Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FiHNp9xFjTegr3KUkBJwBSXPf95i8Hd18vuZam71A2e6/0/890B378FA4B1BD7EED9F2745089E0F1EACEAA240.mft
File:                     890B378FA4B1BD7EED9F2745089E0F1EACEAA240.mft (raw, json)
Hash identifier:          bdfPqV7GZv6LzhYVS5YYRYH5iK5rwZovt6t4U8SrAxs=
Subject key identifier:   DE:69:1A:17:8F:53:95:24:A8:79:C0:CE:12:7C:E7:35:ED:0C:6E:52
Authority key identifier: 89:0B:37:8F:A4:B1:BD:7E:ED:9F:27:45:08:9E:0F:1E:AC:EA:A2:40
Certificate issuer:       /CN=890B378FA4B1BD7EED9F2745089E0F1EACEAA240
Certificate serial:       56F9F539317E9A94D72D5354B39626ABD3DD733C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/890B378FA4B1BD7EED9F2745089E0F1EACEAA240.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FiHNp9xFjTegr3KUkBJwBSXPf95i8Hd18vuZam71A2e6/0/890B378FA4B1BD7EED9F2745089E0F1EACEAA240.mft
Manifest number:          72
Signing time:             Mon 15 Apr 2024 03:36:37 +0000
Manifest this update:     Mon 15 Apr 2024 03:31:37 +0000
Manifest next update:     Tue 16 Apr 2024 04:17:37 +0000
Files and hashes:         1: 3133322e3235352e3139322e302f32322d3332203d3e20323634353131.roa (hash: U3REx53QVIAjUw9ocHq+gt9Y6WZRMrn9KgwTwPqCsGE=)
                          2: 323830343a323062633a3a2f33322d313238203d3e20323634353131.roa (hash: ld1E1SQLZTSXmlbDSw8YsxeNLKf7o9I7imyq0d4hBAY=)
                          3: 890B378FA4B1BD7EED9F2745089E0F1EACEAA240.crl (hash: UCbe8IfgbdOKb8BbHkpoUVdX3OrKqy6TivWDo9FRPRU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:f9:f5:39:31:7e:9a:94:d7:2d:53:54:b3:96:26:ab:d3:dd:73:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=890B378FA4B1BD7EED9F2745089E0F1EACEAA240
        Validity
            Not Before: Apr 15 03:31:37 2024 GMT
            Not After : Apr 16 04:17:37 2024 GMT
        Subject: CN=DE691A178F539524A879C0CE127CE735ED0C6E52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f5:c9:2a:f1:6f:0b:20:b6:75:9f:1f:b4:fd:
                    67:04:9a:58:01:e4:48:0f:e7:66:88:ee:45:0f:2b:
                    ee:f3:eb:e0:2b:32:57:08:9d:da:b5:bd:fc:53:8d:
                    f5:ec:c3:c1:9e:d5:6c:eb:83:30:62:93:e3:52:f9:
                    18:07:bf:f7:54:c5:c6:c4:d2:86:e6:d5:8d:7d:8b:
                    ae:3e:29:63:c2:47:3b:0f:e8:f3:0c:77:a5:0a:59:
                    aa:55:e5:68:58:bd:c8:5b:b3:a9:a7:bf:40:be:e5:
                    c3:28:c0:c4:7b:83:c8:25:21:e3:44:fe:ff:a5:51:
                    35:25:90:8c:ad:4a:17:3b:4f:7e:aa:16:87:af:9f:
                    ce:80:77:d8:a5:99:24:54:31:96:43:31:00:e7:1f:
                    1c:a4:c5:bf:f5:ec:aa:4f:47:91:32:ce:1c:de:72:
                    7f:7a:ae:d1:d0:93:58:b4:1b:d4:f7:b9:7f:4d:2b:
                    14:98:2c:d2:2a:d6:31:41:d3:1b:18:01:3f:7a:9a:
                    7f:32:11:50:c8:72:95:9b:2f:11:d2:06:f3:91:1a:
                    f0:bc:07:2f:74:b7:0b:2c:ad:69:5b:27:f1:e3:41:
                    9d:10:40:f4:ba:23:53:93:f9:3a:f7:9a:e9:fb:05:
                    95:e7:1c:12:bd:9f:82:73:6f:be:b8:ed:44:68:c5:
                    b3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:69:1A:17:8F:53:95:24:A8:79:C0:CE:12:7C:E7:35:ED:0C:6E:52
            X509v3 Authority Key Identifier:
                keyid:89:0B:37:8F:A4:B1:BD:7E:ED:9F:27:45:08:9E:0F:1E:AC:EA:A2:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FiHNp9xFjTegr3KUkBJwBSXPf95i8Hd18vuZam71A2e6/0/890B378FA4B1BD7EED9F2745089E0F1EACEAA240.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/890B378FA4B1BD7EED9F2745089E0F1EACEAA240.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FiHNp9xFjTegr3KUkBJwBSXPf95i8Hd18vuZam71A2e6/0/890B378FA4B1BD7EED9F2745089E0F1EACEAA240.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:48:be:86:59:ef:27:07:c3:58:00:63:4a:17:d4:c8:8c:78:
         fd:e4:36:13:2a:2e:d2:f5:50:32:87:36:a6:48:b9:c1:39:6b:
         90:31:39:0f:78:94:8c:64:46:0c:03:94:89:14:1a:20:11:6a:
         37:c0:45:a3:c6:81:43:64:d6:cf:b7:c3:0b:1c:4e:ee:34:10:
         da:78:0f:8e:bb:78:56:06:84:32:c9:94:a2:e7:c3:49:2d:2c:
         b8:e5:49:e2:b5:da:35:50:43:94:9f:ef:0b:9d:41:d6:9b:b2:
         7f:4f:3d:ec:3f:c3:bc:9e:38:e8:ef:45:5e:5a:a5:5a:6b:70:
         25:72:0b:f0:6f:3e:e3:16:5e:ca:98:55:17:cd:9f:20:0e:81:
         f2:03:66:9f:df:e3:36:3d:d4:5a:78:ac:05:ca:11:7b:7a:8c:
         8b:8e:e4:d6:56:c5:c0:b4:93:69:f7:fb:75:9c:14:1d:a1:2e:
         77:5d:b1:0f:83:25:19:0c:3e:7d:3f:23:e2:62:b7:76:6b:2b:
         5a:1b:75:02:10:eb:a3:ca:92:64:5a:cf:1c:d3:d1:a7:26:5e:
         d8:bc:ab:a8:30:05:0e:d7:ce:c9:fc:79:6c:e9:83:77:9b:89:
         fb:b0:8f:23:1e:2b:86:02:36:67:49:2e:cf:c2:37:52:1b:fb:
         c1:85:52:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----