Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/87AEA97482D7676F66AE946FA15248D94581818C.mft
File:                     87AEA97482D7676F66AE946FA15248D94581818C.mft (raw, json)
Hash identifier:          f7AoGqz5yUEUJFNchwHVrEh7Lgt+tvrHOYFWQtLQ/zA=
Subject key identifier:   39:3D:AE:C0:BA:AC:4B:79:20:5E:2D:AC:BF:71:F8:23:05:74:80:67
Authority key identifier: 87:AE:A9:74:82:D7:67:6F:66:AE:94:6F:A1:52:48:D9:45:81:81:8C
Certificate issuer:       /CN=87AEA97482D7676F66AE946FA15248D94581818C
Certificate serial:       01CE4AB3D84C854269AFED489ECA620560D63272
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87AEA97482D7676F66AE946FA15248D94581818C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/87AEA97482D7676F66AE946FA15248D94581818C.mft
Manifest number:          42
Signing time:             Fri 22 Dec 2023 07:46:09 +0000
Manifest this update:     Fri 22 Dec 2023 07:41:09 +0000
Manifest next update:     Sat 23 Dec 2023 10:23:09 +0000
Files and hashes:         1: 323830343a326561303a3a2f33322d3333203d3e20323635333536.roa (hash: Ed/MFubJXQPB7YRXtRfMVZdP401ZPiYz9yrr3ywWVUY=)
                          2: 87AEA97482D7676F66AE946FA15248D94581818C.crl (hash: Up4j8X55ev98jlhzMXSgnQN+0MAbgV8chqtmhUy6Jeo=)
                          3: 3136382e3138312e3132342e302f32322d3233203d3e20323635333536.roa (hash: AjOSsmjGldFiHBEp1wt35gH8tU/fAdym5T414eXOnws=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ce:4a:b3:d8:4c:85:42:69:af:ed:48:9e:ca:62:05:60:d6:32:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87AEA97482D7676F66AE946FA15248D94581818C
        Validity
            Not Before: Dec 22 07:41:09 2023 GMT
            Not After : Dec 23 10:23:09 2023 GMT
        Subject: CN=393DAEC0BAAC4B79205E2DACBF71F82305748067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:59:56:d0:a0:cc:5a:39:0d:0d:38:74:b3:8f:
                    8e:29:f0:1c:59:14:8e:ac:14:85:ff:9e:f0:41:40:
                    a6:8b:08:09:a9:18:c4:0d:aa:a6:75:93:e3:42:c0:
                    8e:dd:49:b9:8f:69:77:f0:6f:5b:5e:6c:f8:86:53:
                    a3:ac:19:33:f6:44:a7:06:9c:5d:d4:c9:cf:f2:a8:
                    bc:5b:9a:05:70:0e:41:04:c5:f6:7f:e4:aa:a9:85:
                    08:61:4a:7d:53:2c:c6:c0:92:d9:ab:fd:1a:83:da:
                    a8:95:17:0a:38:d1:02:bf:1a:59:79:b9:36:7f:f8:
                    58:d4:27:34:05:96:23:6f:2d:0b:d6:44:d1:5c:7b:
                    83:69:2a:a1:9e:81:2b:16:eb:0c:e7:05:10:12:63:
                    dc:84:bd:ee:72:f7:1a:d6:9b:83:4a:b2:39:d0:ad:
                    da:75:e7:71:e0:81:ce:97:85:de:f7:b1:8d:98:c6:
                    9e:30:1c:13:a5:94:2d:b7:fd:fe:b7:8e:e6:0b:3a:
                    50:d4:11:3b:45:34:b1:7d:bd:16:a5:41:de:b3:8a:
                    68:5b:03:7f:cd:e8:74:5f:5c:17:53:1d:7c:e9:cc:
                    04:a0:69:51:5e:ea:8b:e6:30:07:5b:a7:50:bc:35:
                    32:84:23:2f:a6:7c:03:92:e9:4a:d5:33:94:fd:2d:
                    fd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:3D:AE:C0:BA:AC:4B:79:20:5E:2D:AC:BF:71:F8:23:05:74:80:67
            X509v3 Authority Key Identifier:
                keyid:87:AE:A9:74:82:D7:67:6F:66:AE:94:6F:A1:52:48:D9:45:81:81:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/87AEA97482D7676F66AE946FA15248D94581818C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87AEA97482D7676F66AE946FA15248D94581818C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/87AEA97482D7676F66AE946FA15248D94581818C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:01:55:6c:b1:ab:82:07:dc:1c:13:d1:f8:2e:23:f2:fc:16:
         57:33:ad:7c:c9:97:82:62:37:29:b7:49:db:26:22:6c:bb:c4:
         73:a4:86:a7:e3:51:34:68:89:9b:2e:d3:5a:4e:31:56:7a:7f:
         e8:76:74:58:b8:4f:d4:6c:f9:a4:80:ed:a3:be:10:d4:01:b1:
         d7:80:32:16:12:13:72:9a:73:d6:27:97:d6:55:36:a0:48:6a:
         50:f1:12:3e:ad:d7:f3:5a:3c:23:01:63:a2:7f:a0:00:4a:95:
         10:10:39:1e:06:ec:33:81:d7:c9:fd:e0:3c:00:5e:7d:75:42:
         b3:df:5f:08:00:63:2e:ed:52:f9:ab:3a:ce:b3:2a:50:c1:9d:
         9f:fb:d7:ba:5b:d8:9a:12:44:76:c9:36:2f:20:6e:76:9b:d0:
         9f:ab:02:b1:13:00:d5:41:d8:26:0f:0e:32:c3:74:35:bd:44:
         65:92:4c:d3:0e:9c:01:94:fe:00:97:98:18:eb:14:fc:e2:c2:
         b2:72:7c:fb:fd:1a:5a:51:ed:4a:de:01:6d:06:55:29:54:58:
         8d:16:ed:63:a2:dc:d4:09:9a:bd:5b:0d:17:22:79:0f:72:fc:
         ba:93:8c:f4:1e:65:fc:e2:50:c8:02:f1:f8:5b:b4:7e:6c:c0:
         b5:85:c5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----