Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/97389F2B9F86CECC561184F8858464370294B9B2.mft
File:                     97389F2B9F86CECC561184F8858464370294B9B2.mft (raw, json)
Hash identifier:          lq2JtrzwPnnxJby375gJdziaUlAM7WunSxfUbvY87Vw=
Subject key identifier:   EE:98:6D:F0:69:39:18:DD:C1:07:31:95:BA:F0:DC:CD:4C:43:0C:0E
Authority key identifier: 97:38:9F:2B:9F:86:CE:CC:56:11:84:F8:85:84:64:37:02:94:B9:B2
Certificate issuer:       /CN=97389F2B9F86CECC561184F8858464370294B9B2
Certificate serial:       50F0BD15F12667C9B1AE73AABE0479E90ECCCE83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97389F2B9F86CECC561184F8858464370294B9B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/97389F2B9F86CECC561184F8858464370294B9B2.mft
Manifest number:          E4
Signing time:             Mon 30 Oct 2023 23:06:01 +0000
Manifest this update:     Mon 30 Oct 2023 23:01:01 +0000
Manifest next update:     Wed 01 Nov 2023 00:07:01 +0000
Files and hashes:         1: 97389F2B9F86CECC561184F8858464370294B9B2.crl (hash: k33h9M8RawakUOaS+oJSC1OL8Z7uGe1PlqvG6u8RqP8=)
                          2: 323830343a336333633a383030303a3a2f33332d3333203d3e20323636313938.roa (hash: Ew3LlAOkJteSLeOPwy6kn5CCuNC4s8Hs9gyVg83Aap4=)
                          3: 323830343a336333633a3a2f33322d3332203d3e20323636313938.roa (hash: wBvqeHauM/xz2hLDknIg/YkfNnHmRVe3gmDV/n5J98g=)
                          4: 3136302e32302e3136382e302f32322d3234203d3e20323636313938.roa (hash: OlQTDD2jTcDYXtfK6NPBnZBtWoIBsOAlS3q6f52yTs4=)
                          5: 323830343a336333633a3a2f33332d3333203d3e20323636313938.roa (hash: GPb+yRk54sTrdzZiz7BYWP33FMvT6rPYTIme4bvnCjg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:f0:bd:15:f1:26:67:c9:b1:ae:73:aa:be:04:79:e9:0e:cc:ce:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97389F2B9F86CECC561184F8858464370294B9B2
        Validity
            Not Before: Oct 30 23:01:01 2023 GMT
            Not After : Nov  1 00:07:01 2023 GMT
        Subject: CN=EE986DF0693918DDC1073195BAF0DCCD4C430C0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:70:c0:8a:1d:fb:36:86:d5:41:c8:e2:d2:db:
                    b1:27:c4:50:dc:44:c9:5c:66:f4:e2:5f:7a:95:1d:
                    33:00:cd:ff:9c:13:90:9c:6c:dd:24:48:93:87:9d:
                    2d:1f:e4:1b:81:5e:e0:2d:80:3c:09:b0:32:c6:6b:
                    22:c6:a7:82:9d:04:fa:66:7f:4f:19:df:44:83:cb:
                    82:12:f4:97:33:da:53:89:7c:f9:3a:d2:bc:90:45:
                    34:7b:44:b5:d6:b1:e2:0a:40:7a:65:80:b4:d5:0a:
                    a0:fd:2f:16:b3:82:91:ad:cd:29:a1:1d:fd:58:f2:
                    cc:66:07:fc:cb:fe:0b:8d:37:f0:20:d2:f2:97:70:
                    d3:24:7f:16:a8:4a:f2:6e:fd:33:68:d6:05:31:b1:
                    57:e6:6c:a7:52:c4:dc:5f:84:d5:ff:35:ca:f5:f1:
                    ca:70:75:1f:39:7c:c9:34:7d:5b:f5:c4:81:d1:23:
                    51:00:39:6f:75:50:79:4e:90:ef:9d:e6:79:10:3d:
                    6b:26:96:bc:27:28:d0:d1:c8:8b:21:54:4d:a3:19:
                    41:24:19:ec:8b:a4:04:66:80:a4:f1:fd:9a:b9:5b:
                    35:71:b6:db:05:81:47:66:e4:b5:7c:c6:1b:f5:eb:
                    57:9b:e2:ec:bb:eb:65:ec:bf:a4:72:4d:a4:48:5c:
                    71:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:98:6D:F0:69:39:18:DD:C1:07:31:95:BA:F0:DC:CD:4C:43:0C:0E
            X509v3 Authority Key Identifier:
                keyid:97:38:9F:2B:9F:86:CE:CC:56:11:84:F8:85:84:64:37:02:94:B9:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/97389F2B9F86CECC561184F8858464370294B9B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97389F2B9F86CECC561184F8858464370294B9B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/97389F2B9F86CECC561184F8858464370294B9B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:af:61:93:2a:83:14:8e:92:b8:09:99:2f:19:b8:da:11:2a:
         ca:8b:44:18:d1:40:dd:f7:94:2c:08:e0:fc:60:6b:49:0c:f0:
         08:fc:2c:99:32:66:2d:71:cf:db:c1:a3:7d:90:44:7a:c3:11:
         94:53:0f:82:ea:03:cb:e0:1d:22:a7:53:db:3e:f1:a6:6e:47:
         08:a3:60:c1:16:7e:53:79:57:cd:a0:5a:21:89:d6:1e:32:da:
         0c:33:d0:7e:0d:bb:1b:22:a2:b7:8c:78:9a:d1:d4:ab:54:3e:
         67:2d:0c:d2:eb:51:2e:64:4f:c5:73:bd:ba:46:1e:fb:9e:c8:
         e6:09:fc:34:fb:5a:3c:ee:35:96:3e:fa:f5:6f:73:4e:99:9e:
         d8:23:7a:e4:21:7a:71:22:19:5d:71:43:26:7d:c1:f7:ce:05:
         f0:89:26:f1:57:cc:aa:5e:c3:aa:27:56:97:fc:5e:04:f3:fd:
         c4:a5:1a:f8:40:68:40:58:50:a2:4e:a8:72:8d:45:08:e3:fd:
         be:fa:a4:b5:2f:46:1c:6d:07:08:6d:e5:ff:78:0d:4e:f4:3e:
         cc:47:ee:88:82:0f:41:86:bf:cc:fb:2b:95:fb:32:fa:1a:ae:
         4b:b9:cb:64:11:af:74:92:95:35:4d:7c:c9:3c:ef:53:4d:f0:
         56:e0:7f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----