Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8wjoaso42gushYLKX4LQ4zQvzFfigWZjuw6UVJgLqSkv/0/CD8C447FF133EB21C0315B78AB00573F23F7A647.mft
File:                     CD8C447FF133EB21C0315B78AB00573F23F7A647.mft (raw, json)
Hash identifier:          PtVRkkTVDaDud8zja+38gn1jw09UcPm9NWPqoX8E/TQ=
Subject key identifier:   45:D6:8F:A1:5C:A9:40:0D:D2:D0:74:05:3E:1A:AD:50:00:31:43:D1
Authority key identifier: CD:8C:44:7F:F1:33:EB:21:C0:31:5B:78:AB:00:57:3F:23:F7:A6:47
Certificate issuer:       /CN=CD8C447FF133EB21C0315B78AB00573F23F7A647
Certificate serial:       3E519D651C1BDB7AF9D48D39A5155CB479DD706D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD8C447FF133EB21C0315B78AB00573F23F7A647.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wjoaso42gushYLKX4LQ4zQvzFfigWZjuw6UVJgLqSkv/0/CD8C447FF133EB21C0315B78AB00573F23F7A647.mft
Manifest number:          2B
Signing time:             Sun 06 Oct 2024 02:15:19 +0000
Manifest this update:     Sun 06 Oct 2024 02:10:19 +0000
Manifest next update:     Mon 07 Oct 2024 03:57:19 +0000
Files and hashes:         1: 323830343a366462303a3a2f33322d313238203d3e20323730353439.roa (hash: kqppUkOje9k8VVgnM2IR3jsQAndnFu/WnjZ5N8yWvu0=)
                          2: CD8C447FF133EB21C0315B78AB00573F23F7A647.crl (hash: snT/Llb6NXHpCwuVF5g8WQk3z4Rn7x11syIKyZpKQhc=)
                          3: 3138372e3132302e3136302e302f32322d3332203d3e20323730353439.roa (hash: +GvHqNmvXcEhTPX7ynddC+U0qUnkMEua6d3OVXRrLrc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:51:9d:65:1c:1b:db:7a:f9:d4:8d:39:a5:15:5c:b4:79:dd:70:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD8C447FF133EB21C0315B78AB00573F23F7A647
        Validity
            Not Before: Oct  6 02:10:19 2024 GMT
            Not After : Oct  7 03:57:19 2024 GMT
        Subject: CN=45D68FA15CA9400DD2D074053E1AAD50003143D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9c:35:cd:d3:4f:74:6c:aa:14:95:5b:b3:54:
                    b7:0f:a4:ec:77:a0:f2:75:84:e0:f9:3b:e4:4a:e7:
                    ed:40:f1:fe:21:6e:97:ec:d7:33:fa:26:56:e5:5d:
                    74:d8:c4:fd:d8:35:42:1f:9c:62:9f:0b:e1:dd:b7:
                    c7:cc:52:05:fe:44:91:fb:30:81:e7:8e:4c:c6:c2:
                    72:70:50:05:70:97:89:c0:67:6d:e6:72:52:df:d5:
                    66:ea:58:7c:2f:0e:48:f6:59:2f:53:c2:12:a0:9d:
                    93:8f:41:f2:1d:cc:7a:3f:b4:38:2b:3c:14:0d:3e:
                    e0:6c:30:e9:49:6f:fa:2d:17:bd:25:9b:a6:00:6b:
                    b0:2b:01:02:ce:08:dd:c8:ee:6b:2e:b2:05:cb:86:
                    84:7a:0a:c3:7c:b3:ab:3e:78:8e:24:d7:64:80:df:
                    35:e4:c9:2a:c1:48:45:47:95:93:9d:fb:42:1a:9a:
                    aa:2f:30:c6:16:2b:f5:a4:a3:63:ff:73:9a:ee:e1:
                    c6:3e:1a:02:86:1d:2a:de:7c:6a:77:d1:ed:11:f9:
                    1c:20:0f:f7:fe:41:37:a2:89:f2:a0:dd:a5:a1:0d:
                    0a:76:b5:c3:7b:33:a7:50:79:94:bd:3b:d1:d4:a3:
                    4a:d3:83:ee:0b:32:ed:3a:7b:21:31:d1:75:ef:d6:
                    01:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D6:8F:A1:5C:A9:40:0D:D2:D0:74:05:3E:1A:AD:50:00:31:43:D1
            X509v3 Authority Key Identifier:
                keyid:CD:8C:44:7F:F1:33:EB:21:C0:31:5B:78:AB:00:57:3F:23:F7:A6:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wjoaso42gushYLKX4LQ4zQvzFfigWZjuw6UVJgLqSkv/0/CD8C447FF133EB21C0315B78AB00573F23F7A647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD8C447FF133EB21C0315B78AB00573F23F7A647.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wjoaso42gushYLKX4LQ4zQvzFfigWZjuw6UVJgLqSkv/0/CD8C447FF133EB21C0315B78AB00573F23F7A647.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:12:8a:e3:55:89:9e:70:97:af:63:a8:ee:0f:54:d1:c9:3e:
         a1:6e:16:44:1b:d8:3c:a2:e8:ee:36:23:27:7f:43:51:d3:d9:
         20:cd:5e:f1:72:fb:2a:5b:71:dc:92:61:ed:2c:b6:58:92:2e:
         ba:90:07:25:4a:56:1b:85:e7:c7:e7:5f:4f:88:4f:7d:d0:82:
         26:6c:6f:8f:f5:19:dc:7e:d2:03:7a:2f:b6:52:bc:b6:98:65:
         e6:ea:cd:b7:40:27:98:a0:b1:cc:65:1e:39:b4:e5:e9:6e:42:
         85:29:e2:6d:6d:18:ef:ba:7f:c9:69:f5:89:f8:ab:41:e1:a3:
         7a:48:f5:66:03:bd:0f:65:1a:c0:a3:53:e9:7d:b4:b5:96:fe:
         65:b0:6a:65:f4:35:3c:f6:c1:60:12:fb:0c:95:3d:bd:3f:e0:
         6d:66:c5:89:a2:1c:45:a6:11:94:4c:d5:ff:8d:cb:e0:94:1d:
         e4:44:a6:05:35:e2:fe:9b:5e:7f:d8:d3:ad:16:7f:3f:d7:1c:
         7a:68:68:c5:4d:76:7e:87:9b:ae:f3:be:f6:06:16:0f:d9:66:
         cc:1a:c1:41:fe:d7:ff:46:d5:28:5b:9c:74:b9:f1:6a:a0:ec:
         dd:03:c3:57:e2:a6:31:94:76:c5:2e:e7:eb:f0:1b:81:cd:e7:
         20:0e:43:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----