Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/1/CBE8F186E0D713EF4A7B4DD8DFC1B3B1C14C57AA.mft
File:                     CBE8F186E0D713EF4A7B4DD8DFC1B3B1C14C57AA.mft (raw, json)
Hash identifier:          VQgZqC4IlCV7h0urut0xB+Q9qlIbX2vxKI0BiI9nQL8=
Subject key identifier:   BF:48:7E:7F:33:73:30:83:E4:CF:1B:C7:23:7B:D7:44:AE:CC:70:17
Authority key identifier: CB:E8:F1:86:E0:D7:13:EF:4A:7B:4D:D8:DF:C1:B3:B1:C1:4C:57:AA
Certificate issuer:       /CN=CBE8F186E0D713EF4A7B4DD8DFC1B3B1C14C57AA
Certificate serial:       4D44586D83D6E8242097E6553D70DC941CC72E34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBE8F186E0D713EF4A7B4DD8DFC1B3B1C14C57AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/1/CBE8F186E0D713EF4A7B4DD8DFC1B3B1C14C57AA.mft
Manifest number:          0E
Signing time:             Wed 17 Apr 2024 12:39:08 +0000
Manifest this update:     Wed 17 Apr 2024 12:34:08 +0000
Manifest next update:     Thu 18 Apr 2024 14:56:08 +0000
Files and hashes:         1: CBE8F186E0D713EF4A7B4DD8DFC1B3B1C14C57AA.crl (hash: X33dvTnUK/5kl5rlFo9kc2/BS37wwZZ0yJPyAEWqzGQ=)
                          2: 3137302e37382e3232382e302f32322d3234203d3e20323636323830.roa (hash: HIQjC2HKKGtLxH9LJe88zqni/FPVKQGvlnqTZaQvkds=)
                          3: 323830343a333535303a3a2f33322d3438203d3e20323636323830.roa (hash: PRMwl66sRdeZhBvykJe8F06c6lazcw4pbjmTVk8EwNU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:44:58:6d:83:d6:e8:24:20:97:e6:55:3d:70:dc:94:1c:c7:2e:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBE8F186E0D713EF4A7B4DD8DFC1B3B1C14C57AA
        Validity
            Not Before: Apr 17 12:34:08 2024 GMT
            Not After : Apr 18 14:56:08 2024 GMT
        Subject: CN=BF487E7F33733083E4CF1BC7237BD744AECC7017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ab:90:b6:a1:d9:0a:b1:3e:e2:70:76:89:85:
                    b0:17:b1:cd:a6:73:c6:84:14:ce:da:12:f9:3b:df:
                    c1:78:89:b5:67:dd:46:47:13:1c:59:3d:11:9a:1b:
                    6e:d5:0f:f1:92:7a:f4:0e:88:6d:78:a4:0a:64:17:
                    f3:2d:1c:9a:4b:a2:00:dc:92:5a:01:4e:35:e3:a9:
                    3a:91:ab:8d:bf:91:7b:39:c1:d2:5f:35:7c:11:f6:
                    f8:9f:cb:ef:35:6c:b7:33:89:c6:99:26:34:38:82:
                    a2:7d:62:08:df:2e:8e:bc:e7:71:b0:0e:19:e6:db:
                    ba:9a:66:a7:a2:21:f2:ee:97:58:a3:2f:87:2a:d7:
                    e4:0e:09:7e:37:5a:e2:d9:15:71:0d:91:1c:9b:d0:
                    76:62:0b:ec:64:dd:da:94:ab:23:31:00:ec:1b:a7:
                    aa:76:ac:63:e6:24:80:d4:8a:e4:61:ae:dd:e1:8b:
                    18:32:ea:bc:1e:93:ab:f3:5e:e1:f8:86:4e:cc:bc:
                    46:63:9b:df:4a:74:7f:c9:b9:a6:d2:83:e8:0f:c9:
                    95:5e:d7:2f:d0:91:f5:a2:24:e8:9f:17:cb:34:d0:
                    fc:1a:08:7c:a3:bc:ff:a6:62:a6:fd:ff:1f:12:ca:
                    c2:7f:8c:bc:4e:90:d0:19:6c:7a:28:c1:9c:a2:04:
                    3c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:48:7E:7F:33:73:30:83:E4:CF:1B:C7:23:7B:D7:44:AE:CC:70:17
            X509v3 Authority Key Identifier:
                keyid:CB:E8:F1:86:E0:D7:13:EF:4A:7B:4D:D8:DF:C1:B3:B1:C1:4C:57:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/1/CBE8F186E0D713EF4A7B4DD8DFC1B3B1C14C57AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBE8F186E0D713EF4A7B4DD8DFC1B3B1C14C57AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/1/CBE8F186E0D713EF4A7B4DD8DFC1B3B1C14C57AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:52:c9:39:19:e4:4d:fa:59:e2:ff:45:8c:79:5a:a3:ba:04:
         dc:51:0e:89:a1:75:94:89:d7:91:99:f4:69:ab:41:f0:86:2a:
         e3:8d:fd:2b:a8:1d:5e:02:be:5f:9f:eb:15:e6:04:67:7a:9a:
         c0:00:39:37:33:69:59:7e:de:f9:56:cc:e6:c4:17:f0:b9:e1:
         d0:3d:27:7b:54:3f:53:23:40:e7:03:7b:b7:9a:00:77:e0:b7:
         2c:fb:05:c5:12:7b:2d:eb:19:d8:bf:d3:5d:a1:73:9c:e2:df:
         83:c0:1b:44:6e:88:d2:4d:f3:94:48:28:ca:d6:be:f9:59:ce:
         c2:ae:1f:68:a6:e8:24:a4:13:9f:63:c3:1f:34:5c:01:fc:0b:
         4a:91:51:f3:91:ae:e2:1d:a6:cf:b6:18:7a:98:38:13:a0:ba:
         e5:7d:d4:c0:93:0a:2d:c8:54:5f:38:c9:40:28:7d:91:ea:6d:
         6b:e7:42:85:99:1b:b6:44:d1:e3:97:f6:13:1c:65:1f:0a:4f:
         d3:e2:0c:70:17:d9:c9:05:97:32:69:13:84:e6:0d:c0:2c:db:
         0f:e4:70:e0:b0:ad:a1:75:8b:c2:4d:14:dd:b3:d2:b9:7d:41:
         b8:50:a5:b7:e5:d0:53:20:95:8c:b5:6a:e6:a2:dd:1a:d9:85:
         4d:17:2f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----