Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8UjXThheEFAzxj81QqrweWeEXuVRrBcG4BmiCUygNeEj/0/1CD8CB0C2BEA729394E1C5AEC876CBD18364B898.mft
File:                     1CD8CB0C2BEA729394E1C5AEC876CBD18364B898.mft (raw, json)
Hash identifier:          hXop5ieGuhjcsjT3u42+GHY/r4byevE8E4QY6mwb46g=
Subject key identifier:   65:A6:B5:C2:07:2F:17:1B:05:0F:AD:48:5D:83:55:9F:ED:FC:B1:BE
Authority key identifier: 1C:D8:CB:0C:2B:EA:72:93:94:E1:C5:AE:C8:76:CB:D1:83:64:B8:98
Certificate issuer:       /CN=1CD8CB0C2BEA729394E1C5AEC876CBD18364B898
Certificate serial:       0C37F335CB541FA6B250C2E0AFF2AD8CC0FE55ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CD8CB0C2BEA729394E1C5AEC876CBD18364B898.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UjXThheEFAzxj81QqrweWeEXuVRrBcG4BmiCUygNeEj/0/1CD8CB0C2BEA729394E1C5AEC876CBD18364B898.mft
Manifest number:          14
Signing time:             Sun 14 Apr 2024 20:42:00 +0000
Manifest this update:     Sun 14 Apr 2024 20:37:00 +0000
Manifest next update:     Mon 15 Apr 2024 20:49:00 +0000
Files and hashes:         1: 1CD8CB0C2BEA729394E1C5AEC876CBD18364B898.crl (hash: OtpUOizNY7sPjEvFigqjxunQAqM3grBe+5ataOKmE6A=)
                          2: 323830343a376333383a3a2f33322d3334203d3e20323731343832.roa (hash: kQ29vG7Qm8TneIw9ua9TVEk6Qp4VhsCkDCUEtFPAG4c=)
                          3: 3138312e3233332e38302e302f32322d3234203d3e20323731343832.roa (hash: 0chnU8DYY/RTDfCxiNxxq9MbFE09N2ulDsj9b291rzI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:37:f3:35:cb:54:1f:a6:b2:50:c2:e0:af:f2:ad:8c:c0:fe:55:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CD8CB0C2BEA729394E1C5AEC876CBD18364B898
        Validity
            Not Before: Apr 14 20:37:00 2024 GMT
            Not After : Apr 15 20:49:00 2024 GMT
        Subject: CN=65A6B5C2072F171B050FAD485D83559FEDFCB1BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d9:8b:56:a9:06:3d:82:02:c0:ca:52:eb:8c:
                    83:55:37:4c:ab:7b:7a:86:4a:cc:48:58:7f:90:9b:
                    3a:95:2a:ff:95:51:53:88:24:8b:a1:64:22:4e:d2:
                    ac:c0:b3:4b:99:57:27:9f:c1:6b:ef:14:ec:92:ce:
                    fc:91:60:f6:cd:f3:dd:a5:52:a8:e2:11:23:49:8c:
                    c0:56:95:21:e2:27:cc:71:0a:db:22:96:96:a5:f3:
                    9c:1c:50:66:5c:89:cd:aa:60:75:9b:22:13:27:4e:
                    2b:c2:eb:02:ef:c0:c5:8c:0c:5d:4a:90:7d:91:08:
                    8a:fc:40:66:aa:97:5a:ed:1e:27:43:ac:3d:9c:4b:
                    fc:3c:81:e8:fe:a3:db:fb:84:76:91:ed:a1:83:89:
                    3a:f7:af:4d:c5:47:18:8a:53:c3:d6:25:3e:ce:15:
                    57:49:97:38:df:8f:83:47:75:4c:47:04:50:7a:28:
                    b8:af:dc:06:44:9e:6f:56:0b:40:2a:2a:97:48:06:
                    5a:0b:b2:e1:db:9b:a8:48:b3:59:10:09:f2:51:40:
                    47:54:c4:cc:3e:84:8c:a4:26:1b:8b:f0:36:6b:87:
                    1f:72:07:cf:6b:a0:9e:4a:44:c4:ea:ea:a7:f7:e9:
                    29:dc:b8:2f:24:60:9f:74:95:34:6b:d3:65:1d:49:
                    0a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A6:B5:C2:07:2F:17:1B:05:0F:AD:48:5D:83:55:9F:ED:FC:B1:BE
            X509v3 Authority Key Identifier:
                keyid:1C:D8:CB:0C:2B:EA:72:93:94:E1:C5:AE:C8:76:CB:D1:83:64:B8:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UjXThheEFAzxj81QqrweWeEXuVRrBcG4BmiCUygNeEj/0/1CD8CB0C2BEA729394E1C5AEC876CBD18364B898.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CD8CB0C2BEA729394E1C5AEC876CBD18364B898.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UjXThheEFAzxj81QqrweWeEXuVRrBcG4BmiCUygNeEj/0/1CD8CB0C2BEA729394E1C5AEC876CBD18364B898.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:f5:7c:94:a7:cf:7b:19:b8:ae:0b:61:75:3c:89:fb:c7:50:
         60:04:4c:d9:2c:9f:25:ea:d3:99:bd:ef:f9:99:70:c0:61:ba:
         ee:87:01:ae:e3:25:9d:05:b7:d4:cc:c7:51:90:ac:b5:4e:0b:
         33:75:f9:93:d7:8c:85:06:e3:46:f7:14:0c:b9:76:16:cb:77:
         c7:72:5f:f4:cb:29:6a:9f:8b:dd:a8:43:c2:31:ca:5b:93:32:
         ba:c0:d6:02:79:64:88:45:04:da:7c:3e:4d:ad:1f:1e:4c:a7:
         01:b6:1d:62:c5:80:83:6c:ab:33:e5:44:c0:c4:8e:5b:a2:bf:
         2c:6a:24:8e:41:0a:29:04:71:a5:57:9b:f7:84:92:94:97:9d:
         d6:9d:7d:3e:8b:f4:fe:cc:73:63:98:b8:78:5b:fa:73:3c:5a:
         97:84:72:c5:2e:d4:68:ac:19:e8:38:39:59:4e:73:fc:60:5c:
         ec:31:fc:3d:e9:5f:a0:52:9b:59:dc:6d:26:69:4e:61:e5:fb:
         11:78:89:ad:25:26:0a:12:12:f9:1b:72:39:fb:73:82:ca:4a:
         8d:6f:8d:65:69:5e:45:3c:dd:b8:80:e5:f3:b4:bd:82:70:3d:
         7d:89:38:05:d5:03:40:70:44:ae:b8:2f:bb:05:9d:20:7c:aa:
         c2:8d:3f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----