Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/0/E53B5DAC54E1A974B57713FDFFFECC1553BC3C2E.mft
File:                     E53B5DAC54E1A974B57713FDFFFECC1553BC3C2E.mft (raw, json)
Hash identifier:          el8kEPJR0BprtPWVQyxs8zw6ubuwtLL44Bta+Mqv9Ys=
Subject key identifier:   79:77:DF:EA:73:F2:50:6B:AB:9B:9D:99:EC:49:17:B4:74:CC:E0:EE
Authority key identifier: E5:3B:5D:AC:54:E1:A9:74:B5:77:13:FD:FF:FE:CC:15:53:BC:3C:2E
Certificate issuer:       /CN=E53B5DAC54E1A974B57713FDFFFECC1553BC3C2E
Certificate serial:       1A2003CF502E5205FA48AA3801C7B86565CB68B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E53B5DAC54E1A974B57713FDFFFECC1553BC3C2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/0/E53B5DAC54E1A974B57713FDFFFECC1553BC3C2E.mft
Manifest number:          8B
Signing time:             Sun 14 Apr 2024 20:17:33 +0000
Manifest this update:     Sun 14 Apr 2024 20:12:33 +0000
Manifest next update:     Mon 15 Apr 2024 20:34:33 +0000
Files and hashes:         1: 3137302e3234362e36302e302f32322d3234203d3e20323636303239.roa (hash: 9U1WyHs86jW7mPdVXT16ycQPIe3EUa/KP0wfAVX6lYs=)
                          2: E53B5DAC54E1A974B57713FDFFFECC1553BC3C2E.crl (hash: a45/ftdXw0rIcg8WX302I0uuRdxdsyZzI7sDzq/8ar4=)
                          3: 323830343a333936383a3a2f33322d3438203d3e20323636303239.roa (hash: teTCP4bmx1nuIPPr5yzofOYhgDFztFPF76hG0Nncm78=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:20:03:cf:50:2e:52:05:fa:48:aa:38:01:c7:b8:65:65:cb:68:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E53B5DAC54E1A974B57713FDFFFECC1553BC3C2E
        Validity
            Not Before: Apr 14 20:12:33 2024 GMT
            Not After : Apr 15 20:34:33 2024 GMT
        Subject: CN=7977DFEA73F2506BAB9B9D99EC4917B474CCE0EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:81:67:78:6d:48:72:58:96:f8:35:bc:78:db:
                    ed:5a:45:0d:ff:25:60:10:2a:ae:83:e0:ca:b0:86:
                    67:3b:e4:28:ef:0a:53:d7:36:73:52:e2:7d:13:81:
                    9a:aa:ab:08:e7:1a:64:fa:13:25:dc:77:63:2e:c8:
                    80:b9:75:c3:12:c8:be:2c:bd:4a:e2:4b:c7:17:89:
                    db:17:66:c5:59:dd:70:a7:65:ae:30:1e:57:e2:ed:
                    33:25:c9:5f:c3:e7:d6:cc:9c:39:45:e3:21:09:6c:
                    91:1e:c6:8d:6a:59:59:22:d9:53:9f:48:a6:36:2a:
                    d0:60:3a:8d:ca:91:64:7c:31:af:5f:96:db:96:bc:
                    51:ef:50:5e:46:85:a9:44:d9:92:bd:c8:99:f6:2f:
                    7d:e9:32:9c:11:42:1e:de:d0:ab:44:f8:78:20:d0:
                    42:a3:cb:9b:b7:f1:24:70:47:4a:ba:3b:fa:fe:4b:
                    0d:43:7f:fb:25:f4:40:42:d5:95:fa:6e:df:8a:0e:
                    4c:a0:fb:9d:2d:bf:cd:8b:54:ee:dd:85:61:f6:b1:
                    0c:a5:f7:18:a5:a2:26:67:f2:66:90:7e:c0:0e:99:
                    6e:23:14:d9:44:b5:c8:92:16:03:7e:e8:f4:0e:d6:
                    58:86:35:77:8e:57:01:6d:24:f3:ff:01:d5:ca:9a:
                    58:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:77:DF:EA:73:F2:50:6B:AB:9B:9D:99:EC:49:17:B4:74:CC:E0:EE
            X509v3 Authority Key Identifier:
                keyid:E5:3B:5D:AC:54:E1:A9:74:B5:77:13:FD:FF:FE:CC:15:53:BC:3C:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/0/E53B5DAC54E1A974B57713FDFFFECC1553BC3C2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E53B5DAC54E1A974B57713FDFFFECC1553BC3C2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/0/E53B5DAC54E1A974B57713FDFFFECC1553BC3C2E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:17:e9:12:55:40:97:0d:5c:34:86:aa:27:fa:fe:fa:56:b8:
         8f:44:39:55:9c:14:79:ad:de:a8:d2:a1:fd:e5:28:38:c4:23:
         ee:88:58:1c:fb:a8:15:7b:d7:3f:13:fb:70:c3:2c:67:2e:bf:
         32:71:91:ea:ec:ae:d6:e2:13:df:96:91:52:d7:44:63:56:0c:
         e2:9a:11:2a:ff:3a:af:35:43:e7:87:7b:61:fa:4b:6d:57:6b:
         21:6b:ce:c7:0a:13:6b:7d:ca:30:15:0a:16:18:3e:4c:69:21:
         00:4b:4e:93:9c:14:19:c2:be:d5:db:59:a9:a5:05:cc:40:90:
         a0:53:c0:de:48:40:13:da:dd:23:64:5d:cf:3a:f2:a7:6b:08:
         11:35:e5:2c:10:41:28:93:fa:90:bc:7a:b8:ad:5f:75:3b:65:
         16:a7:0e:f4:16:81:02:2c:e1:59:4d:98:e1:d7:06:d9:10:6f:
         5f:3b:97:08:e7:77:8b:a9:47:ca:ce:03:5c:ed:86:08:73:57:
         dd:d7:9f:b7:23:a7:5a:cf:a4:08:76:8a:58:66:26:0b:9d:a3:
         a5:bc:74:cf:0a:62:3d:cf:6e:36:98:d3:81:cd:15:a0:43:92:
         92:f0:0f:68:13:dc:bc:74:cf:c3:c4:53:e3:be:70:21:1d:c9:
         f3:d7:46:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----