Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2.mft
File:                     8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2.mft (raw, json)
Hash identifier:          7uaWcHUG6VZiqz5oE52XVyZzvxmELBmRpB1An5yhr0U=
Subject key identifier:   33:FB:90:F9:62:9A:53:08:BD:41:56:33:C4:56:06:31:4B:0D:3D:73
Authority key identifier: 8F:BA:83:61:34:31:13:7A:FC:0E:EC:6F:AC:92:B6:DD:0A:F7:48:A2
Certificate issuer:       /CN=8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2
Certificate serial:       1F3CA92AB57BD11A1786575947E24E4C5BE0F127
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2.mft
Manifest number:          52
Signing time:             Tue 13 Jun 2023 23:09:34 +0000
Manifest this update:     Tue 13 Jun 2023 23:04:34 +0000
Manifest next update:     Thu 15 Jun 2023 02:27:34 +0000
Files and hashes:         1: 3133382e302e3131322e302f32322d3234203d3e20323634353434.roa (hash: iDpdGwzW9hFuS7WrsH3xHNQZT9FgBbfLO6PSP8QG/v0=)
                          2: 323830343a323133633a3a2f33322d3332203d3e20323634353434.roa (hash: qxGDIm2mFjD+/MquqDueOLn1SaFOKdi4FbowaYrYJxw=)
                          3: 8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2.crl (hash: hvdOGdDCYzOh4JB6PaUDy5x5gzh79lH96opy5KEkKiM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:3c:a9:2a:b5:7b:d1:1a:17:86:57:59:47:e2:4e:4c:5b:e0:f1:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2
        Validity
            Not Before: Jun 13 23:04:34 2023 GMT
            Not After : Jun 15 02:27:34 2023 GMT
        Subject: CN=33FB90F9629A5308BD415633C45606314B0D3D73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:48:51:e9:16:61:03:6d:74:7b:0f:c0:cc:8f:
                    5b:19:6e:60:73:fe:5f:35:16:32:24:25:27:ce:3f:
                    23:8f:56:59:8e:82:fd:f0:07:2c:b3:21:e4:64:29:
                    ac:3d:24:ba:99:99:0d:eb:45:f9:3a:48:7d:a2:af:
                    3e:e5:5e:ce:f6:3e:40:d5:49:fc:8f:83:47:72:5b:
                    3e:c3:ed:36:f4:74:a7:96:00:3b:10:f2:c5:81:ac:
                    64:95:9c:48:f2:a3:66:d5:e6:fe:3e:c3:f6:62:5e:
                    57:43:c6:a1:fb:32:ff:fa:0d:f0:44:54:58:11:33:
                    cc:e3:31:62:9d:38:b0:b0:10:56:73:2c:e6:33:40:
                    e8:c3:e0:13:94:35:dc:8e:b8:1e:51:b2:ee:61:b7:
                    51:12:16:c4:3f:ee:de:b5:b2:73:0a:b2:1b:8e:9f:
                    26:f1:8e:5d:b8:c9:37:d9:82:e7:0d:aa:4f:ba:2a:
                    db:c2:44:a2:b6:83:50:38:12:e9:3f:f7:98:d5:48:
                    9b:31:2f:26:0c:11:61:92:c5:5f:82:75:2c:55:26:
                    81:ff:2e:49:20:ce:35:63:79:14:b7:50:4a:52:1e:
                    3d:33:5f:55:a0:16:c6:62:e6:79:9a:93:24:e3:bc:
                    ce:91:2d:e8:50:26:11:50:b0:01:09:cc:0b:48:8f:
                    28:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:FB:90:F9:62:9A:53:08:BD:41:56:33:C4:56:06:31:4B:0D:3D:73
            X509v3 Authority Key Identifier:
                keyid:8F:BA:83:61:34:31:13:7A:FC:0E:EC:6F:AC:92:B6:DD:0A:F7:48:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:a7:13:0e:06:81:4c:cc:99:d3:3f:01:56:75:83:00:a2:ff:
         fa:9f:84:2d:3a:98:38:83:7f:db:83:1d:9b:5e:3f:d5:9e:26:
         2a:bd:ac:15:7f:d6:98:6d:20:05:4f:6e:c8:7f:a9:ec:9d:bf:
         aa:d4:4a:ef:80:c8:65:1c:68:49:a1:cb:f1:91:8a:2b:f5:1e:
         98:29:b6:ca:cb:b4:b8:1e:48:a5:23:98:e3:fb:3b:0d:45:03:
         c8:24:42:ce:5c:66:9b:e1:ad:3b:a0:4b:50:24:c9:90:ef:14:
         02:c0:a0:fd:9d:9e:0e:4c:16:84:48:be:ab:22:57:3c:6e:ed:
         32:69:b0:00:f2:86:36:4f:65:e3:48:cc:00:90:a8:e6:75:74:
         10:78:87:83:1d:0b:a5:a1:3d:b9:b3:ca:90:41:57:d1:8b:d3:
         4b:4e:a6:08:1d:b4:21:cf:a9:03:df:60:7c:bf:a4:2c:dd:d3:
         44:d1:3f:42:42:96:fb:e9:d5:75:f7:2d:62:4d:60:c3:86:78:
         eb:01:75:d0:5f:4f:4e:12:e5:2d:d9:c0:6f:f1:0f:89:63:b2:
         7a:5d:06:96:64:6b:5e:6a:e5:b7:b1:8c:ac:c6:b7:e2:27:52:
         f4:9a:b7:d6:ed:3f:3f:b2:dc:ab:16:f2:58:13:ef:2d:bd:d2:
         72:eb:92:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----