Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6LZNNDFjQnKqb1XsHNRKBe8EQyrik3qfo2BHiidUGpSu/0/8EEA9DEC20AA919786E65616FB751BF513A51581.mft
File:                     8EEA9DEC20AA919786E65616FB751BF513A51581.mft (raw, json)
Hash identifier:          fR45+qOLiaW3GsMMN72kb5fbqqIBxzoyxv2F3yDndRY=
Subject key identifier:   6C:9A:48:04:9A:D2:2F:0B:30:AF:1B:52:54:ED:86:9D:D2:28:C9:25
Authority key identifier: 8E:EA:9D:EC:20:AA:91:97:86:E6:56:16:FB:75:1B:F5:13:A5:15:81
Certificate issuer:       /CN=8EEA9DEC20AA919786E65616FB751BF513A51581
Certificate serial:       21A017F0F4C229302F2141E85469EB8FD12DB466
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EEA9DEC20AA919786E65616FB751BF513A51581.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6LZNNDFjQnKqb1XsHNRKBe8EQyrik3qfo2BHiidUGpSu/0/8EEA9DEC20AA919786E65616FB751BF513A51581.mft
Manifest number:          49
Signing time:             Mon 15 Apr 2024 00:03:51 +0000
Manifest this update:     Sun 14 Apr 2024 23:58:51 +0000
Manifest next update:     Tue 16 Apr 2024 00:06:51 +0000
Files and hashes:         1: 8EEA9DEC20AA919786E65616FB751BF513A51581.crl (hash: /EjaYITC2hVRT72HsXpmkdm6hHjFhGkRLMBx7AiNOzU=)
                          2: 323830343a353238343a3a2f33322d3438203d3e20323638353233.roa (hash: P+U36CoSDK5KSoIVIPL2PrDY/wHK1iWu21MXyTdh2d8=)
                          3: 34352e3136322e3136302e302f32322d3234203d3e20323638353233.roa (hash: +EuTxpLBP0HzJEBHMwGw+6kJrEr0dHJPD1Yr7cD+4L4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:a0:17:f0:f4:c2:29:30:2f:21:41:e8:54:69:eb:8f:d1:2d:b4:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EEA9DEC20AA919786E65616FB751BF513A51581
        Validity
            Not Before: Apr 14 23:58:51 2024 GMT
            Not After : Apr 16 00:06:51 2024 GMT
        Subject: CN=6C9A48049AD22F0B30AF1B5254ED869DD228C925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:b2:99:81:38:09:62:94:05:e7:b8:ef:d0:56:
                    6f:be:8a:43:79:d1:d7:e5:54:9b:43:55:91:11:22:
                    c3:03:09:29:02:5d:68:1d:90:fd:0c:90:5b:6d:ed:
                    7a:62:57:95:8c:4b:c0:41:bc:1c:7d:4b:b6:09:95:
                    75:0b:b3:79:84:1b:88:54:85:56:b1:05:65:96:97:
                    3f:7e:7f:bc:f9:d5:92:b5:e7:f5:5d:09:12:45:f1:
                    5c:ef:86:7a:4b:4e:b7:77:69:1a:2a:2a:6d:9a:66:
                    50:03:70:2c:a2:29:b7:45:18:e9:49:b0:61:60:4e:
                    cc:20:2d:3e:8f:74:2a:da:ed:7e:67:21:4b:4a:51:
                    49:85:80:eb:5d:a5:7a:3f:3c:7b:82:b5:c7:dd:ec:
                    90:34:d7:89:c3:8a:e0:d0:42:dd:88:36:38:a6:22:
                    56:b8:bd:d3:59:c9:36:fd:84:ab:36:45:36:2b:89:
                    51:4a:87:b3:fc:38:7a:70:d3:7e:02:72:e9:50:da:
                    d5:30:bd:2d:10:f6:da:62:4a:26:59:08:a1:cf:ee:
                    00:6c:af:d9:35:46:a5:b3:b5:84:a6:c6:d1:2e:e3:
                    5a:17:23:cd:75:fd:21:fa:ad:fe:f1:dd:dc:de:7f:
                    15:db:e1:c6:bf:ff:8c:0f:93:92:9b:95:44:73:e6:
                    2f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:9A:48:04:9A:D2:2F:0B:30:AF:1B:52:54:ED:86:9D:D2:28:C9:25
            X509v3 Authority Key Identifier:
                keyid:8E:EA:9D:EC:20:AA:91:97:86:E6:56:16:FB:75:1B:F5:13:A5:15:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6LZNNDFjQnKqb1XsHNRKBe8EQyrik3qfo2BHiidUGpSu/0/8EEA9DEC20AA919786E65616FB751BF513A51581.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EEA9DEC20AA919786E65616FB751BF513A51581.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6LZNNDFjQnKqb1XsHNRKBe8EQyrik3qfo2BHiidUGpSu/0/8EEA9DEC20AA919786E65616FB751BF513A51581.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:cd:ec:09:8a:39:92:c9:8b:45:f8:8e:54:4f:13:a5:04:99:
         b4:c6:0a:d5:d7:b2:ad:c2:83:43:50:ea:43:e6:ef:b9:72:ba:
         6f:f8:c4:65:c4:71:5e:04:fd:cc:04:c2:50:79:cd:e0:16:27:
         ff:41:a0:4e:e4:bd:a3:6e:65:3c:ea:67:6a:cc:29:a4:df:fe:
         5f:f0:c2:0a:12:44:17:25:b6:ad:f3:73:e0:72:10:17:ed:32:
         b1:0a:d7:bf:dd:de:61:2e:66:e8:6a:52:e8:03:1c:46:cf:0e:
         59:4b:82:e5:c5:41:f2:9d:0e:c7:d7:c6:26:42:c7:1f:7e:04:
         ce:78:ce:c4:ee:fb:78:1b:29:6e:53:d7:67:0b:d4:53:31:c0:
         91:81:f0:89:b2:29:e3:f0:0f:e5:f9:79:0e:3d:99:01:1b:02:
         72:54:b0:f5:f5:27:5e:51:41:b3:1e:79:d0:8c:98:5d:b2:91:
         e2:e6:f7:c6:3d:5c:2a:39:44:94:1e:5a:cc:54:f3:52:b9:4c:
         86:e5:e1:5a:fd:46:eb:fe:5d:f7:f0:7a:c3:9e:d3:a3:5c:f9:
         49:dd:cc:d1:7f:2d:23:d6:34:81:a2:fe:ab:af:1f:9a:ee:e6:
         2f:69:59:1d:be:ae:b1:d7:34:23:16:7e:7d:31:2b:67:2f:85:
         e7:4f:fd:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----