Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/A8A6F2C8FDF83A7FF114571855ED2A2213A5A98B.mft
File:                     A8A6F2C8FDF83A7FF114571855ED2A2213A5A98B.mft (raw, json)
Hash identifier:          AS7gw4HO5D5WXUaooM1uOD44ZImbuPm/o4T/z0WfrUA=
Subject key identifier:   FF:BA:B8:D1:14:85:39:EE:90:D2:C1:7B:6A:AA:D0:73:D4:C4:85:48
Authority key identifier: A8:A6:F2:C8:FD:F8:3A:7F:F1:14:57:18:55:ED:2A:22:13:A5:A9:8B
Certificate issuer:       /CN=A8A6F2C8FDF83A7FF114571855ED2A2213A5A98B
Certificate serial:       2B8B6CDFE2699350C7F97CB2D3CFA8D319C6E0E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8A6F2C8FDF83A7FF114571855ED2A2213A5A98B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/A8A6F2C8FDF83A7FF114571855ED2A2213A5A98B.mft
Manifest number:          0201
Signing time:             Mon 15 Apr 2024 03:14:19 +0000
Manifest this update:     Mon 15 Apr 2024 03:09:19 +0000
Manifest next update:     Tue 16 Apr 2024 04:32:19 +0000
Files and hashes:         1: 323830343a326264343a3a2f33322d3438203d3e20323635313738.roa (hash: RKcAPESiPwW5rAuZz2Cl2vjn97s/0ZoDyyu3ds9q7AQ=)
                          2: A8A6F2C8FDF83A7FF114571855ED2A2213A5A98B.crl (hash: +sfWQQqS5i1zMoqoUfvHRIE1srtmSQ33VWZEh4GMgUk=)
                          3: 3136372e3234392e3132382e302f32322d3234203d3e20323635313738.roa (hash: Mjk6lRhfPnSLpur7TTNT6VoNhFiaGFhbLzNj1q5QOm4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:8b:6c:df:e2:69:93:50:c7:f9:7c:b2:d3:cf:a8:d3:19:c6:e0:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8A6F2C8FDF83A7FF114571855ED2A2213A5A98B
        Validity
            Not Before: Apr 15 03:09:19 2024 GMT
            Not After : Apr 16 04:32:19 2024 GMT
        Subject: CN=FFBAB8D1148539EE90D2C17B6AAAD073D4C48548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:08:b3:f0:d1:db:21:43:ec:7f:28:16:9b:ba:
                    05:6c:c1:bd:35:e1:25:dc:86:d0:ab:e0:3d:05:2f:
                    a7:74:bd:a2:12:c2:51:e5:57:4c:1d:51:7a:2b:6b:
                    4e:60:d8:41:e9:a2:e9:da:2b:1f:68:80:89:e0:cb:
                    f6:7c:73:4e:4d:57:f4:d9:63:63:24:67:64:80:f0:
                    cc:c3:df:97:c9:ce:ed:e2:cd:b2:2d:11:8e:20:ef:
                    60:08:2b:b8:67:9e:0e:63:65:95:8b:c8:8d:fc:0a:
                    a0:90:b7:dd:e9:58:d8:65:71:7b:5b:4a:c2:c3:43:
                    1d:2e:a8:34:9b:10:5a:10:c3:37:aa:54:86:f8:ac:
                    07:48:ec:10:e1:cf:5e:5c:3b:81:75:cb:bf:11:2f:
                    20:95:49:07:46:65:e2:03:86:e6:22:fa:b2:45:67:
                    01:1f:99:79:2d:dd:bb:de:1d:bc:4c:3f:61:8a:e8:
                    a1:6b:e5:79:85:89:16:19:d8:cb:d6:74:61:ed:39:
                    e8:8e:62:09:f6:d8:ce:7b:75:4b:08:af:06:a5:2c:
                    ba:6d:08:bd:d4:dd:28:11:e5:20:60:6c:3e:d6:c9:
                    46:76:f5:3a:fe:e8:57:ba:9a:71:00:e8:67:bd:ca:
                    c6:74:33:30:fd:04:cc:70:52:7e:1b:54:fe:54:22:
                    72:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:BA:B8:D1:14:85:39:EE:90:D2:C1:7B:6A:AA:D0:73:D4:C4:85:48
            X509v3 Authority Key Identifier:
                keyid:A8:A6:F2:C8:FD:F8:3A:7F:F1:14:57:18:55:ED:2A:22:13:A5:A9:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/A8A6F2C8FDF83A7FF114571855ED2A2213A5A98B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8A6F2C8FDF83A7FF114571855ED2A2213A5A98B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/A8A6F2C8FDF83A7FF114571855ED2A2213A5A98B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:31:80:d1:23:39:22:6a:c7:ff:5b:a7:89:38:76:25:7c:1c:
         a9:5a:33:9f:eb:da:71:9b:6a:0d:86:64:b3:6b:f4:60:61:6a:
         57:2c:d0:1f:49:89:7c:97:5a:52:98:37:0e:11:e9:7b:39:90:
         39:52:6b:26:07:36:06:a3:82:6f:65:e7:94:b9:98:4e:37:9e:
         b4:94:d4:2c:77:af:8b:38:96:ad:f1:e7:fe:44:59:83:0c:01:
         52:93:07:74:77:af:0d:70:9c:cf:2c:60:08:0f:d9:aa:a2:47:
         20:aa:4d:b1:2b:68:7e:6f:5d:08:01:ea:89:6a:69:64:66:51:
         7c:c6:88:c7:bf:3a:a6:88:3b:0d:43:60:b1:a7:3c:f5:13:0d:
         f1:7c:fd:f8:0e:61:06:f8:33:53:22:e3:05:a2:27:51:0e:8e:
         8b:9f:f2:c0:2e:6b:4e:9a:ce:d0:51:3f:6f:de:5d:2e:9c:9b:
         1e:6b:17:61:8f:f0:fa:0b:23:d8:8f:a2:e4:b4:40:4d:1a:f0:
         c0:9e:31:a1:49:c3:03:cc:16:df:de:84:d3:f3:6c:50:4e:aa:
         6c:81:32:9d:39:98:15:f2:22:c8:e2:9d:df:a3:0b:8f:dc:d9:
         f5:19:fc:a7:a0:9b:4c:9e:f0:db:82:a0:7c:86:b9:e2:fc:5e:
         b5:4d:9d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----