Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FCmtN4pMGoa4k5AgQRiJPzj47DGKJdUxjDi5uy7tY7qk/0/A2BFC87697B75BE13FD7BBFD27F9C7E83ED4101E.mft
File:                     A2BFC87697B75BE13FD7BBFD27F9C7E83ED4101E.mft (raw, json)
Hash identifier:          dFK5Qyt7B/tR9WJHfN9YiJ8irBCUzp5APdvmbRndXaE=
Subject key identifier:   ED:D4:9F:C7:A4:FC:46:E0:EF:65:69:59:34:38:B9:B0:F6:EB:33:04
Authority key identifier: A2:BF:C8:76:97:B7:5B:E1:3F:D7:BB:FD:27:F9:C7:E8:3E:D4:10:1E
Certificate issuer:       /CN=A2BFC87697B75BE13FD7BBFD27F9C7E83ED4101E
Certificate serial:       28F6CA636BF08E5839A0E918F88A2B2BD8943CF8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2BFC87697B75BE13FD7BBFD27F9C7E83ED4101E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FCmtN4pMGoa4k5AgQRiJPzj47DGKJdUxjDi5uy7tY7qk/0/A2BFC87697B75BE13FD7BBFD27F9C7E83ED4101E.mft
Manifest number:          11
Signing time:             Wed 21 Aug 2024 16:26:47 +0000
Manifest this update:     Wed 21 Aug 2024 16:21:47 +0000
Manifest next update:     Thu 22 Aug 2024 20:00:47 +0000
Files and hashes:         1: 323830343a343731633a3a2f33322d3332203d3e20323637303332.roa (hash: q/uU5ejA5OZ2PHh3tdoFuTJxw3Q8/4bsHY+DMCY+pGY=)
                          2: 34352e3232362e31322e302f32322d3234203d3e20323637303332.roa (hash: yfrRiOlpd2vfT7YvTDGRlgCWKMyxDCQBoRDqaMqlJog=)
                          3: A2BFC87697B75BE13FD7BBFD27F9C7E83ED4101E.crl (hash: vvRYu//cb/hNHu+LZ7b0r1FAY/TCCa8hmJaz/UPdVgo=)
                          4: 323830343a343731633a383030303a3a2f33332d3333203d3e20323637303332.roa (hash: G4zchT7FzJgOXl7I/51MjR0smNEq6KBjX83aZG5Kmvs=)
                          5: 323830343a343731633a3a2f33332d3333203d3e20323637303332.roa (hash: f10Aav/teu4a/AmFuuo7zw8dH2M7pWJDu4mHI1t86/E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:f6:ca:63:6b:f0:8e:58:39:a0:e9:18:f8:8a:2b:2b:d8:94:3c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2BFC87697B75BE13FD7BBFD27F9C7E83ED4101E
        Validity
            Not Before: Aug 21 16:21:47 2024 GMT
            Not After : Aug 22 20:00:47 2024 GMT
        Subject: CN=EDD49FC7A4FC46E0EF6569593438B9B0F6EB3304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a3:1d:db:11:33:04:fa:e1:6a:9d:41:74:5b:
                    ce:37:5b:b0:8d:52:5c:c0:af:50:89:b5:85:4e:c8:
                    c9:2e:bb:75:20:03:10:2f:7c:63:58:2e:a3:e2:27:
                    44:71:42:a1:91:37:da:98:c5:a9:14:fa:49:3f:36:
                    1d:22:be:d1:58:7f:c5:07:39:27:32:13:60:6f:3c:
                    43:70:03:3f:b0:9b:3c:e5:43:06:40:8a:ea:ec:a9:
                    8f:11:30:e1:20:b0:5a:83:48:17:1c:65:fc:b8:3c:
                    80:c3:1a:1e:ff:57:72:e0:83:7d:f4:be:37:b0:fa:
                    ad:11:b7:0f:9b:53:52:be:bc:3c:8d:f5:be:12:e6:
                    c0:19:37:2d:25:9b:fa:f0:fc:07:0a:30:ac:1a:b6:
                    49:53:09:f1:ad:f4:af:56:e2:f4:86:33:4c:66:9f:
                    38:b0:28:f3:ee:b7:ec:8b:d0:24:5f:6a:6e:3a:75:
                    b9:9f:4e:dd:8c:2e:b2:20:45:f4:9b:0f:0b:04:3a:
                    74:8e:a8:10:09:93:1f:89:61:21:5c:49:f0:7c:6b:
                    7b:84:e4:14:37:2a:75:55:06:91:60:f5:43:0b:f4:
                    61:40:b5:1b:e9:49:8d:76:be:d7:63:7f:14:9f:f7:
                    ca:3b:7a:8f:b7:20:3a:f5:26:0e:cc:7c:25:96:84:
                    a7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D4:9F:C7:A4:FC:46:E0:EF:65:69:59:34:38:B9:B0:F6:EB:33:04
            X509v3 Authority Key Identifier:
                keyid:A2:BF:C8:76:97:B7:5B:E1:3F:D7:BB:FD:27:F9:C7:E8:3E:D4:10:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FCmtN4pMGoa4k5AgQRiJPzj47DGKJdUxjDi5uy7tY7qk/0/A2BFC87697B75BE13FD7BBFD27F9C7E83ED4101E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2BFC87697B75BE13FD7BBFD27F9C7E83ED4101E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FCmtN4pMGoa4k5AgQRiJPzj47DGKJdUxjDi5uy7tY7qk/0/A2BFC87697B75BE13FD7BBFD27F9C7E83ED4101E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:df:b6:36:b0:3d:8e:94:e4:6d:a9:9d:59:dc:8b:20:bd:93:
         17:7e:ac:64:1b:a4:75:28:35:73:f9:9a:49:0b:23:5c:df:10:
         78:41:08:69:b3:22:e6:fa:aa:68:5e:7b:1a:84:20:e4:41:c9:
         50:15:6d:b9:cf:30:a3:74:fd:e2:a5:57:54:36:2d:70:92:42:
         01:ea:4d:06:8b:26:88:9f:3e:18:16:6f:30:94:ae:c4:05:cb:
         f6:ce:2b:31:7a:f9:06:6f:ed:78:d5:53:15:47:6d:6f:56:c9:
         ef:97:6c:5c:32:58:1c:19:18:88:c2:9b:92:65:90:5d:41:20:
         c1:6e:00:ae:dd:81:e1:be:2e:1a:ba:05:4e:03:df:20:de:84:
         1c:96:d4:9b:cc:5a:f0:a1:dc:e1:89:6a:cf:77:45:31:ed:c6:
         30:75:a4:02:01:6c:20:f4:d6:17:55:8a:04:c3:e8:e7:86:6d:
         35:4e:25:98:80:f7:3f:d4:71:af:c3:6a:ed:e2:68:9c:be:3d:
         39:80:7c:34:c6:06:68:6a:6d:49:6c:6f:78:76:16:8b:71:c5:
         cf:9b:be:0f:89:c1:ef:ea:11:12:71:f2:10:49:c9:d6:1e:39:
         69:f1:b4:4d:32:02:cf:74:93:51:ad:cf:33:a8:69:01:4a:59:
         46:75:0e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----