Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8vd8pbfNvUyY1m55cokpkUmr1dAdn6EGMYWBcCEbCNrV/0/9FBCDC60054A9B0B53B6E9F74BB12B1094397BC4.mft
File:                     9FBCDC60054A9B0B53B6E9F74BB12B1094397BC4.mft (raw, json)
Hash identifier:          8gnt9kpkaac9wSCmZ3guoY7duEGIcL6dTE6YFYF8i0c=
Subject key identifier:   0C:6D:10:4D:FF:3B:AC:42:AF:23:28:A4:1A:D9:AA:3F:66:C8:2E:C8
Authority key identifier: 9F:BC:DC:60:05:4A:9B:0B:53:B6:E9:F7:4B:B1:2B:10:94:39:7B:C4
Certificate issuer:       /CN=9FBCDC60054A9B0B53B6E9F74BB12B1094397BC4
Certificate serial:       50AF5357C2AD23E07246E0127C9F5E6A55DF7F62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FBCDC60054A9B0B53B6E9F74BB12B1094397BC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vd8pbfNvUyY1m55cokpkUmr1dAdn6EGMYWBcCEbCNrV/0/9FBCDC60054A9B0B53B6E9F74BB12B1094397BC4.mft
Manifest number:          3A
Signing time:             Sat 10 Aug 2024 12:22:31 +0000
Manifest this update:     Sat 10 Aug 2024 12:17:31 +0000
Manifest next update:     Sun 11 Aug 2024 12:47:31 +0000
Files and hashes:         1: 3138372e3131312e38302e302f32302d3332203d3e203533313437.roa (hash: rSx20CROLWZWT/cuKQOuNRWoIc1RI2SVS22KfzsvW58=)
                          2: 9FBCDC60054A9B0B53B6E9F74BB12B1094397BC4.crl (hash: +JeRznVAh1bdLHwwF+xIfQfkVvnyaEsgg0sZdMEPQdA=)
                          3: 323830343a66383a3a2f33322d313238203d3e203533313437.roa (hash: nbS5Mhn66ZWxuLDmwar722Ywa0xONO+rOUrOqiluJNE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:af:53:57:c2:ad:23:e0:72:46:e0:12:7c:9f:5e:6a:55:df:7f:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FBCDC60054A9B0B53B6E9F74BB12B1094397BC4
        Validity
            Not Before: Aug 10 12:17:31 2024 GMT
            Not After : Aug 11 12:47:31 2024 GMT
        Subject: CN=0C6D104DFF3BAC42AF2328A41AD9AA3F66C82EC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:65:14:ba:6b:16:1c:88:ba:73:55:e3:c2:96:
                    7d:47:fd:fa:ac:56:76:37:b1:a1:0f:aa:67:d8:e2:
                    d3:ff:7e:4d:30:e6:b6:d7:9c:ca:dd:ea:1b:51:15:
                    ef:20:b6:c4:2e:70:ba:85:2c:44:ee:27:2c:87:25:
                    45:18:d5:3d:32:96:84:86:b4:dc:47:be:06:eb:ad:
                    b8:83:d4:ad:ab:d4:96:69:7a:88:ed:f8:a9:15:e4:
                    59:74:90:0a:8f:52:78:24:3d:0f:f6:cf:97:9e:f4:
                    53:86:9a:e7:8d:d5:4f:3a:ae:5f:d8:2b:6f:3c:83:
                    bc:18:47:77:f8:95:11:11:e4:ef:4d:50:9f:f9:21:
                    2c:45:b1:af:08:34:27:9b:a2:77:0c:d8:8d:d9:a8:
                    e9:5f:38:89:0e:b1:05:e1:ed:b4:22:05:90:5b:f0:
                    09:18:46:d2:90:54:42:5f:cc:54:e0:68:25:f2:74:
                    c0:ae:88:60:b7:be:e4:20:f4:a4:8a:3b:ac:28:25:
                    85:3e:24:66:1e:51:4c:e9:8c:c4:76:1d:cb:cf:1b:
                    14:7f:91:80:75:03:25:e8:fb:4b:12:3c:a8:e0:32:
                    42:c5:89:62:47:18:cb:62:a8:dd:7e:b4:93:ed:29:
                    5a:ab:92:a5:47:8e:d1:b7:f0:04:c2:0f:ae:09:42:
                    c5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:6D:10:4D:FF:3B:AC:42:AF:23:28:A4:1A:D9:AA:3F:66:C8:2E:C8
            X509v3 Authority Key Identifier:
                keyid:9F:BC:DC:60:05:4A:9B:0B:53:B6:E9:F7:4B:B1:2B:10:94:39:7B:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vd8pbfNvUyY1m55cokpkUmr1dAdn6EGMYWBcCEbCNrV/0/9FBCDC60054A9B0B53B6E9F74BB12B1094397BC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FBCDC60054A9B0B53B6E9F74BB12B1094397BC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vd8pbfNvUyY1m55cokpkUmr1dAdn6EGMYWBcCEbCNrV/0/9FBCDC60054A9B0B53B6E9F74BB12B1094397BC4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:3e:84:41:e3:07:3f:6b:3c:60:8a:af:d8:30:08:48:64:a8:
         4c:25:2f:65:9d:a3:1f:84:0b:3d:d3:17:21:da:c9:86:5b:c5:
         2a:2f:aa:d0:02:a3:7c:9d:ce:87:01:4a:b2:a5:21:ab:69:ac:
         1b:66:f9:5f:b5:5e:7f:e6:9b:e0:f9:94:cc:ee:65:03:de:51:
         4e:37:7b:a3:9a:d3:5e:9d:75:fa:b6:25:c1:44:3b:38:84:05:
         70:09:e6:d7:87:48:a0:d6:37:24:6e:7e:cf:6a:5e:2c:db:48:
         cd:04:b5:29:91:da:08:69:a4:32:0d:78:f9:40:6c:d8:6d:e6:
         bf:6d:9a:f5:d6:cf:3a:29:2a:a7:76:2b:0b:9d:87:0d:61:fb:
         18:8e:25:2c:76:c6:0f:b9:15:94:ee:b8:60:4c:76:85:53:62:
         d1:11:8d:ac:71:f5:b9:d2:95:78:11:f6:95:ef:aa:25:23:cd:
         04:0a:24:69:01:5c:39:72:08:04:fb:78:ce:ac:a8:70:a8:7d:
         1b:ca:f1:e1:de:f9:4f:b6:65:72:45:a9:47:5a:5d:44:9a:77:
         cd:1d:bd:84:e7:50:85:19:b0:3c:e2:7a:bc:a6:a7:a4:a3:a0:
         fc:ef:c4:ac:57:74:26:5c:91:04:28:96:f7:bf:aa:d0:7a:8d:
         d3:3b:71:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----