Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/0/088F5B84BDC57FA62F1769CACB1CDED1DF9BABB9.mft
File:                     088F5B84BDC57FA62F1769CACB1CDED1DF9BABB9.mft (raw, json)
Hash identifier:          Djb9Z+eju0xZpyAJpgG0jWiS1edP7kCklBE1rYrtBY4=
Subject key identifier:   C6:E6:21:A8:8C:02:47:A2:81:2A:DB:86:E0:10:D1:7C:71:7E:C6:D6
Authority key identifier: 08:8F:5B:84:BD:C5:7F:A6:2F:17:69:CA:CB:1C:DE:D1:DF:9B:AB:B9
Certificate issuer:       /CN=088F5B84BDC57FA62F1769CACB1CDED1DF9BABB9
Certificate serial:       5A720787815F4B1A95FD0D7639BF7046474CCCD1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/088F5B84BDC57FA62F1769CACB1CDED1DF9BABB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/0/088F5B84BDC57FA62F1769CACB1CDED1DF9BABB9.mft
Manifest number:          0389
Signing time:             Mon 15 Apr 2024 03:39:09 +0000
Manifest this update:     Mon 15 Apr 2024 03:34:09 +0000
Manifest next update:     Tue 16 Apr 2024 04:21:09 +0000
Files and hashes:         1: 3230302e3130362e3133362e302f32322d3234203d3e20323730343636.roa (hash: V68oL8YhA26YvwwgA45DNF4nP56RmUbdZWrBujhNfu4=)
                          2: 088F5B84BDC57FA62F1769CACB1CDED1DF9BABB9.crl (hash: toxxo0j+3Rf2r/PEm/YCa9JwTOCkltqpSmuoqsbywwk=)
                          3: 323830343a366336383a3a2f33322d3338203d3e20323730343636.roa (hash: VHAZqP6YG7GwtrCUR8RBXZKxOYRsXQ76Kr+zXIZnWfg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:72:07:87:81:5f:4b:1a:95:fd:0d:76:39:bf:70:46:47:4c:cc:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088F5B84BDC57FA62F1769CACB1CDED1DF9BABB9
        Validity
            Not Before: Apr 15 03:34:09 2024 GMT
            Not After : Apr 16 04:21:09 2024 GMT
        Subject: CN=C6E621A88C0247A2812ADB86E010D17C717EC6D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fe:65:15:20:c3:ac:d7:fd:f2:f2:e9:3c:b0:
                    e9:da:02:6c:e0:f2:88:78:5e:03:f4:31:c5:db:db:
                    9c:50:be:b2:f0:04:eb:80:8c:95:13:77:4f:f9:b9:
                    24:e4:59:3d:b4:87:7a:46:b1:19:3a:8f:d8:e8:b3:
                    25:c2:c5:cb:40:cf:b5:b6:7e:2f:ac:ad:da:04:5a:
                    44:52:ed:a7:89:7e:1b:92:2d:9f:c5:36:5c:50:c9:
                    11:ef:7e:a1:67:f8:36:bf:37:6d:1e:0a:cd:cd:06:
                    38:18:18:c5:3e:59:b4:c5:58:e1:d2:cc:6e:37:cf:
                    a2:57:d7:b2:cc:06:16:3f:b0:3b:41:90:27:c8:12:
                    fa:b1:5c:de:4c:86:f8:58:f6:6b:6b:f5:59:d9:70:
                    b1:a4:92:2c:af:74:2e:3e:40:3b:c1:ec:74:ff:10:
                    d7:14:df:61:11:c7:72:0e:ac:d8:c7:94:12:24:7f:
                    90:8a:d4:10:c4:f8:38:95:16:f3:77:01:9c:19:a8:
                    85:00:58:85:a6:6e:37:db:fd:4f:23:5f:9b:14:a5:
                    07:16:c3:cb:e5:bf:1e:4e:20:59:af:03:28:bc:1c:
                    48:68:8c:ea:64:af:ba:bc:e3:bc:04:0b:5f:3e:03:
                    b0:fb:20:9d:1e:07:d4:c3:36:33:11:fe:5d:12:ea:
                    61:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E6:21:A8:8C:02:47:A2:81:2A:DB:86:E0:10:D1:7C:71:7E:C6:D6
            X509v3 Authority Key Identifier:
                keyid:08:8F:5B:84:BD:C5:7F:A6:2F:17:69:CA:CB:1C:DE:D1:DF:9B:AB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/0/088F5B84BDC57FA62F1769CACB1CDED1DF9BABB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/088F5B84BDC57FA62F1769CACB1CDED1DF9BABB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/0/088F5B84BDC57FA62F1769CACB1CDED1DF9BABB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:93:11:f4:1e:a8:3d:58:bd:dc:df:76:2e:fa:4c:bf:a6:a2:
         9f:44:7d:2d:24:54:66:8d:b1:56:2d:90:8f:e2:73:3d:42:2e:
         71:c6:d6:24:df:c1:b4:c6:31:d0:ac:b0:7b:8e:ef:c6:cb:58:
         c7:3b:de:b5:88:9b:c6:db:ba:22:ce:81:d4:93:a4:08:7b:9b:
         db:a4:fc:40:64:d2:00:33:d0:f2:82:af:8e:47:6f:d8:38:8f:
         36:75:ef:6b:05:9b:12:af:ed:c0:42:f4:95:e4:4b:d7:78:0d:
         34:0b:3c:d6:b9:11:60:9c:4f:fd:47:53:1f:2e:e2:c0:ec:c2:
         89:9f:f2:81:ba:00:0a:57:98:8d:2d:3c:7b:59:77:d0:40:3c:
         31:45:f0:cf:d8:1e:91:80:8d:7d:a9:7c:62:1e:e4:2f:21:7b:
         fc:33:b0:ea:d0:63:db:ff:3e:07:31:c2:5e:fe:00:13:49:d0:
         27:ab:3b:1e:04:4d:fa:4f:6b:4e:a5:c2:f6:1d:e3:2e:31:0a:
         19:e3:28:b2:f3:0d:35:86:f9:12:ab:40:d7:e1:a8:b0:24:be:
         b1:0b:1b:14:f8:f3:33:5b:5a:ab:0c:8b:e5:33:e4:64:12:47:
         52:9f:27:1e:30:db:25:6f:71:32:ce:af:d7:25:87:f7:d9:10:
         39:86:eb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----