Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/WjC2kN2a2kKoSjPCG2YFmwVmaXFEoVPfpEqoAWUnxit/0/08E333C06394592EBD88071C54EC6431E2CC2416.mft
File:                     08E333C06394592EBD88071C54EC6431E2CC2416.mft (raw, json)
Hash identifier:          pbC3cs1PjoXgNZJWKiVhxrqIa0HRWrhM1OVOeENtsuc=
Subject key identifier:   E2:40:82:61:C4:95:EB:13:07:9B:1A:14:F9:21:4C:B5:76:C9:4D:32
Authority key identifier: 08:E3:33:C0:63:94:59:2E:BD:88:07:1C:54:EC:64:31:E2:CC:24:16
Certificate issuer:       /CN=08E333C06394592EBD88071C54EC6431E2CC2416
Certificate serial:       7189696471AC0722F93C7918E26F95329DE19C77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08E333C06394592EBD88071C54EC6431E2CC2416.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WjC2kN2a2kKoSjPCG2YFmwVmaXFEoVPfpEqoAWUnxit/0/08E333C06394592EBD88071C54EC6431E2CC2416.mft
Manifest number:          0216
Signing time:             Mon 17 Jul 2023 17:39:05 +0000
Manifest this update:     Mon 17 Jul 2023 17:34:05 +0000
Manifest next update:     Tue 18 Jul 2023 20:04:05 +0000
Files and hashes:         1: 323830343a333064383a3a2f33322d3334203d3e20323634393736.roa (hash: Tnp5UrqllYWYpp8l2c1XDVj0jm5EA5WtlhxrQVblJK0=)
                          2: 08E333C06394592EBD88071C54EC6431E2CC2416.crl (hash: vWuZUFdNQ8cFdl0ESXTc3QXujIlKmQLGSLOTyAV/RSU=)
                          3: 3137302e302e37322e302f32322d3234203d3e20323634393736.roa (hash: 77nitan1ki4Hm9TMTcbn4F5CzMLr1+6C7r5mYp6onvI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:89:69:64:71:ac:07:22:f9:3c:79:18:e2:6f:95:32:9d:e1:9c:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08E333C06394592EBD88071C54EC6431E2CC2416
        Validity
            Not Before: Jul 17 17:34:05 2023 GMT
            Not After : Jul 18 20:04:05 2023 GMT
        Subject: CN=E2408261C495EB13079B1A14F9214CB576C94D32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6a:f5:38:84:37:2a:81:cd:b4:e0:d9:42:88:
                    58:0b:a5:9a:43:02:c9:da:f5:a0:d0:5e:a1:48:7e:
                    a2:2c:94:6d:cf:ed:54:43:b1:68:d2:d0:b6:e7:33:
                    83:67:89:f6:c0:44:ef:33:c5:34:0f:51:b0:6a:8c:
                    2e:ba:2a:0f:2a:cd:da:fa:8b:67:6b:09:17:bb:b7:
                    40:a4:c4:d0:55:fd:51:c6:41:5b:ce:a2:30:10:31:
                    c2:7d:d8:8f:73:fc:d7:61:e5:c2:bc:15:9c:8c:44:
                    eb:af:f6:7a:1c:4b:db:29:28:0a:6f:a2:c4:6f:1a:
                    0b:8b:1f:4a:97:a9:c3:96:ae:c4:5b:b1:7a:0f:3b:
                    a4:34:78:4f:e2:c3:7c:97:54:fa:03:5e:be:25:f4:
                    6c:5a:ee:24:c0:4e:31:52:85:a4:f4:39:39:9c:3e:
                    54:e6:1a:ae:ae:18:25:e1:46:e0:20:ec:5a:48:86:
                    e5:7c:18:a9:f7:7d:0e:69:72:03:e4:61:9a:b7:e8:
                    8b:21:16:b4:1a:eb:fa:ac:75:a4:a4:5e:97:2a:31:
                    ec:e5:08:a5:84:1f:f7:b8:f8:f5:de:03:70:22:79:
                    c8:70:8b:6f:4d:e4:0b:cc:77:0b:c7:e5:a4:8e:a8:
                    44:04:62:90:a0:eb:52:0d:01:6c:2c:5f:90:50:82:
                    9c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:40:82:61:C4:95:EB:13:07:9B:1A:14:F9:21:4C:B5:76:C9:4D:32
            X509v3 Authority Key Identifier:
                keyid:08:E3:33:C0:63:94:59:2E:BD:88:07:1C:54:EC:64:31:E2:CC:24:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WjC2kN2a2kKoSjPCG2YFmwVmaXFEoVPfpEqoAWUnxit/0/08E333C06394592EBD88071C54EC6431E2CC2416.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08E333C06394592EBD88071C54EC6431E2CC2416.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WjC2kN2a2kKoSjPCG2YFmwVmaXFEoVPfpEqoAWUnxit/0/08E333C06394592EBD88071C54EC6431E2CC2416.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:a6:d2:2e:77:4e:3e:64:cd:9a:14:27:94:cd:72:f4:2c:72:
         8b:ea:a0:58:e8:14:c2:97:1e:c6:e5:a3:b9:b2:3c:04:46:cf:
         fb:27:3d:ba:e8:0d:ab:5c:97:b8:59:7c:b3:c7:59:9d:35:91:
         69:70:bf:00:01:07:c9:ce:07:51:6c:45:d5:f1:08:fc:5e:b8:
         1d:ab:cf:b7:ae:03:fa:4d:eb:b9:66:d8:25:4a:bf:d1:fe:db:
         df:16:4c:9c:aa:4c:db:2b:b2:6f:18:26:d1:f1:7f:90:8b:47:
         38:e6:6a:93:d1:aa:4e:ac:35:8f:3c:59:73:83:26:25:12:8c:
         88:3f:d4:ef:6e:b6:fc:3c:b7:27:c9:91:6a:36:d5:56:5c:29:
         68:32:6d:50:b0:60:72:d7:61:c6:08:2e:15:b1:c6:a9:1c:22:
         3e:de:6e:26:8a:8a:d0:c8:a8:1d:f9:62:80:f8:74:35:b7:92:
         45:f4:94:d2:65:5d:9e:33:de:b4:56:ad:8f:41:72:44:b0:3a:
         1e:12:fb:ff:18:df:d2:65:bb:29:18:a4:ae:c1:dd:4f:b8:ad:
         b6:e3:93:73:22:30:1a:90:dc:3d:59:a3:a1:1a:1b:6a:32:4f:
         78:c4:73:06:bd:03:14:1d:47:35:3f:dd:02:26:95:a2:d8:ac:
         78:24:0a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----