Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3HBh2AEbEFB6rWMdHLYS4tYza1MbYNK4x79riwawvZ9e/0/EFAFB1EB50066E12838301F26F7B2DF7B736A78F.mft
File:                     EFAFB1EB50066E12838301F26F7B2DF7B736A78F.mft (raw, json)
Hash identifier:          Zd0t3vgNZr5lteiSUWfWKOuZUH17EMZsqFkFCHo3zXU=
Subject key identifier:   A1:1F:9C:A3:18:A5:2D:5E:A2:08:70:DD:5A:19:C3:5A:C2:69:70:88
Authority key identifier: EF:AF:B1:EB:50:06:6E:12:83:83:01:F2:6F:7B:2D:F7:B7:36:A7:8F
Certificate issuer:       /CN=EFAFB1EB50066E12838301F26F7B2DF7B736A78F
Certificate serial:       4E3F503B55569EA7C18C466F231444CA5722BF07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAFB1EB50066E12838301F26F7B2DF7B736A78F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HBh2AEbEFB6rWMdHLYS4tYza1MbYNK4x79riwawvZ9e/0/EFAFB1EB50066E12838301F26F7B2DF7B736A78F.mft
Manifest number:          11
Signing time:             Tue 08 Oct 2024 00:10:48 +0000
Manifest this update:     Tue 08 Oct 2024 00:05:48 +0000
Manifest next update:     Wed 09 Oct 2024 02:37:48 +0000
Files and hashes:         1: 3133382e39342e33362e302f32342d3234203d3e20323634313037.roa (hash: OBR9pU5ughOCkRKZifMpZuWRt2LR94gzzmbXMdd25Z0=)
                          2: 3133382e39342e33372e302f32342d3234203d3e20323634313037.roa (hash: 2SjH8W0HRqXoq7NnSlkjZFbTsiHgfNSsqMUBAF+8bkg=)
                          3: EFAFB1EB50066E12838301F26F7B2DF7B736A78F.crl (hash: yZqSXwFhaHwsR7eH89mGJ974JHc+g3fttuZTlYrg3fg=)
                          4: 3133382e39342e33392e302f32342d3234203d3e20323634313037.roa (hash: JSAChp2cKbT5o71GcT1zbRJKLosXWSBSIfFandJYlNA=)
                          5: 3133382e39342e33382e302f32342d3234203d3e20323634313037.roa (hash: X9+4ASzH9QwQxPlM2sKban2vnjm55P3rKjT9T6m2G+I=)
                          6: 323830343a323238633a633030303a3a2f34382d3438203d3e20323634313037.roa (hash: XKrkzNwCRS2FuA4C5goaUkN36gMH8xJkQ5grX7vGXvU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:3f:50:3b:55:56:9e:a7:c1:8c:46:6f:23:14:44:ca:57:22:bf:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFAFB1EB50066E12838301F26F7B2DF7B736A78F
        Validity
            Not Before: Oct  8 00:05:48 2024 GMT
            Not After : Oct  9 02:37:48 2024 GMT
        Subject: CN=A11F9CA318A52D5EA20870DD5A19C35AC2697088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2f:01:6d:6b:1a:df:bd:6b:f9:76:9f:3c:cc:
                    05:7a:92:ba:30:9c:f4:c7:d8:fa:a2:36:5c:25:fa:
                    65:4f:5b:85:19:ef:68:dd:55:f2:7c:fa:8b:c5:b3:
                    14:c6:11:fd:12:01:23:d5:5c:2e:b0:a5:b3:1e:70:
                    0d:a2:21:73:05:c8:5a:74:94:a0:9a:d7:7f:c1:ab:
                    2c:0b:80:32:29:e1:9a:ed:a5:ac:64:27:0e:23:5d:
                    bc:fa:07:83:13:a3:d6:0a:c9:26:ae:2e:f6:e8:ed:
                    05:4c:df:9a:a2:c5:ac:36:8f:27:7a:33:bc:9a:77:
                    d3:88:f6:b3:aa:55:d3:0d:07:dd:86:65:73:2e:cf:
                    14:49:80:0f:0a:53:ec:75:cb:85:4c:bb:a3:5e:1e:
                    38:40:4b:a4:c4:54:1d:2c:9d:7b:7f:32:60:17:2e:
                    dc:cf:5d:a5:57:6a:05:82:02:14:02:4a:47:60:c8:
                    5a:b7:0a:a0:96:07:d7:9d:e3:81:73:44:f4:8d:4a:
                    c0:c9:12:1c:e4:e6:01:36:77:2d:b4:ab:5d:3e:d6:
                    70:9e:24:71:19:9c:41:01:3f:76:27:a1:17:af:76:
                    40:44:65:cd:84:ce:1a:12:41:14:fb:8e:f2:62:97:
                    cc:ed:82:7e:3e:31:58:0b:cf:1a:d4:49:a6:26:c3:
                    d3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:1F:9C:A3:18:A5:2D:5E:A2:08:70:DD:5A:19:C3:5A:C2:69:70:88
            X509v3 Authority Key Identifier:
                keyid:EF:AF:B1:EB:50:06:6E:12:83:83:01:F2:6F:7B:2D:F7:B7:36:A7:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HBh2AEbEFB6rWMdHLYS4tYza1MbYNK4x79riwawvZ9e/0/EFAFB1EB50066E12838301F26F7B2DF7B736A78F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAFB1EB50066E12838301F26F7B2DF7B736A78F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HBh2AEbEFB6rWMdHLYS4tYza1MbYNK4x79riwawvZ9e/0/EFAFB1EB50066E12838301F26F7B2DF7B736A78F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:4e:d2:be:2e:68:04:8c:d2:65:d4:3a:fa:d7:48:a1:e5:e1:
         2a:27:34:03:39:05:cb:1c:dc:a0:0a:0b:46:ac:1a:5c:a0:30:
         55:6e:5e:17:57:bc:8c:0c:cf:5f:3c:59:77:66:73:a0:7e:92:
         9f:68:ac:1e:87:3e:f7:c4:92:48:a8:4b:5c:9d:76:5b:28:56:
         86:4a:83:e1:71:44:9a:7a:06:d4:d8:2e:71:f4:0d:02:79:1b:
         51:6a:33:01:14:fc:fb:c8:93:69:c7:c2:1f:be:00:a1:5a:a6:
         e6:19:22:fe:88:d7:da:7e:b8:cd:36:c8:98:85:c6:20:94:d4:
         45:f4:c8:4d:40:b1:9a:32:aa:4d:b7:88:74:8e:2a:6e:45:e3:
         6f:a2:16:b8:ce:29:56:ad:5f:94:e6:35:9f:bb:fc:00:98:0b:
         d0:4a:6e:a4:c4:67:2f:c7:18:00:da:da:c8:3b:a7:e4:e4:30:
         1d:9a:19:15:79:98:9b:23:a3:8d:bd:2e:cd:56:52:a7:fb:b0:
         f5:53:8d:c3:18:36:dc:d5:40:08:31:78:23:31:74:f3:25:97:
         74:b4:34:f1:b9:51:77:d6:09:9b:98:ce:ab:53:f6:56:db:d0:
         e9:79:20:56:d7:b2:d2:ea:71:19:c2:93:f0:7b:6b:7e:2c:1c:
         19:ad:99:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----