Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/876F8C1F6C6405B966A93B542B578351FABA5EB0.mft
File:                     876F8C1F6C6405B966A93B542B578351FABA5EB0.mft (raw, json)
Hash identifier:          rDazxssO6oXYvKtDswZOHIsr/0ntrVKLIbjTYw61PXM=
Subject key identifier:   44:C3:B0:BF:58:A1:72:C6:50:F1:8D:9D:C3:44:5C:4D:46:60:6C:4E
Authority key identifier: 87:6F:8C:1F:6C:64:05:B9:66:A9:3B:54:2B:57:83:51:FA:BA:5E:B0
Certificate issuer:       /CN=876F8C1F6C6405B966A93B542B578351FABA5EB0
Certificate serial:       1F8ACCCD9423175A895EFA741B63912C90C74F32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/876F8C1F6C6405B966A93B542B578351FABA5EB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/876F8C1F6C6405B966A93B542B578351FABA5EB0.mft
Manifest number:          0B
Signing time:             Thu 15 Feb 2024 18:47:15 +0000
Manifest this update:     Thu 15 Feb 2024 18:42:15 +0000
Manifest next update:     Fri 16 Feb 2024 22:37:15 +0000
Files and hashes:         1: 3137372e32332e32382e302f32322d3332203d3e203532373632.roa (hash: Msxcjpq1ML9h/1podlKlyX1pwQNyXzDlIK3gLyg5Z7w=)
                          2: 876F8C1F6C6405B966A93B542B578351FABA5EB0.crl (hash: I9kFrvUbq6XmFNK+1lP2VeApuLru5ldwOy3UVeXkPBc=)
                          3: 323830343a6237633a3a2f33322d313238203d3e203532373632.roa (hash: Qwt+yDnNCvIMxXv/i4CRWnhNeAgvYLd+4jxCV8nGyR0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:8a:cc:cd:94:23:17:5a:89:5e:fa:74:1b:63:91:2c:90:c7:4f:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=876F8C1F6C6405B966A93B542B578351FABA5EB0
        Validity
            Not Before: Feb 15 18:42:15 2024 GMT
            Not After : Feb 16 22:37:15 2024 GMT
        Subject: CN=44C3B0BF58A172C650F18D9DC3445C4D46606C4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fd:b9:0b:c0:12:58:f5:47:35:c1:fb:cf:11:
                    88:98:a9:85:b8:65:f2:a2:b8:1f:10:b6:55:95:b1:
                    88:16:82:23:3b:7a:f3:1b:89:cc:08:77:02:3b:e9:
                    f7:06:db:a4:ed:43:30:5a:e6:36:2b:83:ef:eb:e4:
                    fe:f0:2d:20:22:21:b7:d9:2f:9c:79:d2:c5:de:e1:
                    dd:9c:68:60:5e:02:c5:21:64:ab:2f:62:21:02:80:
                    8c:ef:42:e7:82:67:b1:49:6d:8c:19:78:33:53:ea:
                    29:6a:b9:d6:6a:0c:76:7f:4e:46:58:05:96:da:b0:
                    52:aa:e0:3a:12:f5:4c:8d:e3:90:ba:00:a4:5f:a7:
                    b9:20:ab:7f:3c:4c:3d:5d:e7:83:1c:01:67:06:49:
                    ed:d8:1d:da:27:31:76:ac:f8:06:c4:30:8b:5c:cc:
                    6a:83:3f:1d:7b:2b:24:76:f6:4a:02:e5:dd:74:c8:
                    b5:5e:54:1e:40:fd:53:d9:54:00:c0:34:fd:22:00:
                    a0:ac:06:ca:df:82:da:ae:23:6b:64:cf:ad:73:4c:
                    3a:e7:39:97:20:2c:57:4f:9f:16:4d:dc:b9:a6:88:
                    36:f1:25:b7:f5:87:97:34:59:52:f2:34:68:14:8b:
                    af:86:0f:cd:1d:9d:69:25:df:68:23:c2:b4:3d:5e:
                    24:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C3:B0:BF:58:A1:72:C6:50:F1:8D:9D:C3:44:5C:4D:46:60:6C:4E
            X509v3 Authority Key Identifier:
                keyid:87:6F:8C:1F:6C:64:05:B9:66:A9:3B:54:2B:57:83:51:FA:BA:5E:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/876F8C1F6C6405B966A93B542B578351FABA5EB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/876F8C1F6C6405B966A93B542B578351FABA5EB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/876F8C1F6C6405B966A93B542B578351FABA5EB0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:75:b1:84:eb:9b:48:2b:05:c6:7d:74:e6:e0:cd:76:69:13:
         2b:4a:5f:3c:64:7f:c2:61:58:ba:e3:c3:8d:91:1b:f2:16:de:
         fa:ac:80:a6:ca:b9:e5:be:0e:2e:8d:59:e5:a6:bf:e3:2f:e4:
         7d:56:c5:ad:95:8e:b1:4d:04:98:9b:4c:e5:76:9f:51:5e:b4:
         a5:4a:82:c3:2c:2d:2b:a5:8f:b5:64:93:f0:84:bf:e2:b6:b0:
         f4:db:b7:ef:c2:b5:53:c3:85:2c:68:2e:1d:0d:b3:ec:3b:9f:
         76:78:28:a4:88:7a:31:12:0c:ef:43:c4:e5:74:fa:cc:3a:eb:
         4f:09:34:66:2a:ee:9d:36:e7:04:28:80:7d:be:d5:ed:76:55:
         47:eb:9a:f8:34:8e:a6:7d:05:19:62:01:97:29:0a:4d:c8:16:
         60:1d:2c:7d:fc:18:3e:51:b4:d4:62:3f:3d:86:0e:54:72:08:
         77:ce:53:19:c8:34:23:56:2e:6c:bc:99:09:f6:90:90:48:f5:
         c4:2a:26:59:ed:05:10:45:4a:ef:95:66:51:be:9c:97:18:d7:
         04:b7:cf:39:7d:c7:89:0e:94:79:b5:e5:78:0a:09:12:ad:b0:
         4d:25:f4:2d:4d:de:99:0e:4c:d9:18:62:fb:2a:b6:32:4d:a6:
         87:6d:f3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----