Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/45C2B27EF40A0FDBE3D987DAEDA2ADDB47E3B237.mft
File:                     45C2B27EF40A0FDBE3D987DAEDA2ADDB47E3B237.mft (raw, json)
Hash identifier:          ouuzoD5ATzGVL3MWzdAUSj+RszATkDrJDJND1iD9fKc=
Subject key identifier:   E9:D1:B4:AD:6A:73:E7:93:69:8F:2E:0D:20:74:F3:26:A1:EB:A7:52
Authority key identifier: 45:C2:B2:7E:F4:0A:0F:DB:E3:D9:87:DA:ED:A2:AD:DB:47:E3:B2:37
Certificate issuer:       /CN=45C2B27EF40A0FDBE3D987DAEDA2ADDB47E3B237
Certificate serial:       011160E8C5D03D749B5A26541F1781DD78BD0B67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/45C2B27EF40A0FDBE3D987DAEDA2ADDB47E3B237.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/45C2B27EF40A0FDBE3D987DAEDA2ADDB47E3B237.mft
Manifest number:          02E8
Signing time:             Fri 25 Aug 2023 04:43:15 +0000
Manifest this update:     Fri 25 Aug 2023 04:38:15 +0000
Manifest next update:     Sat 26 Aug 2023 07:16:15 +0000
Files and hashes:         1: 3133382e3132312e3132302e302f32322d3234203d3e20323634323933.roa (hash: lFcn+NKMvTy88Ys8cZN2vYsWVGvuk0cuqEBnCw8jD5I=)
                          2: 45C2B27EF40A0FDBE3D987DAEDA2ADDB47E3B237.crl (hash: HuqVIy6hjgFeEeWcaIkooQVeu5TQ6pPsmnWc7ZhVshw=)
                          3: 323830343a323561383a3a2f33322d3334203d3e20323634323933.roa (hash: 3yu10p7Mexh3kOMHFtKpt44UPqiSRD9ICqX7QUtBHXs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:11:60:e8:c5:d0:3d:74:9b:5a:26:54:1f:17:81:dd:78:bd:0b:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45C2B27EF40A0FDBE3D987DAEDA2ADDB47E3B237
        Validity
            Not Before: Aug 25 04:38:15 2023 GMT
            Not After : Aug 26 07:16:15 2023 GMT
        Subject: CN=E9D1B4AD6A73E793698F2E0D2074F326A1EBA752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:40:4d:8f:e5:27:90:7a:0a:e8:88:e0:f1:c1:
                    dd:4e:6e:92:c2:24:1d:ea:a1:25:11:2e:8b:ca:ae:
                    a5:a3:d4:71:5e:4e:00:e5:f0:ef:b9:7b:d1:2e:8b:
                    32:97:6a:16:d8:e2:f2:18:b9:07:c3:68:43:31:65:
                    6a:c1:61:9b:43:9f:d8:dc:c7:30:bf:e1:08:bc:df:
                    31:db:9e:8a:56:b4:29:3c:46:db:1c:3b:73:ef:e3:
                    e1:65:f4:ca:1d:d5:df:6c:47:16:23:f3:3a:4b:ce:
                    25:b7:01:65:c5:ac:2d:09:24:c7:42:20:d6:93:dd:
                    a6:f4:9f:07:8b:21:4d:0a:6e:0f:7f:f5:93:88:e5:
                    9e:1f:4a:08:e4:6f:de:e4:73:ca:30:77:0a:7a:c2:
                    b4:71:11:52:50:03:e1:fe:22:2e:1f:a6:64:60:d6:
                    fe:74:03:91:2e:f1:05:5b:ba:06:b4:b3:e2:a9:d8:
                    d7:b1:7c:d4:f4:fd:ef:9f:33:b3:c7:db:c9:09:51:
                    0f:02:da:ea:93:29:51:7e:1d:c1:66:7f:ab:18:07:
                    09:22:4e:0c:10:c8:cb:8f:d0:9b:13:4d:72:c7:de:
                    8e:a1:2f:23:84:10:20:0b:ca:cf:28:3b:97:12:65:
                    be:91:e3:9a:18:89:52:2a:70:d5:a1:b9:8f:16:7a:
                    a2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D1:B4:AD:6A:73:E7:93:69:8F:2E:0D:20:74:F3:26:A1:EB:A7:52
            X509v3 Authority Key Identifier:
                keyid:45:C2:B2:7E:F4:0A:0F:DB:E3:D9:87:DA:ED:A2:AD:DB:47:E3:B2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/45C2B27EF40A0FDBE3D987DAEDA2ADDB47E3B237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/45C2B27EF40A0FDBE3D987DAEDA2ADDB47E3B237.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/45C2B27EF40A0FDBE3D987DAEDA2ADDB47E3B237.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:c6:09:b1:b5:d5:7e:61:87:af:c5:7a:f2:18:5c:1a:7e:bd:
         51:c4:7b:db:44:bc:e5:1e:66:91:05:50:b0:f1:44:08:d7:e4:
         ec:7f:68:c2:e8:b2:ef:18:36:ce:5a:70:5a:60:c1:a9:09:be:
         5f:d0:96:47:5b:0c:69:f1:73:fd:ab:64:64:8d:14:e8:94:e4:
         dc:85:4b:8f:82:82:62:75:49:65:17:ef:21:b4:24:39:ec:85:
         3d:ed:a4:a7:de:b0:33:a3:23:3e:48:50:f2:84:60:bd:2f:39:
         d4:d8:3e:15:05:79:42:bb:0f:65:45:7c:07:d2:55:c8:2d:c1:
         ef:ff:fd:ab:33:cf:8d:8b:dd:f2:c4:90:08:dd:c5:27:74:7d:
         f3:1a:2e:12:15:ad:b0:67:09:2e:34:06:86:5d:e6:3e:b6:ca:
         e8:86:67:36:03:89:82:2e:ff:13:0a:7a:d1:c9:14:f9:4f:93:
         ed:03:88:32:6b:16:ce:12:9e:35:be:37:48:2c:b0:5a:ce:b2:
         da:9d:c7:44:21:4b:40:7e:a2:bb:77:c9:0a:19:f6:97:a1:3b:
         b9:ba:fc:49:41:a2:42:34:c6:cc:72:b0:9b:76:ba:95:55:c7:
         3e:d1:dd:2e:30:88:92:4e:35:31:ca:fd:b6:0c:da:49:ea:f7:
         76:3e:22:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----