Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/1F8EA56D0372D7921494C12386D333D8E95C252D.mft
File:                     1F8EA56D0372D7921494C12386D333D8E95C252D.mft (raw, json)
Hash identifier:          CkaK0Vt7XbESzxxiJ/JX20muPRPl17CTyEAnYC7f39k=
Subject key identifier:   08:7C:CB:1C:CB:B4:E7:97:6D:20:75:6E:E6:12:F9:B5:17:0C:A8:A2
Authority key identifier: 1F:8E:A5:6D:03:72:D7:92:14:94:C1:23:86:D3:33:D8:E9:5C:25:2D
Certificate issuer:       /CN=1F8EA56D0372D7921494C12386D333D8E95C252D
Certificate serial:       0F1B61B44E53EBEFB6D7E6F821FA9AC7B42010F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F8EA56D0372D7921494C12386D333D8E95C252D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/1F8EA56D0372D7921494C12386D333D8E95C252D.mft
Manifest number:          02D6
Signing time:             Mon 15 Apr 2024 10:23:19 +0000
Manifest this update:     Mon 15 Apr 2024 10:18:19 +0000
Manifest next update:     Tue 16 Apr 2024 11:43:19 +0000
Files and hashes:         1: 323830343a323939343a3a2f33322d313238203d3e20323634303233.roa (hash: VBlaa19Df4Rs8UJeheSVuESHsYj0ph0q5yrdpILsUjU=)
                          2: 1F8EA56D0372D7921494C12386D333D8E95C252D.crl (hash: H9Pg6uKGr+8K/MaTCjRzBD5wBW6SB2cfyZLu9MMdoyU=)
                          3: 3134332e302e3235322e302f32322d3332203d3e20323634303233.roa (hash: VPORRWySmDxIhijhvtgejTl/xFkjstb9t4jxQpa6pFQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:1b:61:b4:4e:53:eb:ef:b6:d7:e6:f8:21:fa:9a:c7:b4:20:10:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F8EA56D0372D7921494C12386D333D8E95C252D
        Validity
            Not Before: Apr 15 10:18:19 2024 GMT
            Not After : Apr 16 11:43:19 2024 GMT
        Subject: CN=087CCB1CCBB4E7976D20756EE612F9B5170CA8A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9e:bb:23:66:6b:0f:fe:ea:d0:37:38:f4:c0:
                    bc:74:c6:6e:31:19:98:ac:b4:c7:ee:70:9a:76:9c:
                    59:52:cc:3e:36:44:9e:86:20:82:f0:9c:9c:f9:49:
                    02:de:c8:07:32:62:81:00:85:3e:2f:da:3f:ad:6a:
                    e2:ac:ed:f4:52:70:f2:07:a4:1f:23:ba:f6:e3:7b:
                    c8:42:1e:ca:78:9a:d0:22:a0:e7:37:42:8e:35:42:
                    76:3f:fe:bb:1d:43:20:88:e0:64:41:b9:c7:be:21:
                    94:eb:d8:4f:59:8e:1e:be:06:90:b1:21:a5:b6:f0:
                    8e:7d:8f:4f:30:68:07:e2:6b:9b:41:e7:8e:7e:53:
                    c1:fb:7b:70:e6:e8:89:4c:6e:8c:2d:87:54:f7:3d:
                    c3:2b:4a:29:d0:74:e6:70:71:50:44:74:47:54:88:
                    55:2f:ef:43:20:64:b0:ae:2a:43:84:5b:c6:7f:8c:
                    90:e4:5f:5a:e4:2b:49:70:cf:b6:a5:8b:71:d5:e7:
                    c6:fb:44:06:95:d9:76:23:8c:ca:c8:3b:f4:01:98:
                    14:e0:47:7e:11:15:39:b8:0a:23:24:14:09:58:bf:
                    35:19:fd:21:90:b1:99:f4:64:96:ea:b2:f7:4d:23:
                    7f:b8:53:dd:8c:d1:dc:45:1e:e1:0f:cc:61:04:9a:
                    f3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:7C:CB:1C:CB:B4:E7:97:6D:20:75:6E:E6:12:F9:B5:17:0C:A8:A2
            X509v3 Authority Key Identifier:
                keyid:1F:8E:A5:6D:03:72:D7:92:14:94:C1:23:86:D3:33:D8:E9:5C:25:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/1F8EA56D0372D7921494C12386D333D8E95C252D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F8EA56D0372D7921494C12386D333D8E95C252D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/1F8EA56D0372D7921494C12386D333D8E95C252D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:7d:92:90:9e:d5:31:cd:73:52:56:78:0f:39:f2:f2:e8:9c:
         e4:fa:bb:89:c5:47:73:19:c5:ed:dc:d0:5f:2e:93:39:8b:8e:
         2e:c5:e5:99:75:5a:44:83:e6:f7:98:36:3e:8b:79:60:ea:27:
         36:ab:7d:89:05:1a:7e:a9:94:5e:53:22:74:44:88:88:df:e5:
         b3:f2:7c:9e:24:27:a7:97:65:18:6a:9f:26:ed:25:ea:31:a4:
         e8:57:47:43:d4:7d:0f:68:1e:e4:4d:5b:7f:4b:4f:c3:99:7f:
         e2:5e:96:30:d2:c5:92:89:91:a3:bf:dc:3d:1b:a7:32:d8:f3:
         c6:b6:f4:d7:27:78:4b:8f:52:fd:32:5d:4e:0a:60:2e:c3:82:
         06:1d:4d:c6:6a:c2:c9:fb:8a:ea:e1:53:8e:f4:03:3b:2d:5c:
         09:5b:6f:c4:43:0e:dc:78:d2:9f:a1:a3:9e:9c:b2:38:e7:50:
         70:b8:89:00:91:26:da:95:97:2e:93:88:0d:17:7e:f8:06:05:
         f4:8b:aa:6d:69:3e:2e:b1:3c:0b:e1:41:68:10:5a:5b:55:9f:
         77:6a:ec:1a:ca:f0:b2:54:50:de:cf:14:7e:67:7f:41:e0:9c:
         16:53:12:f7:b7:00:6d:68:51:28:c1:f0:a6:da:6e:b9:96:ce:
         ee:fb:6c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----