Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/0C4E4F4CBB3AF73BB2EFD9652E867C8A9782832E.mft
File:                     0C4E4F4CBB3AF73BB2EFD9652E867C8A9782832E.mft (raw, json)
Hash identifier:          pP2lPoARWQ64yOAv/ZCrqIqmrWsaPdWXueeOtCfUbCc=
Subject key identifier:   97:2E:86:E6:AB:A8:BE:47:3D:95:87:06:5A:60:23:30:47:5E:AB:2D
Authority key identifier: 0C:4E:4F:4C:BB:3A:F7:3B:B2:EF:D9:65:2E:86:7C:8A:97:82:83:2E
Certificate issuer:       /CN=0C4E4F4CBB3AF73BB2EFD9652E867C8A9782832E
Certificate serial:       1ED09A22C74369BD383C5599B71A7DDF8CBF51A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C4E4F4CBB3AF73BB2EFD9652E867C8A9782832E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/0C4E4F4CBB3AF73BB2EFD9652E867C8A9782832E.mft
Manifest number:          87
Signing time:             Wed 16 Oct 2024 23:06:46 +0000
Manifest this update:     Wed 16 Oct 2024 23:01:46 +0000
Manifest next update:     Fri 18 Oct 2024 00:05:46 +0000
Files and hashes:         1: 323830343a333736633a3a2f33322d3336203d3e203631363138.roa (hash: jqn5gt+L5i7op50r4SuyxPI3TLhEPY+lnVem6Rs1JC4=)
                          2: 0C4E4F4CBB3AF73BB2EFD9652E867C8A9782832E.crl (hash: idxtuni3yd3razcjt4ADgOhfTlbz6IVgfXptr82r9U8=)
                          3: 3137302e38312e3130302e302f32322d3234203d3e203631363138.roa (hash: bgqBhoWIxvHaRIeUtUtCqEK8r6rHSLgfg8H2Lorh4CQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:d0:9a:22:c7:43:69:bd:38:3c:55:99:b7:1a:7d:df:8c:bf:51:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C4E4F4CBB3AF73BB2EFD9652E867C8A9782832E
        Validity
            Not Before: Oct 16 23:01:46 2024 GMT
            Not After : Oct 18 00:05:46 2024 GMT
        Subject: CN=972E86E6ABA8BE473D9587065A602330475EAB2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b3:61:cf:6e:d6:1f:d8:cf:95:43:b9:c5:f6:
                    be:b4:e1:45:9c:29:70:ec:77:31:2e:fd:81:8d:9d:
                    33:23:fd:61:e8:04:08:df:10:40:a6:5d:76:6c:a8:
                    ea:d1:62:20:ec:5b:67:f3:73:de:92:92:b1:0d:20:
                    86:07:5a:1f:ad:9f:11:7c:81:05:1a:ff:0a:43:e7:
                    74:70:c5:3c:84:86:4d:8e:4c:b8:a2:80:e2:bf:b7:
                    09:4e:9b:a2:67:44:bc:38:91:ef:fa:23:2c:68:46:
                    3b:e6:21:cf:e2:00:6d:ed:9c:52:03:20:78:1e:fe:
                    73:6c:c8:97:54:69:10:e1:01:63:9e:fe:2c:f3:3f:
                    5e:90:e5:25:94:e3:50:8e:9a:c7:69:0e:5b:29:b3:
                    1b:a0:74:21:09:9b:e7:76:38:de:48:e4:2f:52:f9:
                    88:cd:f4:aa:ad:4f:fb:0b:8c:9d:5d:62:93:22:ea:
                    97:43:92:08:ef:b2:18:7c:53:20:eb:dd:db:3c:c1:
                    58:16:a6:86:cf:19:ca:c1:3e:94:69:90:3a:1f:05:
                    ce:40:4e:35:7d:f4:ce:f0:9b:9c:59:a3:1a:42:2f:
                    b0:a2:21:06:d5:06:1c:85:08:25:a4:88:1d:20:ce:
                    9d:c4:ed:bd:b1:ab:3f:4e:c0:95:37:c4:76:a1:47:
                    11:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:2E:86:E6:AB:A8:BE:47:3D:95:87:06:5A:60:23:30:47:5E:AB:2D
            X509v3 Authority Key Identifier:
                keyid:0C:4E:4F:4C:BB:3A:F7:3B:B2:EF:D9:65:2E:86:7C:8A:97:82:83:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/0C4E4F4CBB3AF73BB2EFD9652E867C8A9782832E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C4E4F4CBB3AF73BB2EFD9652E867C8A9782832E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/0C4E4F4CBB3AF73BB2EFD9652E867C8A9782832E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:1c:a5:84:47:a9:79:ee:2f:43:e8:59:44:7b:96:ad:b6:5a:
         4c:bd:05:e8:44:83:c7:f2:4f:53:77:b1:0a:e9:9f:8d:7b:30:
         b5:53:13:f4:81:81:bc:8a:71:0c:fb:74:ab:45:ba:1e:e9:69:
         02:82:2d:27:cd:d6:92:44:4f:71:7c:f0:c2:56:4d:6d:dc:51:
         3e:1f:f4:8a:38:43:bf:b8:4b:66:b2:de:ae:5b:0e:8b:57:9f:
         55:b4:9d:e3:4e:e1:b8:0f:83:64:5a:04:67:0c:15:d3:0a:6a:
         f8:c8:7a:93:27:90:22:ba:9f:eb:5c:22:c1:be:df:ae:13:af:
         33:25:44:ff:8a:6b:66:96:0c:c3:2f:84:e5:c6:b0:d6:47:29:
         2b:2d:ff:bc:7e:50:c1:6f:7f:e6:8a:83:26:e9:84:7a:4f:1d:
         f3:ce:e7:01:26:82:b0:a3:f7:3a:db:f0:b4:e8:bc:e4:be:ef:
         87:b6:73:69:1a:6c:cc:a9:02:44:cb:9a:dc:8a:2c:6d:2c:d5:
         02:59:4c:3d:8c:a3:c9:73:58:2e:6d:de:ce:af:13:58:90:9e:
         cf:c3:b3:73:bd:39:79:d3:27:a9:2c:45:27:8d:a5:5e:48:fe:
         6a:9a:44:01:d0:01:a1:45:80:8c:48:fc:2c:91:e5:2a:07:f0:
         ae:fb:af:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----