Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/F4BE2DD457247166D80DC68E8A77C69278A39E0A.mft
File:                     F4BE2DD457247166D80DC68E8A77C69278A39E0A.mft (raw, json)
Hash identifier:          d1lc4vWPhnYwRLn+FPsKTVmNhAumHY+2FDSOCuL0fos=
Subject key identifier:   73:9B:F3:DA:07:D4:97:D9:91:6F:26:64:52:C3:82:34:FE:51:66:84
Authority key identifier: F4:BE:2D:D4:57:24:71:66:D8:0D:C6:8E:8A:77:C6:92:78:A3:9E:0A
Certificate issuer:       /CN=F4BE2DD457247166D80DC68E8A77C69278A39E0A
Certificate serial:       7EF888D6969792D592DB056149F23752D80BA230
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4BE2DD457247166D80DC68E8A77C69278A39E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/F4BE2DD457247166D80DC68E8A77C69278A39E0A.mft
Manifest number:          014E
Signing time:             Mon 15 Apr 2024 00:15:22 +0000
Manifest this update:     Mon 15 Apr 2024 00:10:22 +0000
Manifest next update:     Tue 16 Apr 2024 01:33:22 +0000
Files and hashes:         1: 3137372e3132352e3231362e302f32322d3234203d3e20323632333535.roa (hash: oeEUpiCwd93BPBLJljXnn7aBGRsysJc6u8jRDogdr98=)
                          2: 323830343a3832633a3a2f33322d3438203d3e20323632333535.roa (hash: IFELf6I9nKbUpwJkQlD5xu1v1FC20cOKrM4C96nSvUk=)
                          3: 3138362e3139352e3131322e302f32302d3234203d3e20323632333535.roa (hash: E6tRnlTSR3IuBVVJOCitfWKwqqolYdf6sDbDuRpGvtQ=)
                          4: 3137372e39312e3137322e302f32322d3234203d3e20323632333535.roa (hash: aliN5L2E4KgPnknCx/ShDsyGAfMcIwdalsHcgpseBPs=)
                          5: 3138362e3233332e3138382e302f32322d3234203d3e20323632333535.roa (hash: +BDZbk1sXv35nmOIwTg5mkmVvceAGMgFgyDj5zOP+T8=)
                          6: F4BE2DD457247166D80DC68E8A77C69278A39E0A.crl (hash: v3qI1tmJ0jM9SRQMjGNZ+9uhYifjfImwgiOQikfvTjI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:f8:88:d6:96:97:92:d5:92:db:05:61:49:f2:37:52:d8:0b:a2:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4BE2DD457247166D80DC68E8A77C69278A39E0A
        Validity
            Not Before: Apr 15 00:10:22 2024 GMT
            Not After : Apr 16 01:33:22 2024 GMT
        Subject: CN=739BF3DA07D497D9916F266452C38234FE516684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8a:bb:d9:f1:94:ed:79:ed:6a:c9:b1:72:46:
                    80:54:b0:03:49:78:dd:12:39:45:55:c3:94:aa:96:
                    74:5c:66:c7:53:6b:fb:aa:5a:9f:e8:85:53:02:7b:
                    55:d0:ff:81:2a:a1:b4:5d:dc:09:96:a2:59:09:5d:
                    5d:64:ea:05:b8:0b:12:d2:3a:0b:77:a6:33:59:1b:
                    70:65:7e:74:49:3e:7b:cd:fc:de:a6:28:a4:52:43:
                    01:95:43:68:90:a9:13:57:fc:5c:38:89:d3:f1:38:
                    3e:8f:f8:34:d3:2d:f6:50:1d:cb:52:68:9e:c4:f7:
                    aa:10:86:8c:01:72:19:0d:09:35:42:6c:3d:9e:3a:
                    3e:a1:6c:a6:84:64:05:78:60:c0:17:7a:a7:f0:c0:
                    bc:67:e3:b6:c5:0f:09:e0:e4:7a:bb:6c:ff:c9:92:
                    0c:a1:46:3c:a6:79:c1:3e:52:7a:c6:a7:41:8b:84:
                    8e:79:7d:2a:35:40:f9:8c:25:69:87:e7:f6:67:e2:
                    4a:fd:ee:b3:2d:0c:d7:26:78:2a:e3:a1:4a:d9:98:
                    57:50:24:35:69:64:71:7a:fb:6e:d8:51:92:ff:ea:
                    3a:fa:2d:c4:47:e5:ce:78:0a:d5:2a:34:b7:43:5d:
                    b2:75:93:97:6f:a3:66:cc:2c:09:ac:a0:c1:8c:f7:
                    b2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:9B:F3:DA:07:D4:97:D9:91:6F:26:64:52:C3:82:34:FE:51:66:84
            X509v3 Authority Key Identifier:
                keyid:F4:BE:2D:D4:57:24:71:66:D8:0D:C6:8E:8A:77:C6:92:78:A3:9E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/F4BE2DD457247166D80DC68E8A77C69278A39E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4BE2DD457247166D80DC68E8A77C69278A39E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/F4BE2DD457247166D80DC68E8A77C69278A39E0A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:c7:20:72:7d:26:3d:08:bc:0d:74:be:b7:f0:9f:69:6c:b7:
         b3:92:58:6d:a5:69:b2:79:20:c1:be:90:70:fe:1a:1b:aa:93:
         2c:6f:24:00:84:ea:12:55:27:0e:52:ae:e6:ef:e4:93:85:19:
         dd:e8:61:c6:c8:6e:35:4c:b8:74:e0:23:16:60:05:05:6c:55:
         1e:13:be:5f:d9:57:ef:25:54:8d:7d:72:d3:6a:d0:2d:58:e1:
         c0:9f:bf:53:87:9a:58:88:be:87:f5:f4:19:53:7a:97:8b:ca:
         20:fa:7b:27:67:57:53:56:eb:40:f8:80:ac:80:16:aa:6d:c2:
         5c:23:ba:80:0f:80:c6:64:23:76:79:ed:e5:17:87:f3:20:99:
         f9:e4:d7:a6:4d:81:2b:10:f2:a8:38:b0:f4:08:b3:b1:70:e1:
         b4:fa:4c:3e:57:2b:70:50:3e:1c:02:21:67:f3:2f:57:0c:76:
         c1:71:53:9d:09:9c:c2:d4:e0:e4:31:ad:be:e2:d9:30:d7:90:
         c1:65:25:f9:a2:9f:48:8d:15:45:80:fd:48:9b:d6:dd:1a:4d:
         37:6d:dd:84:81:5f:4e:e4:e2:8b:c9:f8:c1:94:18:96:6d:d4:
         ac:b0:3f:b7:74:cc:2f:95:33:e2:33:bd:05:47:d4:ab:ec:83:
         61:82:73:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----