Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/0/8C4B870CE1B8CA58C4F05E954547788D89A7BDE1.mft
File:                     8C4B870CE1B8CA58C4F05E954547788D89A7BDE1.mft (raw, json)
Hash identifier:          7380XALUlSJQ2DUiJqNJXKjPzCzVby8+dKmgIvj7K5E=
Subject key identifier:   9D:5A:68:E2:54:0E:9F:3C:9C:73:2A:4A:99:87:94:73:1F:D2:48:EF
Authority key identifier: 8C:4B:87:0C:E1:B8:CA:58:C4:F0:5E:95:45:47:78:8D:89:A7:BD:E1
Certificate issuer:       /CN=8C4B870CE1B8CA58C4F05E954547788D89A7BDE1
Certificate serial:       41575C83DE4284B35A3B65E3E9A1D86F0FB3882E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C4B870CE1B8CA58C4F05E954547788D89A7BDE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/0/8C4B870CE1B8CA58C4F05E954547788D89A7BDE1.mft
Manifest number:          0508
Signing time:             Mon 15 Apr 2024 01:20:00 +0000
Manifest this update:     Mon 15 Apr 2024 01:15:00 +0000
Manifest next update:     Tue 16 Apr 2024 01:20:00 +0000
Files and hashes:         1: 8C4B870CE1B8CA58C4F05E954547788D89A7BDE1.crl (hash: PUovJMZ1Xf3/A5RhwwH41mifyMSILD/hvX1heZ6itNw=)
                          2: 3134332e3133372e36342e302f32322d3234203d3e20323633353330.roa (hash: enfz2aKJAsq03BLnqh4BF28hAC4ZpTk3dWIx1a0Ulfw=)
                          3: 3139312e3235332e36382e302f32322d3234203d3e20323633353330.roa (hash: GdmuMwEX7ZcghMJNcWC/kwz0/XikqjhvOoC3g3S5QjM=)
                          4: 323830343a313335633a3a2f33322d3335203d3e20323633353330.roa (hash: i4lrn+RA2LX4DTELlBIaX7MzVPjNTpeufl5D92wtYgQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:57:5c:83:de:42:84:b3:5a:3b:65:e3:e9:a1:d8:6f:0f:b3:88:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C4B870CE1B8CA58C4F05E954547788D89A7BDE1
        Validity
            Not Before: Apr 15 01:15:00 2024 GMT
            Not After : Apr 16 01:20:00 2024 GMT
        Subject: CN=3082010A0282010100B822AD53BF157AE22210DCAEDE6CA116D9F4E3A2889A152869F47F98F6E64476868173684990ACDDD1B820D56BE9B9C6D3CFAE97B3E84742B4E695D9A803A2F6E2E7974E44FB902E7C34A2DB4AF33775A3E584376C8C6C8E89E85BD18760C8582F585A1E425347B9282B221CC3D53A2165702A9EB1E4A0116F091E5A446332CF581F7EE4D36985E006CB23EE6EDEA87345969B365A86ADFFD2784C595503E8CE907752E78C71B83378AA149F648F92F2A14D515FBA92A70B1116D2EE7011680EAC7EC850D1C3B04174E103C09F31555F12BEF940C3AC5C40FE3D2C077879845E81F8381E244260ACD2D9870A2C39323FC598DECF14E37B89699CABBB3156017F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:22:ad:53:bf:15:7a:e2:22:10:dc:ae:de:6c:
                    a1:16:d9:f4:e3:a2:88:9a:15:28:69:f4:7f:98:f6:
                    e6:44:76:86:81:73:68:49:90:ac:dd:d1:b8:20:d5:
                    6b:e9:b9:c6:d3:cf:ae:97:b3:e8:47:42:b4:e6:95:
                    d9:a8:03:a2:f6:e2:e7:97:4e:44:fb:90:2e:7c:34:
                    a2:db:4a:f3:37:75:a3:e5:84:37:6c:8c:6c:8e:89:
                    e8:5b:d1:87:60:c8:58:2f:58:5a:1e:42:53:47:b9:
                    28:2b:22:1c:c3:d5:3a:21:65:70:2a:9e:b1:e4:a0:
                    11:6f:09:1e:5a:44:63:32:cf:58:1f:7e:e4:d3:69:
                    85:e0:06:cb:23:ee:6e:de:a8:73:45:96:9b:36:5a:
                    86:ad:ff:d2:78:4c:59:55:03:e8:ce:90:77:52:e7:
                    8c:71:b8:33:78:aa:14:9f:64:8f:92:f2:a1:4d:51:
                    5f:ba:92:a7:0b:11:16:d2:ee:70:11:68:0e:ac:7e:
                    c8:50:d1:c3:b0:41:74:e1:03:c0:9f:31:55:5f:12:
                    be:f9:40:c3:ac:5c:40:fe:3d:2c:07:78:79:84:5e:
                    81:f8:38:1e:24:42:60:ac:d2:d9:87:0a:2c:39:32:
                    3f:c5:98:de:cf:14:e3:7b:89:69:9c:ab:bb:31:56:
                    01:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:5A:68:E2:54:0E:9F:3C:9C:73:2A:4A:99:87:94:73:1F:D2:48:EF
            X509v3 Authority Key Identifier:
                keyid:8C:4B:87:0C:E1:B8:CA:58:C4:F0:5E:95:45:47:78:8D:89:A7:BD:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/0/8C4B870CE1B8CA58C4F05E954547788D89A7BDE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C4B870CE1B8CA58C4F05E954547788D89A7BDE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/0/8C4B870CE1B8CA58C4F05E954547788D89A7BDE1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:90:02:ff:55:30:35:79:bb:b8:35:32:4e:1b:63:c1:ed:00:
         a7:2c:08:ff:89:30:88:a1:b3:e5:13:c1:24:24:e6:03:f2:bc:
         01:9d:d2:ae:ec:b6:53:ae:16:ad:3b:3f:cf:bc:1f:f8:dc:cd:
         3f:77:d0:6d:1f:c2:29:46:20:f8:fe:b8:d1:cc:45:89:09:89:
         05:17:b1:35:64:b6:d3:20:fe:28:4c:85:28:a1:0b:34:d8:97:
         d0:fc:29:3a:9b:0d:ed:f3:56:df:18:c7:f5:fa:d0:ca:31:55:
         cc:3d:47:c2:d7:53:b9:a8:cd:a5:44:46:b9:7e:c0:ec:fd:5e:
         d5:66:17:f7:1c:bf:7e:30:45:71:4b:b2:66:55:c0:40:b8:07:
         f1:f1:c5:5b:fe:f1:17:b5:73:f6:3d:47:75:1f:e2:a5:ee:9f:
         7d:af:6f:e9:98:b7:57:02:d5:54:7e:9a:af:3d:d6:43:ec:ab:
         92:86:40:1b:46:0c:58:00:29:dc:d9:9b:d9:6f:18:ad:7e:5a:
         c6:cc:db:a5:d6:f6:28:32:f3:18:cb:72:5b:60:51:dd:d1:3f:
         a6:19:65:00:8f:d5:e2:dd:3e:1f:63:af:59:3b:3a:8e:85:46:
         83:a3:04:5c:65:77:59:e8:ad:5a:b5:da:b1:a0:22:d1:a6:e6:
         ab:40:f0:32
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----