Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/0/CD8207F50B5584700354C87E2FDD3EEDAABE3E9C.mft
File:                     CD8207F50B5584700354C87E2FDD3EEDAABE3E9C.mft (raw, json)
Hash identifier:          E2ovHJgmpqa7T0cfj1MTaKze/6gtgmD/7NBJKt7icLk=
Subject key identifier:   79:BF:A1:18:1A:38:80:E3:DB:B1:21:05:46:26:EE:50:72:3F:8A:34
Authority key identifier: CD:82:07:F5:0B:55:84:70:03:54:C8:7E:2F:DD:3E:ED:AA:BE:3E:9C
Certificate issuer:       /CN=CD8207F50B5584700354C87E2FDD3EEDAABE3E9C
Certificate serial:       29CCD71A26CAA79526F7D637E43ED7517D14760A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD8207F50B5584700354C87E2FDD3EEDAABE3E9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/0/CD8207F50B5584700354C87E2FDD3EEDAABE3E9C.mft
Manifest number:          0333
Signing time:             Sun 14 Apr 2024 17:40:00 +0000
Manifest this update:     Sun 14 Apr 2024 17:35:00 +0000
Manifest next update:     Mon 15 Apr 2024 20:58:00 +0000
Files and hashes:         1: 3139312e3235332e37322e302f32312d3231203d3e20323632383931.roa (hash: sMrE9zDYMWiNIwNmuWazujY6IwiEGcYz/trRcLzrAV0=)
                          2: 3137372e32332e36342e302f32312d3231203d3e20323632383931.roa (hash: 0aosw7iKcH9H85PdfTeQfG7szcCH+DFWE2uCDi4J9k4=)
                          3: 3137372e32302e3138342e302f32312d3231203d3e20323632383931.roa (hash: du06XOR6oAnbkiEdpLCQPKQWVZ2IaKDGMXVdHKthzG8=)
                          4: CD8207F50B5584700354C87E2FDD3EEDAABE3E9C.crl (hash: X0vAiYuVL3ahR8+0SesKX8+2XyKXJQLVZbO2wgfzLn8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:cc:d7:1a:26:ca:a7:95:26:f7:d6:37:e4:3e:d7:51:7d:14:76:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD8207F50B5584700354C87E2FDD3EEDAABE3E9C
        Validity
            Not Before: Apr 14 17:35:00 2024 GMT
            Not After : Apr 15 20:58:00 2024 GMT
        Subject: CN=79BFA1181A3880E3DBB121054626EE50723F8A34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:19:53:c8:5a:a5:61:80:2a:f9:59:3a:8b:65:
                    1e:5c:c5:8c:d9:21:f2:1e:f2:3c:66:cf:bc:f1:28:
                    18:2d:35:48:6e:7f:bb:74:5a:76:15:1f:03:d0:7c:
                    c6:15:f1:33:26:dd:69:ce:b6:8a:2d:b5:13:5c:10:
                    b6:24:e0:3d:fe:89:d7:af:e1:02:ef:59:9a:7a:c2:
                    71:29:bb:04:8a:6c:a2:23:a9:9a:00:1b:ba:10:09:
                    f8:8f:aa:f7:84:a9:b5:a0:c4:0e:6f:0e:8f:92:d6:
                    6a:94:1d:ef:42:2d:36:26:da:b8:ff:b9:d1:01:70:
                    8b:d5:d5:49:94:84:1c:5b:88:67:02:58:3d:0b:08:
                    50:0a:2e:c2:61:3f:e6:cf:bb:3e:11:7d:60:8c:a9:
                    d6:fe:24:a9:d4:98:76:de:03:92:de:b3:71:bc:ef:
                    00:96:66:9f:dd:23:13:39:17:1c:85:7b:c6:31:dd:
                    35:2e:d2:a1:bf:ae:a0:af:94:51:07:89:0b:5c:d9:
                    6c:fd:9c:68:b3:ca:fc:0d:10:e2:4c:5f:0b:a5:27:
                    10:8b:47:45:5d:fe:e1:4d:75:69:97:ba:f0:4e:f5:
                    98:84:32:4d:15:75:e3:65:9a:7b:5f:4e:b2:7a:50:
                    1d:3e:47:4b:8d:02:32:1d:48:4a:72:59:8d:39:d3:
                    d7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:BF:A1:18:1A:38:80:E3:DB:B1:21:05:46:26:EE:50:72:3F:8A:34
            X509v3 Authority Key Identifier:
                keyid:CD:82:07:F5:0B:55:84:70:03:54:C8:7E:2F:DD:3E:ED:AA:BE:3E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/0/CD8207F50B5584700354C87E2FDD3EEDAABE3E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD8207F50B5584700354C87E2FDD3EEDAABE3E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/0/CD8207F50B5584700354C87E2FDD3EEDAABE3E9C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:7a:2a:e2:fe:66:38:bc:65:7f:eb:5a:58:e0:35:bf:1f:4c:
         8a:f4:2a:08:b8:8c:f7:ed:e3:97:73:cc:2b:3d:b9:9b:0f:7c:
         35:60:b4:75:6c:26:97:6a:fc:fa:69:5b:18:16:05:fa:36:95:
         39:5b:d9:d1:77:4e:1f:ac:a6:4c:1e:44:5b:14:9d:f1:2e:21:
         80:e3:89:09:cb:37:8d:bd:e3:90:d5:48:a6:43:e8:65:d2:32:
         cf:28:dd:25:f5:be:08:4d:86:be:12:20:1b:86:fd:35:ca:db:
         10:2b:5b:2b:5c:f1:ef:99:20:f5:a3:da:42:e8:8c:6e:3d:62:
         0f:45:d9:1a:59:68:51:9e:e3:5a:9e:e3:84:14:d4:1b:5a:1c:
         ae:d8:1f:28:cb:83:dc:1c:94:d4:b5:f7:17:ba:de:f9:20:64:
         8b:3b:e4:1d:e9:02:8a:b2:8f:a4:7d:88:c3:05:d7:e0:0c:6a:
         c1:b6:50:42:64:2c:5d:7f:55:e2:77:73:18:1c:b6:af:ce:c4:
         b1:c5:84:ef:3e:2d:a8:27:00:da:f3:18:79:72:3c:ba:40:85:
         4e:57:9f:03:15:53:33:de:f9:73:89:a1:c2:37:50:88:44:b9:
         f1:fa:1c:18:a3:e9:f9:6b:20:3c:89:b6:3c:a8:23:11:e5:d6:
         c7:6f:1d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----