Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/1/0FBDD3F993E0EB0555216070730CE01AE2863A6A.mft
File:                     0FBDD3F993E0EB0555216070730CE01AE2863A6A.mft (raw, json)
Hash identifier:          HIL+Q5s3+wuKpJgabMzdYjWKf8ylEnNlNB5JYKBTok8=
Subject key identifier:   35:43:8A:3F:09:66:6A:77:25:C9:5A:31:B7:01:36:26:66:58:13:A7
Authority key identifier: 0F:BD:D3:F9:93:E0:EB:05:55:21:60:70:73:0C:E0:1A:E2:86:3A:6A
Certificate issuer:       /CN=0FBDD3F993E0EB0555216070730CE01AE2863A6A
Certificate serial:       7D1601BB8C8A6E20AC54DC6791C0D598436BBD40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FBDD3F993E0EB0555216070730CE01AE2863A6A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/1/0FBDD3F993E0EB0555216070730CE01AE2863A6A.mft
Manifest number:          CD
Signing time:             Mon 02 Sep 2024 06:30:14 +0000
Manifest this update:     Mon 02 Sep 2024 06:25:14 +0000
Manifest next update:     Tue 03 Sep 2024 08:02:14 +0000
Files and hashes:         1: 3133312e3139362e32382e302f32332d3234203d3e20323731343130.roa (hash: HW2ZMrA4/M0tn1nQdl4K9Q1so2UxzVDzwmjItLOQCWw=)
                          2: 0FBDD3F993E0EB0555216070730CE01AE2863A6A.crl (hash: NKXAfoTRiWeYFhUAxZgdXCw9gVNpHrFeOuTDgSd9vTM=)
                          3: 3133312e3139362e32382e302f32322d3232203d3e20323731343130.roa (hash: xp203IcvLnSzScuIOJk65Nfokf98YSpDczPk9mn8voo=)
                          4: 3133312e3139362e33302e302f32332d3234203d3e20323731343130.roa (hash: AXk4shDlI4rtsbRP2mOR4xrdCrJtya/AHRgjWLcnsIk=)
                          5: 323830343a376231383a3a2f33322d3438203d3e20323731343130.roa (hash: bO8o8ZrrzG8vDvL6az02hYKKqgUNF1nnS53FB0WhzXM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:16:01:bb:8c:8a:6e:20:ac:54:dc:67:91:c0:d5:98:43:6b:bd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FBDD3F993E0EB0555216070730CE01AE2863A6A
        Validity
            Not Before: Sep  2 06:25:14 2024 GMT
            Not After : Sep  3 08:02:14 2024 GMT
        Subject: CN=35438A3F09666A7725C95A31B7013626665813A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ff:e8:67:58:b7:e2:50:63:a3:25:32:63:57:
                    d0:da:0d:31:5c:9c:11:75:11:8d:06:dd:c0:a4:fd:
                    05:d2:69:95:57:2f:3f:08:41:0f:a3:2b:7e:08:8f:
                    47:cc:76:be:45:ac:bf:1b:ae:bf:ad:25:de:4e:79:
                    a9:6d:d7:be:3b:25:74:14:e2:51:28:83:f7:9c:a2:
                    26:91:ce:53:91:0d:74:e4:29:ab:b5:5a:c1:9d:23:
                    e4:fd:98:3c:8d:8e:0c:a9:a7:5c:b3:81:4e:ff:06:
                    1d:b2:2e:e7:3b:3c:d3:98:7c:07:40:f4:7b:c2:02:
                    b9:a3:a5:f9:0b:85:01:96:24:f9:b0:7f:9f:21:ef:
                    c5:8d:77:42:81:99:67:66:a7:ea:08:7a:34:83:d8:
                    f8:c2:5d:58:df:83:ac:4c:f0:84:aa:9e:8f:f3:53:
                    94:58:b8:69:97:bb:32:7b:34:d4:20:dd:ef:05:96:
                    c8:b6:ab:b0:f4:c0:85:6e:ef:99:c8:95:4f:ab:cf:
                    78:4c:77:8e:25:7f:55:7a:d2:04:cd:6b:e6:de:72:
                    17:c4:1d:73:e7:49:87:a9:9c:fa:ea:33:20:2f:50:
                    54:df:25:73:65:9d:d0:84:9a:1c:4b:df:2f:de:13:
                    00:14:1e:b5:cf:61:07:d1:5e:59:ef:0b:7c:c8:96:
                    5d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:43:8A:3F:09:66:6A:77:25:C9:5A:31:B7:01:36:26:66:58:13:A7
            X509v3 Authority Key Identifier:
                keyid:0F:BD:D3:F9:93:E0:EB:05:55:21:60:70:73:0C:E0:1A:E2:86:3A:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/1/0FBDD3F993E0EB0555216070730CE01AE2863A6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FBDD3F993E0EB0555216070730CE01AE2863A6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/1/0FBDD3F993E0EB0555216070730CE01AE2863A6A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:15:65:ec:38:a7:44:02:8e:8f:89:dc:e7:96:34:43:c4:c5:
         e1:d5:62:83:77:dc:39:c4:da:44:3e:18:56:9f:8f:bb:e2:bd:
         02:e1:e9:51:e6:47:85:08:f8:7b:06:5a:37:ce:47:15:f8:af:
         05:dc:f1:c5:39:e2:bb:3d:c4:ce:0f:60:77:ce:71:1d:2a:53:
         e1:9b:81:71:6b:cc:67:44:9a:70:e1:d9:f1:66:0f:02:5b:91:
         8b:c7:1f:1e:c3:49:cc:dc:38:27:35:82:a6:36:95:4f:a0:6b:
         63:bf:54:29:24:33:9c:f6:7f:70:7c:e1:c1:4c:2d:73:6d:67:
         17:d6:de:35:26:1c:01:3d:19:fb:89:52:79:4c:34:b1:72:52:
         3e:ee:62:7d:87:e3:f6:43:7d:27:c9:f9:7b:77:b4:e0:3e:50:
         c9:37:e8:e8:d5:5d:80:a6:20:ef:20:11:e9:4d:84:a3:59:1c:
         18:5f:56:47:bb:8c:2f:ca:2f:4a:29:55:35:3c:45:09:35:33:
         58:b5:46:ab:1b:a8:b6:d4:3c:8d:43:3b:f9:3d:ee:0b:e3:0f:
         20:fb:dd:65:d5:e0:0b:28:5b:d9:82:11:9a:12:33:cd:33:31:
         bd:7e:5c:11:44:73:16:70:00:de:79:bc:e2:10:ca:92:5a:9e:
         89:e6:72:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----