Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/0/00C8B927A4A14A57DD57E82A4BB38FDF88BFAFA6.mft
File:                     00C8B927A4A14A57DD57E82A4BB38FDF88BFAFA6.mft (raw, json)
Hash identifier:          cd9WKhQHz3529jbs/2EbHyQ9HzSRbNoJYHv17Y/2qeg=
Subject key identifier:   F7:C9:DE:53:47:D3:DA:97:2E:AF:0F:C2:55:55:44:67:0A:7D:82:E1
Authority key identifier: 00:C8:B9:27:A4:A1:4A:57:DD:57:E8:2A:4B:B3:8F:DF:88:BF:AF:A6
Certificate issuer:       /CN=00C8B927A4A14A57DD57E82A4BB38FDF88BFAFA6
Certificate serial:       43078C96A0EBC74B9F1F76113B25B439D7AA9557
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00C8B927A4A14A57DD57E82A4BB38FDF88BFAFA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/0/00C8B927A4A14A57DD57E82A4BB38FDF88BFAFA6.mft
Manifest number:          51
Signing time:             Mon 15 Apr 2024 10:04:29 +0000
Manifest this update:     Mon 15 Apr 2024 09:59:29 +0000
Manifest next update:     Tue 16 Apr 2024 12:22:29 +0000
Files and hashes:         1: 3133312e3139362e3133362e302f32322d3234203d3e20323635393239.roa (hash: ZpJeHzTgBnDX6KWrHLpw0O7wPGuviJdR6VYM5wQiMPE=)
                          2: 00C8B927A4A14A57DD57E82A4BB38FDF88BFAFA6.crl (hash: 2fBKE/3FUoaeuB5v/sPpT4Xd80zTfFCMXaOGSqwbZ1c=)
                          3: 323830343a343030383a3a2f33322d3438203d3e20323635393239.roa (hash: KUv1Gt3u3sDq+z/dVVz4mcPC0SeSNv2IDFYWwA1GTw4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:07:8c:96:a0:eb:c7:4b:9f:1f:76:11:3b:25:b4:39:d7:aa:95:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00C8B927A4A14A57DD57E82A4BB38FDF88BFAFA6
        Validity
            Not Before: Apr 15 09:59:29 2024 GMT
            Not After : Apr 16 12:22:29 2024 GMT
        Subject: CN=F7C9DE5347D3DA972EAF0FC2555544670A7D82E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5e:bd:85:17:99:73:f2:4d:58:89:50:ff:f5:
                    87:a0:2b:7e:a0:7c:f0:94:cd:a6:57:e1:95:b8:4c:
                    7a:74:81:e4:05:a9:f9:d1:79:16:e4:f0:58:6d:2f:
                    d2:d3:7f:87:22:79:9b:30:70:5b:fa:3b:51:d2:c7:
                    2f:a8:db:c9:e9:df:4d:48:6f:d3:31:1e:2a:ab:b4:
                    f3:12:24:e2:aa:b6:53:4a:0d:97:d6:ba:f2:6d:44:
                    8a:50:49:9e:b6:9e:b6:72:24:be:64:fc:3f:1f:bb:
                    83:e8:99:e9:cc:f7:c7:d8:f6:78:a2:67:f1:35:30:
                    7d:ab:cf:41:e7:5d:43:07:74:ad:fd:af:bb:bd:f7:
                    ba:9a:32:aa:19:ef:d8:29:c6:a4:1d:45:2f:48:a9:
                    ad:60:d4:98:55:26:d9:7f:c0:7b:1a:5c:2b:80:99:
                    e0:01:fa:06:14:11:4d:79:9e:52:5d:7b:71:08:33:
                    8c:9f:de:c8:89:49:89:c3:02:a7:10:01:55:3a:f8:
                    60:26:b8:a6:da:e1:f3:23:2d:e8:c6:2f:5b:bd:fb:
                    dc:d2:4f:a6:8b:90:ca:dc:0e:d4:88:75:61:c5:41:
                    46:5c:d3:0a:88:10:0a:17:98:22:46:77:a5:53:cc:
                    87:cd:d5:b4:a3:1b:07:c3:93:b1:93:67:45:f4:d2:
                    17:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:C9:DE:53:47:D3:DA:97:2E:AF:0F:C2:55:55:44:67:0A:7D:82:E1
            X509v3 Authority Key Identifier:
                keyid:00:C8:B9:27:A4:A1:4A:57:DD:57:E8:2A:4B:B3:8F:DF:88:BF:AF:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/0/00C8B927A4A14A57DD57E82A4BB38FDF88BFAFA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00C8B927A4A14A57DD57E82A4BB38FDF88BFAFA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/0/00C8B927A4A14A57DD57E82A4BB38FDF88BFAFA6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:29:75:69:b6:85:80:d2:27:07:35:05:e3:de:92:2f:06:de:
         e9:c6:89:b4:57:a3:6a:b1:ad:f5:80:c6:3f:03:10:0e:18:b0:
         3a:3b:ca:77:0a:18:ae:87:8a:ee:2f:07:85:ee:cf:e1:3b:1e:
         7b:01:f8:94:26:be:72:23:9c:89:62:a2:be:bc:30:20:ca:d9:
         98:33:f7:96:8b:18:ad:c6:de:66:63:4c:fe:51:f4:25:de:d3:
         f0:a3:b8:5f:70:6d:fc:b3:59:d9:1e:db:80:8e:dd:a7:1d:17:
         bb:44:79:32:4f:3b:fa:36:7a:cb:36:3d:bc:6f:21:f3:61:77:
         de:e2:89:c5:d8:44:44:1e:35:66:31:82:42:28:40:30:04:8a:
         1c:e4:c0:b4:5b:2b:55:a0:84:9b:a9:c3:9b:db:42:df:72:d2:
         a0:be:ac:66:fa:7a:df:8b:55:71:7b:9d:ee:cd:7b:26:52:7f:
         05:fa:aa:4b:32:fd:ec:2e:b2:4d:6b:69:56:5d:85:a8:e5:c5:
         86:99:23:7c:19:ad:f2:fd:82:7c:3d:50:d2:d1:59:2d:e7:2e:
         00:2a:a0:6a:0f:da:7a:44:27:a8:35:f8:8f:64:00:82:9b:6c:
         bd:9f:7c:91:b2:9d:0b:52:bf:3c:66:de:94:02:f0:85:54:39:
         9e:14:3b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----