Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/B098727CD04A07533B572D7094F715AFA72AA973.mft
File:                     B098727CD04A07533B572D7094F715AFA72AA973.mft (raw, json)
Hash identifier:          GK7ByemNyVDQClkyoRH2lcpQD0gVbkeFSJmSB+HWPcg=
Subject key identifier:   FA:32:85:34:6F:78:38:42:CE:A6:D8:4D:07:73:69:E8:B2:09:66:C2
Authority key identifier: B0:98:72:7C:D0:4A:07:53:3B:57:2D:70:94:F7:15:AF:A7:2A:A9:73
Certificate issuer:       /CN=B098727CD04A07533B572D7094F715AFA72AA973
Certificate serial:       0AC38E193EC90A4AC1AB46CF1D0D07A002BF7843
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B098727CD04A07533B572D7094F715AFA72AA973.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/B098727CD04A07533B572D7094F715AFA72AA973.mft
Manifest number:          0104
Signing time:             Thu 19 Oct 2023 04:56:03 +0000
Manifest this update:     Thu 19 Oct 2023 04:51:03 +0000
Manifest next update:     Fri 20 Oct 2023 08:40:03 +0000
Files and hashes:         1: 3138312e3137342e3234382e302f32322d3332203d3e20323731353239.roa (hash: +9g5zHgIGxqijSmi8q3W846afQ6HEnXowiqnOWMP3pE=)
                          2: B098727CD04A07533B572D7094F715AFA72AA973.crl (hash: lpcB+xjZMuAIrQLlG5aLWbibiY2n+FXHHB7ooTzns6o=)
                          3: 323830343a376366343a3a2f33322d313238203d3e20323731353239.roa (hash: llcLUeKKD8/ArjHpz9OI38EaO6eKJGQCzWI5pCMCoMI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:c3:8e:19:3e:c9:0a:4a:c1:ab:46:cf:1d:0d:07:a0:02:bf:78:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B098727CD04A07533B572D7094F715AFA72AA973
        Validity
            Not Before: Oct 19 04:51:03 2023 GMT
            Not After : Oct 20 08:40:03 2023 GMT
        Subject: CN=FA3285346F783842CEA6D84D077369E8B20966C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0d:a2:32:3a:e3:ef:6a:af:ee:6b:b3:47:46:
                    df:7a:fb:df:a1:45:07:00:96:96:c3:4a:02:9c:97:
                    82:f6:bd:2a:cc:fd:bf:74:75:a4:5b:f1:71:77:ad:
                    a4:70:af:36:7e:83:33:54:18:2c:10:a4:29:c0:84:
                    e6:5f:c1:55:be:65:4a:1b:0c:6d:d0:2a:1f:0f:ce:
                    76:d8:b3:bd:3f:fc:97:37:6c:e5:9c:00:49:33:88:
                    55:59:08:32:10:b8:b8:06:60:bd:a6:df:da:3f:b8:
                    2e:af:a7:ae:c7:a7:79:54:63:19:0f:9a:92:f3:02:
                    37:c8:a5:ee:7f:a1:71:dc:85:e6:70:06:46:b3:0c:
                    de:0c:a2:ea:1c:d5:64:3b:ed:bd:7f:70:02:ea:8c:
                    19:9a:1b:17:af:da:dc:06:06:eb:22:a4:cc:2f:b9:
                    e1:bb:fc:25:87:b6:a5:e5:2c:93:e7:c9:37:6b:91:
                    19:73:6c:ae:3f:63:d0:bd:f0:79:20:d8:8d:ac:03:
                    62:01:86:83:83:52:67:b6:fa:81:e4:95:b0:5f:97:
                    56:d3:c5:f4:20:4f:eb:36:63:ae:80:2e:2f:96:9d:
                    b7:cd:3a:4c:f9:ff:d8:63:92:ef:98:83:52:47:6f:
                    d3:49:3f:c4:84:20:59:40:9f:ef:b5:67:01:f1:6b:
                    40:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:32:85:34:6F:78:38:42:CE:A6:D8:4D:07:73:69:E8:B2:09:66:C2
            X509v3 Authority Key Identifier:
                keyid:B0:98:72:7C:D0:4A:07:53:3B:57:2D:70:94:F7:15:AF:A7:2A:A9:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/B098727CD04A07533B572D7094F715AFA72AA973.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B098727CD04A07533B572D7094F715AFA72AA973.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/B098727CD04A07533B572D7094F715AFA72AA973.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:1d:cc:b7:26:bd:8c:d6:8c:0f:1c:01:82:f1:61:ec:f2:70:
         7f:79:4d:84:24:14:00:10:a6:2d:4d:1a:8b:f5:de:42:02:15:
         fc:97:7f:42:ab:28:00:60:f9:a2:a0:4e:e4:ee:1f:ef:02:27:
         fd:8d:9b:f1:be:60:3a:fb:61:60:ef:80:47:ae:32:40:03:e8:
         e9:da:a3:e0:f6:17:0b:19:da:b7:81:30:06:b0:8d:5c:bc:ae:
         e4:9c:19:2e:ae:97:8f:75:5a:c7:84:4b:af:dc:86:94:5f:bb:
         28:11:a9:fa:43:94:bd:76:85:e3:ad:02:97:75:12:cb:7b:cf:
         27:50:36:a0:c5:61:7f:a8:77:eb:83:81:57:3a:c6:e2:89:1c:
         63:55:54:e7:d4:1b:e2:97:2f:47:f4:8d:a1:df:2a:03:be:c0:
         b3:9e:de:4e:c8:f9:63:02:aa:2d:2f:6e:ec:18:c4:6b:36:5d:
         13:f1:fc:c4:ec:e9:66:82:d9:50:46:14:1f:08:c5:b7:c9:98:
         28:7c:16:1f:69:7b:64:54:9d:06:17:2e:c9:bc:86:4b:7a:06:
         63:00:7c:42:e4:9a:80:95:7c:04:44:a5:01:03:bc:72:65:d5:
         fa:c1:52:02:94:21:dc:85:40:23:e1:63:0f:8f:be:8e:88:47:
         26:e9:8d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----