Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/1F8F241691522B2E3EDFAC3BF041D38D6F2A0935.mft
File:                     1F8F241691522B2E3EDFAC3BF041D38D6F2A0935.mft (raw, json)
Hash identifier:          dRB6nUgPd42lHZMw7+KTg5mnmZWvMKJSZD03TOJkKkE=
Subject key identifier:   8E:BC:1B:BB:FB:4E:EF:6B:7C:89:BC:86:68:70:92:19:35:2B:7A:63
Authority key identifier: 1F:8F:24:16:91:52:2B:2E:3E:DF:AC:3B:F0:41:D3:8D:6F:2A:09:35
Certificate issuer:       /CN=1F8F241691522B2E3EDFAC3BF041D38D6F2A0935
Certificate serial:       30CF71A89910D029F3A738F6C3A0B34978B75DC3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F8F241691522B2E3EDFAC3BF041D38D6F2A0935.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/1F8F241691522B2E3EDFAC3BF041D38D6F2A0935.mft
Manifest number:          0428
Signing time:             Tue 15 Nov 2022 15:24:15 +0000
Manifest this update:     Tue 15 Nov 2022 15:19:15 +0000
Manifest next update:     Wed 16 Nov 2022 18:13:15 +0000
Files and hashes:         1: 3136342e3136332e3230342e302f32322d3234203d3e20323635393733.roa (hash: I8QacIo91DwxZGVdEKp3z4sX/HVekW/KMWcCrgcJ5BA=)
                          2: 1F8F241691522B2E3EDFAC3BF041D38D6F2A0935.crl (hash: CKXpFeYC/V9Mjxo91Cy7lU3xai3QPiLlPdwOUxzbVW8=)
                          3: 323830343a343061383a3a2f33322d3438203d3e20323635393733.roa (hash: 2++RX4NtUlKcQ4zHO3kopO09cMUPnMJcZf+gdd+//FU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:cf:71:a8:99:10:d0:29:f3:a7:38:f6:c3:a0:b3:49:78:b7:5d:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F8F241691522B2E3EDFAC3BF041D38D6F2A0935
        Validity
            Not Before: Nov 15 15:19:15 2022 GMT
            Not After : Nov 16 18:13:15 2022 GMT
        Subject: CN=8EBC1BBBFB4EEF6B7C89BC8668709219352B7A63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b6:09:0e:bd:75:b1:b8:ce:a8:cf:0e:0b:85:
                    90:99:83:03:9d:cf:1c:26:68:53:52:6e:92:13:22:
                    b0:77:86:10:07:09:5a:af:cc:80:a4:f9:80:09:55:
                    a3:57:f5:dd:41:b0:f9:26:40:4f:98:56:8c:80:1b:
                    2b:27:b5:71:f6:c2:95:58:d0:24:bb:47:45:9f:0b:
                    67:7d:ab:ba:79:ee:5d:c7:f5:b4:37:ea:c1:89:2e:
                    df:17:76:05:46:0c:b7:ef:1f:2e:2c:dc:6d:33:8b:
                    be:91:9d:7b:e3:0a:39:b8:61:1f:06:0d:ee:e1:5e:
                    bf:33:11:98:10:9f:6b:0c:a7:30:4c:f3:32:08:20:
                    2b:2c:19:45:dc:13:9d:84:34:1e:1c:59:60:b2:00:
                    e5:ca:ea:ff:bb:b9:87:06:b2:07:bd:4e:08:b6:ac:
                    ec:26:8e:3d:d4:7a:56:80:67:31:2f:88:ff:d6:38:
                    d2:ad:65:63:c5:3b:ca:30:c9:d8:42:ce:7b:8d:2a:
                    d7:19:17:ec:92:db:63:3d:7f:18:32:70:d2:0d:dc:
                    72:c8:61:7a:62:3b:3f:e3:5f:a2:20:d5:fa:27:a9:
                    da:c4:65:6a:34:34:20:98:fe:fe:65:e7:e8:cf:b7:
                    a7:82:44:77:17:fe:75:20:c7:a1:c0:b2:94:93:48:
                    44:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:BC:1B:BB:FB:4E:EF:6B:7C:89:BC:86:68:70:92:19:35:2B:7A:63
            X509v3 Authority Key Identifier:
                keyid:1F:8F:24:16:91:52:2B:2E:3E:DF:AC:3B:F0:41:D3:8D:6F:2A:09:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/1F8F241691522B2E3EDFAC3BF041D38D6F2A0935.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F8F241691522B2E3EDFAC3BF041D38D6F2A0935.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/1F8F241691522B2E3EDFAC3BF041D38D6F2A0935.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:df:5f:eb:c9:72:ac:26:94:50:72:5e:16:48:d4:a7:2c:c8:
         96:6a:66:47:c8:64:db:ff:ca:b7:07:03:a1:f2:d1:77:7a:6b:
         8f:86:c2:0d:7d:60:8f:90:c5:79:f9:b9:ca:1b:b1:15:e2:b5:
         6f:10:73:9a:66:37:6c:75:5c:41:a1:a3:80:75:d2:2a:ad:62:
         a2:ac:53:b9:74:88:f1:d0:f3:be:aa:8f:18:f9:2a:fa:b7:46:
         42:32:7d:ae:ae:0a:c4:d3:4f:cf:50:ce:5d:d1:bd:a0:97:9f:
         6d:df:81:98:a6:ea:ed:1d:0e:e8:33:42:0a:86:ae:61:ae:82:
         de:c7:64:0a:2f:e1:c9:e7:88:6b:b9:b2:69:b9:0f:5c:a3:8a:
         51:44:1b:ef:9c:83:d6:ca:03:c1:2e:76:af:10:70:02:ef:e0:
         4d:50:09:19:3a:75:6b:54:7e:f1:7a:51:e9:12:4a:13:2c:fe:
         c0:8e:ff:6e:67:1a:29:74:5e:a9:87:8c:c2:36:c0:89:70:9b:
         c3:06:10:de:a7:40:ee:f0:08:fb:0f:09:4f:63:fc:c0:9c:76:
         2e:81:33:c7:c5:87:73:38:e9:7e:94:df:f9:31:9d:e6:20:36:
         4f:6b:7c:6f:53:7e:8f:2c:b7:ce:f7:dc:48:ff:dc:c0:d2:3c:
         9e:6f:4f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----