Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/0/8C00F31BC45687EF6BA82B7C0B79EF422248F616.mft
File:                     8C00F31BC45687EF6BA82B7C0B79EF422248F616.mft (raw, json)
Hash identifier:          RqrTsqgVwPIK+FNf2mI8LOsxZ4q2Icar7lRFXYCsMgk=
Subject key identifier:   C3:45:97:94:FD:D9:7D:BF:84:35:09:C0:71:B9:AC:93:01:E0:C6:F0
Authority key identifier: 8C:00:F3:1B:C4:56:87:EF:6B:A8:2B:7C:0B:79:EF:42:22:48:F6:16
Certificate issuer:       /CN=8C00F31BC45687EF6BA82B7C0B79EF422248F616
Certificate serial:       65E2D9A958FBA889A7755E79EEA8546D29A335A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C00F31BC45687EF6BA82B7C0B79EF422248F616.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/0/8C00F31BC45687EF6BA82B7C0B79EF422248F616.mft
Manifest number:          04CA
Signing time:             Sun 14 Apr 2024 21:00:00 +0000
Manifest this update:     Sun 14 Apr 2024 20:55:00 +0000
Manifest next update:     Mon 15 Apr 2024 21:00:00 +0000
Files and hashes:         1: 3133382e3138362e3233392e302f32342d3234203d3e20323634353237.roa (hash: 3c13evEGXbCjbvZD7F58OexdD0XAhwCE9tR5qmIVw5U=)
                          2: 3133382e302e352e302f32342d3234203d3e20323634353237.roa (hash: YVCpIHzGvBS4kkoaPa3R2JSH8AGzwlIFtaZqZcJmyyQ=)
                          3: 323830343a323130343a3a2f33322d3332203d3e20323634353237.roa (hash: Gq8/2AYhKXHSHCyCKbqJbta44FqYk7GQygqQPnG3jCA=)
                          4: 3133382e302e362e302f32342d3234203d3e20323634353237.roa (hash: Fc8ccuVeG+jq7MRI3TCc/R61Xp8akqbXiqlGjUPyyKQ=)
                          5: 3133382e302e372e302f32342d3234203d3e20323634353237.roa (hash: +0AZ0IDa+yuKafR38ccWz3Ue7Bx4UFzxi3uJX/jBw0Y=)
                          6: 3133382e3138362e3233362e302f32342d3234203d3e20323634353237.roa (hash: ijdvkVp29PC/eeQC9tO8qiv6xX7QPoiMhueIsU6Ffes=)
                          7: 3133382e3138362e3233372e302f32342d3234203d3e20323634353237.roa (hash: UXhXoFLwTP6WB7UJdLhDi8oMDM9hUp5TRvT+6b58fik=)
                          8: 8C00F31BC45687EF6BA82B7C0B79EF422248F616.crl (hash: HbBG/hJfYnEH0Eeqo4+sXeCVbhp+M/tRRRPg0U/YuyM=)
                          9: 3133382e3138362e3233382e302f32342d3234203d3e20323634353237.roa (hash: 9Kz0pirvxIDs5qJ5JS8PG5N3NM9gO1UpTyNBe9qSqwM=)
                          10: 3133382e302e342e302f32342d3234203d3e20323634353237.roa (hash: KXkvgAWtdJ0L2+XqXH2ybJQsZfXQ3lpWnvB4bpgaU5A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:e2:d9:a9:58:fb:a8:89:a7:75:5e:79:ee:a8:54:6d:29:a3:35:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C00F31BC45687EF6BA82B7C0B79EF422248F616
        Validity
            Not Before: Apr 14 20:55:00 2024 GMT
            Not After : Apr 21 21:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f4:f6:99:88:23:0d:6b:32:f6:5e:68:ce:42:
                    b6:fe:04:37:10:2a:0b:e4:d8:af:c4:95:a6:25:8f:
                    90:24:48:2a:3d:3a:7f:8a:84:19:02:fa:02:4a:65:
                    e1:50:fe:82:42:30:51:cd:c5:c0:64:20:72:f6:27:
                    79:da:f2:91:d0:28:60:b5:ca:74:1c:e5:c8:12:54:
                    88:0b:3c:75:a6:44:35:0b:8e:83:10:7b:65:27:7a:
                    5b:89:da:8b:5f:66:13:fa:14:d6:2f:ba:af:61:07:
                    aa:0a:d1:a7:a9:66:8c:88:49:91:fa:ee:3a:8f:e6:
                    ab:50:70:5f:13:49:3f:75:67:33:23:cc:e8:ad:81:
                    ab:a2:2a:e5:d9:a2:d7:96:8a:f2:b6:7b:b2:b1:ce:
                    1d:32:b5:c7:a6:b6:9c:5e:83:fd:a4:3e:a7:66:ea:
                    c4:a6:7c:00:ae:24:ec:d2:d5:bc:a4:66:6d:e0:7b:
                    1e:d6:ac:27:12:60:bc:17:4e:de:7f:67:08:d9:92:
                    70:6a:a4:6b:5c:a6:6a:76:70:eb:0f:a1:c3:30:e0:
                    4a:21:e7:bb:df:7d:1b:4c:a3:d1:a0:88:61:4a:90:
                    94:44:4c:31:1d:fb:aa:cc:e7:d5:c4:b2:22:97:d7:
                    75:1d:48:f4:08:a8:73:cf:a2:a3:d3:56:69:d9:e9:
                    d3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:45:97:94:FD:D9:7D:BF:84:35:09:C0:71:B9:AC:93:01:E0:C6:F0
            X509v3 Authority Key Identifier:
                keyid:8C:00:F3:1B:C4:56:87:EF:6B:A8:2B:7C:0B:79:EF:42:22:48:F6:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/0/8C00F31BC45687EF6BA82B7C0B79EF422248F616.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C00F31BC45687EF6BA82B7C0B79EF422248F616.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/0/8C00F31BC45687EF6BA82B7C0B79EF422248F616.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:0d:eb:4d:49:af:f1:e9:a5:67:b9:d3:42:7f:31:eb:0b:0f:
         72:40:ba:bc:e6:68:d4:2b:14:0b:aa:7c:a7:aa:70:6f:e7:e8:
         be:68:77:99:2d:e1:14:82:8e:e1:bf:c0:d0:81:9f:52:9b:a8:
         70:cc:79:41:76:87:b6:d5:ef:56:7f:ac:ce:73:b7:6c:13:c9:
         bf:18:4d:c0:18:50:0b:1c:55:12:a7:d0:4c:ea:11:80:4f:8f:
         b6:d7:75:c7:b2:5a:dd:19:4a:e3:ea:71:49:9b:fe:02:a1:f7:
         6e:2b:b6:44:0b:2a:26:e9:f7:00:78:69:c7:10:03:1d:d3:1b:
         66:f2:72:b5:a7:de:e1:6f:3e:23:cb:6c:c8:9c:06:de:1d:ee:
         a4:43:64:41:95:2f:0c:ee:bf:e5:91:9e:76:c6:a0:66:f0:e3:
         d5:b5:47:4a:c9:e4:aa:8e:72:81:7a:f8:69:fb:56:0b:0d:8e:
         d5:bb:1d:75:23:90:f0:ac:bb:91:34:5f:6a:1e:5a:3f:2e:ee:
         6a:7b:dc:d5:36:c3:89:0c:55:c2:ca:48:3f:96:4b:7b:d2:3f:
         a6:47:44:5a:32:8a:b9:99:b0:ef:18:06:b8:77:b2:3d:c0:d9:
         7f:52:1a:a6:f9:27:04:04:2c:15:e7:d8:44:7c:dc:4c:7d:19:
         84:95:b0:a8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----