Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/CB7CB1FB638FEB1E83A6B71EF3A1D4B4396349AC.mft
File:                     CB7CB1FB638FEB1E83A6B71EF3A1D4B4396349AC.mft (raw, json)
Hash identifier:          zZEww7Nkhg3V2kfj4IFzWI1zUIIxzPv3SRLzJf9y3k4=
Subject key identifier:   9D:43:87:4C:84:6D:E8:54:1A:ED:F9:D9:88:2B:AC:9D:C8:C2:49:D2
Authority key identifier: CB:7C:B1:FB:63:8F:EB:1E:83:A6:B7:1E:F3:A1:D4:B4:39:63:49:AC
Certificate issuer:       /CN=CB7CB1FB638FEB1E83A6B71EF3A1D4B4396349AC
Certificate serial:       7127E8D230E806638F08873A6EF2F33D9E2BA8F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB7CB1FB638FEB1E83A6B71EF3A1D4B4396349AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/CB7CB1FB638FEB1E83A6B71EF3A1D4B4396349AC.mft
Manifest number:          2B
Signing time:             Tue 09 Jan 2024 06:45:19 +0000
Manifest this update:     Tue 09 Jan 2024 06:40:19 +0000
Manifest next update:     Wed 10 Jan 2024 09:56:19 +0000
Files and hashes:         1: 3230302e362e3133342e302f32332d3233203d3e20323731353733.roa (hash: rmgAzcwn6JpDTiloPpLWereA27mlbOSzaNmDj4JoyGY=)
                          2: 3230302e302e3137392e302f32342d3234203d3e20323731353733.roa (hash: NtorrnpiE9fWZkdxS3fcyj6Sgj2T9zVZmPPv9g0EHN4=)
                          3: 3230312e3133312e3130362e302f32342d3234203d3e20323731353733.roa (hash: QLdKS50f/QoxuRSWav9BzEGRpH7U3p7W7sUYKBAps+s=)
                          4: 323830343a376461303a3a2f33322d3332203d3e20323731353733.roa (hash: HURRVGiAenmDMYD6UHG86SzquqVShUb0vgJ0etb4v+4=)
                          5: CB7CB1FB638FEB1E83A6B71EF3A1D4B4396349AC.crl (hash: P2T8H6PzFAkd8vE+ObNJOPWYk4EoRGL5ktHk3LxtsEg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:27:e8:d2:30:e8:06:63:8f:08:87:3a:6e:f2:f3:3d:9e:2b:a8:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB7CB1FB638FEB1E83A6B71EF3A1D4B4396349AC
        Validity
            Not Before: Jan  9 06:40:19 2024 GMT
            Not After : Jan 10 09:56:19 2024 GMT
        Subject: CN=9D43874C846DE8541AEDF9D9882BAC9DC8C249D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:22:f6:70:25:2b:8f:c1:fb:4d:a9:ac:fb:c7:
                    bd:dd:fe:eb:9a:99:ae:10:23:73:57:99:37:4b:8f:
                    14:81:b5:5b:7e:ab:2b:22:75:20:33:b9:a6:4d:f7:
                    0a:55:9b:99:9c:f2:57:b1:64:ca:50:3f:35:b2:06:
                    81:d9:9b:f7:e4:04:ed:88:8b:1b:30:49:55:72:46:
                    48:65:14:5c:10:9b:3e:8c:b5:5e:81:64:a6:9f:6f:
                    ac:8d:5b:03:ff:d9:28:68:c3:41:7e:dc:26:a8:ec:
                    32:29:df:63:20:e7:d6:a5:a8:ca:0c:81:f7:a6:c7:
                    ef:fd:2d:7b:57:14:6a:c5:78:86:34:80:75:8f:6d:
                    5c:78:9b:c1:c4:76:c9:c3:77:d3:b4:18:18:f0:05:
                    f0:f0:8a:a8:39:26:7f:3f:b7:e6:ec:7d:4f:85:dc:
                    79:fe:4b:9a:e7:30:dc:cf:31:ae:04:69:6f:cd:9c:
                    ee:56:e5:c3:18:dc:bb:ad:ed:0d:d5:9d:6d:84:59:
                    20:87:a2:60:32:13:5e:d3:e8:98:3a:b6:7d:45:38:
                    85:a8:9f:5c:51:3e:d8:ad:16:02:24:19:3a:e3:14:
                    2e:46:ee:89:5c:f4:f2:8b:9a:ad:8e:04:23:9b:4c:
                    86:56:f4:f4:35:10:6c:d3:f5:5e:81:ba:d3:0f:97:
                    57:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:43:87:4C:84:6D:E8:54:1A:ED:F9:D9:88:2B:AC:9D:C8:C2:49:D2
            X509v3 Authority Key Identifier:
                keyid:CB:7C:B1:FB:63:8F:EB:1E:83:A6:B7:1E:F3:A1:D4:B4:39:63:49:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/CB7CB1FB638FEB1E83A6B71EF3A1D4B4396349AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB7CB1FB638FEB1E83A6B71EF3A1D4B4396349AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/CB7CB1FB638FEB1E83A6B71EF3A1D4B4396349AC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:09:16:1b:f4:e4:f3:1a:e8:c0:cd:e7:f7:4a:4b:05:bf:03:
         96:fb:f7:7d:a2:1c:8f:ab:1f:cc:ce:eb:fa:d5:76:73:2f:8f:
         f0:df:27:73:2b:54:95:b6:29:f3:64:5f:70:5d:a4:1c:06:6c:
         d6:fd:75:c6:74:58:b5:bf:5a:f6:bc:4a:16:b0:12:a5:cf:07:
         91:39:93:d8:aa:2f:bd:42:5e:0b:e0:bf:ed:2d:4a:af:ad:c3:
         e5:aa:05:7b:df:48:9f:77:96:26:3d:4a:33:de:b8:cd:5d:b8:
         17:9f:cd:67:8a:e5:d9:ba:f5:d0:6c:4e:eb:4a:aa:4c:4a:0a:
         b9:fc:68:56:3d:bc:d8:dc:f7:cb:41:44:01:9b:da:7e:89:89:
         b2:ce:c2:03:e7:9f:0e:76:38:92:42:28:50:15:01:c4:bf:d8:
         2d:5e:ef:58:96:bd:5a:88:e2:3a:5d:47:19:04:96:6d:f5:00:
         99:c2:b2:43:29:f5:db:c9:e3:44:17:04:25:dc:30:28:69:eb:
         b6:d3:6c:c4:f9:5d:77:b8:4f:94:b1:e6:6f:d7:9d:d6:3c:b1:
         44:80:41:36:69:8e:d8:8c:8b:99:8c:7d:4c:dc:bd:df:df:d3:
         33:05:9c:8b:f4:b4:a8:f2:89:60:55:58:e9:81:1f:05:9d:87:
         e7:c0:6a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----