Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/61B9FF8A89F795308E791C6E8890EC95AD383E3C.mft
File:                     61B9FF8A89F795308E791C6E8890EC95AD383E3C.mft (raw, json)
Hash identifier:          H3MAIzM5GntOETQ7xpyOPETpEWFBWYSUcBEMQ4ht62I=
Subject key identifier:   7F:D3:0F:95:85:95:E8:72:6E:F4:EC:D5:0C:A5:01:5A:D2:13:67:3F
Authority key identifier: 61:B9:FF:8A:89:F7:95:30:8E:79:1C:6E:88:90:EC:95:AD:38:3E:3C
Certificate issuer:       /CN=61B9FF8A89F795308E791C6E8890EC95AD383E3C
Certificate serial:       1A61FAC4330C450C34F9707878F21FDE17814F35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61B9FF8A89F795308E791C6E8890EC95AD383E3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/61B9FF8A89F795308E791C6E8890EC95AD383E3C.mft
Manifest number:          04
Signing time:             Tue 29 Aug 2023 14:00:08 +0000
Manifest this update:     Tue 29 Aug 2023 13:55:08 +0000
Manifest next update:     Wed 30 Aug 2023 14:43:08 +0000
Files and hashes:         1: 323830343a363832343a3a2f33322d313238203d3e20323639363731.roa (hash: HRnv1LhAraJYwOzX44PzwgbGef02erXHZXsZoFpMAAg=)
                          2: 61B9FF8A89F795308E791C6E8890EC95AD383E3C.crl (hash: W6pE2VN2gPM20J6zKVetiNWAhI07pM+LDqDd4Yi1jqY=)
                          3: 34352e3139312e3132342e302f32322d3332203d3e20323639363731.roa (hash: dkbXrWj0Wt0yw+kf3aql+wnARwxHTRlWA9G5n13FT+E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:61:fa:c4:33:0c:45:0c:34:f9:70:78:78:f2:1f:de:17:81:4f:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61B9FF8A89F795308E791C6E8890EC95AD383E3C
        Validity
            Not Before: Aug 29 13:55:08 2023 GMT
            Not After : Aug 30 14:43:08 2023 GMT
        Subject: CN=7FD30F958595E8726EF4ECD50CA5015AD213673F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:54:45:93:5e:45:9d:32:c9:06:ea:66:9f:5c:
                    81:c7:22:78:21:3d:8b:20:fd:f1:0b:75:d5:b4:14:
                    21:7c:7e:92:10:62:97:6b:8d:d2:dc:99:bb:b6:46:
                    15:5f:44:a9:5b:20:c7:1b:24:36:74:ad:be:ae:37:
                    c0:97:92:c1:2c:40:4d:a1:65:03:00:d1:9c:d1:60:
                    42:8e:a8:35:d3:c1:b3:4e:75:cc:bf:02:cf:61:1e:
                    e0:36:2c:ea:31:b3:6f:a4:2a:ae:36:c5:dd:fe:3a:
                    e9:0d:91:95:2d:fb:fe:7e:6e:4a:21:a8:d3:e5:cf:
                    cb:35:ba:18:12:be:7d:60:a4:2a:f0:c5:cc:f6:38:
                    d3:ba:3a:6d:99:56:8b:e5:7b:f0:e0:33:39:d9:9a:
                    a9:79:07:69:62:b0:00:8e:2b:1b:4e:16:38:ac:72:
                    9f:62:74:06:b4:dd:b2:8e:b3:ac:1b:d2:ee:c7:ca:
                    d2:56:39:ce:3e:8b:7f:b8:0c:a9:08:e1:90:49:8a:
                    fb:7d:e8:bd:db:ef:24:82:21:b2:a1:28:05:98:8c:
                    2a:d7:5a:51:04:dd:b9:e3:da:ed:93:30:58:18:0c:
                    9a:fa:0c:df:36:83:2a:ed:24:1c:e0:45:9c:4b:01:
                    0f:ff:fd:b6:b8:e1:3b:32:21:93:64:73:3f:30:2b:
                    4a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D3:0F:95:85:95:E8:72:6E:F4:EC:D5:0C:A5:01:5A:D2:13:67:3F
            X509v3 Authority Key Identifier:
                keyid:61:B9:FF:8A:89:F7:95:30:8E:79:1C:6E:88:90:EC:95:AD:38:3E:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/61B9FF8A89F795308E791C6E8890EC95AD383E3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61B9FF8A89F795308E791C6E8890EC95AD383E3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/61B9FF8A89F795308E791C6E8890EC95AD383E3C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:4e:da:4e:1a:71:51:c7:a1:4c:ca:17:62:ec:41:60:42:77:
         a6:e9:39:3e:11:b1:72:e6:4b:f4:81:01:9f:ae:6d:76:07:dd:
         d0:15:87:d4:21:40:c9:dc:74:1c:3a:08:2d:df:f9:dc:0e:bc:
         da:b5:5a:b9:75:81:30:6d:b9:4d:ca:25:33:fb:1e:33:47:f4:
         74:4f:ce:fc:fe:b0:de:46:c0:b8:a4:82:35:a8:a2:10:ac:42:
         d1:76:4c:a6:64:42:92:8b:79:98:22:03:db:19:3b:b1:43:48:
         99:8b:ba:d4:bb:9f:92:4b:bb:f7:3e:76:d2:cb:ec:db:a3:de:
         38:42:55:0d:90:37:d8:13:bd:07:a2:5b:dc:76:ad:c0:2a:96:
         34:13:42:20:f3:d0:e3:39:8d:06:5a:6f:e9:01:a4:a9:9b:5e:
         b0:53:3a:51:e4:cf:b2:78:da:50:73:2e:c1:6b:8b:98:a8:8f:
         2e:18:31:51:b1:85:9e:e5:23:8e:31:80:8c:95:24:ad:fa:e6:
         11:3b:bd:17:98:f9:ed:bd:c0:0b:47:ae:60:03:b9:61:b3:3e:
         46:43:63:da:d2:b6:29:6b:be:80:9d:4f:a4:ab:fd:5a:43:90:
         99:7e:3a:f9:9b:57:40:ae:01:3a:73:00:c1:e9:8d:f9:d1:fc:
         f0:50:e5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----