Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/1/C80D67513C3A37B1DE16F810AF6DB78D6B8A35F8.mft
File:                     C80D67513C3A37B1DE16F810AF6DB78D6B8A35F8.mft (raw, json)
Hash identifier:          56530ogA4C82AjkJDmRBNUoT2n4PuYSyh9y0EtTtq74=
Subject key identifier:   8A:4A:29:08:DA:9A:94:26:A8:1E:47:6D:54:F4:DF:D8:89:55:58:DC
Authority key identifier: C8:0D:67:51:3C:3A:37:B1:DE:16:F8:10:AF:6D:B7:8D:6B:8A:35:F8
Certificate issuer:       /CN=C80D67513C3A37B1DE16F810AF6DB78D6B8A35F8
Certificate serial:       140433B5BC958888970EAB9B0A52E24BE2130E13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C80D67513C3A37B1DE16F810AF6DB78D6B8A35F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/1/C80D67513C3A37B1DE16F810AF6DB78D6B8A35F8.mft
Manifest number:          047B
Signing time:             Mon 15 Apr 2024 08:00:00 +0000
Manifest this update:     Mon 15 Apr 2024 07:55:00 +0000
Manifest next update:     Tue 16 Apr 2024 09:57:00 +0000
Files and hashes:         1: 34352e3233362e36362e302f32342d3234203d3e20323638323234.roa (hash: 3vXKkdvFxPJDVqyvWGt1dbIe8NDB/DLWBrqvtGH+NgM=)
                          2: 34352e3233362e36342e302f32322d3232203d3e20323638323234.roa (hash: bkplhz9+CI9Y+l+1h/KbIox8eth5hSykvLnB+DsEwUk=)
                          3: 34352e3233362e36352e302f32342d3234203d3e20323638323234.roa (hash: rtw7KkFVEeOXQCDVRrdPl5qvvaV45PbozYlv/cjARnA=)
                          4: 34352e3233362e36342e302f32342d3234203d3e20323638323234.roa (hash: V2WkHqFv3EU5P2PxTlf3S7YR5ONcWQjqXQmCfvuCoTg=)
                          5: 34352e3233362e36372e302f32342d3234203d3e20323638323234.roa (hash: lGVgaNe3f0KAaMY7ZmVS9oXAw6xJWdpRLtpxRiSXG0A=)
                          6: 323830343a346464633a3a2f33322d3332203d3e20323638323234.roa (hash: qv3F2fzldEw09z2gU/psVwcc66ogp6U3kFrEQKwTnqA=)
                          7: C80D67513C3A37B1DE16F810AF6DB78D6B8A35F8.crl (hash: 2lI5KU81tAScxCEkxqbxkzcKr3q2y+eeOtX89wwpnj0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:04:33:b5:bc:95:88:88:97:0e:ab:9b:0a:52:e2:4b:e2:13:0e:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C80D67513C3A37B1DE16F810AF6DB78D6B8A35F8
        Validity
            Not Before: Apr 15 07:55:00 2024 GMT
            Not After : Apr 16 09:57:00 2024 GMT
        Subject: CN=8A4A2908DA9A9426A81E476D54F4DFD8895558DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8c:02:e6:41:00:ab:5a:1a:6a:7e:95:92:50:
                    ed:bc:ed:4b:c0:ea:22:c4:c8:1a:b3:0e:d4:94:f9:
                    fa:52:14:18:a9:3d:37:a1:fb:af:46:22:30:6c:6c:
                    42:24:c8:0b:e7:a3:4c:64:77:d9:17:68:7b:09:5e:
                    49:38:d7:4c:15:45:3e:0c:f9:a3:6c:97:8b:3e:7e:
                    42:11:55:e1:d6:ae:bf:b3:2c:4c:6b:83:c6:cd:bd:
                    ac:2b:e3:d5:78:34:1a:52:21:cf:9c:d9:44:9c:5d:
                    2a:9d:e8:69:a9:5d:7f:e4:30:e2:6c:42:4c:eb:95:
                    d2:96:2b:6c:48:29:94:eb:f7:63:20:cd:e4:a1:9c:
                    d0:3c:ae:39:c2:8a:48:23:43:c6:42:d9:12:95:ed:
                    ba:65:f1:80:37:b0:1f:3e:de:30:8f:0b:f6:4a:38:
                    c3:2c:3e:65:53:9b:c3:31:37:70:e8:82:e6:db:28:
                    21:0c:7f:e2:62:eb:4d:c5:25:bb:e3:4f:cf:d9:08:
                    4f:67:db:0f:9b:de:5f:28:f0:09:86:2a:e6:36:c3:
                    63:5e:1e:e0:84:72:b5:b2:68:c2:f0:c6:04:cd:14:
                    0c:4d:15:e1:33:51:bd:e2:2f:50:51:94:cc:21:63:
                    17:7c:e6:c3:1a:62:16:47:73:94:97:82:e2:23:d4:
                    6a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:4A:29:08:DA:9A:94:26:A8:1E:47:6D:54:F4:DF:D8:89:55:58:DC
            X509v3 Authority Key Identifier:
                keyid:C8:0D:67:51:3C:3A:37:B1:DE:16:F8:10:AF:6D:B7:8D:6B:8A:35:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/1/C80D67513C3A37B1DE16F810AF6DB78D6B8A35F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C80D67513C3A37B1DE16F810AF6DB78D6B8A35F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/1/C80D67513C3A37B1DE16F810AF6DB78D6B8A35F8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:25:f5:74:f1:2b:b3:45:67:c9:b0:0b:77:d2:23:ce:4e:32:
         19:fa:b0:72:06:32:9c:d5:7a:be:f7:1c:c3:7f:8a:af:d4:29:
         4c:fa:39:f2:6a:74:25:ca:ef:0b:b8:52:b9:7d:e1:6c:13:dd:
         ea:af:bf:2d:76:01:cf:72:20:e4:3a:81:1b:13:dc:95:68:f3:
         3c:62:54:45:5e:14:4d:15:a9:cb:ec:ed:e4:3c:02:bb:61:d9:
         10:a9:8b:4b:80:ba:96:c6:50:42:cf:3e:85:e2:fe:67:c2:5d:
         bc:1c:9c:a6:16:dd:f6:28:9a:fb:69:9c:e6:9a:a2:0b:a3:ab:
         94:3a:3f:0e:52:35:6b:77:e3:ae:91:42:22:d9:96:76:c0:3d:
         7d:4a:2c:c7:ae:5d:b9:54:64:9e:24:8a:2b:dd:4d:0d:4f:47:
         d3:32:6e:5c:f9:d2:91:02:cd:44:94:d9:33:5d:1f:11:a8:1f:
         ca:db:17:ee:21:52:51:30:a8:6e:f9:8c:ac:4d:ed:8e:35:68:
         f1:55:fa:ee:fd:e3:ea:6b:98:bf:1f:0f:39:49:86:d8:ea:26:
         14:36:be:c6:05:45:99:fc:0b:4f:ba:3b:9d:51:69:dc:bf:39:
         aa:78:c7:a7:5c:98:af:84:3c:97:c3:d2:b3:08:04:b1:11:73:
         e8:a5:eb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----