Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/0/AFA3BA1E41526FCAF71A02A06CE46CD901C069C6.mft
File:                     AFA3BA1E41526FCAF71A02A06CE46CD901C069C6.mft (raw, json)
Hash identifier:          SMpTjGonwNGWbCQXdn0khbF2SqMv2n8kwDg7YlvMOpk=
Subject key identifier:   21:1D:8A:3F:45:CA:C5:EF:3A:3B:1D:0D:DE:14:88:D6:BB:9A:03:8A
Authority key identifier: AF:A3:BA:1E:41:52:6F:CA:F7:1A:02:A0:6C:E4:6C:D9:01:C0:69:C6
Certificate issuer:       /CN=AFA3BA1E41526FCAF71A02A06CE46CD901C069C6
Certificate serial:       2BA8BA68FDF327638BB2236B979018A64F2DAE99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFA3BA1E41526FCAF71A02A06CE46CD901C069C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/0/AFA3BA1E41526FCAF71A02A06CE46CD901C069C6.mft
Manifest number:          028F
Signing time:             Sun 14 Apr 2024 20:43:09 +0000
Manifest this update:     Sun 14 Apr 2024 20:38:09 +0000
Manifest next update:     Mon 15 Apr 2024 22:22:09 +0000
Files and hashes:         1: AFA3BA1E41526FCAF71A02A06CE46CD901C069C6.crl (hash: r1Y8ojEn7643y6VDU/2kw0O/VSFwUkWZvar7PzrhAlA=)
                          2: 34352e37312e38342e302f32322d3234203d3e20323637363032.roa (hash: DUvLAxvSESIY9FPJHAtDIQh2OMCbAsYfqUVXTFa8m2k=)
                          3: 323830343a343431383a3a2f33322d3334203d3e20323637363032.roa (hash: aCleQYm1sZLyTkqYnZUWrd1y8LG6ZpqLFJyuc/7NDwg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a8:ba:68:fd:f3:27:63:8b:b2:23:6b:97:90:18:a6:4f:2d:ae:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFA3BA1E41526FCAF71A02A06CE46CD901C069C6
        Validity
            Not Before: Apr 14 20:38:09 2024 GMT
            Not After : Apr 15 22:22:09 2024 GMT
        Subject: CN=211D8A3F45CAC5EF3A3B1D0DDE1488D6BB9A038A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b3:2e:8d:32:ec:dd:9c:65:b8:14:81:8d:38:
                    a9:f2:ee:cd:5c:ac:fe:39:a5:04:00:b9:2c:07:8b:
                    d4:d0:d4:dc:a5:29:f6:ad:1f:c9:88:39:d1:8f:6e:
                    85:45:83:a2:55:77:c9:cf:be:6e:f8:84:d1:98:76:
                    a0:02:de:e1:0a:38:1a:94:c2:7b:88:07:96:fe:eb:
                    0d:ee:16:ed:06:d8:3e:61:ff:f4:43:93:6e:55:bf:
                    c3:87:6a:31:7b:95:e8:fa:9c:df:01:c5:76:90:a4:
                    8d:4b:04:46:97:a4:ef:74:0e:bb:f1:1d:8d:42:e9:
                    6f:71:8c:75:7f:45:90:d2:59:ab:8f:cd:2e:d9:47:
                    8c:7f:e7:4a:97:13:3a:86:70:78:1b:87:06:91:69:
                    90:62:7d:c6:7a:a7:e4:d0:2d:d7:b8:55:36:e6:4e:
                    8b:e1:48:78:09:36:42:2a:e9:65:94:c7:66:75:c6:
                    42:46:2b:7b:6f:38:3c:a6:b6:ce:5a:f0:81:99:df:
                    94:9f:7b:ce:65:cc:0f:ed:8b:fa:c8:32:af:c2:4e:
                    d1:a0:c0:69:37:18:d8:11:7e:0c:e5:4f:6a:39:54:
                    70:2c:ea:5b:57:12:91:30:43:92:cf:5a:01:4b:f9:
                    6c:6b:8b:af:e7:d8:e0:10:fd:fa:b5:20:09:8a:00:
                    16:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:1D:8A:3F:45:CA:C5:EF:3A:3B:1D:0D:DE:14:88:D6:BB:9A:03:8A
            X509v3 Authority Key Identifier:
                keyid:AF:A3:BA:1E:41:52:6F:CA:F7:1A:02:A0:6C:E4:6C:D9:01:C0:69:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/0/AFA3BA1E41526FCAF71A02A06CE46CD901C069C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFA3BA1E41526FCAF71A02A06CE46CD901C069C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/0/AFA3BA1E41526FCAF71A02A06CE46CD901C069C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:10:28:3c:c0:e7:ca:06:65:db:21:0b:2c:53:e9:30:96:3d:
         8f:6e:05:9a:67:a0:3e:ce:f8:20:72:a9:67:9d:22:5e:21:08:
         05:b1:8c:99:91:c5:a6:a1:8b:a9:fe:01:dd:57:02:63:69:57:
         f4:da:b9:43:36:de:ad:9b:36:c7:62:d0:ed:e9:80:86:11:6d:
         ca:4e:ac:9d:79:cc:b5:11:39:cf:be:08:59:17:34:fb:55:f6:
         f4:fc:de:f1:cf:d2:9e:29:d5:1c:6a:fd:fb:ff:91:a9:27:a4:
         c7:f6:6f:f4:f2:4b:72:f1:e2:d8:fe:d3:d8:6e:8b:65:9c:13:
         b3:98:37:be:8d:79:2d:d4:50:6b:36:a8:f4:67:d5:e8:a6:c5:
         df:49:bb:27:0b:28:4b:2c:8c:fc:c1:57:5a:ed:5c:71:ed:a7:
         7c:a5:73:3f:ac:ba:ac:07:75:f2:0f:92:43:31:0b:10:dc:bd:
         ba:a1:c5:db:94:cd:e7:1e:72:17:a0:e1:eb:5e:b6:ae:c9:55:
         61:3f:f4:ff:88:27:1e:bc:38:83:96:87:9c:1b:54:e2:1c:c9:
         b3:9d:8d:42:55:3d:8e:dc:c4:c2:1d:d3:3c:bf:0c:ab:ed:3a:
         aa:54:54:9c:34:84:cc:a1:06:43:0b:26:a6:dc:5b:cc:87:11:
         5b:de:0f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----