Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FvwnQAPcNkYHx9evPfZYT4bB9QUjmr7V9VmmxE1cby6b/0/BF4A62081DDF9DBFFDD7B8428E72148EDEACDC75.mft
File:                     BF4A62081DDF9DBFFDD7B8428E72148EDEACDC75.mft (raw, json)
Hash identifier:          BM0YGyWBVRV2sY8cGiFNeYurKOIitOL2UeQblP//Q1M=
Subject key identifier:   2A:AD:0A:3D:F3:95:DA:DE:9C:24:2A:04:7C:2E:D9:48:E4:11:B1:74
Authority key identifier: BF:4A:62:08:1D:DF:9D:BF:FD:D7:B8:42:8E:72:14:8E:DE:AC:DC:75
Certificate issuer:       /CN=BF4A62081DDF9DBFFDD7B8428E72148EDEACDC75
Certificate serial:       60298B542A98BA9B432ED0066DA2F86D1B582404
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF4A62081DDF9DBFFDD7B8428E72148EDEACDC75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FvwnQAPcNkYHx9evPfZYT4bB9QUjmr7V9VmmxE1cby6b/0/BF4A62081DDF9DBFFDD7B8428E72148EDEACDC75.mft
Manifest number:          0156
Signing time:             Mon 15 Apr 2024 12:22:02 +0000
Manifest this update:     Mon 15 Apr 2024 12:17:02 +0000
Manifest next update:     Tue 16 Apr 2024 15:54:02 +0000
Files and hashes:         1: 3137372e3132342e3136342e302f32322d3234203d3e203532363239.roa (hash: NIJC0rz7nqSfsIzkH6fAvKhnCDN3aBIf/uhJUojoRcc=)
                          2: BF4A62081DDF9DBFFDD7B8428E72148EDEACDC75.crl (hash: nZeJdMxG2ssVl27jcueLxwwzUhjALU1lWV14+bP5Rsw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:29:8b:54:2a:98:ba:9b:43:2e:d0:06:6d:a2:f8:6d:1b:58:24:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF4A62081DDF9DBFFDD7B8428E72148EDEACDC75
        Validity
            Not Before: Apr 15 12:17:02 2024 GMT
            Not After : Apr 16 15:54:02 2024 GMT
        Subject: CN=2AAD0A3DF395DADE9C242A047C2ED948E411B174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:71:d2:7a:c7:92:34:56:a8:67:67:b8:32:6f:
                    e6:5a:c7:84:e1:0c:da:88:be:c4:99:67:8a:53:64:
                    35:c4:d8:35:17:76:e6:35:71:b4:5b:fb:f4:99:c5:
                    f0:e7:22:c2:1f:94:44:6a:16:1b:87:a8:28:16:20:
                    07:e2:0d:e4:d7:db:74:50:1c:e5:44:04:fb:24:60:
                    19:93:6d:b1:bd:79:01:30:dd:3f:8f:a0:ea:87:d9:
                    b1:8f:e3:3f:4c:b8:50:8d:fc:ac:65:2f:fe:52:ba:
                    07:c1:44:f5:23:23:03:87:ff:77:a5:bd:57:a2:69:
                    d3:7e:84:e5:1a:62:c5:43:00:98:29:a9:65:f6:0b:
                    16:d0:2a:ca:2a:a2:59:ef:16:11:06:e5:f4:93:b5:
                    cc:57:c3:7c:62:33:19:0c:24:59:c1:39:aa:4d:90:
                    fb:91:46:23:16:1f:05:4a:f9:11:df:84:54:2c:75:
                    8c:94:95:33:9c:70:3c:43:4a:ab:18:2d:5b:85:08:
                    79:c2:6e:40:0a:cf:af:d6:a0:89:97:91:80:ec:9a:
                    10:67:9a:ea:b3:06:9e:f1:5c:d8:20:3e:c3:5e:57:
                    a1:35:ff:42:3c:c5:07:71:4a:1e:6a:17:2d:70:65:
                    bf:40:fa:61:c5:bc:d8:25:7f:d7:f5:99:ee:42:a9:
                    33:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:AD:0A:3D:F3:95:DA:DE:9C:24:2A:04:7C:2E:D9:48:E4:11:B1:74
            X509v3 Authority Key Identifier:
                keyid:BF:4A:62:08:1D:DF:9D:BF:FD:D7:B8:42:8E:72:14:8E:DE:AC:DC:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FvwnQAPcNkYHx9evPfZYT4bB9QUjmr7V9VmmxE1cby6b/0/BF4A62081DDF9DBFFDD7B8428E72148EDEACDC75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF4A62081DDF9DBFFDD7B8428E72148EDEACDC75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FvwnQAPcNkYHx9evPfZYT4bB9QUjmr7V9VmmxE1cby6b/0/BF4A62081DDF9DBFFDD7B8428E72148EDEACDC75.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:10:36:d6:93:e3:73:63:0e:c6:79:72:ae:d4:2a:eb:72:1b:
         6b:1e:75:cf:e9:3d:f7:4a:73:70:98:8a:4a:6e:bf:d5:7b:b0:
         ac:f2:b6:6b:ff:97:36:29:26:77:5d:80:a8:8a:44:8e:76:3d:
         d3:39:d2:3c:23:fb:99:ac:5b:87:58:b6:ed:29:28:c0:63:a0:
         f8:2c:a0:cf:33:9a:a0:ba:b9:66:08:32:5b:95:13:fd:91:8b:
         59:62:13:76:80:64:73:09:36:50:35:19:dc:12:3d:04:7e:a8:
         20:8a:0d:ce:18:0f:4b:c2:65:e4:eb:14:97:ad:dd:ae:42:16:
         f7:b7:a8:23:2d:81:90:5c:b2:8f:60:b4:e1:67:2a:55:ad:43:
         4b:53:e4:93:e5:4d:eb:e0:9b:8d:8a:f5:20:1c:17:09:9a:83:
         74:60:df:6a:8f:5d:e9:fe:c9:0b:57:af:99:0c:6c:ad:c2:31:
         f9:3f:cd:cd:a0:48:36:e7:b2:8d:25:35:b4:6e:a1:81:9a:71:
         f5:e0:18:d8:f0:a9:b8:82:ba:cc:68:de:5d:67:b8:7e:1a:66:
         b4:37:64:3b:db:7f:b5:8c:b0:fc:f8:62:a2:74:8c:07:e2:cc:
         68:bb:72:a5:74:97:89:db:f6:57:c7:78:ed:71:2d:ef:4e:b0:
         ff:48:82:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----