Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/0/844070BFA170F9C3D85A72401D93A864B2E4ACF0.mft
File:                     844070BFA170F9C3D85A72401D93A864B2E4ACF0.mft (raw, json)
Hash identifier:          yX8O5ku/ONC2ow8+iaY8lpzV8spCzgAVPuG9L3KRPqA=
Subject key identifier:   7F:AA:61:99:DE:1C:A3:4E:E1:C8:87:5E:1A:D6:87:B1:F1:8B:9C:F7
Authority key identifier: 84:40:70:BF:A1:70:F9:C3:D8:5A:72:40:1D:93:A8:64:B2:E4:AC:F0
Certificate issuer:       /CN=844070BFA170F9C3D85A72401D93A864B2E4ACF0
Certificate serial:       241309D8156EA64A0D0D51456194B55FA189F7AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/844070BFA170F9C3D85A72401D93A864B2E4ACF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/0/844070BFA170F9C3D85A72401D93A864B2E4ACF0.mft
Manifest number:          50
Signing time:             Mon 15 Apr 2024 01:14:24 +0000
Manifest this update:     Mon 15 Apr 2024 01:09:24 +0000
Manifest next update:     Tue 16 Apr 2024 04:36:24 +0000
Files and hashes:         1: 323830343a356365633a3a2f33322d3438203d3e20323638393339.roa (hash: M1KobmcVDtfpeGYyajIGnhlp6zyRmdrsC0LJg7goBTY=)
                          2: 34352e3137362e32342e302f32322d3234203d3e20323638393339.roa (hash: L1fr+TACgo48e1z3u6K0h5l7Y+28Gx6xRnTvNApjLeE=)
                          3: 844070BFA170F9C3D85A72401D93A864B2E4ACF0.crl (hash: kF3sgH/ZTf18uMN+2hteAEohBoI+HfTO9J4DY1sNnzc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:13:09:d8:15:6e:a6:4a:0d:0d:51:45:61:94:b5:5f:a1:89:f7:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=844070BFA170F9C3D85A72401D93A864B2E4ACF0
        Validity
            Not Before: Apr 15 01:09:24 2024 GMT
            Not After : Apr 16 04:36:24 2024 GMT
        Subject: CN=7FAA6199DE1CA34EE1C8875E1AD687B1F18B9CF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:dc:c1:94:45:8c:3c:0d:5e:b6:95:eb:1e:5e:
                    33:20:56:80:a4:aa:c4:c2:5e:a7:f8:6b:7e:b3:f3:
                    39:32:16:67:75:81:01:2c:6f:c2:fa:e5:6d:7e:fd:
                    c7:58:d6:f0:18:77:57:81:e7:da:81:fc:68:47:79:
                    80:87:89:34:4c:7e:be:4a:df:93:ae:1d:b0:4b:1e:
                    7d:c1:ea:ba:64:4b:48:9c:67:1a:de:b2:6f:e3:28:
                    4b:41:8b:91:b3:87:72:b8:1a:8a:50:93:8e:51:81:
                    a8:33:ed:2e:78:0a:da:1a:56:eb:72:f7:42:05:70:
                    e5:03:f2:f9:06:9e:76:e6:43:35:72:94:5e:a0:03:
                    cc:ea:ca:c7:7e:02:39:0c:d6:81:4d:15:79:0e:5e:
                    a1:3e:2e:85:88:da:ab:df:16:cd:45:c4:e3:88:9f:
                    78:46:32:f7:a1:fc:33:74:0b:05:0b:89:65:05:cb:
                    45:3d:00:2a:f0:03:71:61:50:e4:c4:59:23:71:fd:
                    e1:1b:eb:17:dc:cf:06:1f:98:95:7f:aa:36:5f:d5:
                    ba:13:8c:37:94:71:15:1a:75:71:75:8b:1e:97:17:
                    2a:28:be:ec:25:f9:1f:f1:fa:14:6b:74:b5:26:e6:
                    d4:88:53:d0:8f:ea:2a:18:38:1f:be:9c:e1:23:17:
                    7a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:AA:61:99:DE:1C:A3:4E:E1:C8:87:5E:1A:D6:87:B1:F1:8B:9C:F7
            X509v3 Authority Key Identifier:
                keyid:84:40:70:BF:A1:70:F9:C3:D8:5A:72:40:1D:93:A8:64:B2:E4:AC:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/0/844070BFA170F9C3D85A72401D93A864B2E4ACF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/844070BFA170F9C3D85A72401D93A864B2E4ACF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/0/844070BFA170F9C3D85A72401D93A864B2E4ACF0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:50:f4:9c:a3:c8:3c:f5:ec:93:a6:f4:dc:c9:8f:cc:32:fd:
         be:3c:d3:19:9b:6b:ec:2b:48:02:3f:c3:a2:88:ce:9c:da:60:
         88:52:cb:29:ed:89:0a:85:c4:b6:36:5d:77:1c:2f:df:fa:6a:
         9c:6e:e8:5a:27:6b:23:ce:b6:b6:99:68:12:a7:01:33:6d:10:
         0e:41:54:e7:ae:eb:2b:23:48:c1:96:60:46:03:45:3e:6c:da:
         ca:f6:67:23:7d:4f:10:d3:82:65:eb:5b:2b:9f:18:3b:42:2d:
         8f:aa:53:2b:70:30:6a:40:05:ca:45:02:e3:2e:af:4a:68:50:
         52:d6:8e:c8:ed:97:64:18:a0:b1:67:27:f7:25:64:48:30:8f:
         21:5f:ac:6e:7a:2e:00:99:58:e9:ae:fe:bd:7f:0d:17:69:48:
         77:c9:e0:0a:a2:a8:0f:33:d5:61:dd:5a:52:2f:ba:fe:a3:2b:
         7d:80:66:97:ec:37:c9:02:6a:1e:12:72:c8:69:5e:99:9c:51:
         5b:b8:dc:f8:3c:1d:10:41:8e:b0:13:63:3d:4f:eb:37:87:04:
         d4:26:01:b0:80:1d:44:1c:1c:35:72:7e:f9:56:4d:73:5d:86:
         f2:5f:04:91:c5:b2:3c:cd:cf:5a:d0:6f:dd:c1:f8:a1:d5:07:
         01:d8:50:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----