Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/8929036E724281BF4E20D98AD92E7E6645147A68.mft
File:                     8929036E724281BF4E20D98AD92E7E6645147A68.mft (raw, json)
Hash identifier:          oxrEOC9FpcLYc/Htc6KthpwhAn2r3Zv2ItxWwbSvrFg=
Subject key identifier:   1B:52:50:3B:EB:23:8D:5A:FD:74:24:02:9B:6F:A3:41:A9:BA:8C:7E
Authority key identifier: 89:29:03:6E:72:42:81:BF:4E:20:D9:8A:D9:2E:7E:66:45:14:7A:68
Certificate issuer:       /CN=8929036E724281BF4E20D98AD92E7E6645147A68
Certificate serial:       70FD4F661CFF98EEE3354A8D92F479AB651881FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8929036E724281BF4E20D98AD92E7E6645147A68.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/8929036E724281BF4E20D98AD92E7E6645147A68.mft
Manifest number:          03
Signing time:             Fri 23 Feb 2024 17:47:43 +0000
Manifest this update:     Fri 23 Feb 2024 17:42:43 +0000
Manifest next update:     Sat 24 Feb 2024 18:02:43 +0000
Files and hashes:         1: 323830343a373738633a3a2f33322d3332203d3e20323731313835.roa (hash: DyDc0Ph4jkdLS7rrw2mSWGj6pwlreW8CHLo8vrXzwz4=)
                          2: 3139302e352e3230382e302f32322d3234203d3e20323731313835.roa (hash: mP/LzdYbVaw6Ff10oNb+x5iNQak4UtvId0VTt+9B+wE=)
                          3: 8929036E724281BF4E20D98AD92E7E6645147A68.crl (hash: QeTliPKqE78rHLYGP2xnE4/kjFsDuc12knWtbGudrbM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:fd:4f:66:1c:ff:98:ee:e3:35:4a:8d:92:f4:79:ab:65:18:81:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8929036E724281BF4E20D98AD92E7E6645147A68
        Validity
            Not Before: Feb 23 17:42:43 2024 GMT
            Not After : Feb 24 18:02:43 2024 GMT
        Subject: CN=1B52503BEB238D5AFD7424029B6FA341A9BA8C7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:56:07:d3:d2:06:db:01:4d:41:69:52:b8:0f:
                    bd:7b:91:7f:5c:49:7c:0c:c0:ad:9f:4b:84:d9:bc:
                    18:fa:b3:3b:ac:80:25:68:74:df:af:4d:70:78:0c:
                    85:d0:16:ac:e7:cc:c3:3d:53:be:aa:fe:25:9f:bf:
                    09:fd:73:9b:09:4d:46:51:fb:e6:9c:8d:b8:b9:0e:
                    c2:59:f9:d7:ac:1c:b3:6b:ec:ad:ad:fc:0a:83:b8:
                    dd:b6:c9:fc:d5:2f:22:ab:0e:1c:35:3c:ec:72:3f:
                    ee:c7:89:f4:c2:1a:e7:fb:c1:d7:8f:28:7c:15:fa:
                    57:dc:2e:c3:c6:9a:18:52:52:c5:db:74:9d:94:2b:
                    90:0e:cb:1b:30:7a:26:68:15:43:75:61:ab:07:6c:
                    33:3a:6c:42:f5:89:22:25:2e:d1:b3:f9:d7:07:6f:
                    29:6e:74:99:d8:96:9d:76:5c:e7:a6:7a:c9:1a:62:
                    0b:6f:b3:6a:c9:19:b0:db:ec:74:4e:97:34:93:f7:
                    04:2e:ff:ce:41:f7:92:91:a1:28:c6:4e:5e:51:fc:
                    88:80:2e:b7:df:5e:bf:09:98:0e:27:a5:a1:c2:bc:
                    8a:8d:a4:ae:01:19:71:4b:34:b8:6f:a7:a0:1c:5d:
                    5c:d9:b1:5f:d3:01:ca:8b:6a:fc:b3:b2:1a:3c:bc:
                    87:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:52:50:3B:EB:23:8D:5A:FD:74:24:02:9B:6F:A3:41:A9:BA:8C:7E
            X509v3 Authority Key Identifier:
                keyid:89:29:03:6E:72:42:81:BF:4E:20:D9:8A:D9:2E:7E:66:45:14:7A:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/8929036E724281BF4E20D98AD92E7E6645147A68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8929036E724281BF4E20D98AD92E7E6645147A68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/8929036E724281BF4E20D98AD92E7E6645147A68.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:04:ec:00:02:f4:22:7c:15:6b:2b:50:5e:ef:f3:f4:7c:05:
         55:e0:cd:c5:8a:30:e8:32:9d:10:83:30:07:ac:6d:61:3d:a1:
         12:59:48:34:86:a3:6d:b8:d8:5f:d2:32:a0:42:27:3f:20:ed:
         49:1a:19:da:a6:8c:c7:c2:81:1c:f4:61:c2:8d:db:cf:b6:39:
         ee:a7:61:f6:5a:fd:58:fc:54:58:3e:12:57:9f:71:7a:5f:7d:
         af:af:28:57:50:d8:98:60:74:ca:06:ca:69:c2:ec:67:e4:ee:
         c2:8a:96:70:ba:d4:cf:4e:d5:b5:cf:1a:2e:a9:37:fd:35:2c:
         ab:6a:af:4e:ec:c1:93:ca:3b:9a:da:40:55:65:9a:cb:47:74:
         00:89:18:17:df:0a:62:74:2c:74:43:85:90:7f:42:24:df:ea:
         af:7a:26:9a:6c:42:6a:b6:ab:e5:9d:f4:a9:4e:85:1d:5f:71:
         36:3a:53:bf:77:e6:64:ee:21:52:4a:65:da:8b:f0:e2:88:28:
         0e:4e:b0:35:d8:8e:3d:c4:e7:24:64:11:cf:17:57:35:e6:ae:
         7b:b7:e1:b3:74:67:2d:a4:fb:5f:92:7c:71:79:e9:34:80:6f:
         0f:a8:e8:44:c8:9d:9c:f6:94:5e:d6:f6:96:7e:0c:91:02:95:
         64:fc:04:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----