Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/E5F0271EE77B00E3F2BA75BEEAE90D557A4E3102.mft
File:                     E5F0271EE77B00E3F2BA75BEEAE90D557A4E3102.mft (raw, json)
Hash identifier:          h0gp6r8QoCjaxUTnncc1M2dTQMzV0oald+QA2evhsT8=
Subject key identifier:   A2:8B:DF:04:D6:68:F2:84:90:68:FD:99:2C:26:12:4C:09:20:D8:C0
Authority key identifier: E5:F0:27:1E:E7:7B:00:E3:F2:BA:75:BE:EA:E9:0D:55:7A:4E:31:02
Certificate issuer:       /CN=E5F0271EE77B00E3F2BA75BEEAE90D557A4E3102
Certificate serial:       082E7F538D5710B09B2B6D550BDDDEB3B1547DD1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5F0271EE77B00E3F2BA75BEEAE90D557A4E3102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/E5F0271EE77B00E3F2BA75BEEAE90D557A4E3102.mft
Manifest number:          2A
Signing time:             Mon 15 Apr 2024 02:35:19 +0000
Manifest this update:     Mon 15 Apr 2024 02:30:19 +0000
Manifest next update:     Tue 16 Apr 2024 05:50:19 +0000
Files and hashes:         1: 3134332e3230382e3133302e302f32332d3332203d3e20323634303931.roa (hash: 1TOwdaZpBfsonorqgzwl7iU9XIoJ26r/GvdSyHsX3/8=)
                          2: E5F0271EE77B00E3F2BA75BEEAE90D557A4E3102.crl (hash: aes7PRE0dnHEjo7iRSXl/M6Jhc1BJQqcNPC3MNgU4UQ=)
                          3: 3134332e3230382e3132382e302f32332d3332203d3e20323634303931.roa (hash: /JDnAoiN+t3Qa6GAiMJ8XYmJMURU4u3VybudEeLwLNI=)
                          4: 323830343a326162633a3a2f33332d313238203d3e20323634303931.roa (hash: UyPbmH/LCNemyurVUpGfcD8urT8a7jKBCLhNUkJ9izM=)
                          5: 323830343a326162633a383030303a3a2f33332d313238203d3e20323634303931.roa (hash: BZQ3dR/oTGEieKWDUwcBiEu6m5XTddtNojauQe8WvkY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:2e:7f:53:8d:57:10:b0:9b:2b:6d:55:0b:dd:de:b3:b1:54:7d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5F0271EE77B00E3F2BA75BEEAE90D557A4E3102
        Validity
            Not Before: Apr 15 02:30:19 2024 GMT
            Not After : Apr 16 05:50:19 2024 GMT
        Subject: CN=A28BDF04D668F2849068FD992C26124C0920D8C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:81:18:16:01:aa:95:5f:3e:c5:c2:d6:1b:a3:
                    45:85:86:dc:60:14:86:fd:2b:b8:d8:04:48:ea:ce:
                    87:10:73:8b:8e:a3:3c:2a:5f:f7:4a:8f:65:fa:b7:
                    6f:5b:15:1f:1c:52:b9:76:f5:ce:f9:fd:3a:2a:5e:
                    03:85:42:6b:da:95:8d:4f:6b:98:2d:61:e7:b7:c0:
                    b0:fe:da:cf:8c:a3:12:49:eb:65:91:d7:44:9d:bf:
                    aa:c9:7d:45:2e:6f:c6:f6:59:8c:36:4b:3b:60:09:
                    7f:ac:d2:5d:1b:4c:75:50:15:03:86:c4:07:f5:6b:
                    78:f6:63:fd:f0:a1:2d:99:53:a7:e8:f1:51:d5:24:
                    4f:25:ce:52:72:27:ec:b5:48:a9:ad:d9:c2:3f:44:
                    78:9a:4d:15:cb:52:58:2e:06:8d:df:76:96:27:b6:
                    5c:0d:aa:97:89:59:0e:2e:2f:92:92:39:5e:69:5d:
                    40:84:06:9e:d7:69:3f:19:dd:3b:87:9a:63:49:36:
                    10:a3:57:25:11:89:f7:dc:13:8b:ed:e6:f2:64:1e:
                    ea:b6:e3:a3:da:e7:6c:ca:a5:63:fd:df:b2:9a:06:
                    60:b9:0f:1f:cf:68:81:9a:39:42:37:f7:07:74:ed:
                    bf:7d:fb:86:a4:db:19:f2:70:3a:3d:02:d9:25:1c:
                    9a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:8B:DF:04:D6:68:F2:84:90:68:FD:99:2C:26:12:4C:09:20:D8:C0
            X509v3 Authority Key Identifier:
                keyid:E5:F0:27:1E:E7:7B:00:E3:F2:BA:75:BE:EA:E9:0D:55:7A:4E:31:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/E5F0271EE77B00E3F2BA75BEEAE90D557A4E3102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5F0271EE77B00E3F2BA75BEEAE90D557A4E3102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/E5F0271EE77B00E3F2BA75BEEAE90D557A4E3102.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:e0:c1:c8:f1:38:9e:fd:bf:e5:2c:ce:c0:41:19:b5:2c:ce:
         21:60:4f:57:4e:bd:69:b1:18:cb:22:39:96:33:8e:41:b1:1a:
         dd:5a:62:2c:bf:d8:59:c3:e2:f4:79:9e:2c:ca:1a:2f:f7:4f:
         03:e5:b2:d5:60:0d:db:4b:11:1e:5d:ed:36:a2:ce:cc:56:49:
         9a:52:ad:06:40:06:13:64:45:c2:f6:a9:7f:ab:90:4f:1d:d7:
         fa:35:b3:98:3b:78:ef:a2:3b:09:31:e7:5e:9a:9e:c4:25:3c:
         1c:d0:f2:a4:b4:97:94:d4:d6:e1:0e:2a:23:02:c4:9e:d7:d2:
         c0:94:7b:10:85:3b:3e:b3:07:83:f5:e1:1d:58:d5:14:59:d5:
         40:6c:fa:e8:15:e0:30:2c:b8:66:5d:95:fc:7b:30:ae:17:3a:
         2c:03:84:54:41:1d:6c:6e:6a:cf:35:b7:0a:bb:f2:25:6f:43:
         75:b7:e7:1f:2f:52:27:f6:eb:3a:61:2b:dd:08:fa:69:e6:40:
         0d:a2:12:8f:fe:49:48:d2:31:cb:6a:e4:9a:13:0a:f5:66:ee:
         6b:ea:48:dd:d7:f8:09:9d:d6:21:6e:d4:40:e7:c7:6e:6a:92:
         ae:2b:10:78:7b:be:b8:73:af:13:f3:c2:51:47:f3:8a:16:46:
         a9:26:67:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----