Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G6axa42KkTusN5YZjbjmHMx6Pj1pG2bcmVXngcGgq9B6/0/87AAECBC3426D381256299C2D6E7F6FC62C8EDEC.mft
File:                     87AAECBC3426D381256299C2D6E7F6FC62C8EDEC.mft (raw, json)
Hash identifier:          cbfkgbsznCZOnEVfeddLjtSjqMPmJQDJDL6kjPV6oWA=
Subject key identifier:   4D:D3:B0:5F:13:45:1D:29:AF:9A:5E:8B:CA:33:60:E2:73:B9:F3:E7
Authority key identifier: 87:AA:EC:BC:34:26:D3:81:25:62:99:C2:D6:E7:F6:FC:62:C8:ED:EC
Certificate issuer:       /CN=87AAECBC3426D381256299C2D6E7F6FC62C8EDEC
Certificate serial:       5701F0E48B5EA1A29BBCFFA48934B79B408230B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87AAECBC3426D381256299C2D6E7F6FC62C8EDEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6axa42KkTusN5YZjbjmHMx6Pj1pG2bcmVXngcGgq9B6/0/87AAECBC3426D381256299C2D6E7F6FC62C8EDEC.mft
Manifest number:          55
Signing time:             Sun 26 Nov 2023 22:17:18 +0000
Manifest this update:     Sun 26 Nov 2023 22:12:18 +0000
Manifest next update:     Mon 27 Nov 2023 22:19:18 +0000
Files and hashes:         1: 323830343a373264633a3a2f33322d313238203d3e20323730383830.roa (hash: 5+YUZg3SEL/lL4k7snKj1swr3fPGj5UKmZfZOAWWtIU=)
                          2: 87AAECBC3426D381256299C2D6E7F6FC62C8EDEC.crl (hash: j7yri8uffQk4nwGWuoi38Uf/BXioHrEKQbKXk9pGxIA=)
                          3: 3133312e3136312e382e302f32322d3332203d3e20323730383830.roa (hash: bVtTLvLavx2f285yIlt3icUqRUTih3zq0z2+uv3A3Sc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:01:f0:e4:8b:5e:a1:a2:9b:bc:ff:a4:89:34:b7:9b:40:82:30:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87AAECBC3426D381256299C2D6E7F6FC62C8EDEC
        Validity
            Not Before: Nov 26 22:12:18 2023 GMT
            Not After : Nov 27 22:19:18 2023 GMT
        Subject: CN=4DD3B05F13451D29AF9A5E8BCA3360E273B9F3E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d9:fd:25:f9:69:1a:d0:6e:9f:1b:d6:75:93:
                    ca:60:54:1e:8b:69:f6:04:ac:c3:dc:38:45:30:0e:
                    da:78:ec:19:a6:ec:fc:9c:dc:2c:3f:9d:3a:3f:dd:
                    c3:46:28:a3:c1:93:1a:4f:a5:14:ef:2f:63:e6:5b:
                    3d:cf:77:d4:61:63:44:9d:5c:1b:b9:28:60:8b:57:
                    e3:55:e1:84:b9:fd:8a:bd:ed:b1:e6:32:ab:56:e5:
                    4f:28:5b:7c:2d:2a:83:2a:32:ab:2e:82:de:52:cf:
                    ca:b8:9b:bc:5a:e1:48:da:cf:7f:24:23:a8:a6:30:
                    ad:38:93:75:14:86:81:22:57:ce:4c:45:5d:b7:d2:
                    44:7d:e9:31:1a:83:89:24:d0:ca:39:aa:00:18:2e:
                    17:b9:f4:34:2c:dd:04:80:99:6c:fa:85:8e:01:71:
                    c5:b2:03:45:a4:0b:4f:37:80:42:b3:91:fa:0d:a4:
                    46:8c:e8:65:1c:57:b6:98:14:25:cd:17:bb:0c:d8:
                    76:0a:a5:99:ff:e7:62:83:42:4d:e8:68:68:e3:02:
                    79:c1:e6:37:61:1b:61:c7:7e:3a:03:dd:cf:46:52:
                    97:8d:90:37:06:4a:e9:eb:8f:94:09:3a:a5:66:65:
                    14:6b:c3:4c:d2:55:6c:89:df:a3:7f:ef:bb:36:68:
                    49:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D3:B0:5F:13:45:1D:29:AF:9A:5E:8B:CA:33:60:E2:73:B9:F3:E7
            X509v3 Authority Key Identifier:
                keyid:87:AA:EC:BC:34:26:D3:81:25:62:99:C2:D6:E7:F6:FC:62:C8:ED:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6axa42KkTusN5YZjbjmHMx6Pj1pG2bcmVXngcGgq9B6/0/87AAECBC3426D381256299C2D6E7F6FC62C8EDEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87AAECBC3426D381256299C2D6E7F6FC62C8EDEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6axa42KkTusN5YZjbjmHMx6Pj1pG2bcmVXngcGgq9B6/0/87AAECBC3426D381256299C2D6E7F6FC62C8EDEC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:ce:9d:21:9a:9a:76:73:a2:6e:9d:bc:b3:15:94:12:0b:ae:
         79:90:37:c8:6a:87:8e:30:3d:6d:ba:f5:8b:08:bb:61:ac:5a:
         c1:b9:19:8d:85:da:65:0e:86:14:9c:66:9a:28:9d:1e:d4:46:
         66:ea:e2:31:6a:f3:94:40:80:d4:44:8d:d7:28:ab:ce:42:8c:
         d3:95:59:e8:61:74:20:ce:1e:b2:8c:a9:ad:76:95:15:a7:01:
         30:3e:94:07:b3:9d:51:fb:99:f6:44:c1:31:d5:db:63:97:6f:
         37:88:65:85:a8:ed:b9:43:6d:a7:42:8d:16:22:35:62:ed:c2:
         1d:a4:97:06:80:02:c2:5d:76:54:c1:0b:f1:42:15:83:f0:5d:
         13:c7:5d:3d:3e:a0:6e:c7:1a:5a:37:cb:75:ba:c9:69:d0:ec:
         9a:ca:3a:03:51:c3:d7:8c:d9:1a:cc:a3:03:84:10:2f:ea:83:
         b6:a9:25:20:bf:c9:0d:7a:fd:87:6b:61:9c:f7:5d:16:cf:0c:
         0d:e6:26:11:a8:05:1c:70:35:8b:02:39:ae:2d:4d:17:e1:55:
         07:08:ef:ad:76:ad:37:fa:3b:ec:ca:0d:51:7a:2f:24:38:cb:
         f6:ed:d3:c1:93:b4:be:25:38:d2:b1:c1:07:07:10:1d:e9:86:
         99:54:0a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----