Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/0D079C1576772223DC5512BA4F1C967AAC603E92.mft
File:                     0D079C1576772223DC5512BA4F1C967AAC603E92.mft (raw, json)
Hash identifier:          GGFxVmQtiTKJYU/VgVMpJgSNHXmDzp93rmQ5Zhgu0YY=
Subject key identifier:   D7:99:DE:E9:3E:54:10:08:81:42:E2:3B:97:97:78:5F:3F:83:2A:E1
Authority key identifier: 0D:07:9C:15:76:77:22:23:DC:55:12:BA:4F:1C:96:7A:AC:60:3E:92
Certificate issuer:       /CN=0D079C1576772223DC5512BA4F1C967AAC603E92
Certificate serial:       5F935214C16772B0A5C88C71256DB11A93F664BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D079C1576772223DC5512BA4F1C967AAC603E92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/0D079C1576772223DC5512BA4F1C967AAC603E92.mft
Manifest number:          04
Signing time:             Fri 22 Sep 2023 11:56:01 +0000
Manifest this update:     Fri 22 Sep 2023 11:51:01 +0000
Manifest next update:     Sat 23 Sep 2023 12:53:01 +0000
Files and hashes:         1: 323830343a383461633a3a2f33322d3438203d3e203238323233.roa (hash: 4Y/+AsmYpROwkHe0FWLJUK6i+J4ePHgyxrxiUDzq/LY=)
                          2: 3138392e3132362e33322e302f32302d3234203d3e203238323233.roa (hash: t1RZtD8lUNaNZPDwDF8p9G1o7kvzYEz1Ppez/PJUpNY=)
                          3: 0D079C1576772223DC5512BA4F1C967AAC603E92.crl (hash: LzM7N8OMXmTfxajVIIlE7UT6OhyBSyM0sgzWyYTX05s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:93:52:14:c1:67:72:b0:a5:c8:8c:71:25:6d:b1:1a:93:f6:64:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D079C1576772223DC5512BA4F1C967AAC603E92
        Validity
            Not Before: Sep 22 11:51:01 2023 GMT
            Not After : Sep 23 12:53:01 2023 GMT
        Subject: CN=D799DEE93E5410088142E23B9797785F3F832AE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:15:e6:5e:e8:54:97:77:61:54:86:d6:de:a3:
                    6e:a9:0d:28:fe:a9:4c:d4:1a:b9:69:8e:9a:15:e3:
                    4a:de:13:fc:5e:eb:1f:a3:64:65:fb:56:8b:29:6c:
                    bc:ac:8d:67:55:82:14:5b:b7:16:5b:f4:c3:ab:da:
                    5e:73:e6:01:7d:11:5d:e4:d7:60:9c:87:7c:28:c8:
                    27:46:d1:74:b8:b0:b0:05:c5:ec:a9:42:81:ab:7f:
                    0d:fe:bb:ac:51:76:82:86:8d:0d:0a:5b:e4:53:ac:
                    39:56:9b:f0:48:e8:ba:b9:5e:dc:c4:12:e5:16:86:
                    5b:e8:69:76:f3:29:c7:ef:62:9b:0d:af:43:61:71:
                    6e:f1:38:e6:cf:34:2a:cf:75:8f:3e:5c:dc:07:61:
                    73:8e:4b:6c:5d:d6:89:fe:3d:19:df:07:1e:ad:72:
                    2a:3d:72:c8:43:7e:2e:9a:df:a4:16:ad:1f:3f:3b:
                    d8:b5:c2:90:7b:d6:14:01:2a:79:42:1b:79:c2:ef:
                    c9:21:ff:05:68:4a:bf:19:d1:88:49:c4:29:85:45:
                    fd:a1:20:11:93:cd:66:01:c8:ae:78:5f:db:03:b5:
                    29:87:27:ec:b6:3c:37:6f:0b:be:fc:27:f4:53:9e:
                    16:89:03:9d:ea:1e:8e:bb:8c:c5:59:89:73:08:4f:
                    ff:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:99:DE:E9:3E:54:10:08:81:42:E2:3B:97:97:78:5F:3F:83:2A:E1
            X509v3 Authority Key Identifier:
                keyid:0D:07:9C:15:76:77:22:23:DC:55:12:BA:4F:1C:96:7A:AC:60:3E:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/0D079C1576772223DC5512BA4F1C967AAC603E92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D079C1576772223DC5512BA4F1C967AAC603E92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/0D079C1576772223DC5512BA4F1C967AAC603E92.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:37:6f:8c:e5:bb:0d:8e:56:09:f0:18:f4:3c:19:4f:41:32:
         fc:00:b8:43:6d:5b:67:c2:27:bd:56:70:67:cc:de:fd:ba:c2:
         48:4c:c2:89:af:64:40:40:b9:d6:7e:e1:bb:3a:88:ac:38:4c:
         b4:73:f9:ff:2a:0c:e9:72:5b:2e:e0:42:4a:06:57:25:92:35:
         01:75:46:a5:06:43:df:cc:3f:96:55:f5:5f:b7:b0:56:8d:0d:
         b5:3f:e5:c6:51:32:d9:e1:be:87:e5:0f:e1:90:57:ae:ba:4f:
         7f:65:4a:22:db:48:6d:0e:d0:ae:a1:34:cc:fc:8e:41:ee:0c:
         ec:75:3b:f7:89:65:7d:6a:75:9f:f4:d6:28:97:81:b6:63:b0:
         de:a3:3b:db:7b:de:e8:20:fa:96:9b:38:8f:cc:db:c0:c8:c4:
         ba:01:a0:b8:f2:b6:19:99:4b:6c:71:ef:ed:e8:69:e0:fe:7c:
         b7:5a:27:fe:00:d2:7d:27:0a:8a:a8:22:85:13:6b:72:d6:99:
         d8:97:1f:79:78:90:ed:ae:51:03:de:84:f8:39:6b:59:a1:2d:
         13:78:1d:36:1d:d5:3e:11:1e:aa:04:24:71:3a:bb:bb:72:ac:
         e7:b0:fb:e9:29:b9:b6:fc:7e:e4:33:68:b7:ea:cf:6f:93:b2:
         7c:51:3f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----