Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/1/8A6E605ED2BDD660443C6C16905FB728C0170E49.mft
File:                     8A6E605ED2BDD660443C6C16905FB728C0170E49.mft (raw, json)
Hash identifier:          29rJfwfDNPqqzIbXSVtBBXIUFkReCI2D5EqdXonPNuc=
Subject key identifier:   7E:5E:76:00:AF:04:BA:AB:97:51:23:3B:AD:B0:9D:D0:33:D6:9C:C9
Authority key identifier: 8A:6E:60:5E:D2:BD:D6:60:44:3C:6C:16:90:5F:B7:28:C0:17:0E:49
Certificate issuer:       /CN=8A6E605ED2BDD660443C6C16905FB728C0170E49
Certificate serial:       55F5C8C43D55E5BBB4FD61D48781F4CF5F9ECC78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A6E605ED2BDD660443C6C16905FB728C0170E49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/1/8A6E605ED2BDD660443C6C16905FB728C0170E49.mft
Manifest number:          27
Signing time:             Wed 01 May 2024 22:44:56 +0000
Manifest this update:     Wed 01 May 2024 22:39:56 +0000
Manifest next update:     Fri 03 May 2024 02:41:56 +0000
Files and hashes:         1: 3138392e3132362e3133302e302f32342d3234203d3e20323732323238.roa (hash: 16dQUL+UhWuPDyeA/orLo589Af6XYkuB7LM9CO2NjJg=)
                          2: 8A6E605ED2BDD660443C6C16905FB728C0170E49.crl (hash: NBNTkCxL8miff9E2iMLIgHdpjE3hdrmxclBZhcmBtdc=)
                          3: 3138392e3132362e3132392e302f32342d3234203d3e20323732323238.roa (hash: oy71fybrIdQTZNXHe8bEpuhWw1nDDSIQ1lrOwDK6g4c=)
                          4: 3138392e3132362e3132382e302f32332d3233203d3e20323732323238.roa (hash: om5iLfuRuSvpSvX5YdCNiXSFUGig7kE7YLaraYVzb9s=)
                          5: 3138392e3132362e3132382e302f32342d3234203d3e20323732323238.roa (hash: EUbKhZLtBv+idWIyaQb3388bfWTX6SXNaJw3df2hgqs=)
                          6: 3138392e3132362e3133312e302f32342d3234203d3e20323732323238.roa (hash: oyPMUsm44Pkv24E0E2WRhXthFrq6qO6w2Ez/iEmze3k=)
                          7: 3138392e3132362e3133302e302f32332d3233203d3e20323732323238.roa (hash: Y9zbxd7k2ONdvp8TVmVImqRR+X5D3RWRWxh3/se+2W0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:f5:c8:c4:3d:55:e5:bb:b4:fd:61:d4:87:81:f4:cf:5f:9e:cc:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A6E605ED2BDD660443C6C16905FB728C0170E49
        Validity
            Not Before: May  1 22:39:56 2024 GMT
            Not After : May  3 02:41:56 2024 GMT
        Subject: CN=7E5E7600AF04BAAB9751233BADB09DD033D69CC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1d:27:6e:ee:49:0d:a9:3a:e4:51:2d:ac:1c:
                    2d:3b:5d:9a:7c:c0:70:bd:40:99:06:8c:68:36:64:
                    45:69:b3:6d:6f:8c:10:11:9e:e5:2b:3f:77:1a:41:
                    e8:0a:f4:86:19:c5:de:bc:2e:46:23:b2:c7:54:7e:
                    52:2a:79:fe:fb:cf:fe:dc:c1:d0:ef:b8:87:14:04:
                    61:22:1b:8a:3b:c4:77:44:e5:df:1e:99:a5:8a:18:
                    d4:41:70:fe:eb:90:32:1f:09:83:07:ac:10:bb:97:
                    ef:81:84:05:c4:8a:b7:fd:f9:2b:f4:68:f9:e3:50:
                    d9:67:34:f5:1e:ba:a9:c2:a1:09:cf:10:9c:d5:cd:
                    03:dc:92:98:83:84:23:79:a3:d6:c2:d3:6a:fb:52:
                    c1:fa:ba:40:39:bf:86:3d:d5:ae:20:05:5f:28:60:
                    8c:23:eb:b3:d1:7b:ee:17:4c:4a:36:68:10:ec:17:
                    92:03:67:e6:d9:ff:16:85:e7:77:6a:21:61:99:c6:
                    32:6a:54:ed:2f:f1:a4:25:18:0b:ae:15:6e:d6:73:
                    2f:b9:14:a5:3b:92:c2:3c:d3:aa:56:5a:75:ec:fd:
                    0c:97:2b:2d:c7:cd:83:69:01:4b:3e:6f:29:b0:09:
                    f6:45:68:7e:98:bb:b5:4f:80:a7:3f:b5:de:8c:4e:
                    8a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:5E:76:00:AF:04:BA:AB:97:51:23:3B:AD:B0:9D:D0:33:D6:9C:C9
            X509v3 Authority Key Identifier:
                keyid:8A:6E:60:5E:D2:BD:D6:60:44:3C:6C:16:90:5F:B7:28:C0:17:0E:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/1/8A6E605ED2BDD660443C6C16905FB728C0170E49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A6E605ED2BDD660443C6C16905FB728C0170E49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/1/8A6E605ED2BDD660443C6C16905FB728C0170E49.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:69:f6:0e:55:84:f4:f4:a4:40:c4:a2:73:67:05:05:3b:1d:
         b7:5a:d0:88:15:1d:ba:5d:c0:d8:8f:31:87:11:a1:ea:72:cb:
         a9:79:cc:7d:be:a2:60:56:4c:14:0f:a3:bc:85:a6:43:9a:b1:
         3e:c9:a8:a0:9c:c2:1a:2b:87:05:a1:0d:75:26:dd:92:f0:f5:
         33:4e:91:6a:e4:ba:f1:da:e8:d7:d5:b8:6b:92:d4:3d:82:1f:
         b7:53:30:15:c3:53:55:d7:90:ee:c0:6f:b2:25:4f:93:c0:e0:
         b0:8f:a3:2f:fa:37:4d:19:d3:32:95:4a:e7:09:87:28:4e:9f:
         d8:47:53:40:1f:34:f2:90:ab:42:44:42:dc:64:83:23:23:5a:
         80:7c:18:ee:2a:5b:43:c9:c7:75:12:8e:67:22:c2:f6:63:26:
         7c:0e:d1:b4:f8:8a:6c:ab:00:8a:01:ad:5a:6d:34:29:2a:34:
         aa:fa:72:76:ae:51:99:47:f3:cf:4e:ea:4e:cd:07:9d:0f:6e:
         d9:3e:35:11:67:e7:c2:5a:22:84:c6:e3:51:4d:21:3e:a3:99:
         b1:51:db:41:80:dd:8a:f2:d8:e3:2b:49:18:ca:4b:ac:9c:06:
         ae:24:90:f8:e0:7a:89:d7:a8:57:df:96:b3:58:ef:22:0f:81:
         63:f0:1c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----