Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/0/E5A8CF793535D99A58F9F8C736468C1E96613685.mft
File:                     E5A8CF793535D99A58F9F8C736468C1E96613685.mft (raw, json)
Hash identifier:          XQiG0+19euKfk+WVShTrnsKbO/RFlSY5phH86YI3VV8=
Subject key identifier:   23:42:0E:0D:E2:A3:DA:2C:78:4C:14:5C:AE:DE:D9:2D:FD:73:82:CD
Authority key identifier: E5:A8:CF:79:35:35:D9:9A:58:F9:F8:C7:36:46:8C:1E:96:61:36:85
Certificate issuer:       /CN=E5A8CF793535D99A58F9F8C736468C1E96613685
Certificate serial:       7790B370E47199D015F22E690E95098FF46D4C70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5A8CF793535D99A58F9F8C736468C1E96613685.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/0/E5A8CF793535D99A58F9F8C736468C1E96613685.mft
Manifest number:          0341
Signing time:             Mon 15 Apr 2024 00:38:31 +0000
Manifest this update:     Mon 15 Apr 2024 00:33:31 +0000
Manifest next update:     Tue 16 Apr 2024 01:48:31 +0000
Files and hashes:         1: 3230312e3135392e3132302e302f32322d3234203d3e203631383132.roa (hash: 7+e8EWqwNUvhSt82Z/dxU7QeIAc+/4KKh48CRHBKqUU=)
                          2: E5A8CF793535D99A58F9F8C736468C1E96613685.crl (hash: lXY1x/oX18MRbE0rbfxRL69iCMTm8+C50R2lST4V5NQ=)
                          3: 323830343a313962303a3a2f33322d3438203d3e203631383132.roa (hash: q3E1EIKIc9Ux+0KxRT6srP8KW/mZwagX5rWmwBx20R0=)
                          4: 3137302e38332e3132382e302f32322d3234203d3e203631383132.roa (hash: 5VdBcEFLKI5fXuWb+JuOUuLYAmp4sxsdXUEY8MUgAE0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:90:b3:70:e4:71:99:d0:15:f2:2e:69:0e:95:09:8f:f4:6d:4c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A8CF793535D99A58F9F8C736468C1E96613685
        Validity
            Not Before: Apr 15 00:33:31 2024 GMT
            Not After : Apr 16 01:48:31 2024 GMT
        Subject: CN=23420E0DE2A3DA2C784C145CAEDED92DFD7382CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:70:9b:c9:95:da:af:9d:24:de:bd:50:6f:e9:
                    0f:45:fc:85:58:3f:72:0d:99:73:05:23:6f:6d:eb:
                    bf:96:3c:a4:c2:59:ce:67:8b:bd:a9:1c:f9:85:f0:
                    a2:aa:e7:91:63:fa:32:55:01:09:4e:8f:f1:00:71:
                    50:18:32:f3:aa:d7:97:e0:36:e7:65:e5:cb:e7:b8:
                    96:6d:77:44:ac:4a:f5:13:20:4e:11:b3:ee:03:7b:
                    5e:b8:68:0b:85:fd:c7:07:2d:85:42:1f:df:32:af:
                    5a:d2:77:3f:7b:50:77:83:93:d9:4d:6d:a6:73:76:
                    fd:a1:40:4e:de:ed:84:0a:92:f5:21:75:e5:21:a6:
                    be:68:4e:bc:c5:db:1a:af:bf:27:b9:eb:50:eb:9c:
                    15:07:c5:89:0f:51:54:57:e6:f8:eb:76:9e:1e:89:
                    5b:4d:bd:8a:7f:20:14:dc:9c:36:31:43:4d:53:21:
                    0f:66:d1:81:0b:d6:63:f2:a2:22:7f:3d:af:a7:6d:
                    f6:20:14:63:73:99:1b:68:17:dc:55:78:b4:d4:10:
                    45:d7:0a:b4:51:be:ea:89:d6:f0:d8:3f:ae:90:e8:
                    f0:8f:e1:3a:37:5c:b1:82:fb:27:76:d0:99:2c:d3:
                    e2:3d:cd:fe:73:23:a6:14:83:72:c2:74:53:23:89:
                    dd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:42:0E:0D:E2:A3:DA:2C:78:4C:14:5C:AE:DE:D9:2D:FD:73:82:CD
            X509v3 Authority Key Identifier:
                keyid:E5:A8:CF:79:35:35:D9:9A:58:F9:F8:C7:36:46:8C:1E:96:61:36:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/0/E5A8CF793535D99A58F9F8C736468C1E96613685.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5A8CF793535D99A58F9F8C736468C1E96613685.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/0/E5A8CF793535D99A58F9F8C736468C1E96613685.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:85:9c:ae:75:3f:88:ce:51:24:60:86:26:12:76:83:75:c0:
         3e:d1:b7:46:06:68:3c:15:0b:9f:71:b1:bd:a2:a6:9d:1b:61:
         c1:cb:13:1d:36:71:62:75:f6:74:ef:12:6c:98:52:09:b5:1f:
         0b:c1:7c:cb:bb:ba:4c:b7:b9:3a:f6:45:66:08:28:11:a6:fa:
         73:79:d0:e7:2a:da:39:43:2d:e3:db:40:d7:ff:25:98:40:91:
         3b:f8:39:e1:97:75:b9:9a:c9:61:ed:e0:dc:75:c9:e8:b3:d3:
         0f:1d:50:4d:55:45:8e:e3:96:21:b2:d1:fe:19:e5:58:06:82:
         83:79:1c:c6:06:a7:a3:9a:05:20:f6:25:7b:9c:10:ab:10:c4:
         b3:17:2f:dd:ab:d4:77:b3:a3:9f:85:25:2d:7d:6a:8c:f7:bf:
         79:81:fc:36:ce:3c:b1:df:d2:b2:c6:57:10:0f:ba:82:29:f7:
         54:1d:aa:9c:e9:a2:b0:d4:5d:f1:a5:40:a5:6c:59:35:99:cf:
         26:8a:f1:7a:36:84:6b:b6:61:81:7f:31:6a:e7:91:fe:62:a4:
         fb:20:45:13:f0:03:10:9f:0d:e9:4f:9f:f2:cb:ad:dc:fe:e6:
         01:c0:f3:79:37:55:34:a7:0b:c6:e1:9a:31:e8:fe:45:f3:b7:
         39:61:2d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----