Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2CUB7hopSNgqzxkrhritU91cXMCTGVn8D9wgpACKQ4KV/0/AA88D7F3E67C020D6193B73FF4F5E97E22D4D75D.mft
File:                     AA88D7F3E67C020D6193B73FF4F5E97E22D4D75D.mft (raw, json)
Hash identifier:          17toIAxoHhSfBLXYp1XycM26O87Sz1D9tQF/fs8mvqs=
Subject key identifier:   8C:A6:73:06:E5:AC:60:9A:3B:12:BC:14:17:02:DC:36:38:F2:44:A8
Authority key identifier: AA:88:D7:F3:E6:7C:02:0D:61:93:B7:3F:F4:F5:E9:7E:22:D4:D7:5D
Certificate issuer:       /CN=AA88D7F3E67C020D6193B73FF4F5E97E22D4D75D
Certificate serial:       6486004AC4DFD24E3D0C300C29354BFBDB6531FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA88D7F3E67C020D6193B73FF4F5E97E22D4D75D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2CUB7hopSNgqzxkrhritU91cXMCTGVn8D9wgpACKQ4KV/0/AA88D7F3E67C020D6193B73FF4F5E97E22D4D75D.mft
Manifest number:          A4
Signing time:             Thu 22 Jun 2023 02:51:27 +0000
Manifest this update:     Thu 22 Jun 2023 02:46:27 +0000
Manifest next update:     Fri 23 Jun 2023 05:17:27 +0000
Files and hashes:         1: 3137302e3234352e3232382e302f32322d3332203d3e20323636303233.roa (hash: RuRDqK5CbJDbeL3BfUOWt3ih0JUgU+3qGI+zTFpketA=)
                          2: AA88D7F3E67C020D6193B73FF4F5E97E22D4D75D.crl (hash: 8cQg4WYZSffBZ2N6AfJMds/0Qk51umdeXJ5/Qgh7bhY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:86:00:4a:c4:df:d2:4e:3d:0c:30:0c:29:35:4b:fb:db:65:31:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA88D7F3E67C020D6193B73FF4F5E97E22D4D75D
        Validity
            Not Before: Jun 22 02:46:27 2023 GMT
            Not After : Jun 23 05:17:27 2023 GMT
        Subject: CN=8CA67306E5AC609A3B12BC141702DC3638F244A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8e:ad:4f:9c:2a:c2:cd:7d:88:9e:e8:b9:f7:
                    32:64:af:83:05:b0:59:57:e1:26:9a:95:51:cb:64:
                    44:8f:7c:39:9e:4e:93:1d:d1:0d:3c:de:3c:57:34:
                    6f:cd:71:9a:b8:47:db:14:c4:3e:4a:94:ed:9b:dd:
                    be:79:e0:17:b1:4d:42:48:c5:fb:f5:09:47:96:ff:
                    d0:00:db:49:a2:50:7d:21:86:0f:8e:63:19:e6:15:
                    12:70:c6:db:17:3d:49:e8:a2:55:78:fd:6c:7b:28:
                    02:57:70:b0:e3:b2:b6:b7:fe:c7:0e:fc:f7:9d:3b:
                    3a:1c:23:4d:49:13:17:d8:ed:ea:33:d8:b3:0f:16:
                    66:70:8a:c2:67:43:ff:35:e5:f2:b9:d0:e5:e2:be:
                    fd:9f:2c:95:92:c7:e4:a6:1d:1f:66:c4:50:a4:3f:
                    b6:09:17:6c:68:bf:81:50:2d:1f:49:05:86:cc:56:
                    e8:5c:e8:7d:3b:7c:af:d4:b7:2b:92:38:c9:73:b2:
                    a7:ac:bb:53:e4:a3:2d:72:5b:de:32:53:b0:b5:ed:
                    eb:4c:25:72:2c:4a:89:73:7b:b3:29:8c:a6:93:e8:
                    9e:c9:c6:ab:fa:fa:e6:bd:3b:f4:9c:96:6c:79:3d:
                    da:f5:8f:2c:6d:1c:3e:72:4f:73:7a:75:0f:38:0a:
                    1e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A6:73:06:E5:AC:60:9A:3B:12:BC:14:17:02:DC:36:38:F2:44:A8
            X509v3 Authority Key Identifier:
                keyid:AA:88:D7:F3:E6:7C:02:0D:61:93:B7:3F:F4:F5:E9:7E:22:D4:D7:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2CUB7hopSNgqzxkrhritU91cXMCTGVn8D9wgpACKQ4KV/0/AA88D7F3E67C020D6193B73FF4F5E97E22D4D75D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA88D7F3E67C020D6193B73FF4F5E97E22D4D75D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2CUB7hopSNgqzxkrhritU91cXMCTGVn8D9wgpACKQ4KV/0/AA88D7F3E67C020D6193B73FF4F5E97E22D4D75D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:ef:f8:f7:3a:52:7f:8d:00:d9:e0:8b:16:f5:0f:da:da:66:
         08:37:01:7d:de:2b:6d:5b:96:a0:4b:ac:4c:75:0a:72:7e:33:
         f8:d8:bf:9d:08:e0:37:f9:2d:2a:58:29:50:ff:bc:85:bc:c7:
         67:6a:2d:f8:7c:ce:a1:f2:fb:76:87:bb:01:0a:dc:06:f1:b6:
         a2:c8:69:85:57:e9:a7:f5:98:1a:9b:d4:6c:b5:1e:27:20:0d:
         7d:ab:95:97:f7:c4:bd:bd:6c:e2:92:83:a4:40:71:59:cf:aa:
         f7:87:76:bc:0a:01:ac:02:17:d0:a9:fb:cd:50:68:47:7d:ef:
         2c:16:a9:a3:39:48:bb:24:2b:89:f7:12:65:b3:e9:07:e9:82:
         9c:f3:47:60:8e:6d:c1:ff:81:f1:b5:ce:70:2e:f0:7e:76:92:
         5f:82:29:8f:14:65:9d:bf:96:3f:53:48:1d:6d:fe:c2:b7:a9:
         fe:51:4e:f3:e9:69:0e:f3:fa:4a:c9:2e:a9:ec:a7:ca:8a:48:
         37:12:d8:7c:bc:26:f5:91:e5:7b:f1:00:a7:e4:64:2a:89:cc:
         84:96:02:6a:a5:9f:cc:f3:3b:7e:fd:82:31:a7:44:99:9c:a8:
         2e:05:fa:7d:f2:ce:d9:09:58:c9:db:2f:fc:33:3a:ac:e0:50:
         0f:e8:89:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----