Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/814C6B153820C8660A1EE837464B8AB9BE2B7DC3.mft
File:                     814C6B153820C8660A1EE837464B8AB9BE2B7DC3.mft (raw, json)
Hash identifier:          CKlH5If/ZTPAsN71jtMGbVOKCeJQBCumCLSCR3anj8c=
Subject key identifier:   99:82:E4:95:B4:20:80:81:CF:1A:6A:55:D9:37:0F:24:2B:76:31:0E
Authority key identifier: 81:4C:6B:15:38:20:C8:66:0A:1E:E8:37:46:4B:8A:B9:BE:2B:7D:C3
Certificate issuer:       /CN=814C6B153820C8660A1EE837464B8AB9BE2B7DC3
Certificate serial:       0AC1C811A9CE00402BE784A13A0CA6DE83E432DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/814C6B153820C8660A1EE837464B8AB9BE2B7DC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/814C6B153820C8660A1EE837464B8AB9BE2B7DC3.mft
Manifest number:          21
Signing time:             Thu 17 Oct 2024 12:00:14 +0000
Manifest this update:     Thu 17 Oct 2024 11:55:14 +0000
Manifest next update:     Fri 18 Oct 2024 12:09:14 +0000
Files and hashes:         1: 814C6B153820C8660A1EE837464B8AB9BE2B7DC3.crl (hash: W6pFPtwAwDxPhqQzxMOarI94MkgbGbtrgAlPSeGNkzA=)
                          2: 3230302e3132342e38342e302f32322d3332203d3e20323730323734.roa (hash: D+2hWRnn1aQq+A+TuXStT/onGqDqR0UZLq4NGy8ttkM=)
                          3: 323830343a363938303a3a2f33322d313238203d3e20323730323734.roa (hash: K5LzzHjSUo6NLDyqIVCNAMbk7ewnb8b6ANQygzlI2S0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:c1:c8:11:a9:ce:00:40:2b:e7:84:a1:3a:0c:a6:de:83:e4:32:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=814C6B153820C8660A1EE837464B8AB9BE2B7DC3
        Validity
            Not Before: Oct 17 11:55:14 2024 GMT
            Not After : Oct 18 12:09:14 2024 GMT
        Subject: CN=9982E495B4208081CF1A6A55D9370F242B76310E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fc:0b:58:22:c2:4b:4c:e8:06:fe:e7:5a:84:
                    e9:0c:5f:4d:00:92:85:23:53:e4:0b:6d:39:2d:cf:
                    fd:13:7c:f5:a1:e3:e2:06:48:ce:2c:33:93:31:b8:
                    1a:97:c9:a4:67:72:3b:58:59:f9:9e:d2:d3:be:e3:
                    48:87:1a:c6:cc:ce:60:42:f2:8a:10:1f:39:79:2d:
                    71:32:34:86:f7:38:4c:cf:fc:fa:96:de:25:9e:22:
                    ed:f8:32:54:92:58:b8:a4:50:3d:35:43:72:87:d4:
                    b4:21:b8:fa:fd:85:d1:86:e7:aa:9a:28:f1:f9:d2:
                    cf:5e:19:11:6e:16:6c:5a:b3:93:27:44:4d:cb:d6:
                    a3:b8:4a:78:86:34:2c:e3:52:06:72:dd:13:50:85:
                    de:8c:43:80:6f:6e:07:2f:07:eb:7f:fd:6e:f7:6a:
                    3c:32:a3:0f:50:3e:d6:47:79:35:c9:e6:0a:cf:81:
                    92:45:ec:3e:3b:0b:a5:0b:05:8f:56:04:be:66:ea:
                    ef:42:1e:6a:91:52:91:09:10:61:fb:16:a5:fd:29:
                    e0:e5:65:73:c2:c4:12:0b:a2:df:45:51:e0:61:29:
                    55:d3:90:a5:97:a2:80:d3:69:1f:80:eb:33:2e:38:
                    1b:95:ac:be:a5:7e:a6:f2:6a:d2:1e:e2:b2:10:85:
                    00:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:82:E4:95:B4:20:80:81:CF:1A:6A:55:D9:37:0F:24:2B:76:31:0E
            X509v3 Authority Key Identifier:
                keyid:81:4C:6B:15:38:20:C8:66:0A:1E:E8:37:46:4B:8A:B9:BE:2B:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/814C6B153820C8660A1EE837464B8AB9BE2B7DC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/814C6B153820C8660A1EE837464B8AB9BE2B7DC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/814C6B153820C8660A1EE837464B8AB9BE2B7DC3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:0e:29:09:8c:81:78:c3:49:44:f4:08:68:42:de:14:19:8d:
         27:50:12:33:d0:c4:6d:6d:b2:36:33:76:1a:50:b1:d7:18:e9:
         12:ff:55:7f:65:01:a7:47:50:16:7c:ba:03:6f:2e:60:41:92:
         1e:b7:3b:ee:21:9a:8c:d1:a1:5c:c0:48:e0:68:d7:9b:97:16:
         41:4c:90:3f:d3:2c:87:3b:7f:2b:91:97:98:43:d3:75:46:84:
         fb:d7:46:d4:22:7d:8e:c5:13:e0:be:75:68:06:84:64:62:98:
         5a:a9:73:56:2f:f8:a7:82:2b:c3:68:28:2e:b1:de:0c:d0:41:
         bf:11:fb:bb:63:4b:52:04:f1:92:d5:a3:81:f0:aa:99:1d:9c:
         5b:ce:59:b3:1b:2a:62:7d:1e:2e:90:4f:f3:34:ef:f7:88:7e:
         0f:1b:5b:7b:fd:71:ef:38:89:7e:1d:8a:2c:01:22:65:de:4b:
         4b:a6:16:62:a5:42:a3:0e:5e:ad:9a:7e:4c:1b:cf:3e:db:a4:
         35:f7:c8:11:a2:f0:f2:e9:fe:59:c7:39:93:01:ce:59:bf:51:
         fc:5d:c0:01:59:a1:a4:d8:03:f4:b9:cc:e4:25:48:ad:37:61:
         f1:81:49:e9:ef:7f:7b:aa:16:8a:c3:6e:23:51:1e:e0:4b:cb:
         b6:20:1f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----