Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2vTjk6WecxVrYJYTGQjhK46ReiYien2FDPpQYMr68AGU/0/EB3A64DF8C582A21481B7978AB002615ADCB5DFE.mft
File:                     EB3A64DF8C582A21481B7978AB002615ADCB5DFE.mft (raw, json)
Hash identifier:          XVC1fv/Aa9i9hyUyBU5WdtBZ/rvr/Jen7TwkrpLbCYA=
Subject key identifier:   9D:D1:88:D4:C4:40:1B:F9:99:D7:EF:57:1F:2F:8C:9A:34:2D:61:C0
Authority key identifier: EB:3A:64:DF:8C:58:2A:21:48:1B:79:78:AB:00:26:15:AD:CB:5D:FE
Certificate issuer:       /CN=EB3A64DF8C582A21481B7978AB002615ADCB5DFE
Certificate serial:       7D860C3D30170D89ECB0F84CA0C12B87028F01F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB3A64DF8C582A21481B7978AB002615ADCB5DFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vTjk6WecxVrYJYTGQjhK46ReiYien2FDPpQYMr68AGU/0/EB3A64DF8C582A21481B7978AB002615ADCB5DFE.mft
Manifest number:          028A
Signing time:             Mon 15 Apr 2024 06:13:15 +0000
Manifest this update:     Mon 15 Apr 2024 06:08:15 +0000
Manifest next update:     Tue 16 Apr 2024 06:15:15 +0000
Files and hashes:         1: 3139302e3131332e36302e302f32332d3234203d3e20323731333231.roa (hash: kR+7tqgpAHnXDqBfGuHLiqIYbgrLypgAIAl/3zv+WKE=)
                          2: 323830343a373962303a3a2f33322d3438203d3e20323731333231.roa (hash: dFYUrugaX0bkYkqPcwjMAxIePQXI+rc+2td5fYK3zKE=)
                          3: EB3A64DF8C582A21481B7978AB002615ADCB5DFE.crl (hash: SzTRbk+Q1HmK3i3NWgMBMWuL73QSJJRnILSqOIYgRwA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:86:0c:3d:30:17:0d:89:ec:b0:f8:4c:a0:c1:2b:87:02:8f:01:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB3A64DF8C582A21481B7978AB002615ADCB5DFE
        Validity
            Not Before: Apr 15 06:08:15 2024 GMT
            Not After : Apr 16 06:15:15 2024 GMT
        Subject: CN=9DD188D4C4401BF999D7EF571F2F8C9A342D61C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f5:0b:d9:0f:0e:c7:cf:6d:bd:6b:69:06:20:
                    ef:4f:83:62:e6:8f:a0:6d:e3:11:36:96:c5:88:7e:
                    50:30:a4:3d:bc:82:c8:f1:72:0f:a2:53:92:46:46:
                    b7:7e:2c:09:1f:b5:b9:97:36:fc:f3:da:14:01:bd:
                    88:3f:17:ce:46:ed:2c:ba:f5:73:7e:d2:23:86:e0:
                    d5:d5:54:b7:e3:e3:79:52:0c:f1:3c:21:8c:00:c1:
                    74:fd:92:69:13:34:6e:11:39:dd:ce:ca:ff:1c:2a:
                    9f:4b:16:21:0e:15:be:e3:cb:df:f2:76:71:0c:3f:
                    5c:1b:f7:6c:5b:2b:e4:a1:b2:c4:4f:70:1d:f4:dc:
                    48:51:43:63:4f:8f:a1:3a:eb:9d:bd:77:57:e1:6c:
                    e6:a1:58:78:88:72:d4:11:42:f3:96:3f:01:9c:8c:
                    31:13:32:cd:20:46:38:29:85:39:6b:92:e3:24:de:
                    c2:e3:85:aa:14:10:cf:85:8b:28:2b:dd:82:23:09:
                    40:15:9e:d6:a8:55:fc:ac:cf:c0:5d:18:ea:69:28:
                    34:66:b6:87:d8:d2:65:b1:86:df:a3:1d:6b:53:04:
                    ad:f6:63:e6:e5:89:ed:82:9c:0d:02:2c:d0:07:5e:
                    51:47:5e:b8:cf:5c:28:b2:c2:a1:ac:57:61:ec:6a:
                    98:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D1:88:D4:C4:40:1B:F9:99:D7:EF:57:1F:2F:8C:9A:34:2D:61:C0
            X509v3 Authority Key Identifier:
                keyid:EB:3A:64:DF:8C:58:2A:21:48:1B:79:78:AB:00:26:15:AD:CB:5D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vTjk6WecxVrYJYTGQjhK46ReiYien2FDPpQYMr68AGU/0/EB3A64DF8C582A21481B7978AB002615ADCB5DFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB3A64DF8C582A21481B7978AB002615ADCB5DFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vTjk6WecxVrYJYTGQjhK46ReiYien2FDPpQYMr68AGU/0/EB3A64DF8C582A21481B7978AB002615ADCB5DFE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:dc:1b:4b:cb:03:21:b5:39:71:75:f4:9a:1e:60:30:40:6e:
         c8:41:e4:05:78:78:04:de:fb:f3:e6:24:30:a2:3a:8b:7b:7e:
         23:a1:07:bc:68:05:5d:7d:09:5d:ba:82:20:94:94:e5:2e:21:
         7b:77:5b:8b:b1:b5:ba:d0:21:28:d5:74:2c:09:8f:26:bb:6d:
         5a:bd:2b:73:fb:82:7e:d2:85:f5:69:07:78:40:e3:7a:67:4b:
         00:d4:aa:f7:4c:e9:f0:67:23:2a:ce:e6:f3:70:c3:9d:41:98:
         d1:d3:ba:b3:35:0e:73:ad:7f:fd:f6:57:d3:d3:06:78:f1:42:
         45:e2:35:e2:67:e3:55:82:b9:03:b8:5b:4e:b8:e8:5d:0e:e5:
         7d:36:5b:07:78:6d:c9:70:03:3d:fe:a4:89:10:b7:cd:da:e7:
         56:28:e7:de:c2:c4:fb:f4:03:c4:e7:75:0f:98:ed:14:c6:24:
         d4:35:38:fd:14:b8:4a:2c:ca:86:98:b0:64:74:e3:eb:e8:72:
         af:fd:81:e8:de:54:ec:8d:8f:c6:fe:96:42:77:c0:93:67:3a:
         83:04:7c:a8:75:53:c3:c3:54:53:61:83:c1:8b:c6:be:3f:5f:
         a6:b7:b3:2b:7b:cf:ea:72:49:c7:5e:36:7e:14:68:cd:9a:59:
         76:ee:dc:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----