Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/83C1CE78B3568C27B5960BA7AB655DD62285FC06.mft
File:                     83C1CE78B3568C27B5960BA7AB655DD62285FC06.mft (raw, json)
Hash identifier:          Mt+pA4gBw0lQ+GeB6DXhLTfbUHSp7uxJ6UFzRuJH4So=
Subject key identifier:   4A:EA:AF:04:6E:CD:6D:1F:A9:86:B8:D8:C6:7E:5A:28:43:BC:40:18
Authority key identifier: 83:C1:CE:78:B3:56:8C:27:B5:96:0B:A7:AB:65:5D:D6:22:85:FC:06
Certificate issuer:       /CN=83C1CE78B3568C27B5960BA7AB655DD62285FC06
Certificate serial:       188EB914F82ED43AD047C68DFFE6494FF9AE5BD8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/83C1CE78B3568C27B5960BA7AB655DD62285FC06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/83C1CE78B3568C27B5960BA7AB655DD62285FC06.mft
Manifest number:          FE
Signing time:             Wed 14 Feb 2024 02:00:11 +0000
Manifest this update:     Wed 14 Feb 2024 01:55:11 +0000
Manifest next update:     Thu 15 Feb 2024 05:37:11 +0000
Files and hashes:         1: 323830343a333831303a3a2f33322d3438203d3e20323636343533.roa (hash: Wp4TUI4yw2HfopHy6WcXRRbDwa4tiH7n+AAkMC3VxCw=)
                          2: 83C1CE78B3568C27B5960BA7AB655DD62285FC06.crl (hash: T7rEetjyv+hLRjCKZ9X/SZ3y+enzZy+TqG7mknsvIto=)
                          3: 3137302e38332e33362e302f32322d3234203d3e20323636343533.roa (hash: UIcCSOK886gefX1WBTUJmK5AZVqt621cgt44yr6ijDk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:8e:b9:14:f8:2e:d4:3a:d0:47:c6:8d:ff:e6:49:4f:f9:ae:5b:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83C1CE78B3568C27B5960BA7AB655DD62285FC06
        Validity
            Not Before: Feb 14 01:55:11 2024 GMT
            Not After : Feb 15 05:37:11 2024 GMT
        Subject: CN=4AEAAF046ECD6D1FA986B8D8C67E5A2843BC4018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ca:2a:ac:e7:88:7f:32:d2:98:8d:44:63:ad:
                    f1:3f:92:9c:66:cf:de:d3:6b:e1:cc:ea:03:f8:d4:
                    a4:34:d6:f6:a2:6b:6e:67:5d:12:01:98:85:6b:7d:
                    1f:f3:bf:fd:29:5a:33:bb:b7:45:77:74:9f:93:b9:
                    86:7d:51:4b:fc:5d:4e:ae:b9:0b:1a:fa:79:fe:65:
                    6a:22:5a:44:76:59:71:62:55:14:4e:f4:6d:af:00:
                    70:15:28:cd:ca:db:cc:89:ce:d2:17:31:20:7a:81:
                    55:1d:46:2e:63:6f:8d:37:55:3a:d0:c7:98:63:d6:
                    77:48:06:1e:2a:88:57:e2:e0:85:60:34:82:e6:df:
                    56:e9:2e:60:a6:2d:f6:65:14:63:a3:01:6d:58:13:
                    d1:bc:fd:d8:b0:62:8f:97:a6:91:5e:7f:88:17:26:
                    29:b7:b9:cf:35:93:47:74:2e:bb:ea:f1:9a:f9:16:
                    75:7b:e6:fd:a0:9d:f1:6a:7b:1f:37:a1:98:78:e3:
                    89:12:db:39:fb:a6:9d:0a:9b:f3:08:89:e2:01:46:
                    4b:bb:91:f9:24:3a:dd:09:28:8b:b8:9c:2b:6e:ac:
                    f4:e3:26:53:6d:fe:11:f7:b8:e8:f1:b4:38:6d:e4:
                    82:bb:78:0e:bc:c8:b5:90:31:74:0e:65:05:ed:c9:
                    10:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:EA:AF:04:6E:CD:6D:1F:A9:86:B8:D8:C6:7E:5A:28:43:BC:40:18
            X509v3 Authority Key Identifier:
                keyid:83:C1:CE:78:B3:56:8C:27:B5:96:0B:A7:AB:65:5D:D6:22:85:FC:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/83C1CE78B3568C27B5960BA7AB655DD62285FC06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/83C1CE78B3568C27B5960BA7AB655DD62285FC06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/83C1CE78B3568C27B5960BA7AB655DD62285FC06.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:64:7a:65:87:42:c6:cb:d4:92:e9:ad:21:44:7e:58:c6:39:
         63:a7:c4:57:72:af:c7:cf:96:36:eb:b5:75:69:86:7c:95:4d:
         26:6d:87:75:7f:12:f2:4d:d6:6e:f4:cf:16:10:c8:1b:09:98:
         da:90:da:af:f2:73:fd:53:74:a0:c4:06:25:53:4d:d1:20:9a:
         1b:3a:51:b0:70:c8:f9:12:b7:5e:19:01:87:9a:89:f3:3f:49:
         1c:d5:f4:5c:be:9b:75:84:36:d8:13:9c:ae:2d:43:9d:7a:b6:
         5d:f3:1a:6b:7e:61:a9:a8:1f:1b:70:7b:c0:2f:ac:d3:04:54:
         43:0e:88:a2:d3:78:5a:43:25:c2:ea:41:ad:49:21:13:89:63:
         ba:a6:c6:47:25:8e:ef:b3:7c:7e:ad:c4:42:a8:a6:0e:66:ea:
         8d:6e:88:94:0e:be:8f:bf:e1:37:d2:2d:4f:25:b4:08:f8:c0:
         a2:f4:1b:77:0e:15:b2:e7:40:6a:59:d0:54:c5:c4:43:bd:18:
         bb:69:45:c2:b1:8d:77:40:f9:dc:c6:2e:23:5b:f4:58:81:c2:
         a2:1e:f4:a1:46:f4:de:a3:f8:5e:c9:e1:c9:9f:ad:df:34:ab:
         af:6c:1d:d1:e9:6e:5b:d4:1d:f2:ce:e4:ab:b8:2d:76:f9:89:
         42:0d:e7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----