Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/2C8A5342CB39EDDB94256DE3BD80FE7138BAD100.mft
File:                     2C8A5342CB39EDDB94256DE3BD80FE7138BAD100.mft (raw, json)
Hash identifier:          ucaWDgrEWL0T4bC4y/0kpUQcata/8vVrokXYGuG+F9s=
Subject key identifier:   7C:C1:4D:7F:D2:F0:BC:00:4B:C1:DE:D3:AC:7D:74:57:99:BF:F8:E9
Authority key identifier: 2C:8A:53:42:CB:39:ED:DB:94:25:6D:E3:BD:80:FE:71:38:BA:D1:00
Certificate issuer:       /CN=2C8A5342CB39EDDB94256DE3BD80FE7138BAD100
Certificate serial:       1B257D3DC54E0C29F84880B28947069A4081F9D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C8A5342CB39EDDB94256DE3BD80FE7138BAD100.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/2C8A5342CB39EDDB94256DE3BD80FE7138BAD100.mft
Manifest number:          6E
Signing time:             Wed 20 Sep 2023 08:43:26 +0000
Manifest this update:     Wed 20 Sep 2023 08:38:26 +0000
Manifest next update:     Thu 21 Sep 2023 11:45:26 +0000
Files and hashes:         1: 3230302e3132342e38342e302f32322d3332203d3e20323730323734.roa (hash: Ug/+ROYE4xDAoEu4KUlqNJf0msO3l3jKlDwX+xOaauY=)
                          2: 2C8A5342CB39EDDB94256DE3BD80FE7138BAD100.crl (hash: whk6i92hegPqBYSD/EznsBYqImHnwHXwu5DE3olNzBk=)
                          3: 323830343a363938303a3a2f33322d313238203d3e20323730323734.roa (hash: 0CijKIAkgsUpnbVNq+SIMS5YtqPfpfs3GtZmafRybXw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:25:7d:3d:c5:4e:0c:29:f8:48:80:b2:89:47:06:9a:40:81:f9:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C8A5342CB39EDDB94256DE3BD80FE7138BAD100
        Validity
            Not Before: Sep 20 08:38:26 2023 GMT
            Not After : Sep 21 11:45:26 2023 GMT
        Subject: CN=7CC14D7FD2F0BC004BC1DED3AC7D745799BFF8E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:25:1b:0a:d7:bb:66:42:98:83:dc:53:45:92:
                    56:1e:01:49:4f:d1:ca:47:f3:14:9f:23:2e:90:07:
                    83:56:42:18:2f:94:14:23:33:30:0f:a1:fb:c2:00:
                    ac:c0:7f:0d:68:73:0e:0f:7c:c4:70:1f:61:27:2b:
                    5f:0f:97:f3:3e:1c:c3:5d:99:c4:7e:37:74:fe:9d:
                    ce:ef:19:37:e8:08:92:44:e1:b2:c2:0e:06:07:e6:
                    05:cd:eb:39:e2:bd:db:fd:29:50:8e:b0:3f:a1:0c:
                    f7:2a:47:4a:43:2d:e7:45:6e:e7:85:38:18:e4:1a:
                    90:b0:85:45:ce:3e:bd:b8:f7:c2:1c:60:c1:65:75:
                    73:e3:05:5d:b3:cc:f1:fe:0b:76:4d:c6:fc:16:70:
                    0e:59:b9:48:8d:0a:14:80:6c:b0:ab:2f:47:27:33:
                    99:86:06:53:49:9b:2c:7d:14:cf:a6:74:da:e5:8a:
                    ec:44:7f:fb:17:a8:f1:f2:89:33:31:1c:10:0b:7c:
                    dc:78:94:b1:4c:e3:10:c4:d8:cb:7a:61:7f:3f:6d:
                    95:77:ab:11:b5:0c:ae:4d:28:df:ea:98:59:35:dd:
                    47:fd:90:57:59:40:19:9a:eb:63:cc:33:a9:7d:93:
                    98:aa:ee:57:9a:e4:15:86:c0:11:f3:dc:aa:5c:15:
                    85:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C1:4D:7F:D2:F0:BC:00:4B:C1:DE:D3:AC:7D:74:57:99:BF:F8:E9
            X509v3 Authority Key Identifier:
                keyid:2C:8A:53:42:CB:39:ED:DB:94:25:6D:E3:BD:80:FE:71:38:BA:D1:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/2C8A5342CB39EDDB94256DE3BD80FE7138BAD100.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C8A5342CB39EDDB94256DE3BD80FE7138BAD100.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/2C8A5342CB39EDDB94256DE3BD80FE7138BAD100.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:9b:54:d5:5d:e7:9a:61:dc:79:92:f0:b9:d0:67:a2:a7:2e:
         5a:91:55:8f:4e:6f:dc:14:82:c6:05:0a:3a:41:34:15:65:13:
         ff:4a:76:e9:92:57:ec:6c:e0:e0:c8:a9:6d:b6:9b:3a:1d:24:
         29:ce:24:ba:2c:6f:f9:fd:c5:66:c9:d4:82:1a:3a:d0:b8:1b:
         c2:5d:d7:44:d3:53:62:f9:0f:0c:e4:54:94:2c:12:b0:56:21:
         98:39:1f:a1:f8:c6:e0:83:60:ca:ca:2f:5e:16:b9:e1:22:6f:
         f8:60:e9:c7:c3:fa:dd:6d:f9:33:36:64:57:df:59:a9:6f:0d:
         64:d2:0e:30:83:54:e8:3e:fb:15:f4:de:88:5e:42:7c:04:a8:
         d1:1d:ba:bf:0a:70:bf:6f:87:ff:36:7c:23:a0:64:e7:3e:1c:
         fb:16:74:c2:ce:53:47:44:7a:95:b9:dd:d3:ca:41:e2:8b:3c:
         a3:f9:0d:b7:b8:18:2b:15:71:46:ef:5c:74:2a:06:08:27:9a:
         a9:f9:f6:d1:7d:eb:31:8b:85:06:18:5d:dc:32:bc:eb:f3:a7:
         1a:47:22:a5:02:89:6d:60:6e:72:c9:fb:d2:98:bf:ff:46:9f:
         cc:5b:3f:16:4f:c1:05:4b:3a:ba:32:30:50:30:48:66:4d:74:
         3f:3d:28:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----