Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CdZLpMmsr9xpC45GGBTBVRz11GZVHoankf8Bbtjfs19u/0/8E28A4D0B90179F6DE269A6493B5A059256E12BF.mft
File:                     8E28A4D0B90179F6DE269A6493B5A059256E12BF.mft (raw, json)
Hash identifier:          +7olW97GAz1sCoB8zFJJhqIp6IgU9nexh5Mrhdf9rq4=
Subject key identifier:   B8:AE:50:F1:82:F5:E3:21:7F:2A:21:0E:0E:6E:0A:25:50:C1:AE:4E
Authority key identifier: 8E:28:A4:D0:B9:01:79:F6:DE:26:9A:64:93:B5:A0:59:25:6E:12:BF
Certificate issuer:       /CN=8E28A4D0B90179F6DE269A6493B5A059256E12BF
Certificate serial:       49D5B3E44B03782E45D8172E379193FBD7C45344
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E28A4D0B90179F6DE269A6493B5A059256E12BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdZLpMmsr9xpC45GGBTBVRz11GZVHoankf8Bbtjfs19u/0/8E28A4D0B90179F6DE269A6493B5A059256E12BF.mft
Manifest number:          015A
Signing time:             Sun 14 Apr 2024 19:23:38 +0000
Manifest this update:     Sun 14 Apr 2024 19:18:38 +0000
Manifest next update:     Mon 15 Apr 2024 23:22:38 +0000
Files and hashes:         1: 8E28A4D0B90179F6DE269A6493B5A059256E12BF.crl (hash: +eBlbffUkXOhqZzEeaQrkYBs3rioiMFYoOqAReXfm7M=)
                          2: 323830343a363763383a3a2f33322d3438203d3e20323639363530.roa (hash: aMRmStom2+eNZRPp0a8FJ7aqqmRv9HAPRM/BlpImMtw=)
                          3: 34352e3139302e3230302e302f32322d3234203d3e20323639363530.roa (hash: ed1Mb5vyclnx7VO/1RuxgBbBbHsUv0XzhVEfKW92K+8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:d5:b3:e4:4b:03:78:2e:45:d8:17:2e:37:91:93:fb:d7:c4:53:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E28A4D0B90179F6DE269A6493B5A059256E12BF
        Validity
            Not Before: Apr 14 19:18:38 2024 GMT
            Not After : Apr 15 23:22:38 2024 GMT
        Subject: CN=B8AE50F182F5E3217F2A210E0E6E0A2550C1AE4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c7:09:85:4f:aa:df:cf:5a:c2:25:ab:10:f7:
                    88:e6:ee:87:6f:00:6d:c0:5f:89:a1:a0:0c:5e:b5:
                    77:f9:12:89:04:18:ce:ce:4f:0f:2c:4f:82:2b:6b:
                    3f:53:e0:72:b2:21:7e:3d:81:dc:6c:d3:c7:83:77:
                    8f:41:9a:4c:a8:a0:54:38:b0:04:65:9f:ff:25:f2:
                    80:95:47:73:01:0c:f2:d0:c3:80:74:81:b8:b4:58:
                    20:ee:03:13:51:d3:7d:6f:fb:b0:47:09:18:8b:6b:
                    79:cb:7d:0a:5c:bf:07:9f:fe:ae:29:2e:79:b5:70:
                    16:df:cd:f0:48:9b:1c:16:11:20:52:aa:b2:c3:08:
                    17:f7:57:cc:bd:c0:e9:45:78:25:17:4f:2d:a5:b0:
                    b7:06:39:9d:7e:c8:4b:74:8e:13:63:52:22:8a:65:
                    00:3c:0d:56:62:71:81:c1:19:91:e7:e4:07:e3:b8:
                    ee:82:13:27:9e:f0:0e:1c:88:93:60:0a:b8:45:99:
                    2c:c1:b8:86:dd:28:32:34:c6:c8:34:ed:d8:f3:29:
                    d0:f8:89:1d:9e:23:56:72:ef:1c:aa:61:96:1d:19:
                    a9:66:37:72:fd:6e:b3:53:67:2c:4a:b5:b6:ea:74:
                    b8:90:67:a1:77:60:65:0d:a4:9b:6c:09:f7:d5:dd:
                    b2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:AE:50:F1:82:F5:E3:21:7F:2A:21:0E:0E:6E:0A:25:50:C1:AE:4E
            X509v3 Authority Key Identifier:
                keyid:8E:28:A4:D0:B9:01:79:F6:DE:26:9A:64:93:B5:A0:59:25:6E:12:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdZLpMmsr9xpC45GGBTBVRz11GZVHoankf8Bbtjfs19u/0/8E28A4D0B90179F6DE269A6493B5A059256E12BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E28A4D0B90179F6DE269A6493B5A059256E12BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdZLpMmsr9xpC45GGBTBVRz11GZVHoankf8Bbtjfs19u/0/8E28A4D0B90179F6DE269A6493B5A059256E12BF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:7c:dd:bb:30:a0:59:28:ea:e3:96:10:02:ec:19:a0:82:7d:
         7e:76:e5:28:a6:3a:a0:86:7a:76:56:37:22:f9:92:f8:90:da:
         48:a6:09:2a:88:98:35:37:70:20:14:f6:55:37:0e:99:8a:8a:
         b8:8a:80:47:6b:f2:a3:d1:a8:1d:f4:33:2e:78:15:74:40:fd:
         8b:b5:ea:99:de:74:66:eb:f3:ff:33:dc:c2:77:37:b9:54:ea:
         d6:64:d2:ed:05:4e:1a:93:d9:e0:a4:89:52:b4:df:8a:35:1a:
         d4:87:c6:a0:28:0b:c3:23:49:3c:07:c9:43:86:78:65:b8:e4:
         40:ea:89:23:ac:f1:d7:66:58:1d:78:21:76:bc:12:88:b7:7f:
         10:85:9b:93:48:d9:c6:5a:2b:41:a8:06:17:85:a4:5a:b3:a4:
         f4:55:37:b4:8d:66:03:73:cf:69:bc:a9:c6:13:8f:13:52:06:
         c0:27:35:9c:ae:88:1b:dc:cd:e8:42:f5:72:f0:0e:0b:23:16:
         db:40:b8:53:b2:2d:57:13:34:37:21:14:a9:5c:38:bd:79:a4:
         9d:60:18:41:9f:a3:eb:8c:63:bd:1c:b7:e2:df:77:09:c2:95:
         64:92:87:23:83:11:51:fb:27:0d:f8:12:15:d4:3e:df:2c:07:
         da:40:e4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----