Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/1AA98973EC278F5ACE75B82A5D5F028FBFD08342.mft
File:                     1AA98973EC278F5ACE75B82A5D5F028FBFD08342.mft (raw, json)
Hash identifier:          yS+ej3jePgvDsr6+XunD9x1CD5V8N1cb/I4CRI8hOkI=
Subject key identifier:   34:0D:F8:FB:3C:59:01:F5:AE:BA:F9:3D:A1:9B:28:EC:05:AA:DE:57
Authority key identifier: 1A:A9:89:73:EC:27:8F:5A:CE:75:B8:2A:5D:5F:02:8F:BF:D0:83:42
Certificate issuer:       /CN=1AA98973EC278F5ACE75B82A5D5F028FBFD08342
Certificate serial:       0B5897F8337BF5CE56B7EC97939BE26862837B3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1AA98973EC278F5ACE75B82A5D5F028FBFD08342.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/1AA98973EC278F5ACE75B82A5D5F028FBFD08342.mft
Manifest number:          2D
Signing time:             Tue 24 Oct 2023 07:40:46 +0000
Manifest this update:     Tue 24 Oct 2023 07:35:46 +0000
Manifest next update:     Wed 25 Oct 2023 08:39:46 +0000
Files and hashes:         1: 323830343a333934303a3a2f33322d313236203d3e20323636303231.roa (hash: PSfP69LIQf0LkPh7v0QiiBvvIgkyAnuxDhCsQVcb9mQ=)
                          2: 3137302e3234352e33362e302f32322d3332203d3e20323636303231.roa (hash: 2sGJsautFVr4tnfYmVzsCZw26H9Af/15W6OsvSgtZzk=)
                          3: 1AA98973EC278F5ACE75B82A5D5F028FBFD08342.crl (hash: IhseifOOYGtarTNxWhRkbHg0nPS111qgpEqrHkAoV9I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:58:97:f8:33:7b:f5:ce:56:b7:ec:97:93:9b:e2:68:62:83:7b:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA98973EC278F5ACE75B82A5D5F028FBFD08342
        Validity
            Not Before: Oct 24 07:35:46 2023 GMT
            Not After : Oct 25 08:39:46 2023 GMT
        Subject: CN=340DF8FB3C5901F5AEBAF93DA19B28EC05AADE57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:85:86:cf:97:13:b6:31:7c:9b:3b:57:80:b6:
                    9d:1b:10:0d:31:de:5a:90:13:3a:a7:69:5f:67:d9:
                    70:13:de:80:31:c0:0d:41:5f:f6:fd:4e:d6:e2:a1:
                    9e:8b:e5:89:6a:2b:d9:c7:3a:c2:c2:ff:ab:48:6f:
                    9c:51:16:bd:54:09:f9:7a:46:ab:0a:58:dd:34:65:
                    43:3a:27:d2:cc:85:bd:b5:eb:0c:29:ed:b9:5e:3d:
                    f5:2f:d3:3b:47:81:e7:0f:8c:22:1d:0e:17:db:fa:
                    c0:ed:b4:67:dc:a1:90:ad:82:20:13:04:a5:ea:9e:
                    18:46:b0:de:46:db:bf:0e:d0:d5:fc:5e:f2:6e:94:
                    da:89:84:9f:b1:25:c8:da:25:08:8f:a3:08:3f:80:
                    5a:e4:d7:6f:30:42:2d:07:ad:84:a0:15:62:74:96:
                    24:6d:81:7e:61:00:5a:73:d9:a9:5c:d5:95:64:27:
                    19:5a:d7:6a:0d:c0:96:00:27:44:d3:29:52:05:a4:
                    15:02:34:28:23:4b:b9:80:d0:5c:a6:60:15:f2:a8:
                    06:45:d6:ad:45:86:0e:4b:84:35:06:52:41:6f:ae:
                    7d:c5:fb:f1:69:2b:74:db:e5:6c:b0:29:31:c3:56:
                    0a:7c:19:5a:f4:56:fc:a4:4e:4d:05:54:2c:d9:31:
                    59:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:0D:F8:FB:3C:59:01:F5:AE:BA:F9:3D:A1:9B:28:EC:05:AA:DE:57
            X509v3 Authority Key Identifier:
                keyid:1A:A9:89:73:EC:27:8F:5A:CE:75:B8:2A:5D:5F:02:8F:BF:D0:83:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/1AA98973EC278F5ACE75B82A5D5F028FBFD08342.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1AA98973EC278F5ACE75B82A5D5F028FBFD08342.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/1AA98973EC278F5ACE75B82A5D5F028FBFD08342.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:8e:e0:0c:08:ba:ae:b4:4c:e5:f8:57:81:45:51:e0:66:5a:
         45:93:3a:27:58:f0:92:da:33:fe:b0:b5:50:90:88:ac:70:b3:
         cd:5b:ee:5a:b5:cc:1b:c4:cd:df:43:14:b4:46:a1:57:83:24:
         45:e3:86:54:e7:0a:1e:05:ef:2b:5d:d0:4a:dd:fc:36:ba:da:
         41:56:94:e0:be:21:4a:9f:3e:a2:a9:0e:1e:c0:9f:e2:9b:4f:
         52:d3:f7:fc:36:4c:d9:dd:4f:4f:3f:c5:41:ee:b6:f6:48:87:
         4e:be:fb:9b:bd:7b:05:0c:47:27:4a:51:1a:6a:aa:01:a9:3a:
         7b:fb:fa:8c:79:62:a1:64:b2:d7:72:d3:95:16:02:06:f4:44:
         aa:31:77:d3:25:1e:ba:be:7f:5a:fb:b4:c6:0f:64:bb:54:c9:
         af:dd:19:6e:7c:5c:f3:d5:3e:b9:28:38:37:4a:dc:f8:39:9f:
         2e:e4:db:8a:bd:c7:9a:75:75:7b:1f:88:56:82:03:54:22:61:
         40:1f:7b:6f:fa:2c:39:f0:12:39:b2:bd:be:9c:47:85:c6:5c:
         73:38:5b:4c:93:c2:d6:23:8e:d6:43:cf:51:21:98:93:2b:48:
         e8:c4:65:7f:5f:64:60:44:d5:0c:25:48:79:a2:b5:79:01:c6:
         76:e4:ac:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----