Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GzSpzE7ZJ4cSPpLsaJTAEWsaHdjTZMnyNnG9CTttcxPH/0/D85040866220B9E2081CF8E30D0BE49F82B0C554.mft
File:                     D85040866220B9E2081CF8E30D0BE49F82B0C554.mft (raw, json)
Hash identifier:          Gze4ljMU47O9da33f8HUcTPwALod+l0ylOnHjQBEBsM=
Subject key identifier:   48:C7:85:82:AB:EE:45:7B:25:B8:A2:90:F4:AB:EE:0B:14:38:8C:A7
Authority key identifier: D8:50:40:86:62:20:B9:E2:08:1C:F8:E3:0D:0B:E4:9F:82:B0:C5:54
Certificate issuer:       /CN=D85040866220B9E2081CF8E30D0BE49F82B0C554
Certificate serial:       1873E26357F54D840A951ED74D1D5EF8C2043C8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85040866220B9E2081CF8E30D0BE49F82B0C554.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzSpzE7ZJ4cSPpLsaJTAEWsaHdjTZMnyNnG9CTttcxPH/0/D85040866220B9E2081CF8E30D0BE49F82B0C554.mft
Manifest number:          84
Signing time:             Thu 11 Jan 2024 16:20:02 +0000
Manifest this update:     Thu 11 Jan 2024 16:15:02 +0000
Manifest next update:     Fri 12 Jan 2024 17:07:02 +0000
Files and hashes:         1: D85040866220B9E2081CF8E30D0BE49F82B0C554.crl (hash: 7XYaR6cGOaXI33b3STSy02ymatsW26PtdA/w650ilAI=)
                          2: 323830343a353930343a3a2f33322d3332203d3e20323638313634.roa (hash: Uat0Cay1LI5rhOs12l2goRovaIQGCG4uY4UTV0vVqj8=)
                          3: 34352e3137302e3137322e302f32322d3332203d3e20323638313634.roa (hash: WuBAnH7hu7wqfh4FyDSpKviTV2XtwT61JPAPtS8E9NY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:73:e2:63:57:f5:4d:84:0a:95:1e:d7:4d:1d:5e:f8:c2:04:3c:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85040866220B9E2081CF8E30D0BE49F82B0C554
        Validity
            Not Before: Jan 11 16:15:02 2024 GMT
            Not After : Jan 12 17:07:02 2024 GMT
        Subject: CN=48C78582ABEE457B25B8A290F4ABEE0B14388CA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:54:01:c0:11:f5:8b:24:17:cf:ac:35:a4:35:
                    75:38:23:7e:4d:22:ca:9b:7d:8e:69:cb:eb:f8:08:
                    46:b8:43:13:e6:ca:33:5f:45:51:2d:24:f5:27:11:
                    2e:f3:10:82:3d:24:61:ec:9f:14:67:1e:ed:57:bc:
                    7b:19:23:c1:e0:49:51:23:01:5b:2a:05:ed:7f:41:
                    d7:51:3e:92:72:87:94:34:11:63:63:e0:d0:14:d6:
                    2f:24:ab:2a:7b:69:91:48:f6:a0:4c:43:4e:c4:28:
                    cf:a8:9b:c7:e3:f0:a9:44:5c:9e:ce:c9:55:74:9b:
                    4e:c6:18:9f:2e:69:3a:fc:f8:5f:74:d9:20:53:87:
                    52:ea:46:bc:6c:97:d5:10:44:97:41:b2:00:43:a7:
                    e5:41:39:00:46:4f:87:5d:23:75:c2:f3:23:1b:22:
                    bf:44:02:3e:04:23:73:c7:83:52:62:62:68:11:5e:
                    0d:b0:31:8b:43:56:2b:23:32:76:05:ad:96:11:76:
                    f8:50:18:36:ce:9d:c0:19:df:e3:6d:d0:bd:31:cf:
                    33:17:e5:cf:76:db:13:0a:7c:77:44:da:d6:c6:88:
                    ec:5b:dc:93:ea:a5:a3:03:51:a9:11:cf:3d:16:52:
                    10:c0:b3:2d:92:ff:4d:2d:69:19:3f:d9:02:81:f2:
                    24:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C7:85:82:AB:EE:45:7B:25:B8:A2:90:F4:AB:EE:0B:14:38:8C:A7
            X509v3 Authority Key Identifier:
                keyid:D8:50:40:86:62:20:B9:E2:08:1C:F8:E3:0D:0B:E4:9F:82:B0:C5:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzSpzE7ZJ4cSPpLsaJTAEWsaHdjTZMnyNnG9CTttcxPH/0/D85040866220B9E2081CF8E30D0BE49F82B0C554.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85040866220B9E2081CF8E30D0BE49F82B0C554.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzSpzE7ZJ4cSPpLsaJTAEWsaHdjTZMnyNnG9CTttcxPH/0/D85040866220B9E2081CF8E30D0BE49F82B0C554.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:69:01:b7:22:26:2c:76:e9:49:e7:74:8a:fd:2a:1b:5a:93:
         c6:8d:fa:a7:64:85:bd:de:ce:7e:8e:95:81:98:bf:ee:18:b9:
         f4:06:ab:45:c0:b6:2e:ff:e5:7b:05:18:4a:a7:8d:26:1b:e3:
         5d:14:e5:9c:9b:02:1f:a6:1d:3f:1e:10:6d:aa:7f:d0:79:8e:
         6b:ba:b8:90:c6:92:ff:65:a5:e5:ab:b4:bd:53:f4:18:77:d8:
         b3:18:c3:5b:a5:e0:c9:cc:b9:5c:5e:d9:46:fb:a7:f1:76:4b:
         8c:3b:19:7d:98:6c:a3:21:70:16:cd:22:88:1a:3d:7d:16:a3:
         ca:20:78:86:97:35:17:18:80:da:74:1b:8c:ae:c9:fa:62:08:
         d2:f2:59:56:87:cb:29:b9:5f:8e:88:ef:f7:3c:3c:70:a7:84:
         88:e5:0a:1b:83:ed:69:a7:13:f7:70:4b:25:55:ac:24:b8:4d:
         22:27:e6:06:bf:14:5e:e2:e6:e5:02:d4:92:97:2d:75:bf:60:
         d1:fb:7e:36:43:be:c1:76:24:b4:c1:48:0a:7c:5e:9c:b5:9e:
         fe:95:33:c7:bf:0d:1e:8b:1b:cb:f6:09:19:96:46:ab:30:29:
         a1:50:eb:bf:f8:b5:5e:7c:06:f3:cf:3c:50:63:5e:18:65:d1:
         7e:29:cf:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----