Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/1890D320CAFEB0247AAACAFBABE135F55DC3D844.mft
File:                     1890D320CAFEB0247AAACAFBABE135F55DC3D844.mft (raw, json)
Hash identifier:          IKIpaGdkwBroTkCnVkuw54pe4rZc7NpGrsy9OagwJ1w=
Subject key identifier:   E8:E3:C5:11:B7:28:32:B5:E4:97:09:A1:8B:4F:2D:2A:96:03:94:D0
Authority key identifier: 18:90:D3:20:CA:FE:B0:24:7A:AA:CA:FB:AB:E1:35:F5:5D:C3:D8:44
Certificate issuer:       /CN=1890D320CAFEB0247AAACAFBABE135F55DC3D844
Certificate serial:       0B4082D50CF0AC86B3D38287CEFDF5585200FE25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1890D320CAFEB0247AAACAFBABE135F55DC3D844.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/1890D320CAFEB0247AAACAFBABE135F55DC3D844.mft
Manifest number:          A9
Signing time:             Wed 29 Nov 2023 14:09:14 +0000
Manifest this update:     Wed 29 Nov 2023 14:04:14 +0000
Manifest next update:     Thu 30 Nov 2023 15:54:14 +0000
Files and hashes:         1: 1890D320CAFEB0247AAACAFBABE135F55DC3D844.crl (hash: eJ13mAfIXglWfq/91+xD3pDuoa7jZE8V+X4OupVCjnQ=)
                          2: 3230302e3231392e31362e302f32322d3332203d3e20323730383130.roa (hash: yy9tRFrbtJlwlfKE90b7UzL/ccG8pCsXKt9szhfN/8Y=)
                          3: 323830343a373163343a3a2f33322d3332203d3e20323730383130.roa (hash: cfvWf1e8CLCu7X3cgWQAFT81kwqatwt2AmUCdtFJnDg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:40:82:d5:0c:f0:ac:86:b3:d3:82:87:ce:fd:f5:58:52:00:fe:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1890D320CAFEB0247AAACAFBABE135F55DC3D844
        Validity
            Not Before: Nov 29 14:04:14 2023 GMT
            Not After : Nov 30 15:54:14 2023 GMT
        Subject: CN=E8E3C511B72832B5E49709A18B4F2D2A960394D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:47:eb:60:6b:31:87:bb:b7:69:48:4c:5f:9a:
                    1e:a8:51:48:f4:73:da:38:ea:97:b5:af:c4:4d:8b:
                    65:90:b4:88:54:83:f3:7d:c7:cb:75:32:68:07:eb:
                    b3:34:ac:76:9f:f7:81:a8:f2:54:83:a5:dd:3d:d0:
                    ff:b4:27:6f:5b:a1:09:9b:5d:1d:ca:86:7a:52:f9:
                    75:16:03:70:5a:d9:e3:9f:dd:cf:c9:eb:48:1b:a5:
                    55:2a:6b:2a:c6:19:0e:82:35:68:cf:0e:c0:f6:27:
                    a0:dc:ed:98:58:32:7a:bf:bf:f5:37:7c:37:a3:96:
                    a8:6b:0c:93:1c:3b:1d:5e:ca:28:b7:eb:fd:cc:65:
                    ea:c6:6c:67:07:32:f8:0c:70:c1:59:cf:48:0a:db:
                    92:6d:66:cd:4d:db:60:ac:37:8c:4b:6f:59:bc:ab:
                    a7:f7:4c:40:04:4d:e6:3a:74:5e:fa:82:1b:29:e1:
                    eb:78:81:5b:68:ab:3c:63:ec:d3:ad:ad:52:50:fe:
                    88:93:27:7b:24:3a:70:47:73:c9:54:64:08:d3:55:
                    d7:ec:49:e1:c1:3e:3c:9b:3e:97:93:c8:08:b5:d9:
                    28:7e:e9:6a:cf:a2:a5:e7:d2:3e:10:50:2a:c4:54:
                    48:06:4a:29:e5:56:e2:97:89:08:b6:05:37:80:e4:
                    96:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E3:C5:11:B7:28:32:B5:E4:97:09:A1:8B:4F:2D:2A:96:03:94:D0
            X509v3 Authority Key Identifier:
                keyid:18:90:D3:20:CA:FE:B0:24:7A:AA:CA:FB:AB:E1:35:F5:5D:C3:D8:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/1890D320CAFEB0247AAACAFBABE135F55DC3D844.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1890D320CAFEB0247AAACAFBABE135F55DC3D844.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/1890D320CAFEB0247AAACAFBABE135F55DC3D844.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:8e:a1:2a:0e:40:16:a5:f7:75:56:72:07:6d:1d:ce:96:84:
         66:ab:cf:84:19:d5:66:bc:3e:24:e5:17:c7:f4:51:e4:41:4a:
         cc:55:87:26:b4:e6:b4:a2:d4:54:b0:e2:93:ee:fa:79:fb:68:
         fb:8b:62:b5:06:a8:93:7c:f1:f9:3a:80:ac:f0:e2:ff:81:0a:
         0c:85:a5:79:f2:71:a0:99:0c:be:29:db:e8:13:3a:40:f3:7f:
         79:7f:22:46:90:da:2f:28:8d:bd:d1:97:e4:11:87:99:33:da:
         96:59:73:72:3b:32:0c:37:41:51:18:89:66:f2:50:df:64:68:
         6f:7d:ff:49:8d:44:12:fd:1d:a6:b0:94:28:b8:0c:43:da:ba:
         f6:b0:c3:14:a0:91:4b:23:8d:c1:41:b2:7c:c0:0d:02:a3:6b:
         9d:14:df:94:18:c8:4f:f2:02:8b:e1:df:40:aa:3d:41:9c:c3:
         ec:b3:2e:b1:71:49:ed:36:0c:08:1f:b2:de:70:fd:a6:ad:1a:
         2e:15:a3:7b:8a:93:df:c5:a7:eb:fa:1e:b8:96:61:95:7d:c7:
         61:a8:1d:8a:56:a8:7b:e6:03:3c:9e:f6:fc:81:bc:17:29:b2:
         45:f4:81:09:6c:e9:10:71:6b:08:e5:0b:e8:e3:63:1f:19:69:
         18:ed:7a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----