Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5va6F9PizxgK4wM28XfjSZ5bSmTXpaVqg6zVt13Ca8Fi/0/DA356B6DE9FFAE5664C773DD2B7EA0D6186F3907.mft
File:                     DA356B6DE9FFAE5664C773DD2B7EA0D6186F3907.mft (raw, json)
Hash identifier:          lQg/FAdHL+iTMGVZUqRvhPL7i85U8NIbq8zKwWWsO7k=
Subject key identifier:   E8:25:CF:5B:BE:71:94:C2:A4:31:55:C7:A0:11:C2:A3:76:04:6A:AC
Authority key identifier: DA:35:6B:6D:E9:FF:AE:56:64:C7:73:DD:2B:7E:A0:D6:18:6F:39:07
Certificate issuer:       /CN=DA356B6DE9FFAE5664C773DD2B7EA0D6186F3907
Certificate serial:       34B446D9C980A2089F70CEE01B9C414EF9B9D755
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA356B6DE9FFAE5664C773DD2B7EA0D6186F3907.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5va6F9PizxgK4wM28XfjSZ5bSmTXpaVqg6zVt13Ca8Fi/0/DA356B6DE9FFAE5664C773DD2B7EA0D6186F3907.mft
Manifest number:          CF
Signing time:             Fri 29 Mar 2024 04:31:18 +0000
Manifest this update:     Fri 29 Mar 2024 04:26:18 +0000
Manifest next update:     Sat 30 Mar 2024 07:25:18 +0000
Files and hashes:         1: DA356B6DE9FFAE5664C773DD2B7EA0D6186F3907.crl (hash: 8wZJX0yYAL4eraOybmD24MRTTMYjYGdfnRWW+z4AlK4=)
                          2: 3230302e32332e3138302e302f32322d3234203d3e203631393332.roa (hash: TENGnoTd8OJN2JpYGC7+bu/jAardoekxcE2q3hnJKqk=)
                          3: 323830343a313837303a3a2f33322d3334203d3e203631393332.roa (hash: pYsIv5/4P1kb1xIISPnpqpJYOdniJdbebPUJKuPLoBk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:b4:46:d9:c9:80:a2:08:9f:70:ce:e0:1b:9c:41:4e:f9:b9:d7:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA356B6DE9FFAE5664C773DD2B7EA0D6186F3907
        Validity
            Not Before: Mar 29 04:26:18 2024 GMT
            Not After : Mar 30 07:25:18 2024 GMT
        Subject: CN=E825CF5BBE7194C2A43155C7A011C2A376046AAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fa:de:0b:0f:d7:33:8e:8c:0d:34:f8:b2:d2:
                    74:19:ae:3e:ce:92:b3:4d:c0:f8:85:7e:84:61:92:
                    71:00:e7:48:ec:d5:12:89:4d:c2:8d:c3:c1:df:78:
                    1f:95:68:f1:e5:5b:ef:f7:f9:93:76:e3:74:a3:b0:
                    2a:be:c9:25:da:c5:37:f1:cc:38:68:f4:30:40:7d:
                    f9:f3:38:cb:fc:df:15:41:0e:f9:0e:dc:d8:41:90:
                    f9:ee:fb:b7:9b:b4:e5:5d:fd:5e:0e:ff:1b:a2:11:
                    05:18:0c:8a:6c:f8:d8:e5:73:ab:5d:bb:a9:e4:e7:
                    fd:03:b2:6a:0e:ff:5a:26:c3:ae:ad:79:e6:6d:80:
                    22:fe:ef:a9:9e:24:de:ee:11:14:bb:33:f2:52:56:
                    e2:58:df:1f:43:b8:f8:c1:44:18:1d:77:7c:86:13:
                    56:d1:5e:22:4e:0f:62:17:58:cf:9d:63:27:50:b9:
                    5e:a9:87:05:41:58:31:e8:75:28:a3:5d:2c:45:dd:
                    26:5a:03:a9:5e:f7:ed:d3:f1:9d:88:7d:96:17:05:
                    e7:85:b0:ec:b5:43:3e:0b:6b:23:36:99:4f:b0:b9:
                    13:9b:14:1d:e4:57:3b:f4:85:d9:f9:db:8c:a1:2d:
                    3d:bc:a2:92:e6:44:2f:87:5d:60:c8:ba:24:ee:c2:
                    3b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:25:CF:5B:BE:71:94:C2:A4:31:55:C7:A0:11:C2:A3:76:04:6A:AC
            X509v3 Authority Key Identifier:
                keyid:DA:35:6B:6D:E9:FF:AE:56:64:C7:73:DD:2B:7E:A0:D6:18:6F:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5va6F9PizxgK4wM28XfjSZ5bSmTXpaVqg6zVt13Ca8Fi/0/DA356B6DE9FFAE5664C773DD2B7EA0D6186F3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA356B6DE9FFAE5664C773DD2B7EA0D6186F3907.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5va6F9PizxgK4wM28XfjSZ5bSmTXpaVqg6zVt13Ca8Fi/0/DA356B6DE9FFAE5664C773DD2B7EA0D6186F3907.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:2e:ec:cd:5d:01:af:a2:1c:55:6f:53:2e:35:fb:b9:92:99:
         99:f9:12:5a:fb:58:9f:b4:1f:1a:4d:49:79:57:f7:69:9e:32:
         53:ab:07:a2:5d:e0:bd:2c:66:a6:b6:40:99:5c:9e:91:26:82:
         a5:7f:50:5b:36:7f:cf:48:90:a8:df:f8:dd:95:80:50:19:6e:
         a1:9d:6a:ae:ae:33:9b:9d:24:b7:99:3b:b8:29:6a:e4:a4:4f:
         79:a3:c2:8a:98:59:cb:f7:d0:6e:78:15:62:f1:67:78:14:ed:
         ae:8a:7e:35:48:3d:da:66:da:3d:20:df:26:c6:29:a7:93:ab:
         50:c4:31:0c:15:5a:fb:0b:ad:05:34:02:b4:0a:f1:d5:a4:88:
         ca:4b:32:59:0c:3e:36:8a:4d:29:f2:52:87:1c:de:93:2a:10:
         54:c9:51:22:96:be:43:09:3a:c7:0d:96:29:59:da:68:16:ad:
         49:44:07:49:3e:fe:ad:9b:4f:47:7b:c4:ac:bf:d0:fc:c9:b0:
         bf:fa:ed:9d:10:07:87:9e:3f:11:83:85:56:8d:47:ca:88:5a:
         06:80:ac:1f:9a:6d:20:3c:5c:b1:c7:21:7d:e4:e4:1d:36:cc:
         3f:aa:a8:81:7b:2f:01:b1:42:c4:1b:50:f1:c3:b2:3c:7b:1a:
         2a:ee:82:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----