Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/AB8E821D6BCE525AF5AF6C1EFD730A569B1DD9FF.mft
File:                     AB8E821D6BCE525AF5AF6C1EFD730A569B1DD9FF.mft (raw, json)
Hash identifier:          wW1QFvwqXrFrSa1Bo14WlUBdoxyVeDNh7ZE2NVvMON8=
Subject key identifier:   1A:D2:72:3C:FD:9B:03:51:D1:97:D2:51:18:11:92:E7:29:1D:02:61
Authority key identifier: AB:8E:82:1D:6B:CE:52:5A:F5:AF:6C:1E:FD:73:0A:56:9B:1D:D9:FF
Certificate issuer:       /CN=AB8E821D6BCE525AF5AF6C1EFD730A569B1DD9FF
Certificate serial:       10E78CC1152A6509389A14D1FF2AABB6F7911AD7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB8E821D6BCE525AF5AF6C1EFD730A569B1DD9FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/AB8E821D6BCE525AF5AF6C1EFD730A569B1DD9FF.mft
Manifest number:          32
Signing time:             Mon 15 Apr 2024 09:06:30 +0000
Manifest this update:     Mon 15 Apr 2024 09:01:30 +0000
Manifest next update:     Tue 16 Apr 2024 10:13:30 +0000
Files and hashes:         1: AB8E821D6BCE525AF5AF6C1EFD730A569B1DD9FF.crl (hash: CL9qp+OdejujG7LOFaKZNRJBIIgiuVqJimxwW/BvZ9s=)
                          2: 34352e3137362e3134302e302f32322d3234203d3e20323638393434.roa (hash: GIpW0RpQTntkGpyCZEvlY9IxQQTOS6+JYYh73v8VjNk=)
                          3: 323830343a356366633a3a2f33322d3438203d3e20323638393434.roa (hash: weOD+e8N+9AGGoOWcFk+F32juERec58BlotTu/l3OLY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:e7:8c:c1:15:2a:65:09:38:9a:14:d1:ff:2a:ab:b6:f7:91:1a:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB8E821D6BCE525AF5AF6C1EFD730A569B1DD9FF
        Validity
            Not Before: Apr 15 09:01:30 2024 GMT
            Not After : Apr 16 10:13:30 2024 GMT
        Subject: CN=1AD2723CFD9B0351D197D251181192E7291D0261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:76:3a:c1:cf:5b:a8:1b:a8:7a:3a:5b:db:23:
                    8e:5f:ca:81:89:68:ef:c0:59:3a:15:b7:27:1b:c8:
                    7b:ed:df:0e:57:f8:d7:5b:36:7d:67:35:76:eb:97:
                    e8:20:1d:1d:ea:f5:be:90:63:e6:66:b0:0b:fb:1a:
                    54:49:32:3e:39:b0:1e:a7:42:bc:fe:b8:c2:dd:24:
                    3e:01:fe:88:a4:83:e0:fd:7f:7a:4f:98:20:5d:d1:
                    c2:a2:16:1e:19:78:14:ba:c4:ae:bc:bb:26:d6:cf:
                    ca:76:5b:60:c6:fc:12:37:15:8a:5b:4d:a6:ae:a8:
                    32:23:d7:da:a9:2d:7c:bf:97:e8:54:fc:7f:97:73:
                    70:e8:78:52:c9:6b:c2:67:3c:2b:05:fe:1e:ff:5f:
                    91:a3:b2:e9:da:96:6e:ae:cf:be:13:c3:ff:c1:2b:
                    70:d3:67:1e:52:cd:89:f8:60:26:75:0f:3f:7e:bc:
                    5e:52:64:8f:42:0a:8b:ba:6e:29:80:04:93:9a:c1:
                    14:a5:bf:98:da:27:a0:42:b0:97:75:ec:58:af:e2:
                    2d:4f:e4:f5:40:43:b4:c3:9a:00:40:4e:18:a2:22:
                    20:3f:cb:1a:42:81:a2:91:7b:68:b7:ec:d2:93:29:
                    3b:2b:85:83:4c:ef:c6:b0:4e:18:e1:24:4b:b8:9c:
                    07:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D2:72:3C:FD:9B:03:51:D1:97:D2:51:18:11:92:E7:29:1D:02:61
            X509v3 Authority Key Identifier:
                keyid:AB:8E:82:1D:6B:CE:52:5A:F5:AF:6C:1E:FD:73:0A:56:9B:1D:D9:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/AB8E821D6BCE525AF5AF6C1EFD730A569B1DD9FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB8E821D6BCE525AF5AF6C1EFD730A569B1DD9FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/AB8E821D6BCE525AF5AF6C1EFD730A569B1DD9FF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:6b:8c:1c:df:10:b0:f1:c4:66:b7:8c:1e:9f:14:a9:32:0f:
         45:4a:0c:ba:09:93:75:7e:c7:2b:82:1c:12:21:a2:10:24:f9:
         e5:6a:85:99:67:50:79:3f:b9:18:2a:21:fb:b2:be:0f:62:a3:
         77:0b:eb:23:3d:89:4e:41:b8:fe:8f:4c:3f:d1:66:a3:6e:7c:
         1b:13:43:bc:37:83:7c:be:ff:53:5f:63:d0:80:97:7a:04:ec:
         f9:8c:cf:42:dd:2b:a1:16:43:53:59:a5:3a:62:68:91:9e:5a:
         81:08:e7:3d:f5:a9:ae:14:c7:9d:eb:db:3c:21:93:48:5a:c8:
         84:c7:0b:ca:0a:59:1d:8c:f8:f9:18:80:8b:fd:cb:46:39:aa:
         e8:cf:5b:23:54:25:d4:1d:fb:97:40:10:7e:e5:b0:4a:30:ea:
         39:84:42:b8:1e:0c:55:78:6e:64:9e:0e:63:0a:59:c0:dc:38:
         2c:dd:78:8d:9e:d6:68:f2:ba:00:e3:3e:a0:c0:d5:af:32:57:
         c8:6a:77:1b:62:98:28:19:02:91:5b:fa:67:ba:09:a5:89:aa:
         70:40:5b:6c:a0:99:c0:c8:51:12:f0:e2:7d:5b:cd:cb:54:25:
         e7:61:6e:06:3a:b4:08:5c:b3:5d:18:fd:71:ea:b7:0b:b5:98:
         f3:b2:8b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----