Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/C8C1E9D2CFF51D0F16E2D04FDE71233CE05C9FAE.mft
File:                     C8C1E9D2CFF51D0F16E2D04FDE71233CE05C9FAE.mft (raw, json)
Hash identifier:          IG+iOPZaRe/H8AYeiWIstdu1uDd/cFIrSRT4vNtGLOs=
Subject key identifier:   3E:76:52:3C:7F:F4:A9:11:E5:84:23:CB:F4:9D:36:B3:DB:96:5C:6C
Authority key identifier: C8:C1:E9:D2:CF:F5:1D:0F:16:E2:D0:4F:DE:71:23:3C:E0:5C:9F:AE
Certificate issuer:       /CN=C8C1E9D2CFF51D0F16E2D04FDE71233CE05C9FAE
Certificate serial:       24F86016D1A113FD88D7B249622EFF96C77956B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8C1E9D2CFF51D0F16E2D04FDE71233CE05C9FAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/C8C1E9D2CFF51D0F16E2D04FDE71233CE05C9FAE.mft
Manifest number:          8A
Signing time:             Fri 19 Jan 2024 09:39:42 +0000
Manifest this update:     Fri 19 Jan 2024 09:34:42 +0000
Manifest next update:     Sat 20 Jan 2024 11:06:42 +0000
Files and hashes:         1: 323830343a373031303a3a2f33322d313238203d3e20323730373031.roa (hash: 8OBhVHjKlIq4vBAnvU/3apPSs3i7mv0v2Mz5lcsF1nc=)
                          2: 3138392e3132372e3133322e302f32322d3332203d3e20323730373031.roa (hash: X5pZfLXgbLL2RLE+VmrBD19JdsJ5+GBB99bM7H5UVgI=)
                          3: C8C1E9D2CFF51D0F16E2D04FDE71233CE05C9FAE.crl (hash: GH3oL8kvZVkUPQitIcCZW1UvzveVM1GkvBFWsrnMYLQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f8:60:16:d1:a1:13:fd:88:d7:b2:49:62:2e:ff:96:c7:79:56:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8C1E9D2CFF51D0F16E2D04FDE71233CE05C9FAE
        Validity
            Not Before: Jan 19 09:34:42 2024 GMT
            Not After : Jan 20 11:06:42 2024 GMT
        Subject: CN=3E76523C7FF4A911E58423CBF49D36B3DB965C6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cc:f2:94:27:d4:a4:be:d9:c8:70:e7:3c:64:
                    67:af:f1:a0:cb:d9:f9:be:c4:a2:84:45:6b:1a:c8:
                    8d:ac:f6:07:fc:0e:01:71:ec:37:25:a3:50:9a:b7:
                    39:75:01:6b:9b:94:a0:88:01:ca:0e:60:bb:54:e2:
                    1c:23:76:31:5c:08:13:12:2a:5e:4b:4d:7c:e3:a9:
                    e8:66:f0:10:10:01:a5:fb:7c:eb:73:2e:fc:6f:84:
                    c2:9c:84:3d:4e:f8:71:2c:1a:e9:44:8f:10:ad:5b:
                    a6:da:0a:fa:ad:5e:e2:9d:34:3b:7f:99:79:b0:07:
                    6f:7a:0e:ea:f8:aa:85:3b:c9:6d:68:7e:13:2f:54:
                    e2:c1:c9:9d:7d:06:0e:60:28:01:f3:62:01:14:2d:
                    30:32:4a:8b:32:5a:c8:1c:01:da:98:35:91:bb:c1:
                    aa:68:d0:67:06:56:ba:a7:38:36:71:b3:b9:fb:2c:
                    7b:66:57:d9:b2:be:06:b5:48:20:87:d2:3a:5c:c7:
                    cb:0e:67:bc:cc:f9:45:42:42:17:c6:c7:90:93:3a:
                    10:3e:0f:53:21:d9:ff:6e:a7:13:fe:e4:af:42:f9:
                    d0:96:02:79:9e:1f:6f:a3:1f:37:5b:f3:0b:e4:81:
                    1f:cb:ee:01:00:61:35:64:98:bd:d1:22:eb:4e:da:
                    af:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:76:52:3C:7F:F4:A9:11:E5:84:23:CB:F4:9D:36:B3:DB:96:5C:6C
            X509v3 Authority Key Identifier:
                keyid:C8:C1:E9:D2:CF:F5:1D:0F:16:E2:D0:4F:DE:71:23:3C:E0:5C:9F:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/C8C1E9D2CFF51D0F16E2D04FDE71233CE05C9FAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8C1E9D2CFF51D0F16E2D04FDE71233CE05C9FAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/C8C1E9D2CFF51D0F16E2D04FDE71233CE05C9FAE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:73:6a:fc:7a:a1:ed:de:7c:ac:52:a3:c6:5c:8e:21:b9:17:
         91:0b:a1:7d:e1:b1:dc:8e:0d:36:85:32:69:6c:58:44:5e:0f:
         92:9f:ab:3f:71:dc:3a:cf:08:0a:e8:6f:ce:cf:12:53:17:24:
         1a:92:e4:fa:a9:44:58:a2:cf:89:4e:dd:2f:14:ab:af:7d:5a:
         5e:58:9b:14:5b:8d:7d:04:24:40:a5:b4:e2:20:12:cf:2c:3e:
         c8:62:23:9d:28:79:6a:3d:38:64:58:55:52:83:ce:0f:db:86:
         2a:ba:0b:88:8f:31:d5:ae:69:f5:7a:61:5c:ad:5d:36:cf:98:
         35:a7:6f:5e:b3:2a:3d:17:d3:9c:db:12:75:6f:79:0e:73:a3:
         29:34:ab:1e:25:d1:54:7d:6a:a9:0e:cc:d0:06:a0:27:91:1a:
         5b:29:ce:43:e0:93:a0:c5:14:a6:30:ef:53:78:5d:a5:f9:a4:
         d8:98:bf:72:5b:16:50:9a:bb:a1:5b:13:72:02:95:aa:dd:ac:
         af:85:a1:c5:28:e5:46:7c:08:d2:ad:5d:c5:17:3a:c0:8c:a8:
         c9:c2:0d:13:0b:ed:c8:32:ee:cf:81:5a:c3:83:e4:7d:a7:b5:
         37:64:5b:6d:6d:27:7d:3a:c3:74:e8:12:b5:63:17:cd:ac:0a:
         14:e3:d2:ce
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUJPhgFtGhE/2I17JJYi7/lsd5VrAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzhDMUU5RDJDRkY1MUQwRjE2RTJEMDRGREU3MTIzM0NF
MDVDOUZBRTAeFw0yNDAxMTkwOTM0NDJaFw0yNDAxMjAxMTA2NDJaMDMxMTAvBgNV
BAMTKDNFNzY1MjNDN0ZGNEE5MTFFNTg0MjNDQkY0OUQzNkIzREI5NjVDNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuzPKUJ9SkvtnIcOc8ZGev8aDL
2fm+xKKERWsayI2s9gf8DgFx7Dclo1Catzl1AWublKCIAcoOYLtU4hwjdjFcCBMS
Kl5LTXzjqehm8BAQAaX7fOtzLvxvhMKchD1O+HEsGulEjxCtW6baCvqtXuKdNDt/
mXmwB296Dur4qoU7yW1ofhMvVOLByZ19Bg5gKAHzYgEULTAySosyWsgcAdqYNZG7
wapo0GcGVrqnODZxs7n7LHtmV9myvga1SCCH0jpcx8sOZ7zM+UVCQhfGx5CTOhA+
D1Mh2f9upxP+5K9C+dCWAnmeH2+jHzdb8wvkgR/L7gEAYTVkmL3RIutO2q9nAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUPnZSPH/0qRHlhCPL9J02s9uWXGwwHwYDVR0j
BBgwFoAUyMHp0s/1HQ8W4tBP3nEjPOBcn64wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1FreHlLa3kzRlg0VGRFa1VKWWRvcE1QcldWMnVUUGtTTXVGU2lucTIx
WHEvMC9DOEMxRTlEMkNGRjUxRDBGMTZFMkQwNEZERTcxMjMzQ0UwNUM5RkFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M4QzFFOUQyQ0ZGNTFEMEYx
NkUyRDA0RkRFNzEyMzNDRTA1QzlGQUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N1FreHlLa3kzRlg0VGRFa1VKWWRvcE1QcldWMnVUUGtTTXVGU2lucTIxWHEvMC9D
OEMxRTlEMkNGRjUxRDBGMTZFMkQwNEZERTcxMjMzQ0UwNUM5RkFFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfnNq/Hqh7d58rFKjxlyOIbkXkQuhfeGx3I4NNoUyaWxYRF4Pkp+rP3HcOs8I
Cuhvzs8SUxckGpLk+qlEWKLPiU7dLxSrr31aXlibFFuNfQQkQKW04iASzyw+yGIj
nSh5aj04ZFhVUoPOD9uGKroLiI8x1a5p9XphXK1dNs+YNadvXrMqPRfTnNsSdW95
DnOjKTSrHiXRVH1qqQ7M0AagJ5EaWynOQ+CToMUUpjDvU3hdpfmk2Ji/clsWUJq7
oVsTcgKVqt2sr4WhxSjlRnwI0q1dxRc6wIyoycINEwvtyDLuz4Faw4Pkfae1N2Rb
bW0nfTrDdOgStWMXzawKFOPSzg==
-----END CERTIFICATE-----