Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC.mft
File:                     9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC.mft (raw, json)
Hash identifier:          FYnGXkSZQ+eWF5UuaVlrLZq+pQByLyhZzMlYofNryEU=
Subject key identifier:   51:E7:D4:A4:11:03:06:6A:15:AD:19:AA:D7:8E:4E:5E:11:F8:ED:FC
Authority key identifier: 9F:A0:01:FF:2F:FE:B4:FA:4F:82:5B:BF:86:B2:D2:25:65:85:C3:BC
Certificate issuer:       /CN=9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC
Certificate serial:       39B8AF1A067B07F31C369F571E5292826BB7D3D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC.mft
Manifest number:          0113
Signing time:             Mon 15 Apr 2024 01:46:11 +0000
Manifest this update:     Mon 15 Apr 2024 01:41:11 +0000
Manifest next update:     Tue 16 Apr 2024 02:48:11 +0000
Files and hashes:         1: 3136382e3233322e3230302e302f32322d3332203d3e20323634393534.roa (hash: tgdMy9vE0V8fOL/Rmey2z9VzgBmktsgvpCzdE8kbjvA=)
                          2: 323830343a333037633a3a2f33322d313238203d3e20323634393534.roa (hash: GiqzqjCoYhwN6fsSYgWqXb61V7fSUPofMhc0Q+CPuNQ=)
                          3: 9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC.crl (hash: w15u+J1eRRtupU9cf3DlF8Q4PFekttws6wFRYFgjqb0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:b8:af:1a:06:7b:07:f3:1c:36:9f:57:1e:52:92:82:6b:b7:d3:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC
        Validity
            Not Before: Apr 15 01:41:11 2024 GMT
            Not After : Apr 16 02:48:11 2024 GMT
        Subject: CN=51E7D4A41103066A15AD19AAD78E4E5E11F8EDFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d9:e0:80:c8:2f:7d:78:8d:63:bf:a8:b1:b4:
                    0b:8e:d6:43:a1:70:d4:93:e9:5f:46:e0:44:ff:56:
                    49:ab:66:41:7b:25:50:6f:75:6f:77:25:28:64:df:
                    35:83:ef:54:61:b0:9b:cd:84:f5:8e:cf:be:c3:37:
                    e9:6f:60:c3:97:ff:4e:75:66:ae:cd:bc:c0:a3:d3:
                    14:75:a5:c9:8f:40:32:9e:33:e0:5f:63:67:89:4f:
                    7a:56:d9:7d:a1:93:8d:1e:49:72:49:88:09:73:6f:
                    fa:6e:6e:9f:ff:6a:d1:7b:e3:d2:35:f4:2a:eb:ab:
                    21:3d:c3:a9:6e:e1:d9:a6:60:65:35:93:73:bf:aa:
                    11:6f:3f:41:83:90:e6:f8:85:43:ee:31:51:06:07:
                    47:39:f5:9d:db:49:f8:df:78:14:e9:51:a7:e4:18:
                    f5:f4:22:e3:24:8c:cc:79:23:7f:d2:83:9e:a6:e6:
                    0d:c4:73:21:5d:22:ff:ae:2d:ef:b3:8a:e2:86:7d:
                    23:db:91:26:54:db:46:f5:65:43:73:86:9c:ac:63:
                    da:e8:ce:aa:0a:a1:eb:51:8b:55:b8:08:c1:a7:4d:
                    cb:0d:95:4e:e7:d7:f0:13:4e:a4:0d:02:76:b3:3b:
                    18:4e:c7:6f:a6:e7:02:08:2c:bb:5a:71:75:b6:68:
                    c5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E7:D4:A4:11:03:06:6A:15:AD:19:AA:D7:8E:4E:5E:11:F8:ED:FC
            X509v3 Authority Key Identifier:
                keyid:9F:A0:01:FF:2F:FE:B4:FA:4F:82:5B:BF:86:B2:D2:25:65:85:C3:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:a4:b5:20:46:1e:b4:5e:79:2b:4c:ae:28:a5:b3:06:60:86:
         28:9a:14:d2:27:ab:a2:91:4d:6b:1d:05:21:68:83:1f:ce:3a:
         01:42:bb:54:71:ed:f6:15:96:cd:a7:90:70:c2:86:f9:af:1f:
         09:75:c6:25:b9:01:3a:95:55:7a:67:43:cd:96:cb:b9:cf:bf:
         49:89:cc:a4:de:18:ed:92:32:67:0d:a1:33:c2:47:ed:e4:59:
         c2:e0:80:cf:a0:96:23:a1:cf:a6:de:c8:c9:58:60:0c:7a:0f:
         67:b8:ee:0c:fa:bb:64:ff:69:16:bf:7d:04:d5:be:e9:ab:f9:
         35:43:83:55:37:f8:b2:bc:6c:d4:ff:4a:0b:51:65:73:7c:95:
         40:72:37:aa:f1:7a:8d:17:22:11:c5:5a:8d:f4:17:a5:19:6a:
         cb:f3:c9:15:76:cb:6b:16:0a:d8:4b:54:39:a2:b6:70:6a:17:
         c7:1c:44:bf:65:64:10:a2:76:cc:05:95:13:fa:a2:e8:96:e1:
         98:cf:19:cf:b4:e6:b2:85:96:9f:11:69:cb:c9:9e:77:54:be:
         c1:b0:05:01:36:a7:f5:ac:1d:45:5e:e7:40:7e:61:ad:4b:2e:
         c6:95:9c:40:f6:a3:ec:d7:33:64:fb:8b:39:96:df:74:c3:aa:
         30:83:ec:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----