Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/0/F0EA057A6221780F5BC2ECA742F09366267EFD07.mft
File:                     F0EA057A6221780F5BC2ECA742F09366267EFD07.mft (raw, json)
Hash identifier:          zZmA1d36KmvmWXceluch+duMhlpiLE0dn8N64Mrd3e8=
Subject key identifier:   F9:5A:4F:A1:6C:36:A0:23:E8:A1:61:ED:57:B6:78:A5:EB:23:DF:EB
Authority key identifier: F0:EA:05:7A:62:21:78:0F:5B:C2:EC:A7:42:F0:93:66:26:7E:FD:07
Certificate issuer:       /CN=F0EA057A6221780F5BC2ECA742F09366267EFD07
Certificate serial:       0463E37436C93F1054904089C852D1E847A98125
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F0EA057A6221780F5BC2ECA742F09366267EFD07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/0/F0EA057A6221780F5BC2ECA742F09366267EFD07.mft
Manifest number:          0173
Signing time:             Mon 15 Apr 2024 03:45:57 +0000
Manifest this update:     Mon 15 Apr 2024 03:40:57 +0000
Manifest next update:     Tue 16 Apr 2024 04:12:57 +0000
Files and hashes:         1: 323830343a383466343a3a2f33322d3431203d3e20323732353438.roa (hash: kD6SGxrtowsDulzGopDsUIyRVnoah+lMBZWU0goqNSg=)
                          2: 3138312e3233322e3233322e302f32322d3234203d3e20323732353438.roa (hash: 5MzUSZbV2SM0HUf2EkZuqOU71DcWjbevwWhtGE0/s1g=)
                          3: F0EA057A6221780F5BC2ECA742F09366267EFD07.crl (hash: JvsmcwrMFEjBQf49I4Tg37kUXmNzSxkDOAEVP98fvFk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:63:e3:74:36:c9:3f:10:54:90:40:89:c8:52:d1:e8:47:a9:81:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0EA057A6221780F5BC2ECA742F09366267EFD07
        Validity
            Not Before: Apr 15 03:40:57 2024 GMT
            Not After : Apr 16 04:12:57 2024 GMT
        Subject: CN=F95A4FA16C36A023E8A161ED57B678A5EB23DFEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:be:a6:0d:12:d9:64:a6:84:1c:17:15:6a:cb:
                    83:a2:37:e3:38:29:28:11:ab:2a:eb:4c:2d:ba:97:
                    5f:87:19:e3:9d:6f:d2:90:d5:be:91:bc:1f:e4:c9:
                    6d:05:35:7d:f3:b7:ca:a5:07:55:eb:83:5a:a8:1c:
                    73:73:eb:f6:14:33:9e:2c:35:11:7d:e3:84:dc:93:
                    ba:8d:cb:37:c0:60:be:c6:88:f6:a7:6c:1d:71:75:
                    ae:81:0c:1e:34:87:73:43:20:72:6e:39:5a:01:3b:
                    28:a7:3c:22:91:5c:1e:67:50:31:75:23:eb:7e:7a:
                    29:71:f1:d3:c0:38:76:22:d2:b1:6b:9f:03:b7:9f:
                    dd:b7:17:07:2c:28:7a:4e:1c:2c:3d:37:40:b5:87:
                    24:9c:e1:81:85:21:37:9c:38:4a:71:31:15:89:bf:
                    66:5c:2c:bc:e6:95:e0:93:cd:20:10:59:cf:3d:38:
                    1d:c5:62:0c:24:c7:72:30:a0:4c:34:09:93:01:af:
                    31:12:c6:7e:2c:d3:9d:26:35:e4:e9:86:03:3f:60:
                    72:7a:eb:28:08:d8:c9:39:40:d2:f8:93:60:08:8c:
                    ca:c1:71:60:08:3c:79:e2:45:c5:eb:3b:80:44:12:
                    f8:3c:2b:29:26:98:bf:33:57:c7:eb:75:a1:f6:32:
                    07:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:5A:4F:A1:6C:36:A0:23:E8:A1:61:ED:57:B6:78:A5:EB:23:DF:EB
            X509v3 Authority Key Identifier:
                keyid:F0:EA:05:7A:62:21:78:0F:5B:C2:EC:A7:42:F0:93:66:26:7E:FD:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/0/F0EA057A6221780F5BC2ECA742F09366267EFD07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F0EA057A6221780F5BC2ECA742F09366267EFD07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/0/F0EA057A6221780F5BC2ECA742F09366267EFD07.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:91:cd:2f:35:36:92:86:c5:40:93:55:11:20:9c:3e:80:bf:
         e6:1f:ba:e8:6a:3b:a4:9e:a3:86:ac:27:b6:cf:34:bd:db:b4:
         33:7d:61:fa:c4:ba:60:e2:d3:ef:2a:5d:cf:95:0d:36:37:3f:
         12:f2:39:4b:cf:df:af:31:a7:21:0e:e7:d6:98:5f:62:33:64:
         3e:47:1d:07:3c:bd:58:01:ab:a0:6e:3b:9e:5b:90:70:e1:48:
         e7:ce:c3:d3:5f:7f:57:cb:7a:72:a5:b0:6e:42:76:3c:25:6a:
         ed:64:2d:c5:48:9b:f2:b2:6b:c0:81:27:99:8e:89:4f:31:c3:
         ed:d2:88:2f:cd:56:36:16:b8:6b:72:d1:5b:a2:07:76:42:8f:
         82:68:9f:2e:24:1f:9a:4e:24:f7:93:41:2f:3e:c2:6c:40:b2:
         49:77:ab:44:82:a3:9b:5e:e7:aa:82:5a:27:36:06:56:74:09:
         9b:ae:7f:16:3c:cc:0a:6d:51:c5:5c:c0:cc:23:0e:da:8c:26:
         45:ac:4a:f0:93:d2:ca:43:2f:98:af:a8:e4:5d:0c:d7:d3:9e:
         00:a7:8e:97:35:e1:fe:31:ca:84:03:1d:4f:9c:73:00:96:09:
         45:c6:b1:9f:3d:0e:9a:90:ce:f8:92:79:00:2a:a6:32:ae:49:
         ca:0c:9d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----