Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/D8CCA695A1D8D76A25DD9F31F5AA9109A55D9C44.mft
File:                     D8CCA695A1D8D76A25DD9F31F5AA9109A55D9C44.mft (raw, json)
Hash identifier:          cSed9+mHNuIoVY3MUZoxNurDjamC5KLZVlkrz3NbQjM=
Subject key identifier:   49:F0:64:3B:1A:66:CF:15:D2:7D:86:FA:8B:9F:28:AF:A8:27:5E:3E
Authority key identifier: D8:CC:A6:95:A1:D8:D7:6A:25:DD:9F:31:F5:AA:91:09:A5:5D:9C:44
Certificate issuer:       /CN=D8CCA695A1D8D76A25DD9F31F5AA9109A55D9C44
Certificate serial:       30A76159FEC77A3A173CA2FD23BFD119204221EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8CCA695A1D8D76A25DD9F31F5AA9109A55D9C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/D8CCA695A1D8D76A25DD9F31F5AA9109A55D9C44.mft
Manifest number:          13
Signing time:             Fri 19 Jan 2024 05:38:23 +0000
Manifest this update:     Fri 19 Jan 2024 05:33:23 +0000
Manifest next update:     Sat 20 Jan 2024 06:11:23 +0000
Files and hashes:         1: 323830343a353236633a3a2f33322d3438203d3e20323638353137.roa (hash: s4Wk8hvCjESHDkissab7Gz5/deog7HrQfwVwQvBDNH4=)
                          2: D8CCA695A1D8D76A25DD9F31F5AA9109A55D9C44.crl (hash: 5PpxhMzzAh2iE1bMull9xxQnZ1WXWxDk5FhFDv9GB0Y=)
                          3: 34352e3136322e39322e302f32322d3234203d3e20323638353137.roa (hash: UxReB6EJkmxJRCddiW9IPTUaao9Tz2DK5N1WB9aruHQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a7:61:59:fe:c7:7a:3a:17:3c:a2:fd:23:bf:d1:19:20:42:21:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8CCA695A1D8D76A25DD9F31F5AA9109A55D9C44
        Validity
            Not Before: Jan 19 05:33:23 2024 GMT
            Not After : Jan 20 06:11:23 2024 GMT
        Subject: CN=49F0643B1A66CF15D27D86FA8B9F28AFA8275E3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e8:dc:15:a8:4b:7b:fe:43:85:3b:c1:cb:93:
                    35:f4:f4:69:a2:97:77:99:fa:c3:ce:64:5d:ac:6c:
                    9b:9d:31:26:53:05:51:cb:48:a4:32:90:df:b5:b1:
                    8b:7b:73:5b:65:42:3e:a0:6b:e0:81:50:e2:c5:da:
                    3a:b5:cc:78:6e:e7:f5:52:8a:d9:55:c6:a2:51:8c:
                    0e:f3:35:16:3a:6d:19:09:c8:70:5d:f1:fc:35:8f:
                    df:1f:61:ea:5c:4c:f8:e4:8c:01:38:ca:e4:02:9f:
                    f8:b5:18:a5:af:62:08:42:11:7d:7b:91:77:b2:bb:
                    ee:d4:8c:c4:db:a3:5f:de:4b:67:7a:33:3b:b0:7b:
                    14:ad:95:21:03:1f:58:b6:af:e3:d4:12:fa:1a:29:
                    15:ef:2f:ad:af:ae:a5:0c:b3:42:64:bc:fb:a3:a0:
                    db:91:04:2a:f5:e7:66:c8:4b:a0:f7:03:ca:d8:09:
                    70:33:af:dd:6a:07:ce:45:5a:a6:1f:fb:77:aa:34:
                    27:39:d4:3b:c5:78:e0:66:6f:37:64:61:80:06:b9:
                    55:d3:70:09:1a:72:ad:79:18:5a:fb:9d:b1:1e:bd:
                    c9:de:24:d1:83:bd:4b:c2:cd:e3:7d:3e:f1:86:c1:
                    70:c3:6a:94:03:d3:03:48:64:bc:f3:85:71:6b:0c:
                    97:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F0:64:3B:1A:66:CF:15:D2:7D:86:FA:8B:9F:28:AF:A8:27:5E:3E
            X509v3 Authority Key Identifier:
                keyid:D8:CC:A6:95:A1:D8:D7:6A:25:DD:9F:31:F5:AA:91:09:A5:5D:9C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/D8CCA695A1D8D76A25DD9F31F5AA9109A55D9C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8CCA695A1D8D76A25DD9F31F5AA9109A55D9C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/D8CCA695A1D8D76A25DD9F31F5AA9109A55D9C44.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:8c:53:70:cd:ca:65:0c:8c:32:f8:72:37:8f:d6:0a:82:7b:
         fb:67:35:e5:b2:da:c4:6c:08:48:2c:0d:b8:3c:58:65:43:49:
         99:2d:78:42:72:2f:c0:5d:1e:f1:21:a8:ba:06:1c:e1:c2:8d:
         37:a5:f9:e6:af:1d:5c:a7:32:20:26:24:4c:db:66:17:0e:57:
         4e:b1:93:2b:29:34:e7:75:cb:59:60:9a:f1:84:e1:28:e4:58:
         2f:05:f1:e2:17:b7:de:ff:5d:d1:98:e1:33:6b:f9:3d:28:01:
         48:72:2c:8d:95:94:34:61:dc:89:df:de:16:34:c3:63:79:95:
         9e:5b:8d:48:ec:6c:88:94:43:15:2c:05:0b:df:c6:d4:45:78:
         b3:3c:25:18:3c:8d:99:cf:c4:ad:45:2d:2d:f2:00:3f:01:1a:
         f3:49:17:c8:f0:0b:39:9f:ef:53:c2:6c:88:48:b3:b5:0f:98:
         70:30:e4:c1:f7:66:aa:ed:32:e7:94:b3:81:d1:3a:d5:11:4f:
         21:20:63:dc:90:76:2b:64:3f:cf:3f:cf:93:da:79:13:be:e8:
         80:87:ec:22:38:20:20:41:e9:57:20:f4:7c:81:6e:d0:7c:8b:
         2d:28:ca:fd:e0:b4:9b:34:5f:c3:73:15:11:4c:13:95:26:91:
         25:e8:58:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----