Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4MA8wpoPwSFcd4tdm1p1hiXgq6X4EDsWweLiwujPvDxc/0/1E9BC0E34E3E1C72FCCDD8859BB10F3CE828A014.mft
File:                     1E9BC0E34E3E1C72FCCDD8859BB10F3CE828A014.mft (raw, json)
Hash identifier:          l3gdNXeE4ATe/KX+K+vnk3nIX6qfMAyPvdpNEyQpF0U=
Subject key identifier:   AC:8C:06:62:64:D8:E7:D2:82:64:02:57:F2:B2:F9:F9:2A:63:3C:E4
Authority key identifier: 1E:9B:C0:E3:4E:3E:1C:72:FC:CD:D8:85:9B:B1:0F:3C:E8:28:A0:14
Certificate issuer:       /CN=1E9BC0E34E3E1C72FCCDD8859BB10F3CE828A014
Certificate serial:       6F949ED66FC2E83470B2149E35E9A83F0DBE0129
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E9BC0E34E3E1C72FCCDD8859BB10F3CE828A014.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MA8wpoPwSFcd4tdm1p1hiXgq6X4EDsWweLiwujPvDxc/0/1E9BC0E34E3E1C72FCCDD8859BB10F3CE828A014.mft
Manifest number:          030B
Signing time:             Wed 30 Aug 2023 03:37:41 +0000
Manifest this update:     Wed 30 Aug 2023 03:32:41 +0000
Manifest next update:     Thu 31 Aug 2023 03:49:41 +0000
Files and hashes:         1: 1E9BC0E34E3E1C72FCCDD8859BB10F3CE828A014.crl (hash: iUMwkmRcF6gxIz4QqfFm0lDUKQxlHi6CXAZE7TN2dGw=)
                          2: 3138392e38342e34342e302f32322d3234203d3e20323730353339.roa (hash: zELUgRMmWK5W3Wba51wapzUZpDILtEm835leq3JpcBA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:94:9e:d6:6f:c2:e8:34:70:b2:14:9e:35:e9:a8:3f:0d:be:01:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E9BC0E34E3E1C72FCCDD8859BB10F3CE828A014
        Validity
            Not Before: Aug 30 03:32:41 2023 GMT
            Not After : Aug 31 03:49:41 2023 GMT
        Subject: CN=AC8C066264D8E7D282640257F2B2F9F92A633CE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e8:40:bf:8c:7b:c0:4b:04:9a:ab:5a:84:3e:
                    02:27:67:9d:83:67:81:15:69:9a:76:83:d0:7d:6d:
                    c1:3c:1c:b1:61:f2:71:7a:2a:1d:b6:ae:6b:4e:e7:
                    03:cd:a8:ae:22:ff:0c:91:ea:98:41:15:ba:39:43:
                    48:12:a7:3f:53:a7:97:de:e6:65:90:d8:fe:7f:84:
                    63:f6:de:55:91:ce:7c:cc:0c:c0:de:db:79:7a:8d:
                    0f:aa:a5:bc:43:b3:83:87:82:d0:ae:e1:2e:0d:98:
                    21:ac:23:13:78:8f:ea:0d:ae:68:e0:bb:73:eb:3e:
                    b0:07:2c:13:d5:e0:a3:85:99:3e:5d:a5:56:97:79:
                    d8:a3:4a:fa:02:fa:57:5b:15:bd:38:07:b2:b0:9d:
                    88:41:06:cb:36:46:ec:ee:75:c7:3e:2b:fc:95:eb:
                    75:c3:9e:5a:73:aa:03:b7:5c:9a:a2:68:98:db:71:
                    e2:ef:8d:44:13:a6:64:df:20:fa:7f:eb:48:89:64:
                    2f:0e:42:73:d7:19:df:ba:f2:ff:7e:ff:7e:21:65:
                    72:39:62:09:6e:d4:1c:b4:ed:4e:43:49:fe:63:1d:
                    a8:98:f0:69:7c:d1:6d:d4:6e:fd:6b:f5:01:4c:7c:
                    60:d7:ee:91:5c:76:5c:73:dd:20:9d:c7:d2:1c:a1:
                    71:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:8C:06:62:64:D8:E7:D2:82:64:02:57:F2:B2:F9:F9:2A:63:3C:E4
            X509v3 Authority Key Identifier:
                keyid:1E:9B:C0:E3:4E:3E:1C:72:FC:CD:D8:85:9B:B1:0F:3C:E8:28:A0:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MA8wpoPwSFcd4tdm1p1hiXgq6X4EDsWweLiwujPvDxc/0/1E9BC0E34E3E1C72FCCDD8859BB10F3CE828A014.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E9BC0E34E3E1C72FCCDD8859BB10F3CE828A014.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MA8wpoPwSFcd4tdm1p1hiXgq6X4EDsWweLiwujPvDxc/0/1E9BC0E34E3E1C72FCCDD8859BB10F3CE828A014.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:fb:ad:c0:48:22:99:ef:79:51:40:fd:62:0b:fd:79:90:cc:
         27:82:7b:24:30:47:5f:99:42:09:a6:9e:23:49:56:96:45:e4:
         66:ac:88:ea:8f:f9:58:08:bc:76:b9:84:5a:6d:6e:53:40:c6:
         af:a4:d4:e4:a0:70:9a:38:f0:59:18:91:6d:c4:cf:86:91:77:
         d2:84:1a:94:66:46:af:ae:30:d4:16:c2:db:52:85:f9:f3:78:
         eb:7d:b4:ea:5a:89:7a:9b:c6:17:80:38:22:bb:01:de:6a:27:
         d2:d8:3a:aa:9e:e6:98:e4:c5:e0:03:bd:df:a8:68:8f:68:a9:
         a2:4d:c6:0d:d2:63:e0:84:34:b4:5e:19:40:d3:4b:ed:b5:a6:
         9a:34:d5:3a:af:3c:a2:5c:e4:ad:39:90:9b:d3:03:a0:ab:b4:
         04:d3:4c:63:b2:3e:11:14:56:e0:20:bb:23:dc:9b:a1:fe:06:
         54:5d:ec:6d:3d:a8:49:6b:04:d0:e0:3b:e5:3a:1a:6f:41:48:
         d9:0e:ee:37:16:60:c7:fe:56:77:37:b6:b8:a1:80:36:2f:26:
         6c:04:32:80:da:79:41:ce:fa:ca:ff:e6:69:75:50:18:9a:05:
         a6:34:0b:c4:0b:58:a3:91:05:fd:c3:fc:ff:04:64:5d:d9:9b:
         a8:26:53:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----