Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/0/E12A4DAFB4E8BEDC6B15AD55AAC7A038A42875CD.mft
File:                     E12A4DAFB4E8BEDC6B15AD55AAC7A038A42875CD.mft (raw, json)
Hash identifier:          JJ7Rb97kvtAUdyOUXwuWLZuOPtuHH9Gcl4jJZrU2VbU=
Subject key identifier:   D2:75:90:39:27:33:32:4A:3F:27:4D:45:5E:FA:E4:02:B5:D8:0D:70
Authority key identifier: E1:2A:4D:AF:B4:E8:BE:DC:6B:15:AD:55:AA:C7:A0:38:A4:28:75:CD
Certificate issuer:       /CN=E12A4DAFB4E8BEDC6B15AD55AAC7A038A42875CD
Certificate serial:       7AFD30E01D72E97A04D756D1ECA5DEE752BCEC83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E12A4DAFB4E8BEDC6B15AD55AAC7A038A42875CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/0/E12A4DAFB4E8BEDC6B15AD55AAC7A038A42875CD.mft
Manifest number:          0554
Signing time:             Mon 15 Apr 2024 11:00:00 +0000
Manifest this update:     Mon 15 Apr 2024 10:55:00 +0000
Manifest next update:     Tue 16 Apr 2024 11:00:00 +0000
Files and hashes:         1: 3230302e38302e3130342e302f32322d3234203d3e20323731323835.roa (hash: mvngLEIQtc8crQhHKNrWYpiaXXkPcdTcv4vNeOfkXao=)
                          2: E12A4DAFB4E8BEDC6B15AD55AAC7A038A42875CD.crl (hash: hp2OHqDMX4jBAA21hxSUAaPKgUjg+KoE5LZyPi4eu6E=)
                          3: 323830343a373931633a3a2f33322d3334203d3e20323731323835.roa (hash: 39b2OE7lFzoJqa4VZtpBzjkS/TKNVNVnd3kqY4GzGkQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:fd:30:e0:1d:72:e9:7a:04:d7:56:d1:ec:a5:de:e7:52:bc:ec:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E12A4DAFB4E8BEDC6B15AD55AAC7A038A42875CD
        Validity
            Not Before: Apr 15 10:55:00 2024 GMT
            Not After : Apr 16 11:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0b:f3:46:fe:1c:be:38:8f:7a:77:8e:99:cd:
                    60:88:ee:57:f6:2a:f7:a9:5e:4f:1a:39:7e:be:61:
                    ff:fe:e3:9b:6e:88:19:aa:5e:e8:f7:4d:75:1f:4b:
                    bd:87:19:55:ec:4f:a2:b9:de:97:e7:50:30:35:e8:
                    1f:f4:ae:55:b5:67:1d:a2:f3:f1:fb:3c:ad:7c:95:
                    69:e2:4c:e9:cc:89:46:7b:99:1f:92:30:dd:62:c0:
                    4b:87:05:51:31:c8:14:50:55:c1:ba:95:10:3f:9e:
                    5b:55:81:ab:12:d5:90:32:12:e5:75:0a:65:48:73:
                    0d:f1:ab:69:1a:62:fd:82:c9:d7:a3:4c:61:94:8d:
                    e0:14:7a:6a:55:fe:ae:e6:3d:64:08:cf:af:77:b2:
                    d2:74:03:ce:c6:62:a0:75:ce:a2:6b:8b:b4:d5:ac:
                    88:76:5e:c6:d1:05:4f:63:f1:93:1a:74:28:dd:9a:
                    a7:bf:93:a3:f6:d5:d0:18:8f:d5:f6:6a:5d:f1:29:
                    f3:8c:26:2f:90:46:bb:af:94:8c:5c:2c:2e:2b:ad:
                    88:ef:1b:1a:7d:80:af:6f:ab:f5:a2:09:65:95:ac:
                    8c:e4:d0:6a:48:85:64:96:97:fd:0c:2a:f3:3b:02:
                    d0:ea:18:e0:0c:20:58:d5:1f:51:23:15:fb:35:a0:
                    d2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:75:90:39:27:33:32:4A:3F:27:4D:45:5E:FA:E4:02:B5:D8:0D:70
            X509v3 Authority Key Identifier:
                keyid:E1:2A:4D:AF:B4:E8:BE:DC:6B:15:AD:55:AA:C7:A0:38:A4:28:75:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/0/E12A4DAFB4E8BEDC6B15AD55AAC7A038A42875CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E12A4DAFB4E8BEDC6B15AD55AAC7A038A42875CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/0/E12A4DAFB4E8BEDC6B15AD55AAC7A038A42875CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:de:6a:38:d6:44:15:9b:48:70:c6:73:a9:bd:28:b2:ff:51:
         4e:59:78:98:07:bb:6b:6c:c3:a7:9f:ea:12:84:cb:b9:db:11:
         d1:f3:0a:de:bc:7f:fa:35:fe:96:68:19:80:af:aa:22:d3:2b:
         0d:2a:c0:8b:83:fe:28:52:a6:38:3f:bc:9b:d6:9f:13:e2:81:
         3c:88:45:16:cf:c1:07:e7:f9:35:6f:da:cc:7f:80:6c:07:cd:
         cc:0f:3d:d3:8a:d4:43:57:55:8b:8f:fe:d2:d0:98:55:9b:10:
         93:1d:78:68:f4:0b:37:2f:b2:47:05:2b:f8:eb:97:49:82:67:
         88:7f:b6:26:65:73:a8:3a:05:6e:e1:e6:0c:a8:b6:8c:5b:64:
         c8:17:27:79:d3:f2:a3:17:a7:2b:e2:a9:d0:52:2d:7e:74:f6:
         fc:ca:4a:10:f0:75:59:16:4e:a3:58:b3:2b:ce:1e:42:41:26:
         b7:7d:e6:ee:0e:f8:bf:7f:be:0b:5c:64:40:8d:d6:ee:40:72:
         61:c1:81:7a:d8:51:39:35:e6:2a:1f:6f:22:50:9e:ce:97:fb:
         90:19:60:4d:89:55:e6:21:f1:c2:17:a1:68:82:13:ca:d2:9a:
         42:45:e3:1c:7f:09:45:db:62:69:5f:c4:ba:b1:e0:72:db:1b:
         1c:e7:9c:5e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----