Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/0/E9FEBF829E2ECB5541D2087C87590E86CC57C518.mft
File:                     E9FEBF829E2ECB5541D2087C87590E86CC57C518.mft (raw, json)
Hash identifier:          mp2LCbJsTcJ2WYrnKmaBCvNTbhawDg1aQepAKeDb/es=
Subject key identifier:   24:1E:51:47:22:5A:3F:C7:E3:4E:04:57:28:79:EB:20:36:14:D3:B8
Authority key identifier: E9:FE:BF:82:9E:2E:CB:55:41:D2:08:7C:87:59:0E:86:CC:57:C5:18
Certificate issuer:       /CN=E9FEBF829E2ECB5541D2087C87590E86CC57C518
Certificate serial:       1390A6D24E9C44F5F95E34A174A811AFAC39E944
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9FEBF829E2ECB5541D2087C87590E86CC57C518.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/0/E9FEBF829E2ECB5541D2087C87590E86CC57C518.mft
Manifest number:          5A
Signing time:             Mon 15 Apr 2024 10:36:38 +0000
Manifest this update:     Mon 15 Apr 2024 10:31:38 +0000
Manifest next update:     Tue 16 Apr 2024 11:58:38 +0000
Files and hashes:         1: E9FEBF829E2ECB5541D2087C87590E86CC57C518.crl (hash: 0vPuTST671oi/cdhBl0Zx92CGrE8EieJ3X3a7YNWrXE=)
                          2: 323830343a363566343a3a2f33322d3332203d3e203532373433.roa (hash: oblzOuh6eTzJh5wYZZXQox/AcdOTW7vm1r2OU2Rr6fE=)
                          3: 3137372e38352e3136372e302f32342d3234203d3e203532373433.roa (hash: 53KS53lWK9hcy/Q5+w2YZraPWYxEmYcLGfoAp5UxSAg=)
                          4: 3137372e38352e3136352e302f32342d3234203d3e203532373433.roa (hash: wl7/wyI14kO3ARX/MoOThltYGDOCzqD4iz11gAJjlx4=)
                          5: 3137372e38352e3136342e302f32332d3233203d3e203532373433.roa (hash: DtA5NLMLHfXNqXCMlAp78KcJjXths+MifW3NcX/UhiA=)
                          6: 3137372e38352e3136362e302f32342d3234203d3e203532373433.roa (hash: 9/vGxUCNNu7JRbZkEqdNK4pDILSUA6KDPctAeQJjy4o=)
                          7: 3137372e38352e3136362e302f32332d3233203d3e203532373433.roa (hash: ESGza95Z4JB1RsuG9Fs5Br2NeBRzTzptL746ctpJiQI=)
                          8: 3137372e38352e3136342e302f32322d3232203d3e203532373433.roa (hash: /8YGCfKM+nE+n2yOMW6BydnyhbcP+9ppxlE7hnhMLu8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:90:a6:d2:4e:9c:44:f5:f9:5e:34:a1:74:a8:11:af:ac:39:e9:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9FEBF829E2ECB5541D2087C87590E86CC57C518
        Validity
            Not Before: Apr 15 10:31:38 2024 GMT
            Not After : Apr 16 11:58:38 2024 GMT
        Subject: CN=241E5147225A3FC7E34E04572879EB203614D3B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f0:4a:64:df:03:b4:d6:f8:86:4e:9a:38:9f:
                    c1:cc:3a:74:99:42:de:1a:b8:b6:b2:0a:6a:4f:ed:
                    64:ef:28:f9:9d:42:ac:9b:af:c9:78:bc:37:4c:1c:
                    f8:42:6c:07:cc:a8:d9:1d:f9:78:f3:06:eb:0e:28:
                    50:df:10:e1:a6:43:00:e9:1f:74:6e:e7:83:71:c4:
                    5b:aa:28:ce:81:ba:88:8d:66:40:34:be:fd:22:28:
                    97:f4:f2:22:e9:ee:14:52:6a:47:e3:57:08:1b:39:
                    e6:87:64:cf:f4:ec:2c:18:37:ca:8f:c1:50:64:d0:
                    45:c8:35:64:6b:8f:ac:d4:d6:36:10:b1:66:3d:70:
                    4b:88:e5:d2:69:9f:4c:d9:5b:a6:27:ea:4b:94:f6:
                    34:23:8f:c7:cc:81:f6:27:20:8e:f8:03:c8:74:c8:
                    69:c9:dc:09:79:39:e1:2c:e7:0c:93:da:c9:89:d6:
                    6c:9e:84:82:a0:ec:31:c4:5e:c9:08:9e:8f:38:4a:
                    ae:c1:1a:6e:6a:ea:25:26:48:ba:60:45:b0:44:22:
                    dd:fd:a4:7e:84:7c:c5:ec:7d:0c:65:24:fc:92:b8:
                    7e:c7:73:0b:6b:13:e0:d1:7b:83:8d:f1:dc:d3:5e:
                    22:6a:53:c4:9f:0b:a9:c3:55:6c:f4:c6:78:6c:3b:
                    12:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:1E:51:47:22:5A:3F:C7:E3:4E:04:57:28:79:EB:20:36:14:D3:B8
            X509v3 Authority Key Identifier:
                keyid:E9:FE:BF:82:9E:2E:CB:55:41:D2:08:7C:87:59:0E:86:CC:57:C5:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/0/E9FEBF829E2ECB5541D2087C87590E86CC57C518.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9FEBF829E2ECB5541D2087C87590E86CC57C518.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/0/E9FEBF829E2ECB5541D2087C87590E86CC57C518.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:8c:f4:d2:da:8c:25:30:05:6f:75:91:45:15:3d:3b:6d:f3:
         00:d7:71:f4:b1:d6:68:f3:b6:27:0a:24:8f:bd:49:a3:dc:1f:
         e0:6a:b8:75:67:86:b0:80:d9:3d:04:a7:d8:f1:ce:1b:81:56:
         20:5d:c3:c9:bb:fd:4e:a8:6f:f3:7e:e6:16:3f:2d:b8:e7:f4:
         67:f3:64:f6:2f:b6:4e:0e:b7:f6:fc:b7:4a:86:0e:58:fa:74:
         21:b7:f0:4f:7f:78:6b:0c:56:8c:70:7e:aa:6e:a5:ae:e6:5b:
         99:48:68:96:3a:86:a2:92:bb:a4:0d:60:e4:e5:4f:6f:16:5b:
         50:9c:43:10:98:b3:49:7c:c0:5e:00:d2:d4:3a:0f:3f:a6:22:
         09:51:15:b5:cf:99:0c:f1:27:5d:7f:6d:14:42:16:a3:7c:fb:
         c0:ab:ae:0a:d0:be:db:e1:df:32:09:b1:be:2e:b4:cd:0a:c7:
         a6:14:16:7a:1e:dd:ff:47:50:34:96:a9:f5:15:9c:82:0f:3a:
         e7:45:f2:cc:68:ca:8d:69:f7:86:4e:e2:70:a0:6e:99:15:db:
         0a:e2:58:53:7d:a2:48:59:ee:41:06:ed:0d:04:9c:f4:d2:75:
         a4:02:6a:56:bb:ce:d9:98:e8:4a:ea:87:44:a6:b4:51:86:e4:
         e4:22:7e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:19 2024 by rpki-client on console-ams.rpki-client.org