Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/AE76CCDBCB82D17A6436F86B0CFF6E7E154573D4.mft
File:                     AE76CCDBCB82D17A6436F86B0CFF6E7E154573D4.mft (raw, json)
Hash identifier:          X7Cn0F8BgPVN3MKMhQWd2grzRb0laHZ3vxSQVr9uDMI=
Subject key identifier:   C9:4E:C2:76:6D:37:72:34:95:F2:6E:28:8F:ED:06:50:B7:54:9C:50
Authority key identifier: AE:76:CC:DB:CB:82:D1:7A:64:36:F8:6B:0C:FF:6E:7E:15:45:73:D4
Certificate issuer:       /CN=AE76CCDBCB82D17A6436F86B0CFF6E7E154573D4
Certificate serial:       46A1BE8989ED46DC9BCD108690F336609EFE15CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE76CCDBCB82D17A6436F86B0CFF6E7E154573D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/AE76CCDBCB82D17A6436F86B0CFF6E7E154573D4.mft
Manifest number:          58
Signing time:             Sun 22 Oct 2023 07:36:50 +0000
Manifest this update:     Sun 22 Oct 2023 07:31:50 +0000
Manifest next update:     Mon 23 Oct 2023 10:03:50 +0000
Files and hashes:         1: 323830343a343763633a3a2f33322d313238203d3e20323637303737.roa (hash: uASMDCJyOkbpWeJyC/jlUruWGUbh7paMOD33q9FzeEU=)
                          2: AE76CCDBCB82D17A6436F86B0CFF6E7E154573D4.crl (hash: SwmWkFugH7jw5SFsM+oAggqRkRfaBCycXXRQOpACwJk=)
                          3: 34352e3232382e3130342e302f32322d3332203d3e20323637303737.roa (hash: vabH4tEBAklZLkLb840RbxL8BsBjreD9xYcIrE7mMG4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:a1:be:89:89:ed:46:dc:9b:cd:10:86:90:f3:36:60:9e:fe:15:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE76CCDBCB82D17A6436F86B0CFF6E7E154573D4
        Validity
            Not Before: Oct 22 07:31:50 2023 GMT
            Not After : Oct 23 10:03:50 2023 GMT
        Subject: CN=C94EC2766D37723495F26E288FED0650B7549C50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d1:81:08:4e:48:fe:31:06:a1:3a:7c:73:6b:
                    72:24:b3:0a:80:85:d0:8f:02:e8:29:cb:43:ca:2f:
                    be:65:ec:16:1d:b7:e2:9b:be:6a:94:c5:2b:d1:67:
                    e7:20:69:a5:65:4d:10:69:36:48:9f:f1:d7:2c:51:
                    46:ec:00:10:b9:71:d1:c0:f8:35:1a:5c:8b:ea:e0:
                    e9:48:be:88:64:ad:1f:f8:a4:a2:2c:cf:8f:6d:2a:
                    43:60:8c:34:d0:8d:00:ca:77:62:42:55:3e:32:2c:
                    86:41:a8:ea:89:6d:d9:33:94:05:a4:25:5d:82:0a:
                    c7:5b:9d:69:6b:95:a9:d6:13:3c:c8:9a:bc:3a:45:
                    31:c1:03:f2:81:f0:ba:a3:f3:b4:9c:7c:9f:51:eb:
                    87:ba:b1:33:dc:1a:fe:c6:00:a6:ab:4d:98:21:64:
                    1a:f3:03:38:06:da:a9:04:2f:7e:4f:6d:36:85:f1:
                    4c:06:56:c7:f2:64:59:b5:27:31:8a:21:a8:a8:38:
                    d4:9f:91:52:52:39:c0:21:ab:f6:ab:01:98:85:87:
                    f2:9a:41:e7:8c:56:2d:08:e8:83:3e:63:56:ac:26:
                    a7:42:73:0a:f9:98:53:a3:b9:81:da:8c:84:ee:03:
                    c8:50:da:5a:7b:d7:aa:cf:eb:79:fe:78:6f:96:f5:
                    dc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:4E:C2:76:6D:37:72:34:95:F2:6E:28:8F:ED:06:50:B7:54:9C:50
            X509v3 Authority Key Identifier:
                keyid:AE:76:CC:DB:CB:82:D1:7A:64:36:F8:6B:0C:FF:6E:7E:15:45:73:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/AE76CCDBCB82D17A6436F86B0CFF6E7E154573D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE76CCDBCB82D17A6436F86B0CFF6E7E154573D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/AE76CCDBCB82D17A6436F86B0CFF6E7E154573D4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:9f:1a:30:df:96:2a:fa:98:89:df:5b:34:7f:f7:3f:e9:0e:
         86:2f:37:18:90:c6:38:57:4c:3b:a6:54:51:49:4f:02:77:26:
         da:44:70:61:bd:e8:13:c4:a5:9e:ea:ca:43:0f:45:0e:ea:96:
         cd:e0:cc:21:6b:c2:a9:a8:c2:71:e3:14:8c:66:ce:df:0d:43:
         a4:2a:6b:51:69:65:d7:08:c1:47:6e:29:4d:81:28:e6:1b:b4:
         e6:47:6d:f7:2f:a5:a4:30:20:ce:78:00:28:7b:c5:70:cf:de:
         dd:44:06:24:9a:44:98:ef:22:95:2e:0c:c4:4e:26:cf:c0:65:
         35:77:b0:e1:6d:3c:69:0f:10:a5:03:36:04:0b:92:0f:2a:ef:
         47:7c:62:63:09:ad:39:7f:e2:1c:80:4e:9e:b2:d2:5b:2a:88:
         3d:51:bc:6f:a6:39:a4:0f:1f:6e:ab:bb:ad:67:9c:54:98:8c:
         aa:eb:f7:2e:09:3d:23:2e:57:bd:68:9d:d7:d1:88:25:74:d2:
         0e:77:34:4f:0e:0f:e9:12:10:45:5c:0f:4e:9e:e1:a6:37:ba:
         b7:f3:2b:48:90:96:6b:ea:6c:4e:96:b9:70:3b:5f:46:6a:51:
         bc:51:34:9b:e9:13:65:8b:1c:06:d6:3a:c7:c6:44:7c:42:d1:
         0a:52:54:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----