Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/EB267F225120A17D23E7556006294E823942BEEE.mft
File:                     EB267F225120A17D23E7556006294E823942BEEE.mft (raw, json)
Hash identifier:          RjiLdPovONwjGXB/Xs7FZP2FKf+NCBuMDGDfvvyQsEU=
Subject key identifier:   3B:86:0B:E9:54:BB:AC:C0:61:1B:8A:44:07:AB:C3:32:F2:1C:D0:C5
Authority key identifier: EB:26:7F:22:51:20:A1:7D:23:E7:55:60:06:29:4E:82:39:42:BE:EE
Certificate issuer:       /CN=EB267F225120A17D23E7556006294E823942BEEE
Certificate serial:       3BC68CC1E75F887F10BD2D1144E97846DE2600B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB267F225120A17D23E7556006294E823942BEEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/EB267F225120A17D23E7556006294E823942BEEE.mft
Manifest number:          024B
Signing time:             Mon 15 Apr 2024 07:22:03 +0000
Manifest this update:     Mon 15 Apr 2024 07:17:03 +0000
Manifest next update:     Tue 16 Apr 2024 09:35:03 +0000
Files and hashes:         1: 323830343a373636383a3a2f33322d3634203d3e20323731313130.roa (hash: Fa+vBd4/H9IkG+5sYRAK42PKPL0lhH0CljS/VFfTC20=)
                          2: 3136302e32302e3137362e302f32322d3234203d3e20323731313130.roa (hash: tEWkjmCXpLpjJzNZeHZY1eUtry9HPZHqUiPDunvf0DM=)
                          3: EB267F225120A17D23E7556006294E823942BEEE.crl (hash: bxL9yvMyED1DGe2p/0kI/7SBvrxEfD6DrIJcJOTTLks=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:c6:8c:c1:e7:5f:88:7f:10:bd:2d:11:44:e9:78:46:de:26:00:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB267F225120A17D23E7556006294E823942BEEE
        Validity
            Not Before: Apr 15 07:17:03 2024 GMT
            Not After : Apr 16 09:35:03 2024 GMT
        Subject: CN=3B860BE954BBACC0611B8A4407ABC332F21CD0C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1c:40:03:d3:c3:fd:70:cf:22:7b:ee:d6:c1:
                    50:27:f5:ae:aa:07:72:ee:6b:11:65:68:11:2e:8c:
                    64:8d:b4:a7:03:24:68:a0:b2:cc:09:d0:b2:2e:5c:
                    42:25:95:41:1c:7a:c1:d5:98:b9:d6:3e:30:95:b9:
                    48:c0:2f:76:1c:15:e0:35:01:65:7b:76:9c:9a:d5:
                    f3:8a:93:cd:13:65:d9:15:0e:c0:8d:05:51:ee:74:
                    c5:d5:17:64:c4:99:f8:ad:7a:d3:7e:03:e2:b7:49:
                    09:69:7a:9c:ed:9d:d2:47:cc:31:47:a4:dc:1a:f9:
                    6b:11:cf:9f:dc:b8:aa:35:fd:f0:6e:aa:9a:de:61:
                    05:91:97:0b:39:37:34:10:ba:53:e0:50:ed:f5:01:
                    9f:d6:93:ae:3e:e0:db:ab:4b:67:9b:bd:ba:1f:f6:
                    d1:76:a0:f1:77:a2:1b:e2:f1:01:ae:26:88:05:a1:
                    b9:45:e3:3c:83:32:e0:33:5c:4d:f4:c5:2e:fa:0a:
                    0a:7a:fa:22:81:52:17:6b:27:fc:91:74:91:c6:0b:
                    4c:9e:01:1a:0b:ae:4f:9d:b8:8d:3d:a1:60:35:7c:
                    7e:fc:65:3e:3a:07:90:97:7f:dd:89:2d:bb:b0:8d:
                    28:a8:8c:fc:58:d1:89:0b:86:98:9b:66:50:c9:c4:
                    62:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:86:0B:E9:54:BB:AC:C0:61:1B:8A:44:07:AB:C3:32:F2:1C:D0:C5
            X509v3 Authority Key Identifier:
                keyid:EB:26:7F:22:51:20:A1:7D:23:E7:55:60:06:29:4E:82:39:42:BE:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/EB267F225120A17D23E7556006294E823942BEEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB267F225120A17D23E7556006294E823942BEEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/EB267F225120A17D23E7556006294E823942BEEE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e6:db:fc:91:1e:05:60:1f:c6:e2:27:a1:c1:ac:bd:4e:92:11:
         4d:5a:86:78:d4:12:99:68:71:09:82:1c:fd:45:5b:eb:6f:21:
         d1:07:0f:78:3c:eb:13:da:dc:62:19:18:bd:13:0a:f3:59:c5:
         09:c9:3f:4f:11:3e:d1:a2:92:84:1b:d1:2c:10:e1:80:34:ac:
         1c:cf:d0:13:8d:94:b2:bd:62:ab:1a:68:ec:0e:78:8b:cf:31:
         a1:cb:93:9f:4c:a2:ff:31:ab:f8:d6:d6:0d:42:91:52:1f:ce:
         24:52:38:7a:f6:dc:63:34:c4:a8:ba:30:d3:9b:07:bf:c9:ac:
         5a:b2:0d:c1:0b:4f:a9:47:69:94:0c:22:c6:82:3a:6e:44:fa:
         9d:fc:4f:84:63:60:32:c0:37:d1:a7:06:cc:fd:a4:f3:a6:b2:
         e7:40:9a:16:67:c0:22:7e:bd:10:7d:54:0a:9d:0f:e9:fd:cf:
         2a:b8:5e:bc:f5:96:30:8f:a2:07:79:14:bf:61:6a:99:5e:7f:
         48:bb:08:e4:66:2a:d2:29:ae:46:b2:ef:7d:70:1b:17:2b:8d:
         d9:a2:a5:48:57:02:ba:7f:54:84:f8:12:f4:b3:71:fc:05:ff:
         8a:c6:d6:7b:2c:a5:bc:3f:57:bd:3b:d4:81:16:cd:31:a1:2a:
         f2:60:17:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----