Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/F59BFABDE7582A143051984BBF1D175614A6022E.mft
File:                     F59BFABDE7582A143051984BBF1D175614A6022E.mft (raw, json)
Hash identifier:          G8mVgVIWQ+j39OAR2abQ1Bo554JSXeM5ZcmcqvFeUUQ=
Subject key identifier:   E9:9B:76:43:A9:B3:68:15:F8:88:C1:3F:97:39:A7:A5:0D:EE:4C:E2
Authority key identifier: F5:9B:FA:BD:E7:58:2A:14:30:51:98:4B:BF:1D:17:56:14:A6:02:2E
Certificate issuer:       /CN=F59BFABDE7582A143051984BBF1D175614A6022E
Certificate serial:       79CA1552F689E2C51EA2BC6C7F100FC6CA627BEE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F59BFABDE7582A143051984BBF1D175614A6022E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/F59BFABDE7582A143051984BBF1D175614A6022E.mft
Manifest number:          1D
Signing time:             Thu 19 Oct 2023 23:09:23 +0000
Manifest this update:     Thu 19 Oct 2023 23:04:23 +0000
Manifest next update:     Sat 21 Oct 2023 01:57:23 +0000
Files and hashes:         1: 3230312e3133312e3130362e302f32342d3234203d3e20323731353733.roa (hash: SWVU0PO4RsbK//D8aDKl8T7/CZDTKgQEouxYN6UZFAg=)
                          2: 3230302e362e3133342e302f32332d3233203d3e20323731353733.roa (hash: rAid7oWGTQ6F4OIu7gu7iBNAsNpy37ekYAcdWrVbSQA=)
                          3: 3230302e302e3137392e302f32342d3234203d3e20323731353733.roa (hash: WBXij0hj1OZN4jxbaQzZpgOzcngrIomIZihGGBal4bw=)
                          4: 323830343a376461303a3a2f33322d3332203d3e20323731353733.roa (hash: FP8dv0RWeBDOgWSbiewH8BD9HVhCAWsDlRRJnzqmj4A=)
                          5: F59BFABDE7582A143051984BBF1D175614A6022E.crl (hash: O9D47HqFtu+Fm/kYHaiy1PfbFt3RqzLUG5lKYzNin9A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ca:15:52:f6:89:e2:c5:1e:a2:bc:6c:7f:10:0f:c6:ca:62:7b:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F59BFABDE7582A143051984BBF1D175614A6022E
        Validity
            Not Before: Oct 19 23:04:23 2023 GMT
            Not After : Oct 21 01:57:23 2023 GMT
        Subject: CN=E99B7643A9B36815F888C13F9739A7A50DEE4CE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d5:76:a6:64:c8:bb:2e:63:26:c0:9f:28:c7:
                    39:67:74:b9:6d:8e:6e:43:3a:c7:5e:09:3c:cb:73:
                    8e:02:db:62:9a:66:0d:ba:49:28:4c:6c:21:81:c4:
                    db:4c:87:5d:cf:22:d6:48:90:b8:ef:35:54:26:e1:
                    d6:59:41:30:92:fe:de:77:db:4d:66:09:f1:07:17:
                    d0:8e:fb:1e:75:66:fa:63:c4:d3:b5:2b:57:d9:d0:
                    a9:95:df:78:a7:45:5d:d7:a9:9f:bd:7f:55:86:0e:
                    b5:8a:41:13:0a:0c:ad:3c:b9:76:47:9e:4d:f9:92:
                    34:48:d0:e3:52:b9:21:00:f8:7c:24:0e:03:48:b8:
                    51:ed:e6:1f:66:73:95:ef:95:55:56:9e:92:37:dd:
                    bf:aa:cb:c8:0e:37:21:24:68:11:46:d4:0b:8d:0e:
                    56:05:b4:d0:c0:b4:6d:f5:50:dc:fd:87:6f:01:1b:
                    a2:93:7a:61:fe:8d:d2:e5:ab:41:7f:fa:78:5a:60:
                    d7:79:cf:a0:c5:a9:16:50:03:04:4f:40:c8:ed:a0:
                    2f:a3:20:3e:f9:a4:1f:cc:54:4f:c4:60:1f:41:c1:
                    82:0f:92:46:47:2a:7c:0b:42:77:89:20:bb:ce:f0:
                    fb:a2:c1:5a:11:1b:ba:8b:b4:d5:99:0a:ca:00:17:
                    7b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:9B:76:43:A9:B3:68:15:F8:88:C1:3F:97:39:A7:A5:0D:EE:4C:E2
            X509v3 Authority Key Identifier:
                keyid:F5:9B:FA:BD:E7:58:2A:14:30:51:98:4B:BF:1D:17:56:14:A6:02:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/F59BFABDE7582A143051984BBF1D175614A6022E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F59BFABDE7582A143051984BBF1D175614A6022E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/F59BFABDE7582A143051984BBF1D175614A6022E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:78:a9:c6:aa:b0:26:15:a1:a8:6f:fb:8b:bd:bf:b5:4e:fc:
         c9:25:37:74:f7:e2:4f:2b:99:0a:de:22:f3:2a:c8:c6:7e:3c:
         cb:d6:b5:08:81:d7:d2:91:af:50:20:5f:a3:4e:4f:a6:1d:da:
         4e:b9:34:e1:28:69:c9:7d:b5:3d:ae:57:68:88:25:77:aa:8e:
         45:1d:21:7d:a1:45:d3:e2:98:de:dc:02:12:5a:92:21:cd:c6:
         d8:e1:af:48:c8:45:45:74:4d:6e:cb:41:7d:07:05:6b:91:06:
         78:57:3b:7f:5c:e7:b2:d8:30:2b:bf:53:20:fa:e7:01:6a:a9:
         88:5c:9a:bc:1b:2c:90:45:98:f4:73:d4:46:95:b2:2a:66:af:
         19:2f:e4:0a:80:95:50:ae:9c:c4:dd:79:65:8d:dd:5c:0a:89:
         8b:6d:33:af:2a:dc:eb:26:3e:10:79:3a:56:2b:c0:aa:61:d1:
         a5:b6:f2:a1:73:1d:e4:81:71:a8:b3:d7:83:e9:98:33:15:9a:
         21:88:cc:62:4a:23:55:14:95:58:b8:62:0f:71:95:86:74:8d:
         37:a9:87:d8:64:c5:c9:90:68:88:b0:9a:69:2d:a4:81:59:31:
         9d:8a:91:13:f3:11:63:03:2e:b7:3c:25:b3:19:71:ff:7e:6c:
         5a:72:2e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----