Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/8C7C27A1C145FD776B884D81617F329537CD80D3.mft
File:                     8C7C27A1C145FD776B884D81617F329537CD80D3.mft (raw, json)
Hash identifier:          aPVwAhZaif3A5ssYYX1URVKSXPZjj6nuY4MGl1PW05s=
Subject key identifier:   4E:41:E0:28:BC:27:18:8C:31:77:9E:79:63:61:95:EB:22:CE:5D:15
Authority key identifier: 8C:7C:27:A1:C1:45:FD:77:6B:88:4D:81:61:7F:32:95:37:CD:80:D3
Certificate issuer:       /CN=8C7C27A1C145FD776B884D81617F329537CD80D3
Certificate serial:       026EEECBA6CF7FEE6C76688F4D632406F7F05D3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C7C27A1C145FD776B884D81617F329537CD80D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/8C7C27A1C145FD776B884D81617F329537CD80D3.mft
Manifest number:          5D
Signing time:             Sun 14 Apr 2024 20:30:00 +0000
Manifest this update:     Sun 14 Apr 2024 20:25:00 +0000
Manifest next update:     Mon 15 Apr 2024 20:30:00 +0000
Files and hashes:         1: 3230302e3231392e3134392e302f32342d3234203d3e20323634393731.roa (hash: s3bCUfDb2j7JpeE5hFxHjEGXlS/49OSmYIezPP/Urr0=)
                          2: 323830313a38303a313932303a3a2f34382d3438203d3e20323634393731.roa (hash: ZX8XSbtY9VIZHZgrZrP5Axuua5kgapt20m7f0h5LJ2U=)
                          3: 8C7C27A1C145FD776B884D81617F329537CD80D3.crl (hash: mLyPCf7THczv5uFoShFc/kGK3Q9IElUFFTvylZqhjfU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:6e:ee:cb:a6:cf:7f:ee:6c:76:68:8f:4d:63:24:06:f7:f0:5d:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C7C27A1C145FD776B884D81617F329537CD80D3
        Validity
            Not Before: Apr 14 20:25:00 2024 GMT
            Not After : Apr 21 20:30:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:44:dc:ce:66:b0:7e:c8:5c:c7:e4:b8:aa:a4:
                    83:85:96:63:19:1c:b2:03:17:51:5c:c0:97:2d:b6:
                    f7:65:31:4d:ad:7a:62:b4:26:69:ca:83:d9:af:5a:
                    e2:be:6b:84:fe:2f:70:c3:e8:42:f3:84:f9:ad:40:
                    ec:52:63:bb:29:e9:85:23:c8:8b:03:16:40:e4:30:
                    0f:f2:a5:84:5a:fc:26:ee:a1:4c:ce:28:26:47:98:
                    53:eb:9c:ec:a8:38:a4:4f:9d:54:4f:bd:64:8d:4d:
                    51:6d:bb:18:d5:f2:6c:e6:8e:c1:3a:73:4d:69:84:
                    2d:9d:95:cd:96:ef:17:27:87:cc:0d:4c:bd:0a:c7:
                    26:cd:e7:71:da:00:16:69:6a:d0:96:8c:62:14:ce:
                    b5:a6:12:21:21:1f:50:6c:c0:b6:84:97:2a:cc:8d:
                    28:b0:c1:71:31:09:40:46:e0:e3:53:83:89:74:c4:
                    e9:3d:b8:9d:87:f9:f7:59:17:35:8e:3e:12:49:03:
                    18:35:b5:3d:85:2a:cd:b1:4f:7e:a0:24:83:3c:1b:
                    08:30:ec:6f:d3:22:db:e5:2a:e4:2c:a3:9d:3d:54:
                    bc:09:74:42:bf:75:d7:60:41:48:ec:71:02:56:45:
                    e9:1b:4b:4a:92:3f:6f:cf:52:74:eb:59:64:aa:cc:
                    14:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:41:E0:28:BC:27:18:8C:31:77:9E:79:63:61:95:EB:22:CE:5D:15
            X509v3 Authority Key Identifier:
                keyid:8C:7C:27:A1:C1:45:FD:77:6B:88:4D:81:61:7F:32:95:37:CD:80:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/8C7C27A1C145FD776B884D81617F329537CD80D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C7C27A1C145FD776B884D81617F329537CD80D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/8C7C27A1C145FD776B884D81617F329537CD80D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:52:f6:d5:4d:d0:21:46:2f:e9:b8:1e:f9:28:33:96:0c:79:
         81:f3:4c:49:2c:f7:51:44:07:df:e1:f2:db:55:b1:1f:c7:6a:
         f2:14:86:e8:23:e6:04:65:d9:14:56:63:b6:ad:79:9e:d8:1e:
         fe:42:15:a7:ad:d0:7e:dc:56:a8:07:f8:b3:07:1d:45:29:65:
         f2:85:19:d8:6f:e8:51:f6:62:ce:44:85:65:30:c5:dd:e9:dd:
         06:c1:cf:c7:95:3d:9a:b1:20:0d:27:d5:8d:20:6b:81:4c:14:
         a7:27:7b:18:44:db:d9:fe:55:c5:c2:a9:f1:37:b2:8e:47:50:
         76:1b:c8:23:3e:fa:66:3d:8c:12:fa:53:36:46:d7:0e:34:20:
         ff:f5:34:9a:53:a9:55:a5:4b:7c:a8:6a:28:6d:46:80:6c:2f:
         75:93:e5:6b:b9:7b:04:b9:0a:5b:99:ec:d7:94:7e:43:b5:7d:
         ad:e9:c6:2b:f3:82:24:2a:28:98:9d:55:d5:06:02:b3:20:1e:
         d6:71:5f:27:db:1d:86:88:b6:29:fe:21:aa:0e:e6:7f:90:3d:
         13:05:d3:25:60:f2:bd:de:36:8d:de:29:f8:57:64:65:d4:81:
         65:68:c9:54:b8:f9:cc:1b:a3:5c:24:21:6d:fb:87:15:aa:ca:
         67:c0:1b:d7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----