Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GQ1UCgRqn1SgxUW6CBERKTwSASj5QLroZBPwcCoS7vu4/0/FF62C98F3A2C86339C4155C33DBC2A7D9BBC7CCB.mft
File:                     FF62C98F3A2C86339C4155C33DBC2A7D9BBC7CCB.mft (raw, json)
Hash identifier:          YX68zu+PH9FlIgj4NPTc3CmBAP25eBvHNf0i9KDAsjk=
Subject key identifier:   84:E9:38:F5:DF:90:11:97:00:71:D9:AA:66:76:C1:33:2C:1B:C2:B4
Authority key identifier: FF:62:C9:8F:3A:2C:86:33:9C:41:55:C3:3D:BC:2A:7D:9B:BC:7C:CB
Certificate issuer:       /CN=FF62C98F3A2C86339C4155C33DBC2A7D9BBC7CCB
Certificate serial:       63D42EC5C97F39DF8F458AE69E15F824EB1D0BAB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF62C98F3A2C86339C4155C33DBC2A7D9BBC7CCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GQ1UCgRqn1SgxUW6CBERKTwSASj5QLroZBPwcCoS7vu4/0/FF62C98F3A2C86339C4155C33DBC2A7D9BBC7CCB.mft
Manifest number:          05
Signing time:             Sun 21 Jul 2024 06:31:12 +0000
Manifest this update:     Sun 21 Jul 2024 06:26:12 +0000
Manifest next update:     Mon 22 Jul 2024 09:23:12 +0000
Files and hashes:         1: FF62C98F3A2C86339C4155C33DBC2A7D9BBC7CCB.crl (hash: N3MF0SbSHzR0i0vDbqrWwjcLaDA4I1uZXHQemFBj7gY=)
                          2: 3138312e3232352e3137322e302f32322d3332203d3e20323730393930.roa (hash: irqc9/jBM2s5sXqMGCzfoOnHKfMqmaqhiYmzQjvyNKk=)
                          3: 323830343a373439343a3a2f33322d313238203d3e20323730393930.roa (hash: 1K2szfALnIRnbr8XyS+kyTw+Tn0QIZCcle2DyniW5R0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:d4:2e:c5:c9:7f:39:df:8f:45:8a:e6:9e:15:f8:24:eb:1d:0b:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF62C98F3A2C86339C4155C33DBC2A7D9BBC7CCB
        Validity
            Not Before: Jul 21 06:26:12 2024 GMT
            Not After : Jul 22 09:23:12 2024 GMT
        Subject: CN=84E938F5DF9011970071D9AA6676C1332C1BC2B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ba:c8:14:60:91:51:92:a3:21:d5:c0:ab:2a:
                    aa:a3:88:01:27:6a:ef:f4:4d:2b:f5:8d:34:f2:e1:
                    ee:d8:e1:93:5e:90:66:c3:75:ae:ae:b2:26:b2:c7:
                    b1:d5:02:7a:0d:d0:df:e1:d3:f4:f9:39:45:46:ae:
                    bb:f3:b5:f0:e6:c5:b9:8e:51:60:e8:ac:b6:c2:9b:
                    78:05:d0:2d:86:f4:bb:e4:4b:5c:ed:13:33:9c:14:
                    5e:28:88:79:5a:b3:30:71:93:dc:90:c7:00:7d:3b:
                    57:21:ad:19:0a:1d:84:94:0c:af:b6:e7:c6:f6:00:
                    6d:ae:aa:7a:b6:ac:c8:ef:90:10:fb:b4:68:9f:f9:
                    38:30:b1:c1:7d:c5:79:26:05:ca:8c:75:1f:11:c9:
                    ab:0f:a1:f6:af:03:2f:8c:cb:b5:52:af:e9:ed:6a:
                    90:71:4f:0d:04:f8:4c:33:7a:9a:54:ae:f2:7f:70:
                    48:9f:38:a2:16:bf:ea:17:87:54:2c:ab:f3:19:69:
                    d8:b4:f5:47:41:5f:68:52:d1:02:b8:db:49:56:00:
                    00:fc:f9:40:93:63:f4:19:49:0f:95:96:d8:72:d1:
                    4b:87:31:48:c4:16:f0:d9:22:37:30:5e:9c:82:f4:
                    ff:98:4b:c1:9f:eb:c0:f2:39:32:15:37:6f:eb:dc:
                    28:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E9:38:F5:DF:90:11:97:00:71:D9:AA:66:76:C1:33:2C:1B:C2:B4
            X509v3 Authority Key Identifier:
                keyid:FF:62:C9:8F:3A:2C:86:33:9C:41:55:C3:3D:BC:2A:7D:9B:BC:7C:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GQ1UCgRqn1SgxUW6CBERKTwSASj5QLroZBPwcCoS7vu4/0/FF62C98F3A2C86339C4155C33DBC2A7D9BBC7CCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF62C98F3A2C86339C4155C33DBC2A7D9BBC7CCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GQ1UCgRqn1SgxUW6CBERKTwSASj5QLroZBPwcCoS7vu4/0/FF62C98F3A2C86339C4155C33DBC2A7D9BBC7CCB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:95:2b:b1:c9:cd:44:d3:9e:27:fb:65:ad:5d:b0:5c:18:d7:
         60:9f:58:16:b0:5d:15:3d:24:d5:57:76:1f:e5:66:b3:41:3e:
         fc:2e:d3:3e:38:fb:49:c3:e8:2a:af:7a:bf:8e:eb:d3:a4:58:
         49:42:77:e0:25:db:a4:b3:d1:71:99:c7:a6:9b:12:ad:08:53:
         ad:ad:95:b9:88:d1:69:e0:bd:f3:6b:59:d8:a3:73:61:03:6d:
         a6:72:35:ca:8b:06:54:87:73:af:16:a3:3f:fd:74:a8:ee:48:
         40:a4:e8:fa:e0:06:eb:58:0f:8c:c1:e1:8b:e6:f8:ca:31:1a:
         fa:4d:e8:0b:c2:33:4b:f7:21:45:ad:3e:bb:1c:ef:7e:92:2d:
         ee:0f:04:64:e2:34:a5:8e:70:c1:11:25:06:de:ae:28:af:cb:
         72:eb:55:50:8c:50:72:69:66:a7:fb:e3:a8:8d:4d:14:0c:fb:
         2f:e6:c7:9f:12:0e:78:ac:ef:63:5a:1f:4e:ed:f8:9c:65:0d:
         f2:c9:67:fb:0e:f6:cb:f5:52:70:82:cb:40:e1:8b:71:7f:99:
         23:9e:65:f8:9c:04:0c:d9:1f:1b:b8:fb:9b:23:b8:0d:9b:eb:
         25:c5:22:43:a7:c6:62:fd:bd:12:d2:04:81:87:ce:40:e4:b8:
         11:17:ca:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----