Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/93F3F857B1F9E1EC7AFE49B49953E6E27BD4B3D7.mft
File:                     93F3F857B1F9E1EC7AFE49B49953E6E27BD4B3D7.mft (raw, json)
Hash identifier:          qksUyU81VIF9ZcwzIYy290MJ6U78aJCbEfvwniCAdTU=
Subject key identifier:   43:A5:6D:5A:AC:BD:82:BD:25:59:9F:74:CC:1D:C9:DF:98:69:B9:28
Authority key identifier: 93:F3:F8:57:B1:F9:E1:EC:7A:FE:49:B4:99:53:E6:E2:7B:D4:B3:D7
Certificate issuer:       /CN=93F3F857B1F9E1EC7AFE49B49953E6E27BD4B3D7
Certificate serial:       41F828163E30DC89F5A24E14AA6C6A3413C53B7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93F3F857B1F9E1EC7AFE49B49953E6E27BD4B3D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/93F3F857B1F9E1EC7AFE49B49953E6E27BD4B3D7.mft
Manifest number:          0699
Signing time:             Tue 16 Jan 2024 07:05:45 +0000
Manifest this update:     Tue 16 Jan 2024 07:00:45 +0000
Manifest next update:     Wed 17 Jan 2024 11:01:45 +0000
Files and hashes:         1: 34352e3138362e3232382e302f32322d3234203d3e20323639343339.roa (hash: d1v0gml5drfyk8FlEHVNOqSMVfO90bgJ/0LTvY32FUs=)
                          2: 323830343a363461303a3a2f33322d3336203d3e20323639343339.roa (hash: MezOo8o/brWNw8THlREcGSuYLG27F7lam4ZhZ5g0rlo=)
                          3: 93F3F857B1F9E1EC7AFE49B49953E6E27BD4B3D7.crl (hash: Nj/mlZEWyTNhCtzlHc3dAGFX5vAVx0CUSq7h2u/wA4I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f8:28:16:3e:30:dc:89:f5:a2:4e:14:aa:6c:6a:34:13:c5:3b:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93F3F857B1F9E1EC7AFE49B49953E6E27BD4B3D7
        Validity
            Not Before: Jan 16 07:00:45 2024 GMT
            Not After : Jan 17 11:01:45 2024 GMT
        Subject: CN=43A56D5AACBD82BD25599F74CC1DC9DF9869B928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:29:7b:ef:1d:fb:83:3d:bc:87:ae:8b:63:5f:
                    13:4a:b3:9b:ac:b3:a3:62:8c:a0:76:c9:b2:6c:9b:
                    51:55:4d:8c:33:64:59:89:24:2e:37:9d:f1:f1:0e:
                    d3:57:98:0d:e9:08:59:83:d5:94:29:4c:6b:17:b3:
                    7d:57:7b:d7:b8:11:0d:1a:72:bd:2a:52:c9:c3:c4:
                    28:4e:62:68:e0:50:09:97:4d:5a:d7:81:d9:16:34:
                    d9:2e:5e:ca:37:db:ad:cc:bb:e9:f6:2f:47:31:ec:
                    a4:72:0a:8a:76:d4:df:3d:e1:ee:13:15:dd:fd:f5:
                    a0:ea:ac:c6:17:08:7a:1d:0a:b1:b9:5e:c2:df:34:
                    ae:c6:85:8b:7d:f5:b8:e6:6e:f9:4c:02:d5:71:6f:
                    98:f1:29:a1:de:f2:04:f2:2e:74:42:05:80:65:e5:
                    dd:1c:ed:8b:25:48:6b:2f:5c:eb:54:dd:fe:b6:bd:
                    b5:fa:cb:7b:02:de:ff:46:88:8a:13:4d:d5:e8:cf:
                    69:9f:3b:a7:29:4e:65:6c:65:d4:ad:1f:12:81:66:
                    49:22:8a:bd:d5:f9:d6:6a:dd:05:bb:20:f4:63:eb:
                    9a:d9:3b:ff:7b:df:06:65:6a:74:57:36:9c:00:b9:
                    81:8e:97:cf:00:f9:73:78:c1:5b:60:97:a1:69:fd:
                    3c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A5:6D:5A:AC:BD:82:BD:25:59:9F:74:CC:1D:C9:DF:98:69:B9:28
            X509v3 Authority Key Identifier:
                keyid:93:F3:F8:57:B1:F9:E1:EC:7A:FE:49:B4:99:53:E6:E2:7B:D4:B3:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/93F3F857B1F9E1EC7AFE49B49953E6E27BD4B3D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93F3F857B1F9E1EC7AFE49B49953E6E27BD4B3D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/93F3F857B1F9E1EC7AFE49B49953E6E27BD4B3D7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:9a:a3:03:8b:97:69:1d:cb:96:74:6c:8f:80:6f:ee:14:6a:
         50:4a:eb:9e:86:23:1c:a4:4c:31:1f:01:70:51:0d:7f:df:af:
         75:68:b2:fe:56:6e:2b:f6:cb:8f:67:e9:74:cb:76:7c:0f:80:
         d4:d1:54:67:bd:5b:b8:1c:93:7c:fb:44:31:30:5d:72:aa:bc:
         30:d3:1f:6a:5e:26:ae:ae:31:7b:67:1b:10:e3:a0:0e:d7:bb:
         a2:1d:5f:c8:62:c3:06:08:26:2c:79:7d:e3:1f:af:dc:c4:06:
         37:37:67:43:97:f7:45:d6:0a:35:72:2b:16:c4:11:e2:a1:2b:
         41:a2:98:c7:a2:40:db:e2:0c:e2:97:73:57:22:6a:2d:a1:7a:
         34:33:87:48:4f:fe:a7:93:d7:88:f4:a3:3e:d9:dd:9e:d5:97:
         ce:5d:02:eb:da:a3:0c:56:2f:98:76:37:6e:ae:32:0a:0d:3a:
         04:3c:58:13:ab:4c:c7:83:9c:7c:ac:3b:04:a3:37:ab:92:d3:
         53:9b:63:aa:7a:a6:19:68:5e:93:81:fc:8a:c9:3f:44:32:8b:
         fc:33:40:c5:f7:c5:3b:28:70:b5:c4:7b:b9:17:a1:c2:21:a1:
         db:0e:d9:21:ad:5e:07:d2:51:45:6b:c7:71:00:02:c9:c4:d7:
         24:6f:42:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----