Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/D8CCA695A1D8D76A25DD9F31F5AA9109A55D9C44.mft
File:                     D8CCA695A1D8D76A25DD9F31F5AA9109A55D9C44.mft (raw, json)
Hash identifier:          RoBoo0aXoadlOkWEFz/3TghHss962zy3+GkS2GhsVsw=
Subject key identifier:   37:9E:26:28:B6:44:5D:F7:AF:F3:24:ED:3D:CE:11:64:D0:21:54:B6
Authority key identifier: D8:CC:A6:95:A1:D8:D7:6A:25:DD:9F:31:F5:AA:91:09:A5:5D:9C:44
Certificate issuer:       /CN=D8CCA695A1D8D76A25DD9F31F5AA9109A55D9C44
Certificate serial:       13133024037EED1BD639CD1EADD4E4914AC85503
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8CCA695A1D8D76A25DD9F31F5AA9109A55D9C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/D8CCA695A1D8D76A25DD9F31F5AA9109A55D9C44.mft
Manifest number:          08
Signing time:             Tue 09 Jan 2024 09:55:20 +0000
Manifest this update:     Tue 09 Jan 2024 09:50:20 +0000
Manifest next update:     Wed 10 Jan 2024 11:15:20 +0000
Files and hashes:         1: 34352e3136322e39322e302f32322d3234203d3e20323638353137.roa (hash: UxReB6EJkmxJRCddiW9IPTUaao9Tz2DK5N1WB9aruHQ=)
                          2: D8CCA695A1D8D76A25DD9F31F5AA9109A55D9C44.crl (hash: M/BNwAAjoiiIXkWCv4Ilijho8GDiyjcduS9Tyuz6X8M=)
                          3: 323830343a353236633a3a2f33322d3438203d3e20323638353137.roa (hash: s4Wk8hvCjESHDkissab7Gz5/deog7HrQfwVwQvBDNH4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:13:30:24:03:7e:ed:1b:d6:39:cd:1e:ad:d4:e4:91:4a:c8:55:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8CCA695A1D8D76A25DD9F31F5AA9109A55D9C44
        Validity
            Not Before: Jan  9 09:50:20 2024 GMT
            Not After : Jan 10 11:15:20 2024 GMT
        Subject: CN=379E2628B6445DF7AFF324ED3DCE1164D02154B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e9:ba:e1:40:7e:a8:0e:e9:40:7d:2c:bb:b5:
                    9c:80:90:66:e1:6a:26:57:20:19:26:6a:50:3e:ef:
                    0c:ee:52:47:b0:cc:3c:fc:71:0d:64:ea:90:61:d9:
                    53:ec:39:e1:2a:eb:17:d3:c7:d2:44:ea:56:3a:27:
                    77:2f:5b:1e:21:22:fe:30:a9:e7:82:62:15:79:81:
                    27:64:37:33:b3:db:b5:7e:e6:fe:ae:02:25:f1:8e:
                    a5:cf:b7:c7:fb:49:5f:c9:db:a5:28:70:5f:d9:c8:
                    8b:8b:42:00:49:a4:d0:87:cf:e2:f2:18:56:24:09:
                    f0:c0:36:c5:97:19:8d:cd:5a:b7:fb:db:e8:20:11:
                    53:2f:65:0d:a3:aa:5e:22:4b:98:2a:31:ea:31:d4:
                    ad:11:38:55:90:64:2f:5d:56:40:10:94:1a:da:71:
                    c1:01:7a:32:66:f7:10:af:d3:ad:1c:a8:3b:44:ec:
                    36:f2:e4:4c:00:50:89:4c:d6:6c:fd:99:ce:49:16:
                    5f:65:a6:7a:03:37:9a:9d:03:ef:9d:e5:19:a7:cb:
                    c4:a9:d8:30:fa:00:80:3f:24:99:39:50:18:c8:78:
                    72:d6:43:c4:da:43:4b:e9:1e:35:97:13:94:a1:7e:
                    8c:9c:b8:4e:68:73:ec:71:0c:44:76:3d:34:56:da:
                    b2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:9E:26:28:B6:44:5D:F7:AF:F3:24:ED:3D:CE:11:64:D0:21:54:B6
            X509v3 Authority Key Identifier:
                keyid:D8:CC:A6:95:A1:D8:D7:6A:25:DD:9F:31:F5:AA:91:09:A5:5D:9C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/D8CCA695A1D8D76A25DD9F31F5AA9109A55D9C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8CCA695A1D8D76A25DD9F31F5AA9109A55D9C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/D8CCA695A1D8D76A25DD9F31F5AA9109A55D9C44.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:e0:dc:7b:3c:68:55:8e:6a:92:53:02:8b:42:48:53:44:42:
         ed:73:a3:8b:82:b8:a0:86:df:81:e8:c0:83:80:b5:a9:d8:e2:
         77:c0:ed:7d:a2:f0:1a:81:d3:86:db:06:72:2d:a3:4b:02:fe:
         ab:61:95:20:b1:f6:bb:54:b3:57:61:72:6a:fa:7f:de:2b:ad:
         20:1c:f7:27:b6:b0:82:71:15:a0:c6:f0:62:96:91:1e:45:99:
         33:66:1e:e9:77:c3:98:ce:6c:e9:b8:a1:c5:8f:a3:59:f8:a0:
         c1:f4:48:75:c6:7d:c8:2d:6a:cc:83:a9:06:76:37:3f:ce:44:
         e7:c7:54:2b:a5:df:80:d9:0c:a2:12:27:ca:85:17:c9:90:69:
         99:09:d1:08:53:b9:54:2a:72:6b:72:80:b1:10:3e:63:d8:fa:
         86:3c:97:44:06:9b:23:1d:27:ae:3c:eb:c7:b1:bc:05:d8:ec:
         68:0b:88:66:81:3d:11:c7:cb:d3:f5:8e:42:11:f6:72:bd:c0:
         81:be:a9:55:f7:38:be:75:1f:59:e8:cc:4e:7a:31:8d:39:7d:
         74:d1:cb:8c:96:5f:32:dc:d7:ad:a6:cf:2f:2d:ee:f9:4b:85:
         d9:e5:c7:12:6f:91:7a:0c:b6:38:7c:99:c8:cf:ed:03:9b:95:
         98:a7:85:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----