Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/2A0F12C37F2718B59CD30A203C68E5FA1656B87F.mft
File:                     2A0F12C37F2718B59CD30A203C68E5FA1656B87F.mft (raw, json)
Hash identifier:          ibCPlPi2R3ry+ZXkgw4E+XjZLln3wnpHsvp/L+xW7I4=
Subject key identifier:   39:54:C2:7D:B3:8F:D5:5E:D8:CD:DA:8E:B4:62:45:01:B5:B5:33:9B
Authority key identifier: 2A:0F:12:C3:7F:27:18:B5:9C:D3:0A:20:3C:68:E5:FA:16:56:B8:7F
Certificate issuer:       /CN=2A0F12C37F2718B59CD30A203C68E5FA1656B87F
Certificate serial:       3A0CE6000E268D98C1C58DF68186DBC1DBA375E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A0F12C37F2718B59CD30A203C68E5FA1656B87F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/2A0F12C37F2718B59CD30A203C68E5FA1656B87F.mft
Manifest number:          32
Signing time:             Sun 26 Nov 2023 06:57:24 +0000
Manifest this update:     Sun 26 Nov 2023 06:52:24 +0000
Manifest next update:     Mon 27 Nov 2023 08:18:24 +0000
Files and hashes:         1: 323830343a376461303a3a2f33322d3332203d3e20323731353733.roa (hash: xA3EbRnh/GQEHLAg3wFcZOYMN4a2oM5y/2zxH/yqHmE=)
                          2: 3230302e302e3137392e302f32342d3234203d3e20323731353733.roa (hash: 6eYospkwy4RClQB0RANbRjt5lFUGq/ECK+4Hzq0Snvo=)
                          3: 3230312e3133312e3130362e302f32342d3234203d3e20323731353733.roa (hash: TChyn5qI7kc0geFA+pJ3O2/0vworp2iaJKn6bP9mPpA=)
                          4: 2A0F12C37F2718B59CD30A203C68E5FA1656B87F.crl (hash: oeeOr0AIdlRiafZH02yjxxslkYHI/iBPLDq8OsfxLwI=)
                          5: 3230302e362e3133342e302f32332d3233203d3e20323731353733.roa (hash: OGUXZl26nriHzPHFi71upsmDz86NV3LiQ7xh5JokOG4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:0c:e6:00:0e:26:8d:98:c1:c5:8d:f6:81:86:db:c1:db:a3:75:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A0F12C37F2718B59CD30A203C68E5FA1656B87F
        Validity
            Not Before: Nov 26 06:52:24 2023 GMT
            Not After : Nov 27 08:18:24 2023 GMT
        Subject: CN=3954C27DB38FD55ED8CDDA8EB4624501B5B5339B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:03:50:e3:13:28:96:b7:fe:39:16:65:08:d4:
                    0e:3a:b6:63:7e:5a:06:73:93:41:c9:f6:ed:01:d2:
                    53:19:c2:31:52:3a:6c:a4:e6:14:0b:33:60:77:ff:
                    a9:2a:38:10:5f:33:39:3e:da:eb:60:c5:46:ea:21:
                    e8:3b:bf:db:53:64:80:51:4d:c2:83:51:c6:40:cf:
                    5b:40:df:d8:09:ec:a6:34:88:48:ad:0f:57:5c:2d:
                    e5:33:69:00:08:84:32:37:cc:32:16:d9:dd:44:07:
                    6c:87:f4:9e:46:75:87:a2:e7:ed:ef:e5:fe:a3:52:
                    ba:eb:bc:2b:a6:c0:a9:2c:f6:ee:6c:1f:00:6a:75:
                    4a:2f:0a:59:64:4c:a1:c6:9a:29:d6:bd:34:da:01:
                    0b:56:b7:3d:a3:ca:bd:39:de:aa:f7:21:8e:cc:dd:
                    8d:29:a2:35:ce:b8:0b:95:52:1b:90:0c:81:b7:4a:
                    7e:53:b7:96:43:23:91:26:6a:60:f2:c4:17:e0:f0:
                    72:c6:9e:75:12:a2:99:8a:9c:0d:ff:56:4c:6e:bd:
                    14:7c:58:05:86:cc:e4:14:cb:28:87:01:e1:47:bb:
                    ad:17:fa:56:ea:4f:21:d3:e0:14:49:41:49:32:54:
                    7e:a8:db:d5:ab:3d:f5:53:69:a2:9d:38:79:20:e4:
                    00:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:54:C2:7D:B3:8F:D5:5E:D8:CD:DA:8E:B4:62:45:01:B5:B5:33:9B
            X509v3 Authority Key Identifier:
                keyid:2A:0F:12:C3:7F:27:18:B5:9C:D3:0A:20:3C:68:E5:FA:16:56:B8:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/2A0F12C37F2718B59CD30A203C68E5FA1656B87F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A0F12C37F2718B59CD30A203C68E5FA1656B87F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/2A0F12C37F2718B59CD30A203C68E5FA1656B87F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:d3:c5:4f:67:2a:81:e3:10:0a:4b:be:c5:90:37:7b:03:08:
         23:32:c8:04:c7:65:7f:66:b5:2f:f6:fc:b5:ca:01:6b:51:26:
         4c:15:d5:65:6f:2c:62:42:21:d0:d6:09:dc:ae:f2:d0:2f:cb:
         61:b3:48:7a:eb:b6:a3:45:34:30:1a:e0:a4:31:4b:1d:d3:54:
         7b:c9:e6:8f:d4:ab:24:20:8b:2a:b4:bd:b7:be:8e:9a:4c:9f:
         f9:91:a7:11:d0:f7:ef:6f:c3:46:86:73:2a:5b:6f:31:99:dd:
         2c:14:b1:51:f0:9d:9c:a3:74:e9:21:c9:00:99:68:9b:3a:c3:
         f9:81:6a:d2:3b:6c:5d:de:4a:7e:3a:f6:f4:54:58:9e:e9:ef:
         8c:89:92:c1:3b:9f:4c:cf:34:e2:a4:9c:cd:87:b4:66:8f:ba:
         b7:d0:49:4d:34:bd:88:90:e4:69:f0:d0:48:7f:9f:f5:05:4e:
         00:2b:2b:eb:be:c9:52:68:d8:44:78:c8:63:a7:51:91:ce:ef:
         7d:fe:8c:db:25:f9:42:e2:00:ef:8e:bf:28:46:da:c2:20:c1:
         d5:bc:70:63:ad:58:5f:d8:2f:2b:b4:25:29:c4:80:97:ba:c6:
         89:3e:0f:fc:71:a4:4d:16:f3:8b:18:c4:e5:ed:4c:01:b2:da:
         05:e3:ac:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----