Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/0/8810EFA89BF5E1688407C9B3F3EA38661B1782E8.mft
File:                     8810EFA89BF5E1688407C9B3F3EA38661B1782E8.mft (raw, json)
Hash identifier:          iItXpi5TgjDdu2SCIWBF7mhiAhK33nBrcPpex8nNYxs=
Subject key identifier:   2C:BF:D3:96:C7:09:47:95:7E:5E:E5:4B:5C:CB:1C:FD:30:85:FF:4A
Authority key identifier: 88:10:EF:A8:9B:F5:E1:68:84:07:C9:B3:F3:EA:38:66:1B:17:82:E8
Certificate issuer:       /CN=8810EFA89BF5E1688407C9B3F3EA38661B1782E8
Certificate serial:       61444A06EF454A0297A7DA1458DF9AABD6DA0246
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8810EFA89BF5E1688407C9B3F3EA38661B1782E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/0/8810EFA89BF5E1688407C9B3F3EA38661B1782E8.mft
Manifest number:          0311
Signing time:             Mon 15 Apr 2024 05:56:34 +0000
Manifest this update:     Mon 15 Apr 2024 05:51:34 +0000
Manifest next update:     Tue 16 Apr 2024 09:23:34 +0000
Files and hashes:         1: 34352e3136382e3234382e302f32322d3234203d3e20323638303835.roa (hash: 0qXTNromGkVF+4McWvVC+eRgFbE17JG6XGbxssROJM4=)
                          2: 8810EFA89BF5E1688407C9B3F3EA38661B1782E8.crl (hash: M85V2YwymqnSC3Bzg4k2yC/gSh+B9J2fuPE7NV+WT6Q=)
                          3: 323830343a353763343a3a2f33322d3336203d3e20323638303835.roa (hash: LtULV0VJLq8xvLLDQ9N8Yop7Y4rN2SGr+0t4EV5vdPc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:44:4a:06:ef:45:4a:02:97:a7:da:14:58:df:9a:ab:d6:da:02:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8810EFA89BF5E1688407C9B3F3EA38661B1782E8
        Validity
            Not Before: Apr 15 05:51:34 2024 GMT
            Not After : Apr 16 09:23:34 2024 GMT
        Subject: CN=2CBFD396C70947957E5EE54B5CCB1CFD3085FF4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e9:f3:53:d6:5f:64:8b:fd:60:91:f7:a1:4e:
                    19:fc:19:30:1c:17:d5:d7:54:2d:1d:e0:c1:54:6c:
                    3f:28:b4:69:cf:f0:61:42:0f:11:5e:ef:05:fc:b2:
                    ab:8a:73:c5:76:9d:95:91:1d:52:a7:22:f6:4f:29:
                    18:b1:a2:c5:8f:11:ec:53:39:b5:e8:a9:e4:63:f1:
                    94:4e:6f:e9:83:19:c4:d6:e9:33:da:69:3e:78:c5:
                    83:e2:b3:60:eb:e6:16:0b:44:a6:e4:a5:ca:45:ab:
                    fd:78:bb:a8:96:f8:cf:cf:61:aa:0a:f8:07:0b:bb:
                    5d:4c:65:01:9e:ff:71:e4:28:d1:aa:d1:84:c4:5e:
                    fb:3f:30:21:22:03:e9:9f:f6:46:03:70:ef:dd:d3:
                    eb:97:86:f2:49:1b:1d:2e:75:50:fe:b1:6b:41:b3:
                    2a:14:67:98:54:ea:60:57:27:fa:42:37:19:da:84:
                    bc:ee:e0:b4:90:3d:2d:78:6a:78:7d:4b:54:b7:a8:
                    43:ac:cc:e2:d8:70:a8:6f:f0:83:14:ac:b1:3d:1e:
                    d1:a6:be:1d:4f:ca:80:b3:3c:07:bd:ad:05:d8:c0:
                    cf:51:d1:a8:11:cb:03:9e:f7:e9:c5:25:b1:fa:c7:
                    4b:8c:ad:21:cd:e1:f2:3e:7d:f2:b7:6c:97:ea:ed:
                    e2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:BF:D3:96:C7:09:47:95:7E:5E:E5:4B:5C:CB:1C:FD:30:85:FF:4A
            X509v3 Authority Key Identifier:
                keyid:88:10:EF:A8:9B:F5:E1:68:84:07:C9:B3:F3:EA:38:66:1B:17:82:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/0/8810EFA89BF5E1688407C9B3F3EA38661B1782E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8810EFA89BF5E1688407C9B3F3EA38661B1782E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/0/8810EFA89BF5E1688407C9B3F3EA38661B1782E8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:0c:62:72:87:2b:68:f3:29:2e:36:28:53:45:f1:2b:51:74:
         b3:26:f3:4b:e3:02:96:28:e9:66:0c:d7:52:be:1a:c7:8c:3c:
         fd:c7:ce:34:fd:fc:13:50:d6:73:72:3b:05:fc:15:a9:12:2a:
         3b:34:e5:d5:98:b7:86:60:f0:d9:1f:11:96:75:c7:ce:ff:3b:
         2a:db:c4:ac:cd:c3:e6:bc:42:dd:31:b3:96:22:06:9d:1e:b3:
         8c:7b:1a:65:f1:74:c2:8d:ad:e0:83:ef:f5:ab:2c:64:5a:54:
         73:46:bb:83:f5:58:76:29:fe:37:1e:83:d0:c0:55:f5:33:62:
         71:25:38:57:23:94:f0:09:a5:dd:0e:f4:5f:87:78:c4:7d:13:
         05:03:01:71:e6:0b:a6:71:a6:07:f9:48:9c:31:f7:da:ce:75:
         33:bb:5f:ab:f4:06:fe:c4:40:f1:94:9d:02:f3:3f:00:e4:4f:
         dd:8b:20:d6:53:99:2b:cc:79:4e:c8:c2:d1:81:a4:09:0b:a5:
         04:e0:29:65:75:16:7a:36:6c:5b:49:1b:17:a5:7b:ba:9e:50:
         c1:b5:75:85:5b:8c:e7:18:7b:d4:5d:6e:0b:a1:a7:43:a1:3a:
         66:9c:dc:7f:bb:d8:38:8b:a7:d1:11:d5:1a:6d:57:db:03:d7:
         7b:7b:a9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----