Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/67888316D81746EE5C19F9656CE9D9B96EE806AA.mft
File:                     67888316D81746EE5C19F9656CE9D9B96EE806AA.mft (raw, json)
Hash identifier:          VoIBHr0CxeaV9mX2HXnqMKPH3ZNXXvF9tpm24QBKvlw=
Subject key identifier:   04:3C:62:2D:AA:5B:6A:77:7D:44:53:84:88:7C:E6:70:C7:96:C5:F5
Authority key identifier: 67:88:83:16:D8:17:46:EE:5C:19:F9:65:6C:E9:D9:B9:6E:E8:06:AA
Certificate issuer:       /CN=67888316D81746EE5C19F9656CE9D9B96EE806AA
Certificate serial:       657966A433B144146678BB249CD5820C87CB0573
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67888316D81746EE5C19F9656CE9D9B96EE806AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/67888316D81746EE5C19F9656CE9D9B96EE806AA.mft
Manifest number:          01D5
Signing time:             Tue 14 Nov 2023 16:54:56 +0000
Manifest this update:     Tue 14 Nov 2023 16:49:56 +0000
Manifest next update:     Wed 15 Nov 2023 17:40:56 +0000
Files and hashes:         1: 323830343a323933383a3a2f33322d3438203d3e20323634303034.roa (hash: PXaFQhJBMmkDtZeIsGM+SvMKQTLXgykSAyqzv0oCCQU=)
                          2: 3134332e302e37322e302f32322d3234203d3e20323634303034.roa (hash: 8rfrCdb6C76X2DUAD3KjNOLqsqZGp5wPAS//2mt5y/Y=)
                          3: 67888316D81746EE5C19F9656CE9D9B96EE806AA.crl (hash: cI9nHpVHH1CFGBwgrFl3hhRObcb2zGUmfwVky/BCLAM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:79:66:a4:33:b1:44:14:66:78:bb:24:9c:d5:82:0c:87:cb:05:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67888316D81746EE5C19F9656CE9D9B96EE806AA
        Validity
            Not Before: Nov 14 16:49:56 2023 GMT
            Not After : Nov 15 17:40:56 2023 GMT
        Subject: CN=043C622DAA5B6A777D445384887CE670C796C5F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:90:ff:86:90:ed:e3:90:48:a3:46:a3:68:b2:
                    09:ec:ed:49:0b:2d:fb:82:39:a9:b5:f0:88:e3:35:
                    21:91:1a:dc:74:3f:2d:4e:97:db:d2:43:4b:7e:4f:
                    84:a5:55:fb:f1:a7:af:d5:e0:cb:7c:e9:d7:c5:c4:
                    fd:c1:88:79:a3:b3:77:a1:5e:4f:9a:47:aa:41:2e:
                    e5:39:a3:c5:cd:4c:68:31:01:21:f0:43:cd:10:aa:
                    30:21:1b:51:89:09:c5:a6:ad:9d:63:4a:f9:4e:20:
                    ef:9e:57:b9:e0:18:ce:8c:b5:aa:3e:30:7a:e1:49:
                    8a:e4:55:62:1c:db:17:21:54:45:2d:7c:36:c7:36:
                    57:9e:1a:38:50:1e:e7:c6:78:6b:88:f5:86:41:05:
                    4b:55:b5:cf:b5:5c:dc:91:ec:5e:0a:c2:cb:51:e1:
                    17:54:09:a1:0a:04:9f:2a:0e:f4:a9:f7:63:94:35:
                    40:c6:b0:91:6a:70:df:10:ef:63:06:6a:0a:c1:b5:
                    5c:5f:0e:13:70:e2:bd:93:95:cf:ed:55:46:38:56:
                    49:1d:6e:3d:a3:c6:c2:2d:41:96:db:7c:d7:be:2f:
                    a7:a6:92:17:90:19:e3:9f:7a:a9:4c:79:2b:4d:c7:
                    d9:cc:dc:f8:96:99:f0:e1:15:57:fa:17:74:2d:08:
                    87:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:3C:62:2D:AA:5B:6A:77:7D:44:53:84:88:7C:E6:70:C7:96:C5:F5
            X509v3 Authority Key Identifier:
                keyid:67:88:83:16:D8:17:46:EE:5C:19:F9:65:6C:E9:D9:B9:6E:E8:06:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/67888316D81746EE5C19F9656CE9D9B96EE806AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67888316D81746EE5C19F9656CE9D9B96EE806AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/67888316D81746EE5C19F9656CE9D9B96EE806AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:97:b2:68:fa:48:3b:9c:48:bc:51:b3:79:f1:7d:27:ce:8e:
         45:69:d8:54:b0:02:3d:37:e6:5f:5d:67:42:46:fc:4c:b9:00:
         00:10:b1:91:45:73:98:95:94:85:3c:42:2d:0d:0f:78:b9:57:
         57:fc:be:c4:43:66:ae:60:39:b6:13:6e:54:a2:5e:e8:c8:c1:
         eb:aa:7f:5d:80:87:1a:84:3c:18:9b:b8:6e:ea:28:b3:b5:3d:
         e6:12:d1:a3:9b:ba:5f:bf:ae:af:f9:87:b5:5d:56:9f:e9:12:
         6f:37:5a:bc:e3:89:31:c3:3a:3d:bf:cd:c3:08:2d:0e:5e:c2:
         00:8e:e4:08:ec:01:64:60:39:33:b1:59:57:54:ac:a5:e5:0a:
         36:59:3f:5c:e9:ba:88:8e:61:89:55:a3:00:ab:33:c7:cc:35:
         91:a0:66:b7:46:b4:08:87:dc:00:de:a7:1e:5c:da:b3:40:e8:
         05:42:2d:0c:79:85:9b:11:a7:a8:15:d5:1b:5d:2d:ba:1b:a6:
         0f:f0:09:75:e2:ae:93:26:dc:0f:4b:49:e3:f4:3d:18:97:f0:
         cb:71:73:70:8b:a2:cd:ba:66:c4:a6:3c:a3:26:36:02:bd:67:
         7d:fd:05:40:39:ff:f7:6a:c7:11:f3:7b:62:8f:2c:0c:5c:f9:
         8f:40:d9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----