Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/0/8BA7DE987F2B314E50E32EE2337CDC8CEC19406A.mft
File:                     8BA7DE987F2B314E50E32EE2337CDC8CEC19406A.mft (raw, json)
Hash identifier:          snSA+W+0NEmfQRvJaV3kgv04PopLsD8B32TF7k4Gat4=
Subject key identifier:   26:84:37:47:E4:31:66:24:8B:1E:92:55:B2:E4:BE:3F:5E:89:F7:E2
Authority key identifier: 8B:A7:DE:98:7F:2B:31:4E:50:E3:2E:E2:33:7C:DC:8C:EC:19:40:6A
Certificate issuer:       /CN=8BA7DE987F2B314E50E32EE2337CDC8CEC19406A
Certificate serial:       1988DE74738EDA4A20C82D43DDDF31A2E95AD5F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BA7DE987F2B314E50E32EE2337CDC8CEC19406A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/0/8BA7DE987F2B314E50E32EE2337CDC8CEC19406A.mft
Manifest number:          0121
Signing time:             Wed 15 Mar 2023 20:31:39 +0000
Manifest this update:     Wed 15 Mar 2023 20:26:39 +0000
Manifest next update:     Thu 16 Mar 2023 20:39:39 +0000
Files and hashes:         1: 8BA7DE987F2B314E50E32EE2337CDC8CEC19406A.crl (hash: 3NO3hRd2eF7GnoB+SBOlH7zOedIHpeudqag/u8NywgE=)
                          2: 323830343a376264303a3a2f33322d3333203d3e20323731343536.roa (hash: wut6fx6JytgxqJkzOLnk0oSSB5aIuVuB/FiZH1WNqvM=)
                          3: 3138312e3233332e3131322e302f32322d3234203d3e20323731343536.roa (hash: lJyI6BQlYmmRzD3hx1/Z7QSHBRpXmUhQZfZ++QfCDuI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:88:de:74:73:8e:da:4a:20:c8:2d:43:dd:df:31:a2:e9:5a:d5:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BA7DE987F2B314E50E32EE2337CDC8CEC19406A
        Validity
            Not Before: Mar 15 20:26:39 2023 GMT
            Not After : Mar 16 20:39:39 2023 GMT
        Subject: CN=26843747E43166248B1E9255B2E4BE3F5E89F7E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d2:d2:74:05:0a:4a:ad:eb:62:c3:39:68:4d:
                    74:ca:6f:8c:10:cd:91:2d:51:78:1b:b0:3e:3e:4b:
                    bf:e5:8c:50:22:05:07:9e:ab:9e:83:a0:20:73:31:
                    bf:0a:24:a9:8f:36:16:ce:fc:04:9c:4b:d5:ca:08:
                    96:f6:d4:dc:70:23:e0:28:2c:b5:16:28:8b:ed:45:
                    24:1b:ee:c6:2a:a1:87:85:64:09:0a:b0:e1:6d:fa:
                    e6:10:99:c7:30:f5:fb:40:ec:d4:1b:74:3f:83:50:
                    5d:bb:82:94:57:34:99:7f:94:2e:6b:e4:b8:15:2e:
                    91:fa:ee:f5:1e:0a:98:32:92:4a:d1:82:84:4e:f3:
                    03:53:81:53:73:d6:25:a5:33:a4:6d:43:93:66:0a:
                    49:ce:bc:08:fb:4c:a2:bf:f0:80:4c:ee:3f:27:f8:
                    d6:95:60:df:25:ca:ec:ca:5f:68:d7:4f:b3:de:bd:
                    f4:bf:b7:8e:ff:e1:f7:71:fa:88:18:7b:a1:91:3e:
                    78:14:f3:fb:d7:55:f2:9d:38:9d:61:10:cf:5b:ed:
                    ba:74:13:43:63:2b:51:a2:c3:c2:4c:d4:44:75:04:
                    06:26:36:dd:29:db:5e:af:63:39:d4:b5:f0:a9:64:
                    5b:e2:1a:d4:e4:c4:47:85:01:4f:e9:74:31:99:7e:
                    72:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:84:37:47:E4:31:66:24:8B:1E:92:55:B2:E4:BE:3F:5E:89:F7:E2
            X509v3 Authority Key Identifier:
                keyid:8B:A7:DE:98:7F:2B:31:4E:50:E3:2E:E2:33:7C:DC:8C:EC:19:40:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/0/8BA7DE987F2B314E50E32EE2337CDC8CEC19406A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BA7DE987F2B314E50E32EE2337CDC8CEC19406A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/0/8BA7DE987F2B314E50E32EE2337CDC8CEC19406A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:2c:9d:3b:f2:e6:ea:37:dc:06:c5:7f:3e:45:64:53:ad:89:
         bc:4c:d4:d1:c7:c9:92:e2:55:13:d6:c6:31:d2:9a:07:83:91:
         5f:1d:db:d8:61:2e:fe:17:92:3b:c3:d3:42:b2:ef:85:a1:65:
         0a:70:96:72:27:41:af:13:fc:e3:86:59:21:2d:9d:d4:21:0c:
         a0:fb:53:40:65:a2:00:d0:a8:27:9e:02:57:45:95:35:43:8b:
         25:d2:07:dd:42:5a:9e:35:36:d4:fb:fb:2d:73:2c:20:2f:0d:
         b9:57:74:2f:a8:13:cc:35:67:56:d4:73:21:2f:34:aa:4d:47:
         ea:db:28:34:16:f2:c8:cb:bf:ca:31:64:76:18:17:7c:3a:a3:
         43:6a:d6:d3:e2:bf:de:84:1b:d3:2d:03:27:bb:f3:f4:18:4b:
         2f:c5:d7:d8:21:fd:ef:1d:5f:23:78:a4:47:c8:20:ed:41:f4:
         b3:92:f2:6c:ec:43:fb:a0:5d:4f:79:fb:8e:14:53:5b:cf:cc:
         fb:63:f5:1e:a3:20:fb:64:87:74:88:a3:b9:d7:42:45:20:11:
         65:e2:3c:d9:d0:af:d8:01:96:30:ac:bc:87:dd:f0:84:d9:46:
         06:cf:fa:0d:bf:12:8b:10:c8:01:81:64:4d:34:25:43:f5:60:
         a0:f3:fb:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----