Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/98A58630706439BCF78BD26A366BF9EF99C622F8.mft
File:                     98A58630706439BCF78BD26A366BF9EF99C622F8.mft (raw, json)
Hash identifier:          u1qawqesM7mGHcyVkx7LS8aHBBTHkAC4SOBHl7pYpsQ=
Subject key identifier:   8E:B5:2D:61:FD:2F:69:07:F8:9C:29:7D:C3:55:26:07:B2:FC:46:5D
Authority key identifier: 98:A5:86:30:70:64:39:BC:F7:8B:D2:6A:36:6B:F9:EF:99:C6:22:F8
Certificate issuer:       /CN=98A58630706439BCF78BD26A366BF9EF99C622F8
Certificate serial:       0FB0959B983195E9425325115C40DE054EF139EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98A58630706439BCF78BD26A366BF9EF99C622F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/98A58630706439BCF78BD26A366BF9EF99C622F8.mft
Manifest number:          1A
Signing time:             Sat 21 Oct 2023 23:50:53 +0000
Manifest this update:     Sat 21 Oct 2023 23:45:53 +0000
Manifest next update:     Mon 23 Oct 2023 00:57:53 +0000
Files and hashes:         1: 323830343a353661303a3a2f33322d3333203d3e20323638303133.roa (hash: x0XtET12l+iVQCsu3fOEyU6u5m0IFAjGQU5aIOKfhvw=)
                          2: 98A58630706439BCF78BD26A366BF9EF99C622F8.crl (hash: fApTcw7DnFJIHYyE7CO8//H96Ga0ZyYmtU/+36kP16Q=)
                          3: 34352e3136372e3135322e302f32322d3234203d3e20323638303133.roa (hash: KzzVNSvjxxLUf5NbvQqsmYECRPqRV9Iqfy0syLsLLb0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:b0:95:9b:98:31:95:e9:42:53:25:11:5c:40:de:05:4e:f1:39:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98A58630706439BCF78BD26A366BF9EF99C622F8
        Validity
            Not Before: Oct 21 23:45:53 2023 GMT
            Not After : Oct 23 00:57:53 2023 GMT
        Subject: CN=8EB52D61FD2F6907F89C297DC3552607B2FC465D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:dd:0a:f7:86:1d:04:4f:34:c8:50:e6:e4:43:
                    b0:10:11:f2:55:b1:60:26:41:aa:f4:f9:7d:f7:65:
                    75:a0:20:b7:7f:88:88:2e:14:85:3c:5d:75:62:04:
                    be:47:2f:68:72:15:04:be:ba:50:27:ae:61:20:ba:
                    93:fc:af:d2:fb:58:56:f2:86:25:2e:89:64:56:03:
                    76:df:d3:29:fe:80:11:75:49:16:4a:1e:1c:20:76:
                    59:0a:3e:41:a4:e1:dd:98:22:af:cc:bc:b2:df:f4:
                    a6:b8:43:ea:88:e6:f7:67:aa:3d:ef:71:65:49:14:
                    d7:64:e1:f2:48:60:b6:6f:97:9c:d0:db:ce:e4:15:
                    dc:40:31:00:28:8d:d2:9b:49:76:a6:a5:d4:e2:c3:
                    dd:64:2c:78:5e:0c:c1:bb:56:93:d3:96:52:e6:b8:
                    bb:ec:4f:09:ff:9d:45:e1:5f:86:f3:08:bb:db:a1:
                    cf:a4:25:59:bd:5e:b1:52:c6:88:74:bf:e7:29:92:
                    45:50:93:b0:b6:ae:00:43:ec:1a:64:45:a9:fa:e4:
                    c1:af:cf:fe:2d:f0:63:e0:f1:16:95:9d:89:82:00:
                    c6:fa:3e:19:67:f5:ec:e2:97:b5:72:ac:0c:f8:d7:
                    f8:82:8f:ee:67:16:e0:91:9a:62:d5:ac:cc:82:d1:
                    a4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B5:2D:61:FD:2F:69:07:F8:9C:29:7D:C3:55:26:07:B2:FC:46:5D
            X509v3 Authority Key Identifier:
                keyid:98:A5:86:30:70:64:39:BC:F7:8B:D2:6A:36:6B:F9:EF:99:C6:22:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/98A58630706439BCF78BD26A366BF9EF99C622F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98A58630706439BCF78BD26A366BF9EF99C622F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/98A58630706439BCF78BD26A366BF9EF99C622F8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:db:ef:11:19:bc:72:33:e4:30:40:26:03:c9:7c:8f:3f:53:
         b5:57:ba:2d:76:bc:f0:df:0c:55:e4:1a:fe:9c:4a:fa:9d:27:
         08:8b:5c:f0:8c:2e:75:ee:6a:90:79:64:a7:a7:5e:72:b2:b5:
         3c:ce:f6:90:16:6a:ec:70:96:0b:7b:63:2f:1e:99:58:51:75:
         f2:05:d8:65:b4:f4:ca:6b:ca:ee:cb:42:43:db:c1:6c:59:fd:
         cb:14:45:be:37:4a:b2:04:5f:77:a6:25:fd:cd:98:63:fb:fd:
         b4:3c:67:df:7e:11:cf:61:7e:52:61:7c:95:c4:2b:dc:4f:51:
         54:1d:ba:92:d0:f1:aa:b1:a9:8e:65:64:06:bb:36:64:a0:61:
         fc:c4:83:e5:cb:f1:13:0b:24:b8:61:18:2a:e3:36:41:ac:c8:
         a2:09:72:71:33:b9:b1:49:d3:ac:a7:76:f0:77:18:a0:5b:2b:
         73:70:3d:e0:17:36:e8:27:a0:da:ab:06:d6:10:6b:12:0b:eb:
         41:15:67:86:af:c3:0d:70:9a:56:f0:2c:07:71:42:ec:9e:21:
         3d:5f:e9:91:79:16:1b:ae:0f:1d:d6:c3:8c:5b:51:5d:ca:1e:
         e8:11:a0:76:fa:e8:1f:96:50:73:00:20:bf:0c:89:f8:ef:d6:
         95:8a:c6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----