Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/gcL3UEnqEBK9dBCJy2gP1zWXgM6J7zcxivCjwSzp3cj/0/8C28A7AC0D89A401162A5E8AD448E9D7640B8C02.mft
File:                     8C28A7AC0D89A401162A5E8AD448E9D7640B8C02.mft (raw, json)
Hash identifier:          ontRPeq+DBirbwVkm6t9VyBcT80vrPsJeQvKgHuQ9mQ=
Subject key identifier:   3C:7F:26:02:AC:02:AB:F8:ED:7D:C8:DB:82:41:F7:21:E5:DF:8C:6F
Authority key identifier: 8C:28:A7:AC:0D:89:A4:01:16:2A:5E:8A:D4:48:E9:D7:64:0B:8C:02
Certificate issuer:       /CN=8C28A7AC0D89A401162A5E8AD448E9D7640B8C02
Certificate serial:       738BA7966CCA777B66411898C9E205CBF23A28F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C28A7AC0D89A401162A5E8AD448E9D7640B8C02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/gcL3UEnqEBK9dBCJy2gP1zWXgM6J7zcxivCjwSzp3cj/0/8C28A7AC0D89A401162A5E8AD448E9D7640B8C02.mft
Manifest number:          04
Signing time:             Sun 07 Jul 2024 09:47:36 +0000
Manifest this update:     Sun 07 Jul 2024 09:42:36 +0000
Manifest next update:     Mon 08 Jul 2024 13:39:36 +0000
Files and hashes:         1: 8C28A7AC0D89A401162A5E8AD448E9D7640B8C02.crl (hash: xvrHAhZzC34dts10AYw8fbEPoiL8tnRDdfMbqUmXS+0=)
                          2: 323830343a363130343a3a2f33322d313238203d3e20323639323036.roa (hash: aikBi8usy6u2aJsDbM1aFiJXnqct4Bo9TYOeoshgo48=)
                          3: 34352e3138312e3235322e302f32322d3234203d3e20323639323036.roa (hash: NThXnRNe+CShkmVhrExXWf1PqLM+yqzWgVAVvqrFjfU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:8b:a7:96:6c:ca:77:7b:66:41:18:98:c9:e2:05:cb:f2:3a:28:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C28A7AC0D89A401162A5E8AD448E9D7640B8C02
        Validity
            Not Before: Jul  7 09:42:36 2024 GMT
            Not After : Jul  8 13:39:36 2024 GMT
        Subject: CN=3C7F2602AC02ABF8ED7DC8DB8241F721E5DF8C6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ef:c7:0d:5b:e1:19:48:76:40:d1:b3:ce:e0:
                    ff:34:d8:7e:4b:dd:9e:0b:52:be:55:71:84:00:a1:
                    5d:3b:e6:5c:17:31:c4:d0:50:9f:7f:0b:ef:4e:cc:
                    2e:9b:5d:c6:cd:45:3f:2d:fa:3d:be:7f:09:17:ff:
                    ba:20:21:ff:7e:15:d5:c9:ae:3a:f9:3d:d8:3d:e8:
                    6c:f0:ed:67:ed:2f:34:3e:f7:19:a6:5b:b3:b8:78:
                    bf:bf:7f:0a:6d:84:64:98:66:39:88:8b:74:4a:48:
                    a4:ec:7b:44:98:ad:2a:3f:90:dc:7e:18:9e:ca:e1:
                    e0:78:b3:be:b8:e6:ec:96:0f:8b:ef:75:ea:90:23:
                    19:83:4b:24:5e:a7:f4:49:06:06:8b:cc:7f:80:fb:
                    7e:c7:f8:95:98:2e:fd:5c:b2:56:fa:67:e2:8c:f3:
                    0d:d4:e6:f3:ae:12:fa:2a:d7:1e:7e:7a:93:1b:54:
                    bd:dc:d5:55:d8:95:49:73:9b:45:77:6d:43:18:8b:
                    ed:32:bd:60:4f:d8:94:45:23:91:8b:ee:97:ad:f9:
                    98:20:cb:34:49:65:9c:e7:40:49:cb:c2:65:bb:47:
                    16:16:f1:91:f3:59:e0:33:c6:e1:ed:7d:c8:89:26:
                    d6:61:ac:fc:33:d8:cc:7c:bb:48:85:0a:9a:da:0f:
                    31:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:7F:26:02:AC:02:AB:F8:ED:7D:C8:DB:82:41:F7:21:E5:DF:8C:6F
            X509v3 Authority Key Identifier:
                keyid:8C:28:A7:AC:0D:89:A4:01:16:2A:5E:8A:D4:48:E9:D7:64:0B:8C:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/gcL3UEnqEBK9dBCJy2gP1zWXgM6J7zcxivCjwSzp3cj/0/8C28A7AC0D89A401162A5E8AD448E9D7640B8C02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C28A7AC0D89A401162A5E8AD448E9D7640B8C02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/gcL3UEnqEBK9dBCJy2gP1zWXgM6J7zcxivCjwSzp3cj/0/8C28A7AC0D89A401162A5E8AD448E9D7640B8C02.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:c6:78:58:d9:60:9c:15:d0:eb:35:49:18:d8:80:1f:30:93:
         75:22:36:34:3e:7a:38:d4:3a:51:ac:0a:be:c8:d1:fa:91:b8:
         53:7d:53:f3:18:3f:19:bc:c3:d0:ba:e1:9c:60:9c:17:15:62:
         fe:53:18:fb:0c:f3:75:4c:bc:6c:7c:ae:fd:fc:08:f6:d6:05:
         9b:7c:f4:cb:f0:ac:63:74:40:1f:a0:4f:0a:fe:84:e9:9e:75:
         cf:06:d7:06:83:c8:3e:e1:aa:29:93:b4:98:54:8d:76:d7:61:
         cc:8d:eb:c2:95:77:1e:d4:9d:70:ce:55:c6:64:41:bd:ee:7f:
         4e:61:b7:ca:76:91:91:77:19:91:c6:a5:44:62:49:5e:e5:c7:
         0a:24:68:c2:c5:8f:13:21:01:22:ef:3a:73:ad:7a:81:c0:85:
         9b:c9:e5:29:f4:fb:3b:8d:86:ea:09:a5:a7:75:7f:f6:d1:3a:
         67:ec:2c:8a:f7:08:69:67:11:d0:03:fb:e4:dd:80:c4:a4:8d:
         6d:6f:9e:cd:47:8d:02:fc:b0:81:fd:bd:f4:42:8f:00:92:95:
         ed:0a:91:c7:7b:60:30:78:fa:88:c2:97:b9:93:37:59:7c:a5:
         91:4f:d4:d3:43:05:2f:ea:26:18:af:8c:2c:7a:46:21:05:01:
         46:fc:fa:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----