Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/1/8AC8159F161F4ABFA03D76B8A041A32AFCF2D5F1.mft
File:                     8AC8159F161F4ABFA03D76B8A041A32AFCF2D5F1.mft (raw, json)
Hash identifier:          3RawIeYaVxTTvOgYchY2hY9Ggf8tQCL3pHprigNXlrA=
Subject key identifier:   86:E5:B9:70:AC:E4:1E:3C:5E:BF:EC:16:B2:00:53:BB:8C:3C:1C:5D
Authority key identifier: 8A:C8:15:9F:16:1F:4A:BF:A0:3D:76:B8:A0:41:A3:2A:FC:F2:D5:F1
Certificate issuer:       /CN=8AC8159F161F4ABFA03D76B8A041A32AFCF2D5F1
Certificate serial:       71EC3543929E9B637E3E7EE094D2B09C80AF3C06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AC8159F161F4ABFA03D76B8A041A32AFCF2D5F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/1/8AC8159F161F4ABFA03D76B8A041A32AFCF2D5F1.mft
Manifest number:          0289
Signing time:             Sun 14 Apr 2024 20:11:05 +0000
Manifest this update:     Sun 14 Apr 2024 20:06:05 +0000
Manifest next update:     Mon 15 Apr 2024 21:33:05 +0000
Files and hashes:         1: 8AC8159F161F4ABFA03D76B8A041A32AFCF2D5F1.crl (hash: c7kazJ5UyVmXMYOy/xHkpFIic8e1Y15EVfDh9u8A9EE=)
                          2: 323830343a366665383a3a2f33322d3432203d3e20323730363932.roa (hash: y0jzU+R6pX2Jj45ppkM0SGoA9Tv4F/HydRKGysDiSgc=)
                          3: 3137372e3132382e35322e302f32322d3234203d3e20323730363932.roa (hash: 2iK+KgV02gJ3mzsXE3i3MLon9r4eWsRkl+iqHUOtuBs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ec:35:43:92:9e:9b:63:7e:3e:7e:e0:94:d2:b0:9c:80:af:3c:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AC8159F161F4ABFA03D76B8A041A32AFCF2D5F1
        Validity
            Not Before: Apr 14 20:06:05 2024 GMT
            Not After : Apr 15 21:33:05 2024 GMT
        Subject: CN=86E5B970ACE41E3C5EBFEC16B20053BB8C3C1C5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6c:07:55:6f:fb:9f:57:a1:b0:d7:0e:f3:36:
                    fb:ea:65:18:f2:13:36:fa:93:85:2a:18:1c:59:06:
                    9a:35:09:5f:3b:6e:77:a5:41:c2:8e:60:ed:84:46:
                    42:29:be:38:79:9e:6e:81:8f:a5:b9:a1:77:b9:63:
                    25:af:ff:bd:9b:d7:8b:31:87:94:7a:2c:60:78:7b:
                    b1:a5:a5:21:34:04:75:a8:86:81:09:e5:75:3c:98:
                    ea:77:c2:c8:53:c5:22:ae:44:10:c4:d2:e1:d1:4d:
                    85:1d:af:19:02:36:c0:1d:cf:a6:3e:7d:77:4d:4a:
                    30:82:8e:99:c8:46:99:96:5b:c6:4f:69:90:94:6d:
                    11:72:df:50:ca:5c:65:49:72:1c:5e:c6:bf:29:16:
                    0c:a4:25:04:12:11:ad:34:c2:4b:ad:04:cd:a9:0c:
                    20:ce:39:07:83:b7:18:42:24:7b:de:60:1d:7b:95:
                    48:80:52:04:d1:34:43:94:7e:a9:8f:25:61:9f:a9:
                    c3:2d:f8:26:4b:04:0b:18:61:34:97:bc:0e:3d:f2:
                    a2:9a:e3:f1:54:d0:27:24:32:16:9c:d9:d4:97:b4:
                    6c:d7:04:55:ce:d5:7c:55:0d:e8:15:ec:85:94:19:
                    55:98:ac:3a:83:23:34:d4:b1:18:24:21:4e:be:57:
                    09:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E5:B9:70:AC:E4:1E:3C:5E:BF:EC:16:B2:00:53:BB:8C:3C:1C:5D
            X509v3 Authority Key Identifier:
                keyid:8A:C8:15:9F:16:1F:4A:BF:A0:3D:76:B8:A0:41:A3:2A:FC:F2:D5:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/1/8AC8159F161F4ABFA03D76B8A041A32AFCF2D5F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AC8159F161F4ABFA03D76B8A041A32AFCF2D5F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/1/8AC8159F161F4ABFA03D76B8A041A32AFCF2D5F1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:d5:fe:cd:6d:40:b4:a8:b9:8e:23:4d:42:52:89:30:81:92:
         20:63:ad:da:93:0c:a4:b4:42:35:5d:dd:db:63:3c:3c:d3:ba:
         b8:5e:09:a4:5f:ba:e5:cb:bb:ad:93:17:2e:1b:e0:99:79:dc:
         08:aa:33:d5:ef:d0:ab:f8:85:72:29:60:14:5c:6d:9c:88:c5:
         f7:73:78:cd:41:3e:6e:40:2a:a0:fd:31:e1:67:f5:fd:66:c2:
         92:cf:9a:76:37:a0:a1:a1:22:2e:e5:fa:89:20:e3:1d:ab:63:
         9e:a7:6c:a3:6c:75:8d:62:0b:91:2d:16:30:36:d5:c9:09:c5:
         80:5f:ea:53:0d:b9:e0:42:72:63:27:05:33:2e:a1:97:fa:15:
         ad:ee:be:6e:0a:1d:e2:c3:78:0d:c5:5d:73:4a:ec:c0:3e:fb:
         78:c9:31:01:db:63:5b:7f:a1:36:d9:51:99:7a:d0:ec:90:23:
         6b:24:0f:ef:ed:c1:0b:8d:94:5e:c8:cb:c8:b5:0d:4b:a0:4c:
         e9:e0:dc:45:ff:a8:07:d8:3d:eb:23:b3:e6:53:96:54:69:11:
         f4:e1:bf:69:a6:ee:70:d7:60:d5:33:66:fc:23:03:9a:1e:8d:
         de:e7:1f:e5:59:0f:85:dd:e1:7a:c6:c1:5f:b1:0b:2e:47:8e:
         f1:08:af:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----