Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/0/8F599B5DF56CD57359415BB8A38402E54100108B.mft
File:                     8F599B5DF56CD57359415BB8A38402E54100108B.mft (raw, json)
Hash identifier:          3TN+yxQnEqPV9wyauo/YN+BWYqhWMBY84zTUh2BoM7w=
Subject key identifier:   0E:E8:D3:71:51:0D:B0:40:2F:9A:DF:56:E9:8D:4C:B2:30:EA:AF:8C
Authority key identifier: 8F:59:9B:5D:F5:6C:D5:73:59:41:5B:B8:A3:84:02:E5:41:00:10:8B
Certificate issuer:       /CN=8F599B5DF56CD57359415BB8A38402E54100108B
Certificate serial:       08D141358C4A0B9EF3D86C3EE97DABB7947DC5B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F599B5DF56CD57359415BB8A38402E54100108B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/0/8F599B5DF56CD57359415BB8A38402E54100108B.mft
Manifest number:          034A
Signing time:             Thu 29 Jun 2023 19:17:14 +0000
Manifest this update:     Thu 29 Jun 2023 19:12:14 +0000
Manifest next update:     Fri 30 Jun 2023 21:06:14 +0000
Files and hashes:         1: 3136372e3235302e3136302e302f32322d3234203d3e20323635323037.roa (hash: YT14wJttBNrZOqXabfFrgAZ//VywECDgxTgf5vY6Vuw=)
                          2: 323830343a326334343a3a2f33322d3336203d3e20323635323037.roa (hash: QTnAqXmK03NEeVJstUBmpEGpKmRZSTvKAnGlX2m4JAQ=)
                          3: 8F599B5DF56CD57359415BB8A38402E54100108B.crl (hash: HumLsoNkJGT4+NhfUSHff5fhkeHZjRjauPDSz2s3+Rc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:d1:41:35:8c:4a:0b:9e:f3:d8:6c:3e:e9:7d:ab:b7:94:7d:c5:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F599B5DF56CD57359415BB8A38402E54100108B
        Validity
            Not Before: Jun 29 19:12:14 2023 GMT
            Not After : Jun 30 21:06:14 2023 GMT
        Subject: CN=0EE8D371510DB0402F9ADF56E98D4CB230EAAF8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:99:94:9f:8c:26:f8:b5:5f:17:58:3e:65:a8:
                    00:bc:9d:2c:79:ed:54:27:a5:89:89:d0:34:12:15:
                    88:ca:68:3b:42:b9:e3:58:fa:b1:50:36:b8:7a:1f:
                    c7:9a:33:d0:19:4e:ba:20:b3:cb:d2:8a:e8:9d:d9:
                    6a:67:8e:b5:95:bb:86:16:70:79:ac:87:42:3e:3a:
                    4c:44:91:f7:09:a9:30:f0:ec:2d:88:61:00:c6:5f:
                    48:1c:b5:5a:24:44:8e:54:e6:3f:d9:0f:5f:86:e3:
                    19:34:ae:1d:28:1b:81:32:16:2c:8a:b1:80:3a:60:
                    17:74:2a:b4:5a:4c:dc:f5:ef:75:a5:99:74:eb:4a:
                    d4:ec:59:97:03:26:f8:5b:f4:09:c3:4b:a1:96:62:
                    0c:26:e7:df:ee:22:0c:f9:eb:88:52:56:be:4c:29:
                    ce:d5:d2:bd:7d:77:f7:0e:a6:b6:32:2a:00:e7:a2:
                    b7:a9:ae:9d:94:81:74:b4:f4:3b:4e:f4:b3:b5:6d:
                    e7:38:0b:b9:bf:e8:34:e1:bd:b7:6b:a0:c0:82:bd:
                    78:18:a3:45:b7:a1:f2:50:cb:b5:b3:f8:ef:4c:09:
                    ab:bd:5d:22:b4:3b:89:c4:06:a3:3b:6c:16:29:20:
                    b0:51:c6:d5:b9:8c:b8:5d:9c:62:57:1c:57:69:b6:
                    13:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E8:D3:71:51:0D:B0:40:2F:9A:DF:56:E9:8D:4C:B2:30:EA:AF:8C
            X509v3 Authority Key Identifier:
                keyid:8F:59:9B:5D:F5:6C:D5:73:59:41:5B:B8:A3:84:02:E5:41:00:10:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/0/8F599B5DF56CD57359415BB8A38402E54100108B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F599B5DF56CD57359415BB8A38402E54100108B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/0/8F599B5DF56CD57359415BB8A38402E54100108B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:57:b8:8d:5f:a1:c1:bb:ea:48:73:3e:af:d0:f5:01:14:c9:
         49:a6:ed:13:91:f4:0c:05:48:41:16:6c:5b:5d:33:62:ff:d6:
         45:73:2d:17:e0:a5:75:82:45:ee:3d:76:51:de:de:36:af:42:
         97:27:21:b7:49:09:33:d2:29:16:b3:a1:17:5f:bd:89:44:17:
         0a:8a:f6:92:d8:72:4f:7f:50:e3:2a:08:54:06:5b:a2:eb:19:
         29:7d:9a:5c:ae:fc:ad:ec:fe:11:bb:c2:d3:62:7c:b4:cb:23:
         84:a6:7f:1d:67:bf:bb:a3:fc:82:2a:e3:d1:75:21:04:43:4a:
         de:54:fd:6d:3d:1b:cf:34:5e:bc:a8:fb:37:90:95:dd:ee:84:
         6e:f2:0a:67:f6:26:3b:16:62:fa:63:1a:23:e8:51:77:cd:b6:
         fe:c9:e6:9c:0b:70:0b:e9:61:76:5c:e3:a7:48:4c:25:72:64:
         6e:9f:5b:97:94:f1:2e:d4:d5:c2:ed:50:dd:86:1d:9b:eb:33:
         c6:7a:e0:3f:bb:9a:74:67:98:97:dc:7b:bf:e6:d4:f9:01:7b:
         33:2b:11:bf:b5:42:17:e4:8f:35:59:62:84:43:34:91:f9:5f:
         17:81:35:e6:dd:7b:fa:92:c2:50:11:92:ee:86:6d:c9:6f:c0:
         8e:a7:f2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----