Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/EBD42F3FA9FE663D3D26793CE3DBCF194466FE00.mft
File:                     EBD42F3FA9FE663D3D26793CE3DBCF194466FE00.mft (raw, json)
Hash identifier:          PF3aYXMEEqrZGPtXzsHN+7/X5Z/rY0nar0zmW13SFO4=
Subject key identifier:   28:2C:AB:94:E3:2A:33:74:A7:9D:20:D9:4F:CA:73:28:BF:71:9B:84
Authority key identifier: EB:D4:2F:3F:A9:FE:66:3D:3D:26:79:3C:E3:DB:CF:19:44:66:FE:00
Certificate issuer:       /CN=EBD42F3FA9FE663D3D26793CE3DBCF194466FE00
Certificate serial:       768AA9EAA8E7383D02099BC7BE746977C99934BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EBD42F3FA9FE663D3D26793CE3DBCF194466FE00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/EBD42F3FA9FE663D3D26793CE3DBCF194466FE00.mft
Manifest number:          0769
Signing time:             Mon 15 Apr 2024 04:40:00 +0000
Manifest this update:     Mon 15 Apr 2024 04:35:00 +0000
Manifest next update:     Tue 16 Apr 2024 04:40:00 +0000
Files and hashes:         1: 323830343a3830343a3a2f33322d3438203d3e20323632333338.roa (hash: rKzWaTclLVFrHtoyQctbaRJk+QgW6npVS6Np7TRQpcE=)
                          2: 3137372e3132362e36342e302f32302d3234203d3e20323632333338.roa (hash: 2eb0vO41NX4Qf2tsCsBWA4gMO22DcNK09e3zesbuApg=)
                          3: EBD42F3FA9FE663D3D26793CE3DBCF194466FE00.crl (hash: AcQaSawCwGt5aUV3w/y5Urel5yYq3H3kb3WCxDLvwXQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:8a:a9:ea:a8:e7:38:3d:02:09:9b:c7:be:74:69:77:c9:99:34:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBD42F3FA9FE663D3D26793CE3DBCF194466FE00
        Validity
            Not Before: Apr 15 04:35:00 2024 GMT
            Not After : Apr 22 04:40:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:68:1f:81:15:26:ec:39:24:90:f6:70:27:4e:
                    1b:f5:af:7a:8e:c9:64:ce:b2:4a:3e:f3:0f:fb:9c:
                    00:ef:45:96:aa:96:ef:23:b3:e0:27:76:3b:7d:9d:
                    18:78:16:4a:a7:0c:69:16:67:dd:7f:5b:1f:c0:05:
                    17:12:d5:ed:fe:0d:97:22:f2:d4:8a:41:28:49:89:
                    b5:1f:1a:b6:f9:ff:4b:d3:aa:a5:12:95:f1:a1:ed:
                    8d:95:76:09:ed:c2:c0:05:da:82:4a:f0:97:8a:78:
                    76:96:7c:d0:b6:49:32:6b:59:8d:93:a5:42:03:3b:
                    4b:90:59:1d:5b:e7:c5:ca:b5:c0:c7:42:3f:9a:82:
                    f7:76:b9:c1:50:6e:65:72:58:0b:f8:77:ea:8e:8e:
                    53:bf:f9:1b:3e:54:b7:fc:48:8d:7d:d3:04:4c:77:
                    97:2f:6e:10:db:c6:ba:27:c1:f9:61:11:44:e6:a4:
                    32:f5:87:d7:b7:12:87:49:9f:1e:24:c8:a6:f9:6d:
                    f9:b2:cd:f7:d1:04:82:20:7a:90:23:24:7c:8f:6e:
                    d4:35:9b:75:3b:5b:0a:ee:37:c8:ab:05:9b:dd:80:
                    e2:1f:76:c2:ed:d8:e7:02:c7:ea:8f:bd:2c:8e:72:
                    77:82:dc:32:03:f5:d3:65:49:63:3f:d1:a0:0f:3f:
                    87:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:2C:AB:94:E3:2A:33:74:A7:9D:20:D9:4F:CA:73:28:BF:71:9B:84
            X509v3 Authority Key Identifier:
                keyid:EB:D4:2F:3F:A9:FE:66:3D:3D:26:79:3C:E3:DB:CF:19:44:66:FE:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/EBD42F3FA9FE663D3D26793CE3DBCF194466FE00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EBD42F3FA9FE663D3D26793CE3DBCF194466FE00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/EBD42F3FA9FE663D3D26793CE3DBCF194466FE00.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:cc:42:b5:38:e6:69:3f:89:59:02:22:ea:1e:8d:32:22:3e:
         2d:a9:30:d3:09:a5:57:b9:03:97:ce:57:ba:0b:82:29:32:63:
         ea:ff:64:07:fd:52:15:6a:52:4d:19:a9:5e:d9:23:1b:f9:da:
         1f:1c:ef:17:6f:f0:42:8e:81:fa:16:ec:1f:90:1e:86:bd:40:
         38:8c:74:7b:6c:91:60:22:eb:e9:b4:09:c8:39:94:10:2d:c5:
         d6:dc:18:21:78:5e:4e:43:78:62:f9:ea:de:02:25:da:71:e3:
         9e:7e:10:19:08:4c:f4:95:42:91:ef:38:df:c2:cb:d6:e2:52:
         c6:e5:41:a0:67:e2:e4:07:fb:52:11:61:24:ec:96:31:88:0b:
         f8:15:c8:3c:a5:ad:a1:aa:7f:a6:31:80:f3:8e:e5:97:a6:0d:
         58:6f:f3:bc:29:5d:5a:db:ea:67:a3:5d:f5:5b:ea:86:69:97:
         0e:c2:37:78:9c:4d:9c:f4:7f:6d:d8:85:0c:d7:a6:eb:c3:c4:
         5e:64:0b:17:80:2c:52:cd:72:af:31:c4:3c:ca:54:c1:83:f6:
         36:f9:3a:77:92:5f:ef:5d:70:38:53:a9:6d:df:22:a6:7f:3b:
         5e:98:f1:53:d7:35:b7:ca:c7:1c:b9:83:fd:71:24:09:d4:b8:
         b3:45:6e:a9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----