Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/2/AA8C62F6CC799DF8DE314F2B2704A3F10C7B5721.mft
File:                     AA8C62F6CC799DF8DE314F2B2704A3F10C7B5721.mft (raw, json)
Hash identifier:          5xxulnQpMvTfp8e7JwP41bG2Jnc48DdfuXocrU9d0G0=
Subject key identifier:   39:97:5C:27:4B:ED:13:4A:A8:BC:F0:7D:6B:7D:1C:FF:75:56:48:59
Authority key identifier: AA:8C:62:F6:CC:79:9D:F8:DE:31:4F:2B:27:04:A3:F1:0C:7B:57:21
Certificate issuer:       /CN=AA8C62F6CC799DF8DE314F2B2704A3F10C7B5721
Certificate serial:       0A9B4386CD017F4F8A1D473C6812A58AB71EC5A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA8C62F6CC799DF8DE314F2B2704A3F10C7B5721.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/2/AA8C62F6CC799DF8DE314F2B2704A3F10C7B5721.mft
Manifest number:          34
Signing time:             Mon 15 Apr 2024 05:51:35 +0000
Manifest this update:     Mon 15 Apr 2024 05:46:35 +0000
Manifest next update:     Tue 16 Apr 2024 09:48:35 +0000
Files and hashes:         1: 3230312e3138322e39362e302f32322d3234203d3e20323637353037.roa (hash: EFmoxljCxWN12ppDu0atKNt/kHITdi0MBAb9Wjfya3g=)
                          2: AA8C62F6CC799DF8DE314F2B2704A3F10C7B5721.crl (hash: ZzwK3Z3o3andtFEYQx5BmxNfJnM4aPeeDIh2RMvFyFY=)
                          3: 323830343a343238633a3a2f33322d3334203d3e20323637353037.roa (hash: Quy/i5RO/utSlq8ZYGxj/rzMo776gMk6qt35ITnqLUA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:9b:43:86:cd:01:7f:4f:8a:1d:47:3c:68:12:a5:8a:b7:1e:c5:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA8C62F6CC799DF8DE314F2B2704A3F10C7B5721
        Validity
            Not Before: Apr 15 05:46:35 2024 GMT
            Not After : Apr 16 09:48:35 2024 GMT
        Subject: CN=39975C274BED134AA8BCF07D6B7D1CFF75564859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8f:48:56:07:8a:e2:1c:f3:35:6f:5e:7c:d6:
                    bd:06:5a:e1:47:64:34:f0:ca:17:a6:23:0d:d1:05:
                    b6:73:da:f4:64:d5:e0:1f:aa:0d:74:b8:0d:0a:4b:
                    d9:8c:58:af:c6:64:5d:04:35:64:0f:7e:fa:35:b2:
                    a9:a9:41:26:4b:76:8e:a3:0b:91:d4:57:ea:1e:dc:
                    dc:09:e8:0d:be:84:a7:0d:0d:e9:39:a1:45:8c:66:
                    22:bc:b8:df:4a:87:bf:a6:4f:35:82:e7:28:96:bd:
                    53:2a:aa:8b:2a:d2:6d:67:30:ab:84:37:d2:a9:25:
                    1d:d6:24:84:87:6f:0e:5b:7b:f8:ba:b3:15:24:1d:
                    9c:3e:21:10:71:10:b4:e5:ed:fd:95:c5:42:6e:55:
                    db:43:a6:80:a8:28:5b:9b:f8:61:76:e3:ba:07:81:
                    d9:7a:ba:19:9c:30:a6:b8:f1:33:6c:46:de:10:72:
                    85:11:e5:77:a9:49:3b:df:95:db:6b:57:30:65:18:
                    d6:0b:49:3a:50:99:66:18:bb:e6:fa:cd:ec:96:54:
                    90:6c:a0:07:e7:60:6d:f1:b9:27:4e:e0:b6:de:d9:
                    bf:98:28:2e:cc:b6:47:6b:d4:70:c0:a1:41:48:ee:
                    0c:b6:c5:12:9f:b4:01:83:8a:41:fb:e4:49:c3:9f:
                    c9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:97:5C:27:4B:ED:13:4A:A8:BC:F0:7D:6B:7D:1C:FF:75:56:48:59
            X509v3 Authority Key Identifier:
                keyid:AA:8C:62:F6:CC:79:9D:F8:DE:31:4F:2B:27:04:A3:F1:0C:7B:57:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/2/AA8C62F6CC799DF8DE314F2B2704A3F10C7B5721.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA8C62F6CC799DF8DE314F2B2704A3F10C7B5721.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/2/AA8C62F6CC799DF8DE314F2B2704A3F10C7B5721.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:b6:45:03:8f:24:a3:2e:c7:c9:6b:f1:16:76:64:64:b8:e0:
         25:3b:72:c1:48:e3:52:e5:6e:8e:ea:bb:4f:bf:cf:da:a2:bd:
         da:fa:3c:c3:60:c6:59:b4:04:2d:ca:d9:db:91:f4:f5:14:f2:
         be:7d:c5:17:3a:36:38:cd:e5:ea:34:40:bb:a4:da:6e:18:9b:
         4e:d0:02:e1:33:84:4d:4f:ef:0b:31:6d:b1:00:0d:ef:db:9e:
         c1:2a:d3:dc:d8:8a:6a:31:fe:75:3a:ef:29:72:4a:cd:76:4f:
         95:ce:01:09:80:17:fc:40:c9:8b:65:e8:9b:40:e6:21:31:21:
         28:14:cf:bf:21:12:a4:02:63:21:5e:ac:16:d6:e2:46:30:3a:
         ae:09:fd:60:f2:4d:d0:f2:ef:f6:03:ed:fd:35:74:13:b8:61:
         59:07:fd:0c:68:01:c4:1f:3d:ea:aa:2f:88:f8:e3:13:f5:47:
         23:03:c8:8e:c4:a4:9b:fb:45:2a:e6:44:21:08:0d:ad:27:15:
         c6:0a:0d:fe:03:91:1d:8a:8d:37:61:77:d0:17:68:d3:57:a2:
         07:29:ca:c7:28:0a:23:90:9b:2e:fe:c7:78:ba:1f:93:8b:b1:
         3e:39:8d:76:c3:c3:af:29:a2:4f:50:02:1c:6f:65:8e:0e:1e:
         5a:74:b6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----