Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/1/8B0EE7E206C12BE29B5F07B88184565CB44AF66C.mft
File:                     8B0EE7E206C12BE29B5F07B88184565CB44AF66C.mft (raw, json)
Hash identifier:          Am/kB/jayDuZYvtJ/CteIEoGnbUBEF3KO2uZl/zhsPQ=
Subject key identifier:   A8:26:44:34:48:D8:C9:B5:DA:A9:62:75:6F:E1:F4:E6:91:A3:06:FF
Authority key identifier: 8B:0E:E7:E2:06:C1:2B:E2:9B:5F:07:B8:81:84:56:5C:B4:4A:F6:6C
Certificate issuer:       /CN=8B0EE7E206C12BE29B5F07B88184565CB44AF66C
Certificate serial:       4DE560716F72A9DB8A3ED9CE7DD146F097F2E6BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B0EE7E206C12BE29B5F07B88184565CB44AF66C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/1/8B0EE7E206C12BE29B5F07B88184565CB44AF66C.mft
Manifest number:          03
Signing time:             Mon 15 Apr 2024 18:50:09 +0000
Manifest this update:     Mon 15 Apr 2024 18:45:09 +0000
Manifest next update:     Tue 16 Apr 2024 20:17:09 +0000
Files and hashes:         1: 8B0EE7E206C12BE29B5F07B88184565CB44AF66C.crl (hash: u2GG0f3zfEqtCpqWoW9WIDfM2vV8xIVIjZutD5noFq0=)
                          2: 3137302e3233392e38302e302f32322d3233203d3e20323636333432.roa (hash: PgyIXytrhU877QdX308KGLGAEYZnjY5Iw2YIM5ezU9Q=)
                          3: 323830343a333635343a3a2f33322d3332203d3e20323636333432.roa (hash: ieAxp088Lxccl79Nyt/WBdXYsLqxI/qfHN+rklzSxyU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:e5:60:71:6f:72:a9:db:8a:3e:d9:ce:7d:d1:46:f0:97:f2:e6:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B0EE7E206C12BE29B5F07B88184565CB44AF66C
        Validity
            Not Before: Apr 15 18:45:09 2024 GMT
            Not After : Apr 16 20:17:09 2024 GMT
        Subject: CN=A826443448D8C9B5DAA962756FE1F4E691A306FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:47:0d:06:7f:05:82:a0:b1:4f:47:6f:98:ab:
                    b5:8d:43:f9:61:dd:1d:bf:55:d8:7b:8a:60:bb:8b:
                    26:32:6c:71:ea:a0:b1:29:ff:f1:02:d8:6d:4a:bb:
                    48:68:13:a5:0a:e8:aa:b0:8c:2d:97:c9:ac:18:ea:
                    ec:94:f7:68:48:fc:c9:77:b9:57:be:78:00:f4:00:
                    e5:ea:5c:4b:62:0b:12:4a:78:cd:c4:88:83:e1:16:
                    86:c1:92:e9:48:d4:65:56:42:1d:af:2b:4b:c7:63:
                    d3:b2:e2:99:04:8e:a6:20:e7:0a:5c:8f:1e:f9:88:
                    ee:59:3f:83:6d:ed:37:be:2e:89:f0:11:1f:86:47:
                    02:c4:08:07:d7:ef:4d:ef:40:93:6f:98:ad:fd:81:
                    dd:bb:16:39:24:57:a6:fd:d7:77:52:0b:e0:2b:ba:
                    9a:50:35:ac:d7:28:42:63:a9:04:93:ac:49:2f:fc:
                    33:b7:10:98:bc:f4:a1:1d:63:9c:c2:fd:b7:51:c4:
                    a1:7c:7a:f4:91:f5:2d:db:53:eb:d4:a0:2f:14:0c:
                    43:1c:ec:b1:52:a4:b3:ca:cd:64:04:e9:c7:8e:a3:
                    25:49:fa:90:40:9d:9c:e8:c6:a0:81:6a:7f:06:4c:
                    ec:f2:1a:2d:2f:84:c6:3f:b5:6d:e9:a9:e7:91:39:
                    fb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:26:44:34:48:D8:C9:B5:DA:A9:62:75:6F:E1:F4:E6:91:A3:06:FF
            X509v3 Authority Key Identifier:
                keyid:8B:0E:E7:E2:06:C1:2B:E2:9B:5F:07:B8:81:84:56:5C:B4:4A:F6:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/1/8B0EE7E206C12BE29B5F07B88184565CB44AF66C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B0EE7E206C12BE29B5F07B88184565CB44AF66C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/1/8B0EE7E206C12BE29B5F07B88184565CB44AF66C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:7f:ad:ae:c4:4a:53:05:7d:a3:aa:80:2b:dd:c3:fb:ff:0e:
         f0:f6:29:3f:15:0d:88:0b:b9:a3:77:7a:fa:9a:34:6c:df:52:
         2b:96:a1:83:72:6e:ea:44:11:ef:9c:b5:b9:08:87:c3:03:c0:
         7c:f3:0a:e8:c6:b3:14:a3:5b:d8:72:d9:3d:d7:9d:2e:b5:36:
         c9:21:e8:5e:8e:fa:3f:a5:de:d0:0f:74:07:ac:84:93:0c:4d:
         ac:6b:0f:17:0a:ab:4d:b7:9e:73:82:2f:64:9d:fa:d2:72:fc:
         38:24:bf:2f:7f:dc:cc:df:7b:13:5e:02:20:75:83:9a:01:88:
         ec:7e:c4:2d:c4:08:9a:1b:31:81:bc:43:ba:f4:31:2c:4e:7f:
         f6:58:94:a4:d7:4e:1d:b2:85:f0:96:cf:90:77:50:66:15:7b:
         f7:2b:34:82:1e:4a:ef:cf:b4:c7:0b:82:73:1e:fc:2b:1d:54:
         85:98:1f:c0:85:58:d5:75:0e:77:43:5c:60:13:05:ac:34:1e:
         c1:61:3b:47:09:07:a9:45:22:fd:e8:f4:8d:0a:01:51:c7:a6:
         5a:58:6c:fb:68:43:ad:5d:f1:c1:e4:3d:78:0d:24:20:f4:80:
         e8:e7:bb:d2:2d:e6:16:4c:db:6f:c3:ef:2b:42:2b:2f:ff:36:
         b2:b8:cd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----