Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/F69AA99C56F931362559734CF519AD71790C2490.mft
File:                     F69AA99C56F931362559734CF519AD71790C2490.mft (raw, json)
Hash identifier:          tpInaEg3+AQRwGnpZrFsS8ha2LC9yDz17cDK0CWZcDY=
Subject key identifier:   C4:51:55:D3:36:E9:C8:8C:0E:C5:85:5F:7A:7B:DD:69:D9:58:69:5B
Authority key identifier: F6:9A:A9:9C:56:F9:31:36:25:59:73:4C:F5:19:AD:71:79:0C:24:90
Certificate issuer:       /CN=F69AA99C56F931362559734CF519AD71790C2490
Certificate serial:       1260CA0254304EB458DD4896BA805558B50770A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F69AA99C56F931362559734CF519AD71790C2490.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/F69AA99C56F931362559734CF519AD71790C2490.mft
Manifest number:          14
Signing time:             Tue 10 Sep 2024 00:54:02 +0000
Manifest this update:     Tue 10 Sep 2024 00:49:02 +0000
Manifest next update:     Wed 11 Sep 2024 04:24:02 +0000
Files and hashes:         1: 3137302e37382e32302e302f32322d3232203d3e20323633323932.roa (hash: sqDNpapPATutYDdpXmAxIX8Qxh5v9Y+b6mEID2iZEPE=)
                          2: 34352e3136362e38342e302f32322d3332203d3e20323633323932.roa (hash: mhpWA7i7K4DAxvpwDxHoJ5cmUAgTvw/RkJUsh75q34o=)
                          3: 3137302e3135302e38302e302f32322d3232203d3e20323633323932.roa (hash: gbluFBzUo+AT4S5JTm3wHHSA4nJUyQhktFl062VzxuY=)
                          4: F69AA99C56F931362559734CF519AD71790C2490.crl (hash: dfb52+rReaDLk1X7RPHkBgFuGwXL0z2UXqBZ1Ett1uA=)
                          5: 3138392e3132362e34302e302f32312d3231203d3e20323633323932.roa (hash: Gl/OXE6BsTVz3V1DLSybYHV4FyjkFjbsyUR7WENK34Q=)
                          6: 3137372e37312e39322e302f32322d3232203d3e20323633323932.roa (hash: EmQ1LBk4p6nyoJCVr35SkDn+5lh30rZtaWoDmX3IO7U=)
                          7: 3137372e38352e34342e302f32322d3232203d3e20323633323932.roa (hash: vvRINC7CmiIwGyabp4wwOYG32oNkrTO0AlbiCWutWio=)
                          8: 323830343a313639303a3a2f33322d313238203d3e20323633323932.roa (hash: cryKYICJGfJujYyUiq+H9ELN5zMY0I+Jun4awfnK5qQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:60:ca:02:54:30:4e:b4:58:dd:48:96:ba:80:55:58:b5:07:70:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F69AA99C56F931362559734CF519AD71790C2490
        Validity
            Not Before: Sep 10 00:49:02 2024 GMT
            Not After : Sep 11 04:24:02 2024 GMT
        Subject: CN=C45155D336E9C88C0EC5855F7A7BDD69D958695B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f2:1a:18:95:0f:cf:2a:d4:48:17:e4:52:fe:
                    77:9b:00:57:98:ee:07:86:f6:90:ce:56:c1:55:17:
                    3f:52:90:33:ff:d4:29:75:01:01:7f:33:4b:a8:f7:
                    8a:43:73:f9:da:fe:62:3e:68:00:a5:10:1e:72:82:
                    05:90:03:a1:6b:1b:58:a8:73:df:2e:7d:f1:97:41:
                    41:98:1d:0e:6a:8d:29:21:e7:ee:76:26:bf:94:ef:
                    b0:f4:05:80:58:8d:8d:d9:50:b6:85:13:88:5f:c6:
                    40:28:d0:8f:55:0a:92:68:ea:4c:2e:16:90:de:8c:
                    8d:a3:34:99:78:84:d5:a4:75:9a:0b:7d:d7:44:f6:
                    f9:07:da:0b:96:16:95:68:d7:27:60:ae:17:f0:f5:
                    5b:53:01:9c:76:20:9a:b7:58:ed:67:9e:c1:f7:78:
                    e2:8e:c3:a8:b9:c5:f7:ab:98:fa:3b:16:81:d9:e4:
                    11:ae:ae:3d:ff:4b:62:66:d0:20:a6:fb:39:42:c9:
                    80:86:57:4b:7f:2a:23:0f:38:b1:f9:4a:ae:41:af:
                    b6:55:24:2b:f8:0d:5d:46:03:a9:53:50:d2:06:38:
                    e4:de:7d:d7:80:09:bd:3c:88:7e:c2:db:a2:cb:41:
                    95:17:ca:cd:27:42:b5:33:d7:eb:65:5e:7a:67:b5:
                    2d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:51:55:D3:36:E9:C8:8C:0E:C5:85:5F:7A:7B:DD:69:D9:58:69:5B
            X509v3 Authority Key Identifier:
                keyid:F6:9A:A9:9C:56:F9:31:36:25:59:73:4C:F5:19:AD:71:79:0C:24:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/F69AA99C56F931362559734CF519AD71790C2490.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F69AA99C56F931362559734CF519AD71790C2490.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/F69AA99C56F931362559734CF519AD71790C2490.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:16:a3:87:0d:cc:85:34:c8:78:41:03:7b:2b:7d:bf:6d:a2:
         63:c3:ee:b5:11:c3:ca:92:10:49:c3:28:77:18:80:9d:1e:33:
         49:9f:4b:3a:38:94:c5:64:34:c1:4c:2f:27:35:4f:a3:7a:1b:
         21:94:ea:a7:8d:38:f4:36:4e:b6:f5:8c:31:09:6c:29:9b:4a:
         48:8a:8e:a7:9b:e0:ef:1d:c3:36:dc:ea:01:7b:6e:b3:65:b0:
         e5:7b:fe:76:64:0a:71:71:f8:ac:47:7c:1e:17:a8:e7:1f:47:
         f0:3a:44:7d:93:1f:71:b7:67:d1:a2:f5:5b:cd:5c:d8:93:d0:
         9f:e1:8e:3d:03:e3:78:e2:13:57:7b:09:7c:a6:82:81:1b:fa:
         ce:66:55:d4:d3:8f:95:3d:43:2d:9b:b9:c0:66:1d:0c:a1:03:
         5a:7a:82:ea:7e:6d:de:21:07:e5:ef:8a:c1:71:d6:95:d4:5b:
         f0:42:bb:94:f6:42:2d:57:84:77:e6:8a:86:4c:32:d7:69:db:
         5c:d1:ad:3a:d8:dc:c6:d3:6f:b6:ba:e7:72:ca:93:c9:8f:69:
         1a:ec:f6:36:47:4d:01:3e:c1:4c:1a:0f:82:4c:b2:0d:94:97:
         3b:cd:6f:51:09:ca:eb:03:2b:81:ac:3f:f8:00:2b:6e:76:49:
         4b:c3:04:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----