Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/0/AFC314DD8C08896724F95C2D3E22E842EC950945.mft
File:                     AFC314DD8C08896724F95C2D3E22E842EC950945.mft (raw, json)
Hash identifier:          6ky5toe2924FH9HeDjqayJh//6h1k10Z8SV62nSnA8I=
Subject key identifier:   9E:C4:FB:82:89:A0:56:23:6A:AF:63:FA:0F:B6:29:36:DE:DE:77:8F
Authority key identifier: AF:C3:14:DD:8C:08:89:67:24:F9:5C:2D:3E:22:E8:42:EC:95:09:45
Certificate issuer:       /CN=AFC314DD8C08896724F95C2D3E22E842EC950945
Certificate serial:       40C839D4653A852A30A3BB63F58784F229539CF8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFC314DD8C08896724F95C2D3E22E842EC950945.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/0/AFC314DD8C08896724F95C2D3E22E842EC950945.mft
Manifest number:          14
Signing time:             Fri 20 Oct 2023 22:19:24 +0000
Manifest this update:     Fri 20 Oct 2023 22:14:24 +0000
Manifest next update:     Sun 22 Oct 2023 01:38:24 +0000
Files and hashes:         1: 3136382e3139352e3136342e302f32322d3232203d3e20323635343236.roa (hash: OR3PE4TG/My9fJWqANS3WhwNM/2yLCNjh0ZmH/V2I+Y=)
                          2: 323830343a333366303a3a2f33322d3332203d3e20323635343236.roa (hash: Hp2ZEslzH7Lhxxr+b1k5oAPviAlainffSK/udofALOM=)
                          3: AFC314DD8C08896724F95C2D3E22E842EC950945.crl (hash: d+ZXcr7CzCrFGfL2u4yJzu2LDFpJmnNBJCyumxeXgI0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:c8:39:d4:65:3a:85:2a:30:a3:bb:63:f5:87:84:f2:29:53:9c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFC314DD8C08896724F95C2D3E22E842EC950945
        Validity
            Not Before: Oct 20 22:14:24 2023 GMT
            Not After : Oct 22 01:38:24 2023 GMT
        Subject: CN=9EC4FB8289A056236AAF63FA0FB62936DEDE778F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:94:8a:fd:c9:ee:e1:56:6a:39:dc:c9:c5:64:
                    21:ea:e3:13:a0:7b:3f:6a:42:d2:1d:68:56:4a:e2:
                    ed:4e:e0:64:4f:fb:19:d9:6f:34:78:3d:fd:f5:0f:
                    a0:17:7b:48:dc:7f:ea:81:f1:38:f0:26:63:68:ed:
                    6c:65:23:a0:f5:9b:cf:7c:f2:23:29:63:43:92:30:
                    db:1e:a6:29:61:aa:80:3f:64:d5:e6:85:af:ad:f2:
                    38:94:89:28:56:7f:26:f8:21:d5:bb:ad:83:c3:7e:
                    b2:70:00:8a:6a:f0:13:8c:b0:08:54:20:f8:d0:ac:
                    38:ef:24:69:81:fa:01:87:3d:d1:56:aa:8e:8d:6d:
                    c6:b2:f1:07:10:cc:66:e1:65:67:09:ac:1b:e6:53:
                    3b:7b:a3:dc:11:bc:a4:3c:02:9e:c5:af:09:a1:02:
                    fd:cb:f0:95:17:b6:3f:ad:6a:49:da:c9:31:f4:8a:
                    75:0d:bf:2e:f7:85:99:e2:3d:4a:80:5e:1d:13:7c:
                    9d:fe:f3:30:a1:75:29:35:53:97:11:26:3c:3e:67:
                    27:17:9a:0c:bb:17:8d:d5:b3:fe:ae:39:d6:a5:c1:
                    95:31:68:d2:10:23:f6:8d:84:07:f3:9d:e3:af:94:
                    b0:a2:ce:09:17:66:69:ed:9d:86:af:5b:3f:13:2e:
                    99:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C4:FB:82:89:A0:56:23:6A:AF:63:FA:0F:B6:29:36:DE:DE:77:8F
            X509v3 Authority Key Identifier:
                keyid:AF:C3:14:DD:8C:08:89:67:24:F9:5C:2D:3E:22:E8:42:EC:95:09:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/0/AFC314DD8C08896724F95C2D3E22E842EC950945.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFC314DD8C08896724F95C2D3E22E842EC950945.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/0/AFC314DD8C08896724F95C2D3E22E842EC950945.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:76:45:f3:1f:23:ec:b3:30:d8:7d:ff:07:e8:cb:41:d8:53:
         32:3f:40:93:2e:cd:72:ca:95:f2:42:9e:0a:91:11:82:48:0d:
         b4:0a:35:9e:f0:50:81:80:7c:75:95:a4:e1:86:19:11:5f:84:
         2b:5f:e3:87:2b:00:6c:00:66:65:95:82:db:69:21:a9:95:49:
         be:cd:79:d2:76:cb:47:6c:bb:e8:39:97:38:2a:ee:8b:56:17:
         93:a0:84:d0:e3:b0:f9:42:2e:c7:f8:1d:ad:24:97:4d:b4:dc:
         96:6f:4e:0b:ac:ea:9a:ad:2d:6c:df:ed:a0:3d:2a:51:ac:7c:
         3d:85:06:b2:1a:51:0a:71:1e:cd:1b:6f:ee:03:16:13:63:11:
         27:b8:0f:a7:de:1f:d7:b9:69:13:c9:a1:35:58:91:b0:d6:59:
         ed:b3:21:04:11:50:8f:cb:a7:e5:fe:f8:4e:15:de:e2:f5:f6:
         56:13:6e:41:af:26:2b:94:36:fa:fb:b9:74:8d:bc:ba:4b:1d:
         2e:77:0b:44:9c:9a:c8:ae:9d:d5:af:94:2c:d7:a4:30:23:af:
         f5:c1:3a:b4:77:f8:c8:2d:8d:92:74:1d:1f:0d:a1:dc:27:e1:
         4b:92:c0:f3:ec:50:37:4b:09:3b:21:e7:76:bf:59:ab:1f:37:
         a7:28:a1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----