Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/7A8A7F4DD8AECB119BDBA87574ABCD9543063CDC.mft
File:                     7A8A7F4DD8AECB119BDBA87574ABCD9543063CDC.mft (raw, json)
Hash identifier:          hH+OCwbHCl1p5DbAxOR+QFFiEQn4WT4vjxogCn5GFsg=
Subject key identifier:   FD:F6:0F:5D:80:00:49:70:E4:FF:6C:BB:42:36:B2:37:DE:E2:06:6E
Authority key identifier: 7A:8A:7F:4D:D8:AE:CB:11:9B:DB:A8:75:74:AB:CD:95:43:06:3C:DC
Certificate issuer:       /CN=7A8A7F4DD8AECB119BDBA87574ABCD9543063CDC
Certificate serial:       0C4FBC71968840EB62C482EECA81FEC7DE953E9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A8A7F4DD8AECB119BDBA87574ABCD9543063CDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/7A8A7F4DD8AECB119BDBA87574ABCD9543063CDC.mft
Manifest number:          03
Signing time:             Thu 22 Feb 2024 14:16:33 +0000
Manifest this update:     Thu 22 Feb 2024 14:11:33 +0000
Manifest next update:     Fri 23 Feb 2024 16:14:33 +0000
Files and hashes:         1: 3139302e352e3230382e302f32322d3234203d3e20323731313835.roa (hash: zgxuFDStkZI8UW3D9EDEAlq+XxSJGMFMIVECiRsuZME=)
                          2: 7A8A7F4DD8AECB119BDBA87574ABCD9543063CDC.crl (hash: 6aDByJ1kTazVP6GVbQ+/N8kuBeNSo0EpwLiosZ00SIE=)
                          3: 323830343a373738633a3a2f33322d3334203d3e20323731313835.roa (hash: SQCOoA8oNeYryxphFgMu6k/ckQrQPkrkfnwjyQxWCew=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:4f:bc:71:96:88:40:eb:62:c4:82:ee:ca:81:fe:c7:de:95:3e:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A8A7F4DD8AECB119BDBA87574ABCD9543063CDC
        Validity
            Not Before: Feb 22 14:11:33 2024 GMT
            Not After : Feb 23 16:14:33 2024 GMT
        Subject: CN=FDF60F5D80004970E4FF6CBB4236B237DEE2066E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:27:cb:84:ea:a6:76:82:7d:10:96:92:4d:14:
                    16:14:8c:96:14:86:3f:0e:be:99:64:a1:61:76:d2:
                    a7:52:b3:27:e0:74:72:b4:1a:b8:4f:ce:01:14:d4:
                    4e:3b:8e:9b:4f:e8:0c:0d:c1:1e:94:ff:22:52:1c:
                    fb:fe:3f:2c:0f:eb:ee:a3:f5:b8:b5:99:26:5e:7f:
                    63:fc:26:af:fd:07:29:ac:f5:b0:81:96:f7:15:78:
                    92:94:19:86:57:73:a2:b1:23:24:d3:82:97:14:64:
                    d6:a7:30:56:9f:10:02:6f:bd:dc:a0:05:59:57:76:
                    2a:bc:b9:1a:16:a8:81:73:9c:81:7c:33:d9:0e:80:
                    c3:ec:ae:70:8c:f3:11:60:82:d6:55:03:08:1a:b8:
                    39:f3:2f:9b:00:74:21:19:e8:ca:0c:eb:46:06:68:
                    e7:99:70:6f:44:90:4f:93:a3:3c:a4:92:01:b9:dc:
                    1b:20:b4:86:49:3b:f1:f9:cf:43:45:66:6e:1f:23:
                    40:d0:98:34:98:ac:ad:84:1e:20:d3:01:8c:64:62:
                    7b:b5:54:95:f7:42:0a:d4:f4:ef:ac:8a:3c:06:38:
                    09:a3:35:20:d0:0f:78:42:aa:a6:7a:95:c3:50:ed:
                    6c:5b:cb:ae:67:42:c6:4f:35:25:99:b7:40:0a:4e:
                    7d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F6:0F:5D:80:00:49:70:E4:FF:6C:BB:42:36:B2:37:DE:E2:06:6E
            X509v3 Authority Key Identifier:
                keyid:7A:8A:7F:4D:D8:AE:CB:11:9B:DB:A8:75:74:AB:CD:95:43:06:3C:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/7A8A7F4DD8AECB119BDBA87574ABCD9543063CDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A8A7F4DD8AECB119BDBA87574ABCD9543063CDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/7A8A7F4DD8AECB119BDBA87574ABCD9543063CDC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:5a:cc:92:85:9e:e0:3d:2e:e5:9c:e4:a7:2d:41:f6:04:81:
         5b:23:53:aa:8d:a7:a1:fb:1d:2a:60:84:c5:6b:10:d5:c1:58:
         a7:67:85:0c:c6:6b:3b:8c:6e:93:4a:a6:6f:1a:15:45:30:b7:
         b1:8f:c8:9b:d4:b6:d9:44:44:5e:d6:ff:ff:23:2a:98:85:04:
         8b:7a:2d:b0:96:7c:1d:3c:a3:c4:77:2b:36:4d:94:83:56:c1:
         84:76:df:2b:2a:27:06:ce:22:72:45:1d:63:4b:3f:bf:6e:f4:
         88:6c:93:42:c6:aa:14:70:f8:6a:7a:3f:dc:ee:4e:7b:6d:01:
         bf:27:6e:25:1d:bc:3c:1a:25:31:f1:8d:70:26:cf:c7:85:ad:
         38:63:98:56:c4:a9:d5:7c:99:cd:8e:11:9d:95:e9:31:a3:ee:
         cc:ae:63:ad:18:66:e4:14:ae:fb:18:64:26:4d:f0:d9:cd:c8:
         1c:c5:27:14:a7:d5:5f:4b:d7:c8:e0:f8:79:ef:6d:95:c7:39:
         d7:bb:49:54:11:8f:b5:b8:76:4a:96:65:f0:57:50:0c:c5:75:
         ea:31:1a:94:3c:ae:c8:2d:a2:3f:d9:c0:af:7b:9c:77:e4:18:
         51:22:76:43:c4:2b:9e:aa:6e:a7:46:c9:2b:c3:dc:d8:4a:ba:
         fd:94:f0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----