Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G5UQmy3coVdJzPh76Dycrge795AX3uHDkzs8sf8eqVT8/0/8CC8EEDF647688755546B81ACA852ADF8C4AA95E.mft
File:                     8CC8EEDF647688755546B81ACA852ADF8C4AA95E.mft (raw, json)
Hash identifier:          B6q3pjEyEz7TkTQlU5Jy1yxhgpEDwl9FJD7HzpUuZnc=
Subject key identifier:   20:BC:8B:F7:FF:35:D4:85:AC:92:AE:D5:05:06:9E:27:A0:72:9F:7E
Authority key identifier: 8C:C8:EE:DF:64:76:88:75:55:46:B8:1A:CA:85:2A:DF:8C:4A:A9:5E
Certificate issuer:       /CN=8CC8EEDF647688755546B81ACA852ADF8C4AA95E
Certificate serial:       615E66F187CC8833457671B884F9F93DE414148E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CC8EEDF647688755546B81ACA852ADF8C4AA95E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G5UQmy3coVdJzPh76Dycrge795AX3uHDkzs8sf8eqVT8/0/8CC8EEDF647688755546B81ACA852ADF8C4AA95E.mft
Manifest number:          02D6
Signing time:             Sun 10 Mar 2024 00:17:22 +0000
Manifest this update:     Sun 10 Mar 2024 00:12:22 +0000
Manifest next update:     Mon 11 Mar 2024 01:39:22 +0000
Files and hashes:         1: 323830343a3637303a3a2f33322d3335203d3e20323632363635.roa (hash: 94PLeJBtW+ObfsYLXw93jdKvQvMe2Pta9oauwFUmJJ0=)
                          2: 3138372e36332e38302e302f32302d3234203d3e20323632363635.roa (hash: IU+6yXSa/Ms9ruPd+kNs3HcalWCBEEbvuE0tcmCTOF8=)
                          3: 8CC8EEDF647688755546B81ACA852ADF8C4AA95E.crl (hash: gWEQbsKKpt6KXUyi8caIUx56hJ6Gu7Efp6vmwJZ6njY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:5e:66:f1:87:cc:88:33:45:76:71:b8:84:f9:f9:3d:e4:14:14:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CC8EEDF647688755546B81ACA852ADF8C4AA95E
        Validity
            Not Before: Mar 10 00:12:22 2024 GMT
            Not After : Mar 11 01:39:22 2024 GMT
        Subject: CN=20BC8BF7FF35D485AC92AED505069E27A0729F7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:da:72:bd:b4:3f:ce:06:84:b4:ae:8e:5f:a4:
                    db:f6:16:53:b9:db:39:70:74:ec:cd:53:10:bf:6c:
                    4c:28:c4:ca:d2:2c:cc:69:4e:ce:48:9e:04:20:97:
                    78:9f:34:df:2b:5c:35:f3:51:12:c0:b3:a0:55:eb:
                    14:d5:66:58:e3:d6:84:70:46:df:5d:ec:fc:ca:03:
                    ce:0b:e8:44:f1:cc:cc:33:1b:52:bf:55:0a:4e:8e:
                    b8:01:91:97:ce:f0:d6:4b:55:82:f1:00:fc:74:dd:
                    88:32:d0:57:01:10:f9:db:0e:3a:d2:a9:9c:19:e6:
                    7e:4a:1a:bb:7b:a7:b0:97:93:a6:23:3d:0b:f7:0c:
                    af:77:04:37:56:f9:f5:0f:88:d9:a1:8e:c7:00:cd:
                    ed:5f:a7:0f:f3:2d:57:af:56:34:d4:4b:0f:e1:eb:
                    fb:8f:e4:3f:49:a2:cd:d8:49:70:0b:3a:2c:c4:5a:
                    e5:c4:f3:26:ea:b4:1d:11:4b:43:4c:28:bc:8e:a2:
                    66:d0:a3:54:37:02:10:b5:1b:05:9c:d1:4e:f7:0a:
                    45:9e:a1:18:44:35:44:ee:45:83:15:42:a6:18:34:
                    8b:7d:9f:b6:44:86:05:d8:b8:34:19:c0:15:47:ec:
                    66:dc:3a:5b:89:c8:d5:4e:ad:3c:aa:86:35:48:45:
                    56:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:BC:8B:F7:FF:35:D4:85:AC:92:AE:D5:05:06:9E:27:A0:72:9F:7E
            X509v3 Authority Key Identifier:
                keyid:8C:C8:EE:DF:64:76:88:75:55:46:B8:1A:CA:85:2A:DF:8C:4A:A9:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G5UQmy3coVdJzPh76Dycrge795AX3uHDkzs8sf8eqVT8/0/8CC8EEDF647688755546B81ACA852ADF8C4AA95E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CC8EEDF647688755546B81ACA852ADF8C4AA95E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5UQmy3coVdJzPh76Dycrge795AX3uHDkzs8sf8eqVT8/0/8CC8EEDF647688755546B81ACA852ADF8C4AA95E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:04:2b:f2:a0:b8:71:71:a9:63:80:cb:26:77:5c:d4:8e:da:
         6b:38:cc:68:d0:81:f7:ef:5d:93:f5:60:7e:a6:42:b4:f8:7f:
         7a:9f:48:0c:69:7d:4e:c1:a6:15:ec:bb:d0:15:82:30:c2:dd:
         7d:ce:ad:bc:eb:3b:1f:9d:ff:b3:82:dc:a7:51:3a:fd:46:03:
         6e:99:bc:7e:c0:33:f6:bf:05:54:c0:f6:6c:1e:7d:9f:cc:83:
         06:64:57:65:6a:06:e9:56:3c:1d:67:1f:e9:0f:8b:8b:68:7d:
         31:bc:b6:92:0d:79:7c:c7:70:4e:8f:f3:73:26:80:84:46:88:
         57:a4:cd:46:7e:47:70:10:82:f9:8f:d3:80:84:e8:ad:e5:73:
         1a:ad:84:08:23:b0:e5:37:63:0f:1b:38:15:07:4a:99:c8:cf:
         f0:82:21:96:8f:d2:76:1a:67:83:a7:7d:87:ef:64:9d:0f:65:
         fd:e7:c4:47:80:f0:49:c3:4c:89:53:78:a8:91:79:5c:48:c7:
         2c:69:4b:22:1d:bf:c0:ca:e3:df:aa:43:0e:ce:f8:6b:b3:64:
         62:04:27:50:b1:83:b3:bc:e5:65:5e:ef:3d:28:c6:e9:60:3e:
         0c:3f:ba:6e:55:e6:ce:84:8d:fe:44:42:49:d0:cc:3b:c7:c2:
         e0:51:90:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----