Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/ED5ADFFB66DF3895997AE1172637A6A3AFF769C9.mft
File:                     ED5ADFFB66DF3895997AE1172637A6A3AFF769C9.mft (raw, json)
Hash identifier:          Qudl3P2iYgeIxK2zlAxca8GGJ/EriZDTx5nCGTD0Clg=
Subject key identifier:   0B:27:E8:47:ED:DD:3B:ED:7F:A2:D8:E8:A0:26:B6:CC:37:98:50:89
Authority key identifier: ED:5A:DF:FB:66:DF:38:95:99:7A:E1:17:26:37:A6:A3:AF:F7:69:C9
Certificate issuer:       /CN=ED5ADFFB66DF3895997AE1172637A6A3AFF769C9
Certificate serial:       24D1409AE08620F97D45AF59FDD4DD1DBFE4A365
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ED5ADFFB66DF3895997AE1172637A6A3AFF769C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/ED5ADFFB66DF3895997AE1172637A6A3AFF769C9.mft
Manifest number:          3E
Signing time:             Sun 14 Apr 2024 18:39:07 +0000
Manifest this update:     Sun 14 Apr 2024 18:34:07 +0000
Manifest next update:     Mon 15 Apr 2024 20:36:07 +0000
Files and hashes:         1: 34352e3233362e32322e302f32342d3234203d3e20323732353333.roa (hash: pHr1WzTjxNqDY0mNCl0qe8kZ+85IJZqRflN9EwN1jHU=)
                          2: ED5ADFFB66DF3895997AE1172637A6A3AFF769C9.crl (hash: Qsxhh5KpZ1ur6Wv0ueEB0pP+eeDrLHTtsz/mjc/IcxA=)
                          3: 323830343a346464343a3a2f33322d3336203d3e20323638323232.roa (hash: X3EXR3GKz5IqqIayRkAIsWZEgy7qo/NRUoyiirO7hGE=)
                          4: 34352e3233362e32302e302f32322d3234203d3e20323638323232.roa (hash: s09usaE0OmHYWFBwsaTmr9zZXkFR0cLNo03vv8mCS8Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d1:40:9a:e0:86:20:f9:7d:45:af:59:fd:d4:dd:1d:bf:e4:a3:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED5ADFFB66DF3895997AE1172637A6A3AFF769C9
        Validity
            Not Before: Apr 14 18:34:07 2024 GMT
            Not After : Apr 15 20:36:07 2024 GMT
        Subject: CN=0B27E847EDDD3BED7FA2D8E8A026B6CC37985089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4e:13:f0:4e:9c:be:aa:b3:b0:95:87:1b:04:
                    5c:70:07:2d:fe:7f:4b:c3:a4:6b:2b:14:06:e7:88:
                    b4:62:d5:4c:c1:0b:fe:39:b2:59:d4:2c:c6:38:c5:
                    24:2d:0a:96:a0:33:53:cc:60:b1:e5:d9:e8:d5:a5:
                    40:a3:2b:7c:1c:14:3f:91:53:d8:56:7a:69:d2:e7:
                    58:bc:ee:bb:37:76:f6:e0:c1:83:59:f2:68:0a:6c:
                    ca:93:87:1b:66:69:d3:90:fe:7e:66:b4:c5:dc:49:
                    c0:ee:cc:07:53:05:70:ec:16:bb:12:e5:fd:2a:b1:
                    45:b9:b3:ae:22:5c:42:9b:96:09:d5:6d:83:f9:55:
                    be:e2:6f:99:14:00:dd:85:9d:28:f5:03:6b:db:a9:
                    39:ec:f4:28:ee:2d:31:a1:36:77:6e:51:eb:2d:d8:
                    1b:d5:6e:82:73:e0:f5:38:06:12:e9:36:9f:8e:8f:
                    bd:bb:1f:5b:56:68:0d:f6:61:5a:f7:aa:71:24:0b:
                    58:35:57:e5:d7:fc:4b:cc:12:00:dd:6f:a5:4f:7a:
                    57:db:ee:72:4d:6a:9d:f3:8c:17:f1:af:5c:4c:03:
                    66:7a:93:00:9d:64:08:94:09:73:10:19:5b:a4:8d:
                    f1:15:48:16:f5:de:b2:5f:72:9b:2f:e5:2a:65:8d:
                    d3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:27:E8:47:ED:DD:3B:ED:7F:A2:D8:E8:A0:26:B6:CC:37:98:50:89
            X509v3 Authority Key Identifier:
                keyid:ED:5A:DF:FB:66:DF:38:95:99:7A:E1:17:26:37:A6:A3:AF:F7:69:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/ED5ADFFB66DF3895997AE1172637A6A3AFF769C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ED5ADFFB66DF3895997AE1172637A6A3AFF769C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/ED5ADFFB66DF3895997AE1172637A6A3AFF769C9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:9c:37:40:d0:da:0e:f8:58:9b:bf:98:9e:37:69:74:ba:b9:
         42:3e:01:b2:cd:f9:93:53:93:73:9f:58:ba:27:71:29:42:bf:
         a5:3b:c2:bb:b7:ba:84:81:5c:d7:9f:d5:3a:94:ab:d6:b2:75:
         75:e6:81:18:c6:de:00:24:4a:6d:f4:80:0b:ec:30:1a:04:15:
         b1:f3:38:29:47:0f:fe:fe:d8:47:a0:a1:de:49:b7:49:9a:ba:
         32:d6:90:e7:ac:d8:22:3d:86:6a:7e:ae:bb:e5:7f:92:08:1b:
         1f:7f:61:03:63:6c:60:83:66:a7:13:3e:4b:26:57:2c:a9:40:
         bc:4d:04:30:35:76:41:23:f0:33:3f:e9:65:2f:25:5a:fd:b9:
         a6:17:a1:68:65:78:11:32:51:24:0b:8e:88:1c:a2:65:82:79:
         15:df:cd:dd:d9:5a:91:9b:7f:92:ea:5e:a2:b5:f8:74:be:94:
         9f:c3:d8:e1:5c:96:b0:3b:c7:cc:53:4c:4c:35:8e:0a:18:9b:
         67:90:b1:96:92:ca:9f:83:8c:ef:97:95:4e:06:61:16:4a:1b:
         3f:2f:e8:54:14:87:d5:64:c8:9f:48:19:ae:53:3d:d5:53:c6:
         fc:af:25:5d:eb:fd:7d:7d:7e:34:cc:50:41:58:09:82:99:9c:
         5b:c2:52:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----