Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8V8f5jPCdBFtRF66MFjWDK24nqTEzz9fvDXAGdMiNawo/0/128DF35FAB2C168FCE7DE69765BC0DD32B79A925.mft
File:                     128DF35FAB2C168FCE7DE69765BC0DD32B79A925.mft (raw, json)
Hash identifier:          Y/D47IQxPJ7od6i2MsSh0J3KbfTjixq+tKcXNjlVGHI=
Subject key identifier:   B8:F2:69:09:A9:08:59:5C:EE:D9:9E:87:01:CD:05:A2:0E:4E:C4:51
Authority key identifier: 12:8D:F3:5F:AB:2C:16:8F:CE:7D:E6:97:65:BC:0D:D3:2B:79:A9:25
Certificate issuer:       /CN=128DF35FAB2C168FCE7DE69765BC0DD32B79A925
Certificate serial:       40DE98E398BE4D81E7A61C82C043A8CAEE6FD260
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/128DF35FAB2C168FCE7DE69765BC0DD32B79A925.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8V8f5jPCdBFtRF66MFjWDK24nqTEzz9fvDXAGdMiNawo/0/128DF35FAB2C168FCE7DE69765BC0DD32B79A925.mft
Manifest number:          03
Signing time:             Wed 14 Feb 2024 15:36:43 +0000
Manifest this update:     Wed 14 Feb 2024 15:31:43 +0000
Manifest next update:     Thu 15 Feb 2024 15:52:43 +0000
Files and hashes:         1: 128DF35FAB2C168FCE7DE69765BC0DD32B79A925.crl (hash: HeSWSCC+yY369LUF8CAHZKrTgjNZKaU1obfuQ37R7E0=)
                          2: 323830343a343437383a3a2f33322d313238203d3e20323637363334.roa (hash: YWeeYTVVfHWmNEIBNBLpNwDRgQSXuvPbDJuR296JQlk=)
                          3: 34352e37312e34302e302f32332d3332203d3e20323637363334.roa (hash: KvPs7c+zVYrgwkexCoVHxCNWPgD/Qusd7fukX5q46Wg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:de:98:e3:98:be:4d:81:e7:a6:1c:82:c0:43:a8:ca:ee:6f:d2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128DF35FAB2C168FCE7DE69765BC0DD32B79A925
        Validity
            Not Before: Feb 14 15:31:43 2024 GMT
            Not After : Feb 15 15:52:43 2024 GMT
        Subject: CN=B8F26909A908595CEED99E8701CD05A20E4EC451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:54:0f:4c:e5:70:b5:c8:aa:eb:f6:32:c0:ff:
                    df:fc:b2:d2:2e:19:2d:28:b4:88:dc:73:4f:da:98:
                    f9:da:d8:9c:67:c0:f9:82:ee:b1:80:c4:2c:19:9f:
                    4e:83:56:3c:1a:6b:48:46:81:09:03:1c:da:50:10:
                    f4:ba:a0:65:1e:5e:00:d9:2f:49:a8:4e:cd:72:d1:
                    0f:b7:40:38:fc:ac:34:64:81:f2:fa:be:bf:86:f8:
                    70:88:79:12:c0:8e:c6:dc:bc:98:a6:67:6e:77:5d:
                    33:2a:14:74:bd:52:d9:19:d1:3f:af:a7:27:df:d6:
                    65:bb:49:71:62:46:ec:ea:54:28:f9:1d:c1:cd:8a:
                    b4:b7:10:2e:08:74:76:a2:67:b0:33:37:04:e1:ad:
                    d3:dd:49:97:d1:15:d6:2c:e1:87:ad:af:f7:80:3b:
                    09:5d:bd:03:b7:9c:e2:e2:93:db:f8:60:7d:9e:67:
                    e0:6e:78:f7:9b:10:23:fa:98:17:03:b2:33:5a:16:
                    76:b6:32:c9:24:6b:0d:6d:ad:91:11:d8:9b:d4:f1:
                    f8:25:44:ba:9b:ea:6b:3c:4a:32:f1:d5:ea:88:8d:
                    56:58:ae:0c:f0:ef:d3:05:13:0c:76:db:f5:7f:59:
                    39:93:15:1d:df:f8:c8:5f:9c:ba:03:99:49:98:2c:
                    ed:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F2:69:09:A9:08:59:5C:EE:D9:9E:87:01:CD:05:A2:0E:4E:C4:51
            X509v3 Authority Key Identifier:
                keyid:12:8D:F3:5F:AB:2C:16:8F:CE:7D:E6:97:65:BC:0D:D3:2B:79:A9:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8V8f5jPCdBFtRF66MFjWDK24nqTEzz9fvDXAGdMiNawo/0/128DF35FAB2C168FCE7DE69765BC0DD32B79A925.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/128DF35FAB2C168FCE7DE69765BC0DD32B79A925.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8V8f5jPCdBFtRF66MFjWDK24nqTEzz9fvDXAGdMiNawo/0/128DF35FAB2C168FCE7DE69765BC0DD32B79A925.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:f3:d4:02:13:dc:65:9c:a4:43:7b:31:2b:2c:41:04:69:f2:
         7d:8a:dd:a5:59:e9:e8:b2:24:2a:bc:e6:99:5f:df:4f:66:29:
         50:77:b3:2a:a2:8f:0b:e3:10:c1:1b:b8:ad:5b:19:ee:8a:42:
         bd:7b:c2:a8:a6:ee:a4:ee:f4:65:6c:b8:f8:fb:69:3c:be:9f:
         7f:19:c6:3e:43:e0:65:7a:01:ce:46:8a:3f:49:8e:79:a4:70:
         3d:28:c5:49:87:a9:33:ac:0b:89:67:ba:16:7d:1b:cf:f7:72:
         59:9f:91:35:1a:41:1c:1a:1f:93:7d:be:b3:fd:8d:a1:06:bf:
         9c:22:ab:8a:b1:bb:62:71:bf:52:47:f9:8a:62:4b:65:23:1e:
         1a:06:71:28:fe:6c:96:35:11:4c:6c:66:13:f0:41:49:31:1d:
         a2:65:31:31:5b:93:9d:77:47:4b:92:67:00:14:5b:fb:04:53:
         37:d2:91:26:4b:b6:1d:52:5a:60:27:a3:75:d1:aa:b4:b7:e4:
         fb:5f:c5:64:79:20:da:84:10:8b:78:55:70:20:26:ac:bf:ce:
         9e:c7:81:cd:09:a4:43:d0:c8:16:02:48:af:46:26:6c:90:78:
         b8:33:2a:2c:81:d9:cd:94:0f:08:e8:a1:e5:95:79:dd:37:fc:
         a0:c2:be:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----