Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/AE8A2AFA3CA4079749ADE8B9D24DAA49E20E87F5.mft
File:                     AE8A2AFA3CA4079749ADE8B9D24DAA49E20E87F5.mft (raw, json)
Hash identifier:          YRDVdDDVX1vDuN0s5mwiC7jBMU1ZP2A/m/Iscl47QQY=
Subject key identifier:   1F:40:6B:70:30:F2:1D:D5:08:5A:D3:0A:43:1D:67:7C:9A:71:1B:EC
Authority key identifier: AE:8A:2A:FA:3C:A4:07:97:49:AD:E8:B9:D2:4D:AA:49:E2:0E:87:F5
Certificate issuer:       /CN=AE8A2AFA3CA4079749ADE8B9D24DAA49E20E87F5
Certificate serial:       28EA1A0E891C4C797CC45B6D8AF4C29BBAF8275A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE8A2AFA3CA4079749ADE8B9D24DAA49E20E87F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/AE8A2AFA3CA4079749ADE8B9D24DAA49E20E87F5.mft
Manifest number:          02F4
Signing time:             Tue 10 Jan 2023 02:38:08 +0000
Manifest this update:     Tue 10 Jan 2023 02:33:08 +0000
Manifest next update:     Wed 11 Jan 2023 05:34:08 +0000
Files and hashes:         1: AE8A2AFA3CA4079749ADE8B9D24DAA49E20E87F5.crl (hash: Ebokn4c1jlQbO6MCvUsJVMDsp6IT8yT6FX5ouzL6MTs=)
                          2: 34352e342e31362e302f32322d3234203d3e20323636303533.roa (hash: QojvMrmUu0OGW8ha1nvU6BATqytu7h1KZ1IGftyZmUU=)
                          3: 323830343a333964343a3a2f33322d3334203d3e20323636303533.roa (hash: Ftg8cv/ttdxXrycocxcoBQBqgJ90lLagUChMUfPIMY0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ea:1a:0e:89:1c:4c:79:7c:c4:5b:6d:8a:f4:c2:9b:ba:f8:27:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE8A2AFA3CA4079749ADE8B9D24DAA49E20E87F5
        Validity
            Not Before: Jan 10 02:33:08 2023 GMT
            Not After : Jan 11 05:34:08 2023 GMT
        Subject: CN=1F406B7030F21DD5085AD30A431D677C9A711BEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c4:14:73:6c:6c:71:a3:75:23:d9:89:03:f3:
                    ec:d7:1c:ce:dc:50:f2:ae:10:05:93:6a:98:69:61:
                    b5:e1:b6:4b:99:a0:3a:9e:5b:99:c3:bc:4b:22:63:
                    36:7e:19:29:d3:48:56:e3:0e:d0:fe:48:73:42:3b:
                    36:da:6a:7c:81:dd:df:b8:f3:ec:b3:9c:77:4f:ec:
                    ca:a3:41:32:9c:f2:e7:8b:e9:b8:ff:0b:c5:3a:58:
                    f3:6e:a6:93:2b:29:07:67:0d:b7:89:12:03:af:8b:
                    5f:a1:6f:f1:94:e7:c9:00:d9:2f:f4:52:6f:52:1d:
                    dc:45:6b:6f:ba:7a:ef:ce:a9:74:18:13:5f:6d:28:
                    27:84:33:1e:31:b7:87:08:e4:7b:28:bb:69:81:2a:
                    b6:25:28:00:11:7f:6f:3f:11:b5:95:e4:8b:7a:d7:
                    f3:7e:bf:7e:e1:61:e1:5b:17:2a:50:18:94:72:05:
                    17:4e:4c:06:ee:74:01:94:8e:22:8d:28:81:d3:dc:
                    11:b3:1a:d2:95:59:c2:dc:51:86:c2:b7:64:05:34:
                    0d:2d:df:1d:99:fe:3e:08:36:d2:d6:a9:28:ab:35:
                    e8:eb:ae:b7:d5:a0:3d:16:78:a0:74:e9:9b:54:d8:
                    dd:3d:f8:57:a7:62:57:42:e1:64:87:10:20:f4:26:
                    d9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:40:6B:70:30:F2:1D:D5:08:5A:D3:0A:43:1D:67:7C:9A:71:1B:EC
            X509v3 Authority Key Identifier:
                keyid:AE:8A:2A:FA:3C:A4:07:97:49:AD:E8:B9:D2:4D:AA:49:E2:0E:87:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/AE8A2AFA3CA4079749ADE8B9D24DAA49E20E87F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE8A2AFA3CA4079749ADE8B9D24DAA49E20E87F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/AE8A2AFA3CA4079749ADE8B9D24DAA49E20E87F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:5f:a5:73:12:5b:22:22:30:46:b7:ef:a0:31:0f:e3:56:fc:
         8e:90:9b:48:62:ff:1e:e3:7b:bd:ec:fa:f8:af:c0:bf:05:40:
         69:87:6c:0b:8d:fa:8f:d5:c3:22:66:f5:5b:67:9f:04:f4:81:
         df:73:1f:9a:4e:13:f4:ea:30:f0:02:3a:b3:b1:da:d2:38:59:
         e3:3f:da:bc:28:13:44:91:88:2b:89:06:b5:ce:4a:55:e1:0f:
         24:7f:1f:53:87:b9:33:39:e1:22:63:da:e1:16:e0:57:0a:14:
         02:1e:20:55:d6:1c:47:31:7d:71:a9:63:6a:46:e7:8a:f9:8a:
         b6:2d:be:e0:9b:8d:11:3b:13:31:6d:e9:c1:5f:21:65:b5:85:
         b9:1a:a4:c0:6b:ed:22:8d:59:10:15:5d:16:c1:2e:77:59:03:
         55:2c:56:25:02:09:69:7c:07:c8:14:51:d0:51:f4:3e:ce:ba:
         6e:4a:50:e9:f0:5f:3c:68:7c:b4:0c:bc:48:f9:56:fe:59:7c:
         5c:34:a7:8e:5d:bb:07:b8:d0:77:fc:88:7b:e0:5e:06:b7:08:
         61:0a:39:df:14:d3:3b:7d:d3:32:b8:e9:b3:3d:a9:4f:ad:6d:
         7f:45:c7:d4:61:cf:96:88:6b:2f:a4:18:98:66:55:91:de:17:
         e8:e7:6e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----