Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/B96FEADF9316E231DB8131B9B3B6E87DC86A4517.mft
File:                     B96FEADF9316E231DB8131B9B3B6E87DC86A4517.mft (raw, json)
Hash identifier:          JnLx29XRwwFyFyzBYULDbOhlJ5/vkgq1xrhO8ZDbzRI=
Subject key identifier:   AF:94:3C:48:0A:87:F9:86:51:31:37:89:15:4E:5D:50:18:21:3A:84
Authority key identifier: B9:6F:EA:DF:93:16:E2:31:DB:81:31:B9:B3:B6:E8:7D:C8:6A:45:17
Certificate issuer:       /CN=B96FEADF9316E231DB8131B9B3B6E87DC86A4517
Certificate serial:       1BBB9EF02E8932211B149ECE5646432B18B590B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B96FEADF9316E231DB8131B9B3B6E87DC86A4517.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/B96FEADF9316E231DB8131B9B3B6E87DC86A4517.mft
Manifest number:          06FA
Signing time:             Sun 14 Apr 2024 20:03:00 +0000
Manifest this update:     Sun 14 Apr 2024 19:58:00 +0000
Manifest next update:     Mon 15 Apr 2024 21:17:00 +0000
Files and hashes:         1: B96FEADF9316E231DB8131B9B3B6E87DC86A4517.crl (hash: Q0TE6QCmfidisn3ZQ93ExJw5neoEx64OZMiT0nGop/M=)
                          2: 323830343a316537303a3a2f33322d3334203d3e20323634343239.roa (hash: fCcwWKRVhFYG/SzJm5sPTqgnsyixODA62yciBMCwybw=)
                          3: 3137302e3234352e3131362e302f32322d3234203d3e20323634343239.roa (hash: rezOQF7LEusEeoUe49u9whzzZ+2hVa/YatcmjntyCdk=)
                          4: 3133312e3232312e3133322e302f32322d3234203d3e20323634343239.roa (hash: 62sKWkEvhuESmUV3AMI5yv15CWE+4N3YN9MwIG4+c1s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:bb:9e:f0:2e:89:32:21:1b:14:9e:ce:56:46:43:2b:18:b5:90:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96FEADF9316E231DB8131B9B3B6E87DC86A4517
        Validity
            Not Before: Apr 14 19:58:00 2024 GMT
            Not After : Apr 15 21:17:00 2024 GMT
        Subject: CN=AF943C480A87F98651313789154E5D5018213A84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:80:0a:66:f6:73:ca:79:9f:57:7f:f0:a3:dc:
                    71:3b:86:3b:1b:a3:54:b6:48:b4:55:62:1c:86:24:
                    d9:4d:db:aa:a1:86:94:cd:b9:5a:98:b1:05:4d:18:
                    e0:2a:af:cd:f0:8b:ea:da:67:a4:f1:e3:3f:84:f8:
                    55:5a:dd:92:44:40:35:b8:1a:fc:f9:e0:d0:c6:61:
                    b0:59:89:94:7e:bd:fd:3d:d6:ef:59:4a:61:92:dc:
                    1b:65:ed:c4:f8:44:7c:a6:1a:d5:48:95:20:88:eb:
                    2d:01:9c:c7:b5:86:b1:72:43:4a:16:df:0d:63:f8:
                    b8:09:4b:02:d3:b2:e0:c1:44:51:94:72:3d:e4:88:
                    de:39:30:13:2d:66:64:ed:85:ba:e8:65:3e:2a:b0:
                    c6:12:f5:54:99:6f:c7:dd:71:74:d0:13:2e:53:91:
                    3e:29:da:aa:13:a0:4c:70:36:86:74:71:7f:d2:57:
                    1b:7d:72:16:e9:de:c9:cd:fa:95:dc:88:26:9c:9f:
                    eb:cd:4f:88:e4:86:ff:b4:83:28:b5:9f:2e:d0:4a:
                    cc:5c:f5:00:72:62:71:38:26:cb:cc:89:6f:08:d4:
                    90:1b:d3:18:bf:4d:c6:c1:35:df:55:95:3c:da:5b:
                    04:50:73:46:ee:14:16:7b:c2:fb:06:17:8e:64:a5:
                    2c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:94:3C:48:0A:87:F9:86:51:31:37:89:15:4E:5D:50:18:21:3A:84
            X509v3 Authority Key Identifier:
                keyid:B9:6F:EA:DF:93:16:E2:31:DB:81:31:B9:B3:B6:E8:7D:C8:6A:45:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/B96FEADF9316E231DB8131B9B3B6E87DC86A4517.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B96FEADF9316E231DB8131B9B3B6E87DC86A4517.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/B96FEADF9316E231DB8131B9B3B6E87DC86A4517.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:9a:75:bb:0f:3e:e7:b8:45:a0:20:c4:3a:90:23:d1:f8:24:
         c3:b3:5e:65:49:74:74:12:d6:ff:14:d9:73:45:74:93:4e:b4:
         95:44:dc:2f:77:65:a2:79:a4:6d:88:e0:03:b5:64:77:56:1b:
         dc:79:87:e9:d4:8c:fe:4a:ee:5f:be:28:87:b5:56:dc:a9:de:
         ce:5c:64:1d:f7:92:ed:6a:6e:46:f9:d9:0a:3c:c6:8c:b1:ea:
         b2:b2:eb:73:8c:ec:78:56:e8:10:78:ed:3e:ad:0a:f4:2b:73:
         c6:72:f4:e4:d6:8b:27:95:5c:9f:1a:37:3e:d7:af:5b:17:f8:
         32:fc:90:20:b5:5f:f7:29:73:6b:26:36:27:ab:32:38:5a:bd:
         42:00:9a:b3:db:69:32:8f:b3:b6:b2:fa:cf:98:72:42:aa:61:
         3a:24:16:33:df:87:3c:cc:7c:73:1c:c6:4c:75:5c:49:42:bb:
         12:f7:7d:f4:d6:48:f5:67:ab:98:bb:cd:bf:e3:12:00:43:01:
         f8:de:9c:3a:eb:5c:61:64:27:4a:86:e5:53:40:5a:81:ff:e9:
         28:e2:c6:24:a2:53:be:85:4d:ab:09:17:de:6a:5e:4b:d0:ac:
         f5:77:72:61:e8:07:54:61:9e:3a:19:ae:40:3f:da:2b:f8:76:
         37:f5:c3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----