Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/0/BF2434F6AFBB8BD8B67E22ECA836AE9865448230.mft
File:                     BF2434F6AFBB8BD8B67E22ECA836AE9865448230.mft (raw, json)
Hash identifier:          0uhHIattgSHH3aLsb5YoGed7N7k5CRpzCmFWpHltLJk=
Subject key identifier:   36:C2:5C:D7:69:2A:9F:25:A9:6F:7D:F6:83:FB:60:8D:F9:0B:73:5B
Authority key identifier: BF:24:34:F6:AF:BB:8B:D8:B6:7E:22:EC:A8:36:AE:98:65:44:82:30
Certificate issuer:       /CN=BF2434F6AFBB8BD8B67E22ECA836AE9865448230
Certificate serial:       67674C3207286CB5ED8CFDDB34664BF444536F3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF2434F6AFBB8BD8B67E22ECA836AE9865448230.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/0/BF2434F6AFBB8BD8B67E22ECA836AE9865448230.mft
Manifest number:          18
Signing time:             Wed 12 Apr 2023 14:10:31 +0000
Manifest this update:     Wed 12 Apr 2023 14:05:31 +0000
Manifest next update:     Thu 13 Apr 2023 15:09:31 +0000
Files and hashes:         1: 34352e37312e3131362e302f32322d3234203d3e20323637363035.roa (hash: Ynm1eH/WBGO/lpse1309CPUQzQQQZi7afX5K76O5Tvo=)
                          2: 323830343a343432343a3a2f33322d3332203d3e20323637363035.roa (hash: eXy4Q0rr7UFN1D04+fdk+qjk7cnPMAoR4gSkE6+adlY=)
                          3: BF2434F6AFBB8BD8B67E22ECA836AE9865448230.crl (hash: P86aNHM5jVjgDm7hjVWkKrZ4CgRIqWaacRphrdHs0OE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:67:4c:32:07:28:6c:b5:ed:8c:fd:db:34:66:4b:f4:44:53:6f:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF2434F6AFBB8BD8B67E22ECA836AE9865448230
        Validity
            Not Before: Apr 12 14:05:31 2023 GMT
            Not After : Apr 13 15:09:31 2023 GMT
        Subject: CN=36C25CD7692A9F25A96F7DF683FB608DF90B735B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6c:fc:53:e1:7f:99:88:ac:0e:40:3c:a4:01:
                    08:9d:97:74:72:6b:3b:f9:3c:57:e9:bf:3c:bb:d4:
                    c5:0e:b5:55:4c:24:90:8b:27:9c:57:8a:c4:55:bd:
                    6a:9b:73:47:8d:14:a0:fd:16:ba:3f:86:cb:12:5a:
                    c7:da:8a:7c:08:b1:b4:d5:f8:d0:42:72:8d:ff:8e:
                    c3:25:d9:92:dd:4c:7b:be:fa:d9:59:f1:d6:ba:f6:
                    7f:0a:6c:e0:89:ab:34:f0:dc:a5:1e:38:1f:5d:92:
                    eb:e9:a6:81:74:60:34:5c:69:b7:66:4a:14:e4:70:
                    20:7c:9f:57:f6:65:a2:b1:2f:25:59:a1:e6:fd:2b:
                    17:9a:7c:f8:ff:97:ad:c6:1e:69:3a:ff:26:fe:e8:
                    69:b7:b4:da:68:c6:14:90:ff:bb:18:36:96:71:78:
                    23:d4:f6:87:2e:9f:c4:8e:5a:65:9c:5b:01:86:c1:
                    4c:69:f4:c7:08:a8:73:bc:b0:80:22:dc:6e:f9:a8:
                    52:95:77:bb:d1:9f:a5:f9:b7:60:cd:f7:8a:82:94:
                    de:32:ed:72:86:47:2b:20:1b:10:b9:20:18:8b:0b:
                    6e:75:aa:12:9d:44:0e:cf:61:18:4c:ba:ae:7e:61:
                    bc:df:e4:8e:30:d3:70:bf:cd:ec:09:f5:74:83:06:
                    b2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C2:5C:D7:69:2A:9F:25:A9:6F:7D:F6:83:FB:60:8D:F9:0B:73:5B
            X509v3 Authority Key Identifier:
                keyid:BF:24:34:F6:AF:BB:8B:D8:B6:7E:22:EC:A8:36:AE:98:65:44:82:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/0/BF2434F6AFBB8BD8B67E22ECA836AE9865448230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF2434F6AFBB8BD8B67E22ECA836AE9865448230.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/0/BF2434F6AFBB8BD8B67E22ECA836AE9865448230.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:95:44:99:bd:d4:ca:04:3e:ca:51:bd:6f:98:71:54:92:63:
         44:18:52:98:e5:c0:d5:26:7a:ff:37:c2:b6:aa:f0:a7:26:c3:
         b6:42:c1:82:28:46:1a:3a:99:e0:fc:cd:dc:cc:3b:09:3e:65:
         97:c6:8d:14:97:e1:7e:5d:1a:18:13:b6:f5:a6:76:33:60:2c:
         16:0d:c5:84:f8:59:a3:2e:09:a1:5a:12:06:33:f6:bd:d6:49:
         d8:ff:15:27:c2:19:40:b2:60:55:05:55:d8:4d:8d:e1:d0:f7:
         98:52:6c:84:8d:7a:3b:7b:2e:09:e4:92:c2:3a:f7:bf:d0:d9:
         98:b9:92:fe:1e:50:a8:89:b7:ac:ec:0e:72:28:1c:d9:23:e1:
         97:8e:13:08:68:0f:53:5e:ff:b6:23:d5:00:fd:e6:a5:35:c0:
         c6:3c:f0:43:43:c1:fe:78:50:31:b7:a1:9a:62:3f:95:5f:8d:
         4b:5a:b8:ff:67:7e:7d:4a:64:d6:62:ff:15:1b:9e:a6:f0:ef:
         bd:2b:33:d3:0e:ab:1e:f4:20:ec:33:dc:a6:19:c2:25:3a:1c:
         2c:3e:84:fc:68:36:c0:67:68:a0:e0:2c:8f:d5:20:36:34:77:
         cd:93:8a:24:e0:45:ac:06:fa:ee:58:4e:fa:29:cc:75:db:f6:
         4b:79:11:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----