Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/BF851634012BB41CA453797117895269EB822323.mft
File:                     BF851634012BB41CA453797117895269EB822323.mft (raw, json)
Hash identifier:          uZAfQqehSWv1I7x94WzOrLrOzlbcUAI8dvLQZKgfl7A=
Subject key identifier:   95:9D:FA:FE:9B:C1:83:9D:A4:55:2E:FA:79:C8:E7:D4:9F:61:DC:5D
Authority key identifier: BF:85:16:34:01:2B:B4:1C:A4:53:79:71:17:89:52:69:EB:82:23:23
Certificate issuer:       /CN=BF851634012BB41CA453797117895269EB822323
Certificate serial:       68CF72F39D8E78B5B5B7BABA59C6F1FEB5844914
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF851634012BB41CA453797117895269EB822323.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/BF851634012BB41CA453797117895269EB822323.mft
Manifest number:          0E
Signing time:             Mon 24 Jun 2024 10:34:12 +0000
Manifest this update:     Mon 24 Jun 2024 10:29:12 +0000
Manifest next update:     Tue 25 Jun 2024 11:09:12 +0000
Files and hashes:         1: 323830343a363833303a3a2f33322d3334203d3e20323639363734.roa (hash: vSnG/L4o3CriJ8yXiam2cFnWoGczrZQCHDg8xhG2X7Y=)
                          2: BF851634012BB41CA453797117895269EB822323.crl (hash: +zq6gLEGu953JOt7uE5m6F2xVdggvPKz4h+LD0jg7KU=)
                          3: 34352e3139312e3134302e302f32322d3234203d3e20323639363734.roa (hash: upl6qYqJiM2yF3InvbKNyLspq5p6HpCzrEbXIZRKBLI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:cf:72:f3:9d:8e:78:b5:b5:b7:ba:ba:59:c6:f1:fe:b5:84:49:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF851634012BB41CA453797117895269EB822323
        Validity
            Not Before: Jun 24 10:29:12 2024 GMT
            Not After : Jun 25 11:09:12 2024 GMT
        Subject: CN=959DFAFE9BC1839DA4552EFA79C8E7D49F61DC5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:81:f9:71:e9:54:cc:96:c3:e2:33:cf:6f:19:
                    87:d8:85:1b:b4:1c:03:b9:9f:bb:aa:fa:ba:35:ba:
                    c2:27:e4:98:13:d5:fb:55:02:0a:08:86:98:64:63:
                    fc:a0:a3:bc:69:dd:5f:79:da:1f:86:d2:0c:28:b3:
                    40:1f:ec:3a:e2:6d:d7:15:dc:4c:66:29:b9:ee:d0:
                    60:a9:13:82:79:2f:2e:fc:dd:e6:d3:ba:ac:00:38:
                    0d:79:3a:74:1f:a7:f4:da:16:d9:12:0c:5c:30:d9:
                    18:71:2e:83:11:f8:fa:b0:78:ca:74:6a:e4:ad:44:
                    1c:27:08:d1:a9:48:61:fe:98:dc:4d:56:20:b3:e0:
                    01:39:9a:7a:f8:18:d8:ab:c1:59:06:bd:b2:c4:d2:
                    bd:4e:16:2a:dd:56:52:18:42:08:a4:23:d6:aa:59:
                    4f:8a:b3:80:fc:4b:bf:a8:ed:08:66:68:41:e7:7d:
                    cb:ca:8c:27:3a:8f:2c:ff:2f:a8:d4:d6:5b:8a:64:
                    7c:f7:b7:45:d6:27:5e:e1:50:d5:22:1b:5c:c9:46:
                    2b:24:7e:89:be:f8:fb:60:27:f7:80:12:e5:2e:0b:
                    aa:b2:b5:c0:84:ad:b1:b1:cf:12:35:08:0a:8d:b7:
                    9d:29:d3:ae:b0:ff:b0:6e:03:38:41:53:e3:4d:1e:
                    94:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9D:FA:FE:9B:C1:83:9D:A4:55:2E:FA:79:C8:E7:D4:9F:61:DC:5D
            X509v3 Authority Key Identifier:
                keyid:BF:85:16:34:01:2B:B4:1C:A4:53:79:71:17:89:52:69:EB:82:23:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/BF851634012BB41CA453797117895269EB822323.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF851634012BB41CA453797117895269EB822323.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/BF851634012BB41CA453797117895269EB822323.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:a0:d8:dd:1e:c7:3c:15:20:f4:0d:8b:70:5a:90:79:a7:67:
         59:77:f9:14:21:6c:7d:2d:70:94:3d:de:6c:db:d7:4c:17:67:
         37:ad:be:94:6b:c7:71:5a:cf:c6:fa:7e:bf:f3:ef:d4:7b:b3:
         d0:80:31:55:14:17:2f:a1:c9:3f:51:fa:9c:5d:7c:ca:fe:58:
         60:dc:98:5a:fe:86:7d:2a:cc:65:25:81:db:11:ff:cb:d2:cf:
         c3:d7:66:4d:df:52:90:9a:d5:9e:24:cb:e4:86:dd:3e:b7:69:
         0d:48:ed:a8:ac:13:4a:95:f7:19:4d:dc:89:9b:ec:f5:14:c7:
         6d:19:fb:c0:39:2d:8e:08:b5:75:cd:e4:5e:51:25:e7:7b:f4:
         fc:53:cc:9e:b4:8e:77:f8:98:67:61:e6:1b:30:a2:72:03:43:
         a1:49:e0:05:e7:16:f7:a5:3e:fb:36:98:13:8a:5f:03:cc:89:
         10:c7:95:80:58:1c:aa:67:bb:1f:d6:14:68:91:20:75:22:b5:
         af:fe:fc:be:e5:03:9e:91:8a:61:2a:95:75:8f:0e:91:ae:cc:
         5f:d7:8e:c1:ed:3e:4d:c7:8e:25:18:34:f9:de:ce:ef:3a:bd:
         b9:58:15:2b:c6:e9:93:a3:1c:7d:58:56:90:b1:db:b1:64:b1:
         79:6c:26:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----