Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/0/8E6EB0E2DEE0B277EC860CDAEAFE6432832A861D.mft
File:                     8E6EB0E2DEE0B277EC860CDAEAFE6432832A861D.mft (raw, json)
Hash identifier:          eunpDPlmw9c+gQDwSEwLT+73PFjuhRnewLT9b8sY16Y=
Subject key identifier:   D9:90:44:0E:ED:EA:32:3B:95:A0:5E:EF:0C:F5:46:D7:6F:A9:DB:22
Authority key identifier: 8E:6E:B0:E2:DE:E0:B2:77:EC:86:0C:DA:EA:FE:64:32:83:2A:86:1D
Certificate issuer:       /CN=8E6EB0E2DEE0B277EC860CDAEAFE6432832A861D
Certificate serial:       6E3C3AF1EF1EAC9C21F0B10157C2613922C9C566
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E6EB0E2DEE0B277EC860CDAEAFE6432832A861D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/0/8E6EB0E2DEE0B277EC860CDAEAFE6432832A861D.mft
Manifest number:          B8
Signing time:             Sun 14 Apr 2024 20:07:11 +0000
Manifest this update:     Sun 14 Apr 2024 20:02:11 +0000
Manifest next update:     Mon 15 Apr 2024 23:36:11 +0000
Files and hashes:         1: 3230302e3139362e3230382e302f32342d3234203d3e20333936393832.roa (hash: O3MDWYxfVbLIOJJDUV2JMy9BYnHm9R3bY0ElbwmSR38=)
                          2: 8E6EB0E2DEE0B277EC860CDAEAFE6432832A861D.crl (hash: keCm9SKYv7bXeM3XUUSFFF+HWCN/IBfRfAhj5sQ75xk=)
                          3: 3230302e3139362e3230312e302f32342d3234203d3e20333936393832.roa (hash: mnO7Rcak7Ee1tK2lHhIhmbWR6BF8+5ELzyZtfeRxcC4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:3c:3a:f1:ef:1e:ac:9c:21:f0:b1:01:57:c2:61:39:22:c9:c5:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6EB0E2DEE0B277EC860CDAEAFE6432832A861D
        Validity
            Not Before: Apr 14 20:02:11 2024 GMT
            Not After : Apr 15 23:36:11 2024 GMT
        Subject: CN=D990440EEDEA323B95A05EEF0CF546D76FA9DB22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6e:02:34:d9:e8:aa:63:8c:03:44:a9:1a:fa:
                    86:9c:74:77:dd:96:91:7c:d5:e8:e7:c8:6d:1b:90:
                    79:10:0e:24:f3:62:bc:ae:86:a1:3a:18:67:17:15:
                    1c:de:ff:ea:b0:4a:37:9f:c1:0c:8e:0b:b0:0c:c3:
                    23:51:e3:95:ba:83:10:8b:d3:6d:a4:e3:b0:b2:b1:
                    90:7d:5d:26:96:f8:a9:54:04:84:cc:cc:12:f5:0b:
                    eb:ed:ba:d1:12:51:62:15:19:72:e2:30:90:4e:04:
                    e3:b6:ac:56:5b:e0:9a:ac:30:5d:53:13:df:43:f8:
                    5b:d0:f2:b3:27:8c:63:7a:ff:74:ac:1b:12:3f:74:
                    eb:5d:2f:0b:cc:e0:ef:3a:2c:9b:f5:e9:82:49:8e:
                    18:ea:be:96:f7:40:da:ad:91:01:14:b4:61:4c:2f:
                    85:fc:26:1e:ce:61:33:86:7f:a5:af:e3:51:ff:2e:
                    5c:a0:b1:47:47:ce:14:46:db:3a:a3:55:35:b5:a3:
                    7d:cd:b5:1b:c2:79:b9:2e:08:a7:0f:c2:54:36:0f:
                    3e:07:9d:91:31:ed:fd:56:77:8d:fd:59:17:32:4b:
                    d7:f9:63:f0:57:4b:86:49:3c:ab:b7:68:36:0a:73:
                    65:dc:c2:84:b6:03:17:92:98:1c:23:96:5d:b5:c3:
                    59:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:90:44:0E:ED:EA:32:3B:95:A0:5E:EF:0C:F5:46:D7:6F:A9:DB:22
            X509v3 Authority Key Identifier:
                keyid:8E:6E:B0:E2:DE:E0:B2:77:EC:86:0C:DA:EA:FE:64:32:83:2A:86:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/0/8E6EB0E2DEE0B277EC860CDAEAFE6432832A861D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E6EB0E2DEE0B277EC860CDAEAFE6432832A861D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/0/8E6EB0E2DEE0B277EC860CDAEAFE6432832A861D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:f5:3d:b2:38:c2:9c:b9:b2:e9:ac:7c:11:79:18:4b:0b:c1:
         2d:78:3d:2b:64:94:2f:34:1d:c2:86:67:c7:c7:2b:32:2a:7f:
         13:31:20:e1:98:12:0a:8a:df:2d:51:ee:9f:b4:80:f7:16:ca:
         a9:7b:44:27:e3:bd:26:b4:52:f8:6a:9c:5c:bb:d7:47:e9:2c:
         18:a5:dd:7c:ee:06:45:e0:14:d8:2d:f8:1a:45:a6:1e:2e:7b:
         3d:26:b3:04:31:c8:33:20:a8:4b:ca:56:08:39:42:0b:aa:ca:
         79:64:e5:39:e6:46:17:49:c7:1b:01:af:17:11:78:6e:af:6e:
         e7:2d:b1:95:05:c9:f9:f4:69:9a:48:11:a0:c7:bb:24:23:d2:
         6b:7d:f4:0c:52:87:3f:0e:5b:45:02:b1:5f:af:10:4f:31:d0:
         23:b5:9f:34:0b:d2:57:f9:3c:bc:62:80:d3:06:58:fd:1d:1e:
         16:35:90:43:9b:31:86:74:ac:40:a8:69:d7:e8:e5:70:a8:3b:
         d8:61:a0:ee:da:31:d1:5b:03:0b:a7:eb:c5:60:df:92:d3:fa:
         f2:6a:e8:6e:c3:84:ea:7a:e1:d3:d3:b3:32:de:58:60:e3:33:
         92:5a:c8:39:49:1d:3e:b2:29:26:72:66:4b:57:42:52:74:7b:
         99:3d:d0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----