Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/1/86FCEC8208478C5716DD8705BD24D48C23A5374B.mft
File:                     86FCEC8208478C5716DD8705BD24D48C23A5374B.mft (raw, json)
Hash identifier:          rb4K0Gifmz6OjsD0IMd7lWOFLsvZSf47R1K/6TPcqXQ=
Subject key identifier:   43:89:10:FD:80:85:04:C9:6B:28:C3:E4:3B:53:F1:F1:EC:0D:72:2F
Authority key identifier: 86:FC:EC:82:08:47:8C:57:16:DD:87:05:BD:24:D4:8C:23:A5:37:4B
Certificate issuer:       /CN=86FCEC8208478C5716DD8705BD24D48C23A5374B
Certificate serial:       32EF93CFFEA428CE656CF44DFBFE58E620282410
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86FCEC8208478C5716DD8705BD24D48C23A5374B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/1/86FCEC8208478C5716DD8705BD24D48C23A5374B.mft
Manifest number:          AB
Signing time:             Mon 12 Aug 2024 14:49:47 +0000
Manifest this update:     Mon 12 Aug 2024 14:44:47 +0000
Manifest next update:     Tue 13 Aug 2024 17:20:47 +0000
Files and hashes:         1: 323830343a313131343a3a2f33322d3333203d3e20323632343836.roa (hash: qdOpr+B9kra9++qcgDDXYC8fPqI5l09AHNghF3CMSv8=)
                          2: 86FCEC8208478C5716DD8705BD24D48C23A5374B.crl (hash: V0msYK0byFzIGhXv+OBpQfueK5Ql/aBQoWXriH+4W4o=)
                          3: 3137372e36362e382e302f32312d3234203d3e20323632343836.roa (hash: JyP0KxPpOLHOkm5z0D274+xTr75jnwL1tkQ7ywwnY8k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ef:93:cf:fe:a4:28:ce:65:6c:f4:4d:fb:fe:58:e6:20:28:24:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86FCEC8208478C5716DD8705BD24D48C23A5374B
        Validity
            Not Before: Aug 12 14:44:47 2024 GMT
            Not After : Aug 13 17:20:47 2024 GMT
        Subject: CN=438910FD808504C96B28C3E43B53F1F1EC0D722F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:98:e8:22:6f:8b:a6:29:ac:c2:11:53:f3:fe:
                    24:16:a5:6b:06:89:a6:c6:9c:2a:e3:26:20:78:3e:
                    6c:1e:09:77:23:82:ed:3b:9b:2b:3b:ae:d6:71:fe:
                    7d:0a:f1:d3:66:d9:41:8b:43:fa:38:4b:9a:b2:24:
                    6e:e1:d0:f2:69:c6:7a:0a:61:e2:9b:bb:67:0a:73:
                    7f:59:5b:32:35:28:fe:a4:85:0d:5d:4f:f0:d9:15:
                    d8:e5:3e:41:05:11:9d:d3:c0:22:ae:97:49:6a:a3:
                    30:9a:06:f2:29:5e:f0:e2:82:22:6f:8b:79:bf:47:
                    da:7b:31:fc:51:65:01:98:61:f6:ea:57:dd:f2:70:
                    8c:5f:98:11:3e:9a:b0:ee:b4:54:06:3e:63:f1:42:
                    ff:a1:92:a7:68:93:65:77:9b:36:9a:d0:21:cd:92:
                    30:65:b7:5d:ec:24:e2:fe:40:ae:1f:0b:dc:97:95:
                    86:b9:8f:15:3e:2f:07:2a:db:8d:dd:82:37:d6:54:
                    a9:21:08:94:84:20:9d:20:ee:59:3d:fe:fc:f2:4f:
                    eb:eb:1a:0e:d4:04:13:65:e4:db:be:dc:1a:de:b3:
                    2c:15:ef:67:12:65:7e:f0:01:d6:01:c6:c4:58:74:
                    da:30:18:12:3e:ca:83:ac:97:9f:51:3c:71:2b:ff:
                    d1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:89:10:FD:80:85:04:C9:6B:28:C3:E4:3B:53:F1:F1:EC:0D:72:2F
            X509v3 Authority Key Identifier:
                keyid:86:FC:EC:82:08:47:8C:57:16:DD:87:05:BD:24:D4:8C:23:A5:37:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/1/86FCEC8208478C5716DD8705BD24D48C23A5374B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86FCEC8208478C5716DD8705BD24D48C23A5374B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/1/86FCEC8208478C5716DD8705BD24D48C23A5374B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:5f:fe:2e:5a:b3:a3:95:1b:cc:b1:97:b3:88:dd:b0:23:0b:
         9f:49:7d:9b:6c:e2:d4:ca:0e:1b:5d:95:25:5a:5c:20:7e:08:
         1f:98:b8:61:4a:be:f7:54:85:78:95:a5:a8:03:93:bc:5c:a0:
         ad:14:91:e1:82:cd:04:e8:e9:70:5d:d4:cf:d7:04:f0:a4:08:
         72:2e:32:15:33:08:4b:8e:44:68:1d:ad:62:38:9f:09:56:a3:
         7c:59:15:17:cf:3f:00:64:9d:cd:a4:96:fc:e1:a5:69:9c:12:
         95:3f:00:fd:5c:e3:e6:f2:4b:4c:36:4b:34:d6:1f:94:1b:ce:
         74:b0:77:e3:79:3a:c8:c7:aa:29:c0:54:d8:6e:8f:49:58:40:
         3c:eb:25:ef:a5:63:42:47:c3:c5:7e:91:bc:f3:1d:39:26:a1:
         62:13:0a:db:cb:b1:25:00:7f:0a:9f:f0:d7:5d:47:a6:c8:ce:
         66:a4:f7:4d:44:8b:d7:14:05:8a:a6:fd:e7:53:37:86:ba:ec:
         42:f7:2b:cd:89:5e:43:9e:bd:97:c6:76:a1:18:f3:0b:f4:73:
         93:df:d3:6c:d9:5a:13:9b:ed:0c:93:3d:4c:33:b7:4e:24:24:
         25:d1:ac:41:08:a1:4a:ce:ff:ad:6b:79:95:64:54:db:75:47:
         c6:78:0a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----