Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FqEGse2jvjbT5rsMLRXBD32FFAzzby8rrizPpgUBadUD/0/B064906756E5BA94E27845B25754296D66D7BDD7.mft
File:                     B064906756E5BA94E27845B25754296D66D7BDD7.mft (raw, json)
Hash identifier:          Wpbx4miulxgjdADBFFq4HQJ7j2R+HlP/ahFflf4RDvQ=
Subject key identifier:   5D:09:41:81:88:91:C3:1D:7B:2F:0E:78:37:A0:A2:FA:B3:8A:9B:AC
Authority key identifier: B0:64:90:67:56:E5:BA:94:E2:78:45:B2:57:54:29:6D:66:D7:BD:D7
Certificate issuer:       /CN=B064906756E5BA94E27845B25754296D66D7BDD7
Certificate serial:       0FDF10FB0C8C8D75EFB3680FB8CCF3088DD3D2D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B064906756E5BA94E27845B25754296D66D7BDD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FqEGse2jvjbT5rsMLRXBD32FFAzzby8rrizPpgUBadUD/0/B064906756E5BA94E27845B25754296D66D7BDD7.mft
Manifest number:          49
Signing time:             Thu 25 Jan 2024 23:58:45 +0000
Manifest this update:     Thu 25 Jan 2024 23:53:45 +0000
Manifest next update:     Sat 27 Jan 2024 01:05:45 +0000
Files and hashes:         1: 3138372e3130392e3230382e302f32302d3234203d3e20323632343938.roa (hash: aCKjJOTiND7fh2GerEXZkbg+RMl2HJ+u0ljfzpNP9B0=)
                          2: B064906756E5BA94E27845B25754296D66D7BDD7.crl (hash: C2SDkE3s37DkSohkpSC1eXEGNiS4UB6scGWnshrWAOE=)
                          3: 323830343a343961303a3a2f33322d3332203d3e20323632343938.roa (hash: VXGl3AkF6sAaT7VUryARFBleRlEnpmVTO4ClzSpDxeQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:df:10:fb:0c:8c:8d:75:ef:b3:68:0f:b8:cc:f3:08:8d:d3:d2:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B064906756E5BA94E27845B25754296D66D7BDD7
        Validity
            Not Before: Jan 25 23:53:45 2024 GMT
            Not After : Jan 27 01:05:45 2024 GMT
        Subject: CN=5D0941818891C31D7B2F0E7837A0A2FAB38A9BAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3a:54:a6:be:07:a3:49:6f:ed:4e:9a:7f:6a:
                    b8:fd:96:c0:c9:39:61:bb:58:8b:66:c8:a6:f2:43:
                    1e:81:ee:fe:51:ee:71:61:83:06:02:b8:44:6c:94:
                    5d:3a:25:ab:9d:64:cc:63:21:ba:d8:2e:6f:e3:93:
                    f1:c0:d9:b8:26:42:ca:ce:36:e4:57:d2:15:2b:8a:
                    14:04:37:a1:58:03:ee:da:12:a8:2b:6a:10:b7:86:
                    6f:78:e5:40:cb:99:eb:96:be:97:b2:d3:58:b0:e1:
                    80:e0:46:8a:53:8c:6b:c0:90:e9:2a:1e:2f:f6:6a:
                    48:4a:62:c7:99:92:90:59:72:21:ac:55:98:ba:1b:
                    f5:9f:a0:da:12:34:08:4b:47:9a:24:48:01:5b:01:
                    07:82:12:e0:c7:0b:68:88:30:e9:d0:25:68:1d:7a:
                    2a:28:9e:f5:ff:7e:0d:46:71:cd:8b:88:ed:e6:f8:
                    28:99:b5:74:43:70:f2:27:a7:71:e8:de:9d:f3:97:
                    87:3f:d6:62:5e:f4:61:fd:57:18:87:d2:ac:5d:4d:
                    f6:1b:2d:45:f2:f0:56:4b:a7:4f:56:8e:09:d8:c6:
                    03:26:82:90:a2:a5:20:0c:af:0c:26:63:91:c6:da:
                    d6:ac:b2:3e:8b:d4:d7:26:b6:e2:1d:b4:04:67:a9:
                    f6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:09:41:81:88:91:C3:1D:7B:2F:0E:78:37:A0:A2:FA:B3:8A:9B:AC
            X509v3 Authority Key Identifier:
                keyid:B0:64:90:67:56:E5:BA:94:E2:78:45:B2:57:54:29:6D:66:D7:BD:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FqEGse2jvjbT5rsMLRXBD32FFAzzby8rrizPpgUBadUD/0/B064906756E5BA94E27845B25754296D66D7BDD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B064906756E5BA94E27845B25754296D66D7BDD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FqEGse2jvjbT5rsMLRXBD32FFAzzby8rrizPpgUBadUD/0/B064906756E5BA94E27845B25754296D66D7BDD7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:f1:82:04:3d:76:7c:6a:d3:46:05:62:bd:ba:15:2a:d4:cb:
         c9:23:19:68:c5:0d:5e:e2:db:cd:a1:c4:80:6a:98:81:7e:29:
         9e:3a:1e:25:01:49:32:ee:8d:6a:07:2b:64:fe:a5:73:ca:ec:
         b0:e1:fc:18:9b:42:7b:f6:f6:e6:8c:40:3f:00:af:9f:37:d2:
         a5:8e:1a:67:c3:06:52:c5:70:96:53:6e:43:72:f5:cf:17:b4:
         d9:d2:04:45:9c:69:3c:75:a3:ce:72:5b:77:78:7a:c2:54:30:
         0f:9e:e0:fe:b5:7f:13:d9:d8:34:9f:d2:6a:55:5c:9c:77:df:
         06:ef:6b:43:16:04:fa:cd:cc:9f:b1:43:4c:b7:61:10:c3:64:
         fd:0b:70:f1:ad:e7:28:00:89:5e:71:b2:5e:66:0a:29:ab:e0:
         ec:fa:f8:b3:0f:8f:33:c9:79:e3:13:06:b1:30:d9:4b:a4:66:
         e9:12:9e:77:04:64:b1:20:3f:76:8f:ea:90:e2:8b:e5:34:64:
         c6:86:a2:46:3e:bb:47:f3:e7:b3:b8:5d:02:6f:f4:bb:9a:69:
         3c:ad:d4:f1:34:81:26:77:9d:a4:d5:c9:df:30:81:98:c3:46:
         d5:e4:74:5e:28:e3:99:7b:24:99:08:39:63:bc:09:76:29:61:
         fb:81:2f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----