Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/8C50B18948FB749C5395482072FE7285BFCC98F1.mft
File:                     8C50B18948FB749C5395482072FE7285BFCC98F1.mft (raw, json)
Hash identifier:          TkhGeIX5nKkboD+SebmyzsfKznr0/5UPwQ7BNe5qQRI=
Subject key identifier:   46:A2:F0:24:55:EA:AF:08:0F:8F:3D:EE:34:DE:16:9A:F3:27:22:40
Authority key identifier: 8C:50:B1:89:48:FB:74:9C:53:95:48:20:72:FE:72:85:BF:CC:98:F1
Certificate issuer:       /CN=8C50B18948FB749C5395482072FE7285BFCC98F1
Certificate serial:       79C08C377259E91B19995EF4D12AE30E2D9E1BA1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C50B18948FB749C5395482072FE7285BFCC98F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/8C50B18948FB749C5395482072FE7285BFCC98F1.mft
Manifest number:          0204
Signing time:             Mon 10 Apr 2023 09:45:05 +0000
Manifest this update:     Mon 10 Apr 2023 09:40:05 +0000
Manifest next update:     Tue 11 Apr 2023 11:56:05 +0000
Files and hashes:         1: 323830343a376436303a3a2f33322d3334203d3e203230343733.roa (hash: eF/sT6tNRoujlOWGT01bopQ09gQb88Taab0nFuLI4AM=)
                          2: 8C50B18948FB749C5395482072FE7285BFCC98F1.crl (hash: AYbKxNekXttWdLN5wIbWXLjH7YxRBKIV/JT1B2aPWic=)
                          3: 3138312e3233332e3138382e302f32322d3234203d3e203230343733.roa (hash: FFaoeFg6QsnMw/8SmHwt7VFokqstusJvxiI3pTjaxOY=)
                          4: 3138312e3233332e3138382e302f32322d3234203d3e20323731353537.roa (hash: Vi6CGeWCzKq3gDExtssjGNAJrmtoZ9P9/GcUbbAqsQ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:c0:8c:37:72:59:e9:1b:19:99:5e:f4:d1:2a:e3:0e:2d:9e:1b:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C50B18948FB749C5395482072FE7285BFCC98F1
        Validity
            Not Before: Apr 10 09:40:05 2023 GMT
            Not After : Apr 11 11:56:05 2023 GMT
        Subject: CN=46A2F02455EAAF080F8F3DEE34DE169AF3272240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:be:f2:65:68:d1:68:5f:63:4b:b0:9a:b1:16:
                    69:57:79:cc:0b:f1:28:37:39:c9:3b:b0:5e:05:5c:
                    cd:7e:59:5f:2b:8b:1e:c3:de:b9:64:2c:b2:a6:d0:
                    9e:d5:4e:27:71:c5:c5:db:f2:8f:f6:a3:3c:e6:a4:
                    77:ff:05:91:f6:65:2f:aa:a0:47:01:24:c7:56:a3:
                    fc:55:8d:c5:1f:21:fe:9a:4d:d2:91:81:f3:98:e9:
                    a9:7f:d8:44:29:18:23:a9:81:7a:a4:dd:53:4b:b5:
                    c4:d8:bd:dc:92:5a:1e:78:87:32:a0:0b:e7:d5:71:
                    58:71:4b:a0:aa:ab:8c:93:3c:e1:4a:79:27:4d:e4:
                    00:1c:fd:34:7b:05:76:e2:f8:26:50:b3:39:09:60:
                    42:40:41:5b:0c:05:d5:bd:6e:49:d8:31:2a:fe:43:
                    96:61:6a:ae:7d:38:6c:2b:6b:80:f0:91:05:ae:ad:
                    19:c5:67:11:61:26:cc:d4:b9:0d:4b:02:39:af:41:
                    74:86:36:83:2c:2b:4c:98:b4:b2:f6:95:0a:d6:68:
                    35:e7:28:ef:06:9b:c9:c3:91:ad:c3:16:33:ea:93:
                    e8:e3:d7:0c:4b:c2:07:d5:9b:ff:59:b5:b3:e8:fc:
                    19:e8:ee:a2:19:eb:c4:95:df:ce:0f:95:df:3f:e6:
                    aa:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A2:F0:24:55:EA:AF:08:0F:8F:3D:EE:34:DE:16:9A:F3:27:22:40
            X509v3 Authority Key Identifier:
                keyid:8C:50:B1:89:48:FB:74:9C:53:95:48:20:72:FE:72:85:BF:CC:98:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/8C50B18948FB749C5395482072FE7285BFCC98F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C50B18948FB749C5395482072FE7285BFCC98F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/8C50B18948FB749C5395482072FE7285BFCC98F1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:aa:06:98:cb:b2:4a:c1:36:a1:3c:25:ca:56:05:63:51:cf:
         30:92:3b:e3:a3:dd:ef:cf:00:9b:f5:a5:97:31:58:0b:01:80:
         3b:af:d2:bd:b7:e3:c0:65:ab:e2:5c:d9:c9:fc:05:89:07:bb:
         44:11:1c:9c:c8:8b:90:49:28:93:fb:be:47:6e:89:e7:50:da:
         a5:1f:cc:65:8e:b6:a7:84:47:f8:ea:10:1d:cb:8e:6a:a6:15:
         f8:5b:b5:a8:32:01:ee:87:51:80:cc:5f:d4:fe:5c:60:02:a6:
         94:9c:d4:a3:72:c4:8d:ab:1c:eb:44:85:04:b3:7a:0d:8c:ea:
         0a:1f:a8:fd:ea:15:46:59:ea:0d:6b:7a:4d:98:57:87:77:d6:
         3d:4c:fc:90:82:12:16:05:11:c3:a2:61:ee:8f:ce:2e:ab:ff:
         dd:9d:75:d9:0f:a1:fd:b7:31:54:ed:12:eb:07:87:eb:25:7e:
         6f:b1:95:05:8e:9c:0d:51:86:f5:6a:49:af:a8:20:e3:25:87:
         d5:19:b9:7c:8d:8c:82:e6:5d:6e:65:a7:6d:06:67:25:ad:cc:
         4b:51:71:83:b6:75:fd:8c:37:26:8c:4d:c2:91:3d:75:bb:67:
         a5:d1:fe:f8:f1:43:9a:13:94:04:a3:57:be:d8:e7:a8:74:36:
         96:5f:7d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----