Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BAD135C743E93C3F949E8A52ED31CA21537430CA.mft
File:                     BAD135C743E93C3F949E8A52ED31CA21537430CA.mft (raw, json)
Hash identifier:          DIQtPDn5KkcIIrsN/+deZ3nM74nLZtliAxX7KpfTJks=
Subject key identifier:   AC:1C:59:E0:91:96:E5:73:FA:64:1A:D6:3A:9C:89:D0:24:41:24:9F
Authority key identifier: BA:D1:35:C7:43:E9:3C:3F:94:9E:8A:52:ED:31:CA:21:53:74:30:CA
Certificate issuer:       /CN=BAD135C743E93C3F949E8A52ED31CA21537430CA
Certificate serial:       320E375F13473C0ED29DA91E6709E554E5B22A94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BAD135C743E93C3F949E8A52ED31CA21537430CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BAD135C743E93C3F949E8A52ED31CA21537430CA.mft
Manifest number:          1F
Signing time:             Sun 08 Oct 2023 21:36:57 +0000
Manifest this update:     Sun 08 Oct 2023 21:31:57 +0000
Manifest next update:     Tue 10 Oct 2023 00:01:57 +0000
Files and hashes:         1: BAD135C743E93C3F949E8A52ED31CA21537430CA.crl (hash: +yQw94D1J/ONwouqB6c446DCWafPccrtWLhNeTt8Vf0=)
                          2: 34352e3137342e31362e302f32322d3332203d3e20323638383738.roa (hash: 2eUw7zSLr15TDCFkOM321TPm0wCKQeonHohi8ogcoPQ=)
                          3: 323830343a356266303a3a2f33322d313238203d3e20323638383738.roa (hash: Oh9Ynxwt9BYzcal3wJg3dTwHkzFssvI6aO9amqAfgtw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:0e:37:5f:13:47:3c:0e:d2:9d:a9:1e:67:09:e5:54:e5:b2:2a:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAD135C743E93C3F949E8A52ED31CA21537430CA
        Validity
            Not Before: Oct  8 21:31:57 2023 GMT
            Not After : Oct 10 00:01:57 2023 GMT
        Subject: CN=AC1C59E09196E573FA641AD63A9C89D02441249F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:84:e7:c2:02:92:af:7f:da:f0:01:0f:b9:c9:
                    30:d2:0c:ea:d6:e8:76:0c:a8:db:68:31:ce:78:2d:
                    7a:39:8d:12:54:b4:f9:87:93:2e:a2:d2:93:75:96:
                    87:27:77:29:a2:98:9d:6e:a4:44:9d:db:56:30:36:
                    3e:61:a1:13:db:c3:b1:c9:06:5f:65:d6:95:48:55:
                    81:a7:21:a0:83:81:ce:cb:76:29:73:43:bc:0a:3c:
                    78:fc:4b:4e:3f:79:98:30:62:71:fc:9e:18:49:73:
                    b0:b9:5c:b3:96:33:b5:d0:97:33:80:32:77:b8:28:
                    f2:c3:4b:33:0e:11:ef:82:5b:de:9e:ce:d5:73:b0:
                    24:30:bd:84:ad:da:c5:54:40:a5:f3:18:9d:9e:c4:
                    85:d8:e8:f1:8a:2e:5d:5a:a4:9f:ec:e0:d5:0a:b0:
                    42:0e:8c:d6:d5:cc:57:52:bd:80:79:9c:db:ab:00:
                    04:4c:f4:71:85:85:6a:47:32:1b:b9:7e:e1:40:0e:
                    ef:8b:a9:ab:da:f8:e5:ae:39:4b:b9:a7:2f:5b:09:
                    0c:8f:5f:59:a8:01:8a:39:66:65:66:ee:ae:22:0e:
                    5e:30:9a:2c:06:6f:3f:ee:b0:d5:4b:03:cc:38:38:
                    76:b7:83:95:64:9f:04:c7:ec:3a:f3:33:b0:00:0d:
                    a6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:1C:59:E0:91:96:E5:73:FA:64:1A:D6:3A:9C:89:D0:24:41:24:9F
            X509v3 Authority Key Identifier:
                keyid:BA:D1:35:C7:43:E9:3C:3F:94:9E:8A:52:ED:31:CA:21:53:74:30:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BAD135C743E93C3F949E8A52ED31CA21537430CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BAD135C743E93C3F949E8A52ED31CA21537430CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BAD135C743E93C3F949E8A52ED31CA21537430CA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ef:b0:d9:b0:ea:c7:0c:a2:da:3f:54:c6:86:28:24:6a:74:
         05:5f:24:d3:76:b3:1b:a7:0a:46:f5:82:9a:b7:dd:ea:44:46:
         14:1b:b0:37:33:47:da:52:5b:31:9f:9f:ac:a0:0f:43:e7:fc:
         a3:3d:54:a7:40:82:07:f5:d0:20:af:80:8a:80:93:ba:ae:a4:
         7e:27:48:86:a0:f8:2f:2c:eb:ba:3d:9b:4f:78:7f:d8:fc:00:
         61:02:b4:20:9c:16:73:3a:89:64:d3:5c:5f:e6:72:80:a7:13:
         99:10:b7:dc:3d:80:4b:fb:a8:26:c0:04:28:31:06:aa:63:03:
         c7:98:c1:ad:7c:de:b3:7f:0b:8f:3e:6f:c8:e8:b3:9c:02:c6:
         60:14:8f:8a:59:8e:9d:c0:ac:d9:5f:83:ab:7e:e0:f9:ee:93:
         7b:0c:06:d5:15:2c:2d:f8:56:d3:01:89:98:3f:8a:d4:12:fa:
         dd:4d:d9:63:75:00:e0:f4:f8:3b:19:99:86:e2:f4:35:55:11:
         6a:4c:37:c6:8c:4e:83:b9:2f:5a:98:e0:46:e8:e4:0e:30:02:
         8a:ce:f2:aa:72:c5:31:62:d3:0b:70:d4:79:fb:9c:4e:aa:cf:
         f2:db:0f:69:04:66:49:a1:97:8e:75:ec:82:0b:f2:d4:87:42:
         ac:45:25:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----