01:d1:d6:c6:dd:12:f9:b8:e8:
         57:ae:95:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----