Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/1/80E683A8EE838B61B8346C5E2405B22F69D5B2A0.mft
File:                     80E683A8EE838B61B8346C5E2405B22F69D5B2A0.mft (raw, json)
Hash identifier:          Em33CAj5QcbijrEq+Az/ulEGnh01/p9cho4cHeWvN5U=
Subject key identifier:   7A:48:01:F8:67:76:50:A4:C7:DB:C9:F1:61:54:20:8F:52:E5:D3:51
Authority key identifier: 80:E6:83:A8:EE:83:8B:61:B8:34:6C:5E:24:05:B2:2F:69:D5:B2:A0
Certificate issuer:       /CN=80E683A8EE838B61B8346C5E2405B22F69D5B2A0
Certificate serial:       14D4639C4E4C9C0D7EAE1A6CAD2C91E6B8629AB3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/80E683A8EE838B61B8346C5E2405B22F69D5B2A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/1/80E683A8EE838B61B8346C5E2405B22F69D5B2A0.mft
Manifest number:          0265
Signing time:             Tue 20 Feb 2024 05:11:58 +0000
Manifest this update:     Tue 20 Feb 2024 05:06:58 +0000
Manifest next update:     Wed 21 Feb 2024 08:36:58 +0000
Files and hashes:         1: 323830343a323635303a3a2f33322d3438203d3e20323634333430.roa (hash: yMIDWGRAPIIERiVqvUaKQPMuBc5ZSGKgsmOt8yb91C0=)
                          2: 80E683A8EE838B61B8346C5E2405B22F69D5B2A0.crl (hash: D5kZPKufVVOCmHBDe9VDACz+9zL7ThvDqFu6M9YE0lc=)
                          3: 3133382e3138352e35362e302f32322d3234203d3e20323634333430.roa (hash: ehnJkwAtyv4xrulhx7AlmTx9HMhbEYcRzKRx1lbHJi8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:d4:63:9c:4e:4c:9c:0d:7e:ae:1a:6c:ad:2c:91:e6:b8:62:9a:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80E683A8EE838B61B8346C5E2405B22F69D5B2A0
        Validity
            Not Before: Feb 20 05:06:58 2024 GMT
            Not After : Feb 21 08:36:58 2024 GMT
        Subject: CN=7A4801F8677650A4C7DBC9F16154208F52E5D351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a7:d2:72:d7:0b:9f:22:0a:c4:fe:e4:45:4a:
                    ca:cf:7a:98:94:68:72:e4:1d:87:06:6b:ff:9c:ac:
                    2b:f0:b1:81:39:31:7c:c6:4d:14:5b:a5:8f:6b:98:
                    50:72:de:01:89:61:04:f9:5d:b6:0e:5e:3c:b0:ae:
                    43:f7:73:75:d6:84:5f:a6:02:c7:99:2b:50:8f:10:
                    1c:93:46:b5:6b:3f:53:c3:6e:89:57:1d:c6:53:bc:
                    1f:e0:43:3f:ce:a8:11:d9:50:bd:02:a6:7c:70:ba:
                    44:1c:15:73:01:a7:76:e8:42:34:37:c6:74:5c:5c:
                    1c:54:05:ff:da:f8:26:0a:b8:95:95:23:b9:7c:04:
                    ff:65:71:06:42:fd:41:a3:99:d7:de:2c:1a:c9:95:
                    0d:fd:72:f7:56:e3:f4:b4:ea:40:f5:ae:ec:22:1f:
                    7a:5f:c3:a9:ed:a4:1d:c0:ea:a3:cb:a6:15:a0:5e:
                    9f:0d:61:9f:fd:b6:72:0c:5f:57:5e:3f:53:e5:a3:
                    1e:d2:66:3e:ca:7f:0e:de:35:d3:08:47:f1:62:64:
                    58:5c:a5:c1:0a:e7:1f:4a:b9:8d:24:cf:e1:96:37:
                    d5:e4:92:8f:b8:b6:04:e6:e7:28:07:e3:19:2b:7f:
                    a2:2c:f8:27:22:b5:25:e2:c6:3b:3e:04:32:59:34:
                    41:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:48:01:F8:67:76:50:A4:C7:DB:C9:F1:61:54:20:8F:52:E5:D3:51
            X509v3 Authority Key Identifier:
                keyid:80:E6:83:A8:EE:83:8B:61:B8:34:6C:5E:24:05:B2:2F:69:D5:B2:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/1/80E683A8EE838B61B8346C5E2405B22F69D5B2A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/80E683A8EE838B61B8346C5E2405B22F69D5B2A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/1/80E683A8EE838B61B8346C5E2405B22F69D5B2A0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:ca:92:21:79:96:e1:33:df:ef:68:17:90:81:33:50:b1:ca:
         d0:04:bd:6d:99:1e:cd:48:42:cb:1c:9d:6d:7f:10:e9:b0:7f:
         b3:51:7b:d3:1d:5f:d3:0b:c5:11:75:a7:7f:47:61:83:4c:49:
         d0:13:38:50:f3:1a:57:66:e1:02:03:b2:2a:24:2a:f4:79:01:
         d4:50:bb:7c:0f:73:d1:f1:11:53:94:c0:39:ca:08:6a:a0:31:
         10:bb:5f:db:fd:0a:8d:b2:65:c0:ce:f1:63:53:16:50:a6:ba:
         7b:d0:1e:b2:87:9e:a0:84:58:d4:b1:cd:2b:39:19:d4:68:ae:
         c3:76:7f:7d:9a:61:eb:6a:5b:5d:9b:d3:59:21:e5:ec:31:99:
         60:ab:c8:9b:7c:be:c0:3e:1f:f6:1b:02:36:98:3c:80:65:9f:
         1a:cf:d6:44:45:6c:b4:de:2b:9f:80:82:bd:15:ae:f8:1b:58:
         f7:82:c2:1d:15:46:92:c1:c7:aa:89:ef:cb:cc:b4:d5:86:b1:
         a7:7e:68:c3:c3:6e:95:cc:a7:a8:d8:1c:29:ba:77:f1:e8:c0:
         19:de:e4:b5:1f:f0:7d:f3:60:e6:98:a1:6b:ff:9a:be:bd:6b:
         c8:77:3f:8e:26:aa:a5:c8:08:d6:69:e4:66:5b:da:3c:92:14:
         1e:ef:4a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----