Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/A2E8A6A1F57710B70C2515F21595655DAFC4BCE0.mft
File:                     A2E8A6A1F57710B70C2515F21595655DAFC4BCE0.mft (raw, json)
Hash identifier:          PQFwT00jvdF7JfvOUNThhATLnPhysA7/0ePtO9Jhd2U=
Subject key identifier:   C0:0F:E9:DA:E0:18:BC:F7:DB:CD:FD:EF:29:41:74:F2:91:0D:98:E1
Authority key identifier: A2:E8:A6:A1:F5:77:10:B7:0C:25:15:F2:15:95:65:5D:AF:C4:BC:E0
Certificate issuer:       /CN=A2E8A6A1F57710B70C2515F21595655DAFC4BCE0
Certificate serial:       430D634B7D66AB1A23C2B0939A946C6879CA5594
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E8A6A1F57710B70C2515F21595655DAFC4BCE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/A2E8A6A1F57710B70C2515F21595655DAFC4BCE0.mft
Manifest number:          AF
Signing time:             Fri 16 Aug 2024 07:27:53 +0000
Manifest this update:     Fri 16 Aug 2024 07:22:53 +0000
Manifest next update:     Sat 17 Aug 2024 09:54:53 +0000
Files and hashes:         1: 323830343a316432633a3a2f33322d3332203d3e20323634333532.roa (hash: AxeJ2mHN6zv+qr1VGR9MNymbIoqDJ+Dn7JEZnTRHwmY=)
                          2: A2E8A6A1F57710B70C2515F21595655DAFC4BCE0.crl (hash: M3gIhEuiKihhq6im25IpDTnIWJxh+/7Ed/SyDY1gZ4E=)
                          3: 3133312e3130382e3232382e302f32322d3232203d3e20323634333532.roa (hash: DaO/BE87qRSGrXFxxJQrTaBUdqJu8xGXk4osmOkmAh8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:0d:63:4b:7d:66:ab:1a:23:c2:b0:93:9a:94:6c:68:79:ca:55:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2E8A6A1F57710B70C2515F21595655DAFC4BCE0
        Validity
            Not Before: Aug 16 07:22:53 2024 GMT
            Not After : Aug 17 09:54:53 2024 GMT
        Subject: CN=C00FE9DAE018BCF7DBCDFDEF294174F2910D98E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3e:73:86:e6:58:67:d0:20:45:10:c1:dd:75:
                    c2:ad:83:78:e5:91:6b:bb:1f:a9:0e:29:42:38:c5:
                    31:d9:74:8d:51:a6:d1:e6:76:07:25:50:ac:22:15:
                    50:07:df:b3:4e:79:bd:2c:dc:fa:b0:5b:d2:60:63:
                    8f:9b:ee:38:1c:2c:5f:b8:c5:e7:f9:91:f1:2f:0c:
                    68:92:74:05:db:cb:d3:8e:be:0a:97:c6:27:76:62:
                    fe:af:7e:e9:1d:54:6f:af:96:09:77:d4:ed:6d:ad:
                    fc:87:b1:32:09:4c:1e:c7:00:ca:8e:b8:6c:38:e6:
                    73:36:76:df:c2:aa:c8:c2:79:6e:97:fe:0d:56:92:
                    87:39:9c:3c:7d:ec:c6:d9:9c:79:bd:bd:8c:2f:dc:
                    6c:4d:03:80:f0:e4:a7:16:8b:9f:47:f5:7d:0f:4a:
                    27:ff:72:63:43:00:8a:99:c6:a7:18:cd:c0:59:74:
                    c4:51:c5:e2:c9:fc:86:89:28:9e:30:bd:c9:fd:1a:
                    6c:21:91:ca:18:e2:fc:7c:9b:90:12:8e:e6:30:f1:
                    6a:f6:28:5c:07:1e:46:46:e3:60:8e:fb:a3:4e:5b:
                    24:ea:a9:a2:a6:17:91:8b:ee:67:23:72:ff:14:57:
                    11:4f:d5:40:e8:26:f8:78:4d:e8:06:a9:ab:93:d0:
                    18:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:0F:E9:DA:E0:18:BC:F7:DB:CD:FD:EF:29:41:74:F2:91:0D:98:E1
            X509v3 Authority Key Identifier:
                keyid:A2:E8:A6:A1:F5:77:10:B7:0C:25:15:F2:15:95:65:5D:AF:C4:BC:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/A2E8A6A1F57710B70C2515F21595655DAFC4BCE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E8A6A1F57710B70C2515F21595655DAFC4BCE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/A2E8A6A1F57710B70C2515F21595655DAFC4BCE0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:ad:77:38:e6:97:1d:20:86:1a:d3:07:94:f9:a9:b5:65:6b:
         d0:6a:fb:cb:56:fe:9f:d2:7c:16:5b:a2:48:56:7f:49:8a:7b:
         b1:fb:88:c9:ae:6f:63:d9:70:79:b4:30:6f:ad:8d:33:05:4a:
         32:d7:8b:5a:8c:4f:51:b8:2c:8b:70:d4:a3:26:1a:a9:93:31:
         67:af:77:ad:6d:20:b8:6b:22:0c:61:c5:9d:61:7b:e3:09:a2:
         14:8d:c7:4b:d1:95:3e:44:12:50:d0:d7:36:62:9a:ce:08:3f:
         05:49:d0:b8:45:7d:64:fb:24:e6:35:e8:47:9c:d7:35:f9:b8:
         0f:ee:55:c0:d6:cf:e4:ba:c0:fe:47:d1:14:a4:8c:06:75:4b:
         ef:60:f6:2e:25:91:28:2f:10:e7:60:eb:ef:a0:54:0e:eb:4d:
         42:6f:ae:88:80:c7:ed:db:bd:94:3a:c5:24:7a:44:d3:37:32:
         10:91:da:ab:fd:9a:14:3e:fe:94:c2:db:1e:9f:5d:35:78:08:
         fd:74:ea:4d:a2:8f:28:40:6a:fd:7d:1b:29:bb:fb:00:35:b5:
         7d:4a:bc:ea:56:98:49:b5:11:50:b4:e4:26:1e:2b:74:6e:31:
         67:00:94:51:aa:79:d9:05:a8:cc:a9:e0:fd:33:eb:29:a0:b8:
         91:70:23:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----