Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3NsfUf7aETP5ra1e7esic51oHm1tfaKL7L5npiriwpPr/1/EFD87B61404E88F8122A7006405D792CBF3DB6BE.mft
File:                     EFD87B61404E88F8122A7006405D792CBF3DB6BE.mft (raw, json)
Hash identifier:          h7aPIut7YgHKAzMMAIn1mRGb8BI3Ayg1tNxDOpC/cCs=
Subject key identifier:   AF:35:35:A3:2A:65:CA:26:ED:A4:04:52:76:7C:00:7C:1A:48:CD:5E
Authority key identifier: EF:D8:7B:61:40:4E:88:F8:12:2A:70:06:40:5D:79:2C:BF:3D:B6:BE
Certificate issuer:       /CN=EFD87B61404E88F8122A7006405D792CBF3DB6BE
Certificate serial:       4A141CB478C840E26F48CBBC62EA889085582863
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFD87B61404E88F8122A7006405D792CBF3DB6BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NsfUf7aETP5ra1e7esic51oHm1tfaKL7L5npiriwpPr/1/EFD87B61404E88F8122A7006405D792CBF3DB6BE.mft
Manifest number:          E1
Signing time:             Tue 17 Sep 2024 22:23:58 +0000
Manifest this update:     Tue 17 Sep 2024 22:18:58 +0000
Manifest next update:     Thu 19 Sep 2024 01:02:58 +0000
Files and hashes:         1: EFD87B61404E88F8122A7006405D792CBF3DB6BE.crl (hash: EIrfj35GCSNDsNMp4uXTOpEk/jPYoyhVh4vMr7nBBvA=)
                          2: 323830343a353339383a3a2f33322d3336203d3e20323638353934.roa (hash: +uim6oOSlkIRrXhvhYyPLTu5UQty7olfRabz9I0J3ms=)
                          3: 34352e3136332e33322e302f32322d3234203d3e20323638353934.roa (hash: Wp+gp9SDpbGDUGBhE20Q8KWf/D/32rWCF3dxXokt2Gs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:14:1c:b4:78:c8:40:e2:6f:48:cb:bc:62:ea:88:90:85:58:28:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFD87B61404E88F8122A7006405D792CBF3DB6BE
        Validity
            Not Before: Sep 17 22:18:58 2024 GMT
            Not After : Sep 19 01:02:58 2024 GMT
        Subject: CN=AF3535A32A65CA26EDA40452767C007C1A48CD5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2d:b2:9e:c6:99:5c:e0:a0:15:e5:44:99:70:
                    81:69:6d:8f:36:3b:ac:87:fe:68:87:b0:cd:11:2f:
                    6b:1f:48:7d:bb:37:38:51:37:a8:3d:6a:aa:06:a2:
                    5e:db:94:95:5c:1a:e6:fa:21:fd:20:06:b0:4b:f1:
                    41:ce:a5:32:e7:8c:7f:f6:3b:62:52:40:b8:90:02:
                    48:91:ce:4a:a8:55:8f:ba:59:6b:d0:d0:3c:be:1d:
                    0f:d7:e5:2e:3b:39:d4:88:ed:b8:0b:d9:da:c9:7d:
                    94:5a:98:3f:b0:41:58:db:0b:b3:48:99:31:0a:a0:
                    2b:99:a1:3d:91:87:56:93:f3:a2:b0:bf:24:1c:ac:
                    ff:cc:ee:0c:c6:87:de:ea:e6:c1:5f:40:13:f7:c3:
                    bf:4c:9e:23:6b:19:a6:dc:48:98:5c:ed:94:19:a9:
                    2b:85:e0:e8:be:56:49:7b:bc:e6:fa:34:2e:f6:bf:
                    aa:f0:e4:b7:b6:6a:09:22:d8:2c:cf:57:02:25:68:
                    a0:75:a8:a4:c4:84:07:eb:4f:a3:0f:7d:de:a2:42:
                    07:a4:21:34:c4:de:fd:ea:ff:42:36:e4:9f:60:6a:
                    b3:5f:5c:d7:82:ea:1a:49:c2:7b:ac:02:11:93:c1:
                    9f:04:db:1a:9d:5b:92:03:a0:ef:33:da:1f:e7:36:
                    21:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:35:35:A3:2A:65:CA:26:ED:A4:04:52:76:7C:00:7C:1A:48:CD:5E
            X509v3 Authority Key Identifier:
                keyid:EF:D8:7B:61:40:4E:88:F8:12:2A:70:06:40:5D:79:2C:BF:3D:B6:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NsfUf7aETP5ra1e7esic51oHm1tfaKL7L5npiriwpPr/1/EFD87B61404E88F8122A7006405D792CBF3DB6BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFD87B61404E88F8122A7006405D792CBF3DB6BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NsfUf7aETP5ra1e7esic51oHm1tfaKL7L5npiriwpPr/1/EFD87B61404E88F8122A7006405D792CBF3DB6BE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:b2:3e:b5:4c:65:ef:0f:35:91:0a:f0:01:b1:ef:b0:6f:bd:
         b5:5a:36:3d:57:ec:1d:4d:75:30:13:8e:5c:dd:7d:f4:fa:af:
         83:34:d8:d0:9e:19:4c:a7:fd:a7:21:16:8a:21:e5:1c:db:25:
         f2:68:a8:3e:8e:d0:35:30:0c:fb:53:3d:7f:8f:62:13:eb:4c:
         6f:fa:ba:e2:53:a0:43:f6:9d:b0:f5:38:49:ab:c7:8e:6c:6e:
         10:a2:9d:00:d9:e9:54:92:bc:bc:b6:e6:b4:76:f4:b6:fb:ba:
         7d:ad:a7:2c:0b:6c:0e:4a:db:e4:34:8f:d0:a5:e9:36:e1:31:
         b2:c6:0b:c1:21:a4:fb:14:09:b4:14:93:64:95:47:12:53:2f:
         78:d1:bf:fe:62:29:de:c8:cb:9a:0a:c5:4b:2b:00:50:bd:be:
         39:75:cf:80:58:38:c5:f0:b7:34:24:e7:cb:69:77:fa:73:70:
         ac:8c:ca:1c:27:91:a7:6f:60:98:60:8a:e7:19:92:37:ea:6c:
         13:7a:ba:5c:60:32:e2:75:60:93:5c:fb:4a:4d:6d:fd:c1:6d:
         ea:88:10:8e:e0:9f:99:5b:0a:f2:7b:db:b3:b0:65:83:e4:f2:
         e8:72:9d:d5:ba:01:4b:73:11:46:39:73:e0:b2:f6:7a:47:b7:
         cd:8a:8b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----