Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9aCi3nMpixxXTMU4NsZKzWZaV391y7HVCeuCNBMMRHev/0/F8F3AFA8F2547E8F53F83D47223BB2283026004A.mft
File:                     F8F3AFA8F2547E8F53F83D47223BB2283026004A.mft (raw, json)
Hash identifier:          bxLnUYHeXlwrXM7psT+zLNs+ant0Kc+nOdJUgpaAeYc=
Subject key identifier:   9D:2D:D2:1E:44:03:FA:82:8A:86:47:2E:D1:16:BD:D9:2E:A1:A3:23
Authority key identifier: F8:F3:AF:A8:F2:54:7E:8F:53:F8:3D:47:22:3B:B2:28:30:26:00:4A
Certificate issuer:       /CN=F8F3AFA8F2547E8F53F83D47223BB2283026004A
Certificate serial:       7C4D575ABA81E0564AEC7BDCE9C0F351F159E40D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F8F3AFA8F2547E8F53F83D47223BB2283026004A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9aCi3nMpixxXTMU4NsZKzWZaV391y7HVCeuCNBMMRHev/0/F8F3AFA8F2547E8F53F83D47223BB2283026004A.mft
Manifest number:          DE
Signing time:             Sun 14 Apr 2024 22:28:51 +0000
Manifest this update:     Sun 14 Apr 2024 22:23:51 +0000
Manifest next update:     Tue 16 Apr 2024 02:07:51 +0000
Files and hashes:         1: F8F3AFA8F2547E8F53F83D47223BB2283026004A.crl (hash: //CxjfKNXR7VpxCiFnJYpTqbsrZjnu9Zt/pkHs2ZFy8=)
                          2: 34352e3233372e3235322e302f32322d3234203d3e20323638333333.roa (hash: HvbcRotdwdMHAgmNSZGYQ3czPCfI75cO1+NSIag9SL0=)
                          3: 323830343a346638633a3a2f33322d3438203d3e20323638333333.roa (hash: yn1P1n6XUy6dgQ3rEiK+/wN/PwseIj1Mz7RpOjqC7dE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:4d:57:5a:ba:81:e0:56:4a:ec:7b:dc:e9:c0:f3:51:f1:59:e4:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8F3AFA8F2547E8F53F83D47223BB2283026004A
        Validity
            Not Before: Apr 14 22:23:51 2024 GMT
            Not After : Apr 16 02:07:51 2024 GMT
        Subject: CN=9D2DD21E4403FA828A86472ED116BDD92EA1A323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:78:d4:c2:13:9d:9e:66:13:f1:d8:13:86:a5:
                    8a:db:66:d7:f1:30:b2:1f:f3:9c:db:79:17:2d:c9:
                    58:d6:90:3d:65:dc:e5:1c:3e:98:e2:19:5d:e1:e5:
                    72:31:b9:0b:d3:ec:61:2e:73:97:9a:6b:e3:6f:bc:
                    6c:e6:c0:e8:96:11:2d:e4:3e:c0:be:1c:06:25:39:
                    db:31:81:c9:9b:9c:22:82:eb:1e:84:59:fe:8d:32:
                    c9:65:2b:29:06:da:4f:d4:aa:b5:c0:75:a4:30:0a:
                    82:21:be:03:17:19:48:2d:ea:2a:33:73:cf:32:22:
                    0a:4f:32:5e:29:3e:84:dc:dd:f9:ad:45:a8:a8:e0:
                    92:9c:2e:26:d8:88:70:27:40:21:09:c1:9d:fb:b3:
                    1b:e5:f7:82:35:8b:cf:15:5a:bf:69:2b:9f:54:da:
                    8b:0a:6a:39:94:a5:02:9f:04:2f:11:f7:2f:f1:31:
                    48:10:ca:a2:c2:d5:a8:ff:f9:e0:b8:12:5d:97:27:
                    f7:5d:ed:99:14:af:34:3d:8e:dd:02:83:b2:ce:4d:
                    3e:c5:95:50:ab:0c:b1:18:45:41:ef:c7:90:40:b6:
                    06:a1:ac:8a:d7:4c:77:59:00:1d:3d:4a:de:9c:25:
                    8e:43:8c:1a:17:dc:9b:b0:00:a3:d7:81:fa:7b:97:
                    85:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:2D:D2:1E:44:03:FA:82:8A:86:47:2E:D1:16:BD:D9:2E:A1:A3:23
            X509v3 Authority Key Identifier:
                keyid:F8:F3:AF:A8:F2:54:7E:8F:53:F8:3D:47:22:3B:B2:28:30:26:00:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9aCi3nMpixxXTMU4NsZKzWZaV391y7HVCeuCNBMMRHev/0/F8F3AFA8F2547E8F53F83D47223BB2283026004A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F8F3AFA8F2547E8F53F83D47223BB2283026004A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9aCi3nMpixxXTMU4NsZKzWZaV391y7HVCeuCNBMMRHev/0/F8F3AFA8F2547E8F53F83D47223BB2283026004A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:09:b0:1f:e6:89:e2:f9:a2:8e:3f:74:4f:ea:b0:8c:6b:78:
         09:8c:ec:a4:cd:97:4c:bd:dc:1a:f1:2b:dc:4e:52:cc:8c:80:
         5a:a8:b9:17:8e:69:a2:d9:7a:c7:18:bf:44:5b:d4:32:4b:cc:
         9d:1d:7f:f7:68:da:81:3e:99:4c:ce:ec:0e:c3:86:33:2f:1f:
         03:4d:82:d8:2c:b4:d2:cc:29:27:c4:82:f0:2c:e3:53:d2:55:
         12:af:7a:a7:92:93:80:39:27:c2:c3:02:bc:d7:a8:28:75:31:
         9c:d3:29:0c:35:4a:cf:70:92:ae:ee:d5:6b:19:b0:b4:a2:de:
         04:17:70:fa:b6:2e:f1:39:8b:1f:80:65:1e:aa:1f:60:a7:da:
         8f:a4:0e:77:af:e6:38:07:4b:e2:82:a2:1b:64:6c:5d:60:6b:
         c6:92:6e:50:f9:ca:e2:08:f2:62:e6:f5:a2:5e:19:0a:1f:b3:
         0a:bf:3d:5e:a2:82:6d:48:bf:65:74:80:7c:6d:9b:99:dd:c5:
         d5:eb:b4:bd:70:34:61:9a:2a:d6:d0:61:f3:83:86:92:aa:4e:
         6a:bb:6a:73:2c:e5:76:5b:f5:a3:ee:28:d8:5f:a1:7f:f4:6b:
         d8:69:53:a4:3a:5e:80:f0:35:e8:03:5c:1a:bd:e5:2c:3b:c6:
         7d:49:09:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----