Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/0/1388F1C87B1082DA439CA41C63657F2BECBF0E48.mft
File:                     1388F1C87B1082DA439CA41C63657F2BECBF0E48.mft (raw, json)
Hash identifier:          CxI+SNw3ntjB96NPSkYrtOQ/heviIblEeaY/tDCY078=
Subject key identifier:   8A:E8:B9:E0:C5:0B:FE:F1:08:3A:DF:2C:9D:AF:6E:AF:F3:6D:5F:E6
Authority key identifier: 13:88:F1:C8:7B:10:82:DA:43:9C:A4:1C:63:65:7F:2B:EC:BF:0E:48
Certificate issuer:       /CN=1388F1C87B1082DA439CA41C63657F2BECBF0E48
Certificate serial:       0EBD9693F05832D4E31E54AF1D844DBF989AEDE1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1388F1C87B1082DA439CA41C63657F2BECBF0E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/0/1388F1C87B1082DA439CA41C63657F2BECBF0E48.mft
Manifest number:          03
Signing time:             Thu 14 Mar 2024 15:01:28 +0000
Manifest this update:     Thu 14 Mar 2024 14:56:28 +0000
Manifest next update:     Fri 15 Mar 2024 16:34:28 +0000
Files and hashes:         1: 3137372e36362e3137322e302f32322d3234203d3e203532363539.roa (hash: p0W5XXYmlWNKUWI55F1qrAv9wPzKBZA3y9dbnen1tqQ=)
                          2: 323830343a323631343a3a2f33322d3334203d3e203532363539.roa (hash: tw4tqpq5FU4ylmc9Y97K3vfELreMvrrfimiYMD5USn0=)
                          3: 1388F1C87B1082DA439CA41C63657F2BECBF0E48.crl (hash: u9zWJwASrFCxAvY0ZohKU9pDE5mkmnXf1SAwPODPqK4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:bd:96:93:f0:58:32:d4:e3:1e:54:af:1d:84:4d:bf:98:9a:ed:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1388F1C87B1082DA439CA41C63657F2BECBF0E48
        Validity
            Not Before: Mar 14 14:56:28 2024 GMT
            Not After : Mar 15 16:34:28 2024 GMT
        Subject: CN=8AE8B9E0C50BFEF1083ADF2C9DAF6EAFF36D5FE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ec:d8:1b:2d:37:b2:71:40:53:25:b1:46:3c:
                    b8:ba:7e:30:7f:a9:f8:8a:50:c4:a1:e5:51:75:8a:
                    f8:82:88:bf:6d:02:a0:1b:6f:e5:a6:58:f5:18:1f:
                    e3:b1:9b:6a:27:4b:79:9a:48:e8:e5:e6:b1:66:47:
                    d0:5e:de:f6:6e:40:c4:10:79:34:0e:6a:a4:e3:cf:
                    33:cf:6a:be:67:92:03:49:94:6d:53:5e:da:16:71:
                    66:a3:8f:eb:d7:c7:c1:4c:41:0a:b6:29:b1:7b:06:
                    a1:ab:ff:3e:56:15:9e:b3:b7:67:0b:18:8d:c9:98:
                    7f:96:70:a4:bc:40:c9:e6:50:30:d1:13:5c:14:98:
                    4a:22:87:e1:d8:f9:a3:70:90:d8:cc:06:02:2e:a2:
                    9b:61:79:1a:a6:a1:bc:ec:b7:4f:dc:a4:df:59:10:
                    72:0b:86:98:8a:c4:b5:08:85:ab:a0:d2:91:ed:a1:
                    cf:c2:5e:b9:cc:aa:43:93:fa:27:a6:81:80:f2:53:
                    6a:87:56:fe:6a:db:cb:cd:73:7a:a4:97:07:37:71:
                    81:8d:53:78:32:85:63:51:5f:cc:f6:63:cf:58:be:
                    c1:5c:10:05:c1:2d:ac:9f:d5:8a:3c:13:f7:4d:53:
                    09:27:da:31:04:8d:d0:ef:e0:12:2e:86:13:ec:03:
                    9b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E8:B9:E0:C5:0B:FE:F1:08:3A:DF:2C:9D:AF:6E:AF:F3:6D:5F:E6
            X509v3 Authority Key Identifier:
                keyid:13:88:F1:C8:7B:10:82:DA:43:9C:A4:1C:63:65:7F:2B:EC:BF:0E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/0/1388F1C87B1082DA439CA41C63657F2BECBF0E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1388F1C87B1082DA439CA41C63657F2BECBF0E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/0/1388F1C87B1082DA439CA41C63657F2BECBF0E48.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:4e:db:5f:42:a4:60:98:18:e2:e0:88:d5:59:54:f3:c0:11:
         76:24:fe:44:76:eb:8f:7e:11:2a:71:89:71:39:a2:0e:dd:8a:
         b4:3d:a0:15:b7:9f:cd:d0:fc:cd:b8:f9:ff:1e:ae:bb:9f:82:
         36:25:05:8f:48:c7:6d:16:af:c4:31:3f:7f:5f:8d:ea:60:05:
         9f:a5:78:f8:5f:23:98:b5:1f:f0:be:c9:fd:15:d9:59:13:09:
         46:df:58:f4:68:ff:13:34:60:9e:21:04:d2:3e:5d:1a:0c:6b:
         34:b3:dd:2e:72:05:46:0a:6e:44:82:94:75:32:57:de:b8:85:
         2c:4a:ac:e4:b2:b3:31:d7:8e:ed:ed:7b:03:d0:c4:5a:f9:5b:
         46:20:e6:cd:73:b3:6c:17:40:50:88:98:42:40:b1:66:bf:2d:
         ab:e7:e8:05:34:f9:1e:b2:63:9f:6b:dc:21:33:9a:76:d4:14:
         0a:47:b7:71:5e:7f:6a:34:80:a4:0f:32:ff:16:34:4f:af:28:
         ab:99:88:5b:4c:ef:5e:30:df:bc:a1:3e:a8:6f:80:58:cf:36:
         9b:79:1f:b6:5a:66:fa:ca:43:51:21:af:73:11:b1:04:d7:08:
         68:72:b4:52:b6:93:10:62:f7:ba:35:8f:b7:ab:f7:c9:4b:7b:
         2c:88:61:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----