Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/A1C8A1A058DF2CD31BED8D3D82EC49DB5C063829.mft
File:                     A1C8A1A058DF2CD31BED8D3D82EC49DB5C063829.mft (raw, json)
Hash identifier:          LgIoyzqsjkrB+v6x3eizEwLxNGCaicVdsGRI3hEwBDM=
Subject key identifier:   C9:21:F8:33:38:50:FE:D7:48:05:AA:10:BD:80:99:B9:4F:54:6B:08
Authority key identifier: A1:C8:A1:A0:58:DF:2C:D3:1B:ED:8D:3D:82:EC:49:DB:5C:06:38:29
Certificate issuer:       /CN=A1C8A1A058DF2CD31BED8D3D82EC49DB5C063829
Certificate serial:       16BBD9B39C6CB0AE6CAADDC2C746C57153273905
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1C8A1A058DF2CD31BED8D3D82EC49DB5C063829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/A1C8A1A058DF2CD31BED8D3D82EC49DB5C063829.mft
Manifest number:          E3
Signing time:             Tue 22 Oct 2024 10:15:26 +0000
Manifest this update:     Tue 22 Oct 2024 10:10:26 +0000
Manifest next update:     Wed 23 Oct 2024 10:45:26 +0000
Files and hashes:         1: A1C8A1A058DF2CD31BED8D3D82EC49DB5C063829.crl (hash: WkngJiL3kDRT6XFr7jspGo5p078uB/jNtcT9Uszj3+o=)
                          2: 3137372e35352e39322e302f32332d3234203d3e20323732373234.roa (hash: srw/Uv0Hc0dblmTLwpJ1s0la2KE7ye6jHPJ3oZHCC0U=)
                          3: 323830343a383761383a3a2f33322d3336203d3e20323732373234.roa (hash: lvwOPHaz9q/pEnSZ25h+jbY2e8RCMHphOc7VPGW9u+s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:bb:d9:b3:9c:6c:b0:ae:6c:aa:dd:c2:c7:46:c5:71:53:27:39:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1C8A1A058DF2CD31BED8D3D82EC49DB5C063829
        Validity
            Not Before: Oct 22 10:10:26 2024 GMT
            Not After : Oct 23 10:45:26 2024 GMT
        Subject: CN=C921F8333850FED74805AA10BD8099B94F546B08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:56:6f:93:82:54:d4:7b:da:6e:a7:5f:9d:8b:
                    d8:58:2d:4b:6e:e6:d2:5f:ac:21:07:aa:f1:04:fa:
                    c1:5b:5e:36:ef:cf:6a:6d:cf:83:64:b6:3c:73:e3:
                    a1:9e:12:0f:23:3e:63:6f:a2:61:68:68:7a:13:d2:
                    ff:2c:8c:99:fe:22:43:83:dd:c6:d7:bc:73:00:3d:
                    bf:a8:28:ed:9a:3c:8b:ae:62:77:0f:60:53:40:2f:
                    84:9b:eb:8c:b9:8f:e0:6f:ee:63:d0:5b:a3:0f:c6:
                    1a:aa:b2:d8:a0:39:c5:06:ef:ba:1f:28:80:7c:66:
                    d1:88:17:af:b5:8d:d4:08:0d:27:a6:be:44:5c:24:
                    25:d5:dc:c9:90:c2:b9:c0:c0:42:39:26:68:20:9d:
                    7a:43:75:7e:3c:d7:0c:45:46:b3:2c:13:47:c4:75:
                    30:48:16:51:b6:67:6d:fa:63:68:33:98:33:03:be:
                    af:06:b5:05:f8:88:56:60:17:ef:cb:90:6a:3e:7f:
                    1f:dd:dc:4c:07:7d:ef:4e:f9:23:96:88:30:c1:08:
                    e1:a0:bb:e0:33:2f:68:bb:bd:7e:ce:0f:8a:ea:cb:
                    71:7e:e2:59:33:46:a4:92:6b:05:7e:4b:93:c4:2b:
                    fb:d1:b9:24:e1:4f:39:bc:a8:dc:24:1e:ff:09:66:
                    35:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:21:F8:33:38:50:FE:D7:48:05:AA:10:BD:80:99:B9:4F:54:6B:08
            X509v3 Authority Key Identifier:
                keyid:A1:C8:A1:A0:58:DF:2C:D3:1B:ED:8D:3D:82:EC:49:DB:5C:06:38:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/A1C8A1A058DF2CD31BED8D3D82EC49DB5C063829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1C8A1A058DF2CD31BED8D3D82EC49DB5C063829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/A1C8A1A058DF2CD31BED8D3D82EC49DB5C063829.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:0d:2a:1a:5a:9d:c2:56:6d:75:cc:4b:e7:12:71:98:e6:2b:
         c3:a8:67:f8:f7:4f:10:c8:eb:fa:90:d6:16:f9:dd:5d:79:57:
         a5:ec:a5:f1:b7:25:53:27:58:0d:16:27:4b:b9:4e:70:44:5b:
         cb:6a:91:55:fe:0c:91:6a:41:c6:b5:43:57:12:8d:2d:4c:ba:
         6b:b0:c7:46:45:fd:dc:11:db:30:5e:ee:9b:68:fc:29:8f:84:
         b9:1d:f5:2d:48:5c:c3:ca:d9:94:7b:1b:99:f3:a8:8e:46:4e:
         67:76:63:da:8b:95:2a:39:56:59:f0:bc:c6:bd:8e:32:bf:f4:
         31:ea:88:19:7b:8b:9d:95:b7:77:a5:1b:6a:89:3b:e5:f1:13:
         8b:28:b4:77:00:75:e0:56:b1:54:6f:e3:88:4c:b3:29:de:f0:
         f8:73:1e:6f:9d:d6:76:2d:a5:6e:f9:ef:79:9d:3a:92:66:52:
         e5:b9:53:21:08:9e:c3:8e:1e:f0:75:39:10:c4:f2:58:9e:01:
         04:4b:19:ff:76:48:44:60:d9:24:06:d9:89:ca:ce:e0:be:3f:
         dc:53:81:b3:fd:7e:0f:fe:50:39:26:56:84:7a:6a:64:c5:5a:
         12:64:7a:67:cc:0e:e7:83:ce:83:c6:72:38:06:ba:2d:27:eb:
         07:a6:a6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----