Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6EavKP1gP26boBHGiAQCbYhKRRUSCtnQnV1feDhM468x/0/8E3851F43313167D4BDB68376AC94B4FD8516560.mft
File:                     8E3851F43313167D4BDB68376AC94B4FD8516560.mft (raw, json)
Hash identifier:          vGScaiCMjj++E5A+oH6KPWd1x/ymHuWWwF1vwBhOfyQ=
Subject key identifier:   B8:C0:DF:0F:41:4A:2E:1E:77:61:DE:DC:32:88:E8:F4:8C:31:49:BF
Authority key identifier: 8E:38:51:F4:33:13:16:7D:4B:DB:68:37:6A:C9:4B:4F:D8:51:65:60
Certificate issuer:       /CN=8E3851F43313167D4BDB68376AC94B4FD8516560
Certificate serial:       1642E880A0F7A571E73A31015AB6F1C5837606DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E3851F43313167D4BDB68376AC94B4FD8516560.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6EavKP1gP26boBHGiAQCbYhKRRUSCtnQnV1feDhM468x/0/8E3851F43313167D4BDB68376AC94B4FD8516560.mft
Manifest number:          21
Signing time:             Sun 14 Jan 2024 04:10:09 +0000
Manifest this update:     Sun 14 Jan 2024 04:05:09 +0000
Manifest next update:     Mon 15 Jan 2024 08:07:09 +0000
Files and hashes:         1: 8E3851F43313167D4BDB68376AC94B4FD8516560.crl (hash: OZ5KimG3SSRVdj/5Y7Nl020jrbwhpUnorWKrbU3DmTU=)
                          2: 3230302e37312e3130342e302f32322d3232203d3e20323730343532.roa (hash: OziQ6c7GZiiIxIPJyEenMmsbxlhyzfOW71fozOLm5ow=)
                          3: 323830343a366333343a3a2f33322d3332203d3e20323730343532.roa (hash: vq3Xj+GK3yqvz91UN7PHpQmC2fuJabXRebD03sGk120=)
                          4: 3230302e37312e3130342e302f32342d3234203d3e20323730343532.roa (hash: 7CLbYIixGBITnzCgRrR70TLWmxSfyiFb7AA6SdY2CQk=)
                          5: 3230302e37312e3130342e302f32332d3233203d3e20323730343532.roa (hash: mWXDHgEMrJvWkiuyUxKvKnNDn+tGr7obhg92PTpRlrU=)
                          6: 3230302e37312e3130362e302f32332d3233203d3e20323730343532.roa (hash: j5NLe8wIUWkGoTb0UzfwQ2CZI9G4UXDrornwv7RvMBA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:42:e8:80:a0:f7:a5:71:e7:3a:31:01:5a:b6:f1:c5:83:76:06:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E3851F43313167D4BDB68376AC94B4FD8516560
        Validity
            Not Before: Jan 14 04:05:09 2024 GMT
            Not After : Jan 15 08:07:09 2024 GMT
        Subject: CN=B8C0DF0F414A2E1E7761DEDC3288E8F48C3149BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ca:d0:c0:59:06:75:90:d6:db:76:7d:16:c5:
                    5a:3c:78:8b:aa:19:d5:87:76:b7:3e:8a:5d:d9:c7:
                    95:22:bc:1f:99:e9:38:a4:ee:54:9f:b0:3e:8e:02:
                    67:70:83:9e:eb:15:16:ea:18:e1:5f:e0:f0:8b:4d:
                    b8:41:02:25:9e:77:5c:8a:ea:f9:5c:59:ad:dd:59:
                    1e:ea:c4:4f:5f:28:bc:25:d7:c0:c5:e1:bd:46:7f:
                    3a:96:01:00:ab:c2:47:84:65:1a:52:a8:15:b8:9e:
                    7d:b5:67:13:9e:0c:88:c4:60:d9:06:20:a2:47:0d:
                    7b:c5:4b:4b:bc:97:47:75:44:a1:b9:65:40:17:82:
                    ce:55:98:83:d8:7f:8f:70:13:02:28:a8:ab:5c:bb:
                    6d:d0:44:5b:05:d0:a6:89:39:d5:99:17:61:f7:c8:
                    a3:89:bf:89:66:e7:16:21:8f:ed:a2:0c:fb:01:83:
                    97:44:b9:0c:99:63:70:3b:1e:18:ab:b3:ee:8c:ab:
                    94:74:78:1b:70:8d:d2:e7:b5:3c:58:ba:62:2f:19:
                    fa:03:eb:a4:c7:0d:df:4d:d7:7d:38:b0:e8:9e:bb:
                    a5:82:74:10:f5:b8:d6:36:b6:1a:6d:98:0b:db:42:
                    8f:1c:80:19:1f:e1:a7:28:07:4a:e8:e9:00:8a:30:
                    56:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:C0:DF:0F:41:4A:2E:1E:77:61:DE:DC:32:88:E8:F4:8C:31:49:BF
            X509v3 Authority Key Identifier:
                keyid:8E:38:51:F4:33:13:16:7D:4B:DB:68:37:6A:C9:4B:4F:D8:51:65:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6EavKP1gP26boBHGiAQCbYhKRRUSCtnQnV1feDhM468x/0/8E3851F43313167D4BDB68376AC94B4FD8516560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E3851F43313167D4BDB68376AC94B4FD8516560.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6EavKP1gP26boBHGiAQCbYhKRRUSCtnQnV1feDhM468x/0/8E3851F43313167D4BDB68376AC94B4FD8516560.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:68:d6:b8:25:a2:47:30:1c:4f:31:5c:5e:bc:59:ca:2b:f8:
         6d:60:71:3e:bd:72:7b:74:8a:ee:04:5a:87:7e:1e:ec:5c:47:
         c4:10:05:84:ea:0f:47:a9:c7:47:39:b6:a8:ff:13:0e:d0:4f:
         f1:84:cd:6f:70:4d:bc:73:2c:df:5d:b7:d5:27:ea:94:bd:ba:
         0f:e0:23:5f:46:a9:ae:3f:ce:7b:28:07:7f:c5:c6:c7:e9:9b:
         74:35:6c:33:cb:09:05:85:53:8f:2a:e3:e9:bf:9f:08:c8:b3:
         5c:dd:e4:e3:50:0e:2f:74:4a:e9:a8:df:53:a6:3b:b2:17:91:
         cc:1c:84:b0:77:01:0b:93:ca:3c:d2:b9:09:38:5f:91:7f:16:
         4a:7c:ed:5c:bc:c3:01:bc:48:88:d7:1a:ce:ce:16:89:3b:c7:
         2d:95:69:d4:a5:a6:fd:66:b6:23:72:37:3f:17:2b:91:1a:9d:
         11:52:81:30:f9:d5:47:ed:40:7a:b1:e7:c1:4e:22:76:62:f7:
         16:c8:8e:f7:a9:3e:dc:e7:d3:72:14:44:d3:14:f8:aa:c6:e9:
         c6:43:56:2b:38:c4:19:9c:a4:0d:16:4d:bc:ca:c3:fc:37:7d:
         52:92:42:21:91:d1:fc:e3:12:29:e0:b6:30:fc:71:5b:d3:ef:
         99:6d:cf:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----