Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/88FE00A126CA3E9C621FECD65CECFA36649E9BA2.mft
File:                     88FE00A126CA3E9C621FECD65CECFA36649E9BA2.mft (raw, json)
Hash identifier:          6cLx7d20PN10eiidYZ78Kk1vwbT7I6BrCMFNuy3Hx6E=
Subject key identifier:   EF:42:5C:95:63:05:1E:B3:A9:9E:69:2D:DB:7E:FB:0F:9D:40:AC:B5
Authority key identifier: 88:FE:00:A1:26:CA:3E:9C:62:1F:EC:D6:5C:EC:FA:36:64:9E:9B:A2
Certificate issuer:       /CN=88FE00A126CA3E9C621FECD65CECFA36649E9BA2
Certificate serial:       74988237CB27D9F12B3FA9D07E510CB7B6F65C65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/88FE00A126CA3E9C621FECD65CECFA36649E9BA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/88FE00A126CA3E9C621FECD65CECFA36649E9BA2.mft
Manifest number:          0102
Signing time:             Sun 25 Feb 2024 11:20:50 +0000
Manifest this update:     Sun 25 Feb 2024 11:15:50 +0000
Manifest next update:     Mon 26 Feb 2024 14:30:50 +0000
Files and hashes:         1: 323830343a6331383a3a2f33322d3430203d3e203532363737.roa (hash: ffzTGhepMXXKJWZGDNYnqYIYr17LC7azjMv/PwH+Ydk=)
                          2: 88FE00A126CA3E9C621FECD65CECFA36649E9BA2.crl (hash: OdKbOTPu6LcQDkeIK3X1HMQQqT1o8f4ACCpE+XjbjHE=)
                          3: 3137372e36362e3230342e302f32322d3234203d3e203532363737.roa (hash: Tpbl20r+Oo8ogWFxMTEjaNMEr5o5ZfZwXpT0/FO0fFs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:98:82:37:cb:27:d9:f1:2b:3f:a9:d0:7e:51:0c:b7:b6:f6:5c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88FE00A126CA3E9C621FECD65CECFA36649E9BA2
        Validity
            Not Before: Feb 25 11:15:50 2024 GMT
            Not After : Feb 26 14:30:50 2024 GMT
        Subject: CN=EF425C9563051EB3A99E692DDB7EFB0F9D40ACB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:02:2d:70:f2:70:57:8c:f9:85:5e:f2:9d:65:
                    67:7c:1f:8c:55:99:93:a9:d6:1f:92:24:a9:45:63:
                    9d:62:86:4d:7a:2c:36:05:81:e0:45:2b:19:ac:4d:
                    23:44:6c:3e:66:1a:da:0c:df:99:21:ec:8a:9b:b6:
                    fe:1b:83:ae:94:62:6b:76:cf:f6:97:ce:5b:af:bd:
                    00:e4:55:93:e8:8c:00:79:b3:21:28:ae:78:0b:86:
                    c2:a0:ee:e3:03:01:1b:bb:06:dd:a3:d3:77:d5:21:
                    a7:e9:1e:44:7f:08:77:b8:87:c5:14:77:ec:67:5f:
                    16:7f:2f:a9:7e:14:46:4d:f7:07:f6:99:66:b0:4c:
                    ed:e6:bc:b9:7e:a1:14:65:21:8d:4d:5b:c6:b4:36:
                    96:1b:2f:ea:fd:d9:ed:77:f8:ed:76:12:a3:f0:90:
                    ab:40:e1:2e:88:5a:23:51:8e:85:5c:63:74:bd:c2:
                    79:d7:b2:ee:5a:29:b0:01:7b:52:4d:c2:6b:a2:84:
                    1b:73:d2:ce:6c:e6:d9:af:6f:20:68:ea:d1:90:42:
                    60:c9:3f:f9:c4:cc:dd:63:7e:e4:f4:56:63:a2:79:
                    f2:ba:0b:6a:b4:64:4f:37:2f:19:83:91:3a:9e:c9:
                    39:c0:f9:aa:7f:7e:e4:ea:e3:68:bf:5f:33:6b:bb:
                    b7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:42:5C:95:63:05:1E:B3:A9:9E:69:2D:DB:7E:FB:0F:9D:40:AC:B5
            X509v3 Authority Key Identifier:
                keyid:88:FE:00:A1:26:CA:3E:9C:62:1F:EC:D6:5C:EC:FA:36:64:9E:9B:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/88FE00A126CA3E9C621FECD65CECFA36649E9BA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/88FE00A126CA3E9C621FECD65CECFA36649E9BA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/88FE00A126CA3E9C621FECD65CECFA36649E9BA2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:a7:56:5e:84:84:f3:94:cd:d8:15:6f:81:0f:77:60:ad:23:
         c8:03:e5:dc:0b:38:49:e9:bc:3e:0f:4a:45:dd:66:87:8c:ff:
         fc:9b:f5:e2:5e:5c:c9:0b:05:b0:a3:64:b3:79:2c:2e:ac:c1:
         2c:e7:f0:3f:08:81:1f:71:d8:c4:9b:fa:a1:8c:99:6d:1d:78:
         0f:a4:a0:31:5c:05:58:ea:ec:30:20:eb:94:ff:48:cf:ef:97:
         dd:81:66:cd:a4:0d:92:41:34:9b:9f:d7:9a:b9:df:f2:b9:aa:
         7a:54:e6:01:50:d5:4b:76:29:3f:23:92:22:c2:b2:80:1b:59:
         fd:9d:68:e9:37:57:05:7c:88:49:f6:b1:92:e0:6e:7b:f6:5d:
         9d:a9:b7:53:16:ea:de:cd:ec:25:dd:1f:5b:79:49:0e:70:78:
         38:2f:50:02:c9:2a:dc:37:f4:6f:62:f1:b4:3b:a6:90:95:21:
         56:66:f6:8b:2a:d9:d1:55:84:4c:4f:ed:d6:f0:ea:a3:3a:4e:
         6c:c2:ba:0a:39:bc:93:ca:30:16:b2:4d:96:e0:ed:62:ad:5f:
         fc:17:ab:08:5d:f9:77:b3:09:e4:85:39:38:f0:a6:14:d0:22:
         70:6a:dd:00:66:ff:0a:4c:34:0b:84:c6:06:e9:5c:cc:98:02:
         6b:e9:8d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----