Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/0/794ABB590E08053920E07BE29B54C6B3636F3107.mft
File:                     794ABB590E08053920E07BE29B54C6B3636F3107.mft (raw, json)
Hash identifier:          7qYtMpD7hlMQXga6TaUfDzU95NGM4eMuDL/9HlA1PAw=
Subject key identifier:   E8:B9:08:64:3D:B9:9D:92:26:A5:29:D9:41:ED:1F:EE:78:A1:38:F8
Authority key identifier: 79:4A:BB:59:0E:08:05:39:20:E0:7B:E2:9B:54:C6:B3:63:6F:31:07
Certificate issuer:       /CN=794ABB590E08053920E07BE29B54C6B3636F3107
Certificate serial:       5E0CC9655CC611F38BB09ADAEDC89C49E8CEF4BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/794ABB590E08053920E07BE29B54C6B3636F3107.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/0/794ABB590E08053920E07BE29B54C6B3636F3107.mft
Manifest number:          021E
Signing time:             Wed 17 Jan 2024 18:35:04 +0000
Manifest this update:     Wed 17 Jan 2024 18:30:04 +0000
Manifest next update:     Thu 18 Jan 2024 20:26:04 +0000
Files and hashes:         1: 794ABB590E08053920E07BE29B54C6B3636F3107.crl (hash: q4qAFUr2/zUwsj0cV0uMDEQKJ+zCiE5EMw9FOc0fu/o=)
                          2: 34352e3137352e31322e302f32322d3234203d3e20323638383734.roa (hash: CLE0j11iKP5l1J3iCywhfzJ5+p3z5u7WiYFr+h9rsao=)
                          3: 323830343a356265303a3a2f33322d3335203d3e20323638383734.roa (hash: e6wdp7jkWelfaXAz//nQDbDvMymVDdCJtIGjtPok2DQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:0c:c9:65:5c:c6:11:f3:8b:b0:9a:da:ed:c8:9c:49:e8:ce:f4:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=794ABB590E08053920E07BE29B54C6B3636F3107
        Validity
            Not Before: Jan 17 18:30:04 2024 GMT
            Not After : Jan 18 20:26:04 2024 GMT
        Subject: CN=E8B908643DB99D9226A529D941ED1FEE78A138F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4c:5d:9a:de:ec:97:38:fb:65:6b:f8:93:52:
                    84:c9:59:8c:92:24:36:57:1b:a5:47:12:d6:d5:9b:
                    d9:f0:5a:14:e8:17:cb:b1:17:b0:a7:f9:28:35:de:
                    41:29:98:ca:87:59:93:b0:4c:15:88:fd:86:b6:14:
                    d3:8c:11:be:a0:a1:d6:63:da:80:fb:61:1e:ce:3c:
                    4b:87:76:d1:6a:57:24:df:b8:74:59:fc:74:a5:a4:
                    d4:8d:a2:c1:8a:f6:f1:25:5d:a4:35:88:ca:69:78:
                    6a:a7:dc:ea:7b:89:38:d1:54:38:d3:62:b2:d9:6b:
                    fd:6e:b9:a9:9e:0b:87:2f:b1:76:4e:6a:58:89:df:
                    dc:f0:17:45:e2:4c:a6:c5:18:f3:c3:02:fc:b9:9b:
                    bb:e8:0c:92:d1:c9:bf:fa:19:0b:cc:8c:fe:55:0a:
                    52:e7:c4:0e:0d:63:ff:23:35:aa:45:b1:67:ab:17:
                    63:3b:36:14:fc:00:db:2c:fa:dd:bd:a0:cc:9e:14:
                    7d:a1:64:fc:5e:b8:0a:4c:f9:3e:5a:26:6f:64:0e:
                    f0:50:8c:b3:e6:b9:c3:43:f3:b0:d1:a7:06:e0:8b:
                    29:1e:9f:70:4a:eb:15:f5:08:d6:10:17:51:94:db:
                    50:b8:37:ec:c4:2d:9a:31:55:e2:dd:62:ba:d0:e3:
                    d2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B9:08:64:3D:B9:9D:92:26:A5:29:D9:41:ED:1F:EE:78:A1:38:F8
            X509v3 Authority Key Identifier:
                keyid:79:4A:BB:59:0E:08:05:39:20:E0:7B:E2:9B:54:C6:B3:63:6F:31:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/0/794ABB590E08053920E07BE29B54C6B3636F3107.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/794ABB590E08053920E07BE29B54C6B3636F3107.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/0/794ABB590E08053920E07BE29B54C6B3636F3107.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:ce:7b:25:65:9b:38:cf:42:1d:83:2b:d2:79:09:60:9d:2f:
         1c:41:65:55:d3:f7:de:45:1d:27:4b:fd:d5:a1:1b:3f:63:54:
         27:01:0b:16:ad:b8:fd:05:9e:13:a5:e4:2c:8b:85:cc:bd:73:
         1a:dc:bb:44:8f:c7:93:82:45:0a:5a:a4:db:b0:ba:c0:c9:f9:
         d5:ce:5f:9d:f7:af:9f:51:24:59:9b:fa:01:06:76:fe:85:60:
         f8:64:fb:0d:cc:bb:b9:e3:ab:64:76:3a:3c:c2:a1:32:b7:d4:
         4b:ba:07:14:9d:f9:28:63:60:bd:8a:3b:6e:35:f7:d3:6c:b7:
         82:d0:cb:99:ce:ab:84:0e:ea:6c:85:52:7c:1d:cb:30:cf:09:
         6e:9e:f9:6c:86:9c:fc:59:0d:37:95:d3:a0:ac:51:1f:4a:aa:
         80:76:35:17:44:6b:53:3c:a2:c6:d0:e3:a2:d3:9c:fd:f7:37:
         e7:8e:e0:15:e3:b5:20:b9:4e:7b:66:9e:14:08:05:4d:12:90:
         f4:89:20:4e:2b:12:31:7a:c1:f5:35:63:d6:57:95:3d:74:f4:
         7c:8d:4c:93:3f:0c:ec:ee:a0:2a:6c:d8:29:59:d3:f8:2a:dc:
         38:28:b5:06:d3:56:2a:53:bd:ed:f7:18:9e:53:0f:e2:95:61:
         90:c7:0d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----