Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6eX8DagerKdVMfZG3ocDYphnK3dvuNxn9sp2RugoahyP/0/1EF349B3A4F741B3BC09C6801C768A6D3028E54E.mft
File:                     1EF349B3A4F741B3BC09C6801C768A6D3028E54E.mft (raw, json)
Hash identifier:          dez/M5XEnznSbGPae8e8JGIMyTc6AgmclXkAlCvv7GE=
Subject key identifier:   0A:D4:17:51:CD:DA:92:DC:F1:28:78:1B:F1:F1:5B:26:F8:2D:03:50
Authority key identifier: 1E:F3:49:B3:A4:F7:41:B3:BC:09:C6:80:1C:76:8A:6D:30:28:E5:4E
Certificate issuer:       /CN=1EF349B3A4F741B3BC09C6801C768A6D3028E54E
Certificate serial:       6A98CF45E48822FB5E2369A300EEC307F1ECDC52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1EF349B3A4F741B3BC09C6801C768A6D3028E54E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6eX8DagerKdVMfZG3ocDYphnK3dvuNxn9sp2RugoahyP/0/1EF349B3A4F741B3BC09C6801C768A6D3028E54E.mft
Manifest number:          1D
Signing time:             Mon 19 Feb 2024 02:38:07 +0000
Manifest this update:     Mon 19 Feb 2024 02:33:07 +0000
Manifest next update:     Tue 20 Feb 2024 04:00:07 +0000
Files and hashes:         1: 1EF349B3A4F741B3BC09C6801C768A6D3028E54E.crl (hash: 9pMf7iCMxHzhvHNOKmk1XIfPd7pVOSdXQ83awyRRsv4=)
                          2: 3137302e38322e3231322e302f32322d3332203d3e20323636343536.roa (hash: 1vCNOY06vxR4tSQJx3wnWVe/N9wnWDRT7sn7QVHwztk=)
                          3: 323830343a333831383a3a2f33322d3438203d3e20323636343536.roa (hash: G1hWu1WvAtuSMDpZsp6bG6QOkIL3GNkSEjR2uOQ+EOM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:98:cf:45:e4:88:22:fb:5e:23:69:a3:00:ee:c3:07:f1:ec:dc:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EF349B3A4F741B3BC09C6801C768A6D3028E54E
        Validity
            Not Before: Feb 19 02:33:07 2024 GMT
            Not After : Feb 20 04:00:07 2024 GMT
        Subject: CN=0AD41751CDDA92DCF128781BF1F15B26F82D0350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0e:8a:01:17:28:bd:c8:b6:10:80:b2:2e:bd:
                    b3:e6:e2:7a:d5:73:8d:df:d0:2a:35:69:e1:65:92:
                    c0:96:3f:8b:f1:6b:3f:7e:15:4c:54:e8:a2:8b:6e:
                    02:a1:bf:34:8a:97:2a:61:0b:c1:12:75:f4:83:40:
                    f4:bd:bf:6b:a0:81:56:d6:af:fe:78:12:79:1d:db:
                    3c:7e:a2:93:ba:f3:f4:f6:96:b9:b4:87:37:8e:3e:
                    d9:9d:a2:3d:e6:6d:09:d8:08:9e:96:87:a0:79:81:
                    e2:5c:31:d1:42:8a:94:63:c6:28:05:c7:b6:55:04:
                    d1:7e:c6:49:54:59:65:48:83:e5:98:a8:6e:ff:12:
                    58:76:5c:16:b1:7c:d4:e5:ac:8f:bd:6d:91:a6:ba:
                    6a:7f:2a:c3:76:1c:62:48:a7:1f:fe:5c:b3:df:36:
                    d9:87:1b:d8:45:fe:47:82:2b:9d:db:b9:f1:2c:0e:
                    f4:2c:c8:78:ca:c9:df:d8:aa:1a:60:85:51:ad:7c:
                    ce:90:7c:79:f8:3c:89:92:c5:6d:07:dc:25:10:e4:
                    8f:df:4f:db:66:a5:f0:63:3d:55:09:0d:d1:11:ba:
                    3d:f3:71:11:52:d2:f6:74:d3:7f:54:65:65:a5:16:
                    1a:a9:f2:20:79:9f:6f:49:9d:96:10:df:8c:a0:17:
                    49:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D4:17:51:CD:DA:92:DC:F1:28:78:1B:F1:F1:5B:26:F8:2D:03:50
            X509v3 Authority Key Identifier:
                keyid:1E:F3:49:B3:A4:F7:41:B3:BC:09:C6:80:1C:76:8A:6D:30:28:E5:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6eX8DagerKdVMfZG3ocDYphnK3dvuNxn9sp2RugoahyP/0/1EF349B3A4F741B3BC09C6801C768A6D3028E54E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1EF349B3A4F741B3BC09C6801C768A6D3028E54E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6eX8DagerKdVMfZG3ocDYphnK3dvuNxn9sp2RugoahyP/0/1EF349B3A4F741B3BC09C6801C768A6D3028E54E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:3a:d0:36:67:0a:4b:ee:0b:8d:98:2e:3b:a1:0b:8c:60:16:
         ca:3a:7a:4e:9d:62:25:27:0a:8d:5a:b8:1c:10:1a:81:4e:5e:
         77:ad:5e:df:59:97:69:23:ad:f9:03:40:4d:2b:8b:e6:90:5b:
         9e:4f:f8:44:8f:3f:ba:06:66:1f:2c:ce:78:a2:11:5a:1d:bf:
         bf:49:df:96:d8:e9:17:8c:35:2a:18:34:fc:0d:b7:25:06:2c:
         98:08:36:08:9c:31:1d:27:6a:ee:22:65:12:fd:67:e7:73:cc:
         ea:fb:48:41:db:da:ab:6e:54:8e:fe:c1:45:17:4e:c2:17:6a:
         f3:f9:aa:b1:40:d3:d6:f8:62:bc:60:83:f1:d9:2e:04:11:67:
         a5:62:7f:a0:ab:ec:f0:cf:b1:fe:c6:f3:2a:b6:2a:aa:28:85:
         3d:1c:fc:9f:28:81:51:23:d1:d9:0f:a6:b5:35:a1:90:5a:dc:
         6e:30:ba:ee:c9:bf:dd:c3:ed:c1:c6:f3:e3:8a:5e:a6:58:fa:
         65:37:58:e7:d9:8c:45:58:f3:e7:7c:17:7d:9a:9a:0d:c7:dd:
         24:3c:3f:89:cf:a5:1a:e7:49:04:de:7a:d8:20:90:11:aa:c7:
         dc:55:52:05:8d:66:a1:ea:c1:2b:42:89:b3:53:69:31:67:f3:
         0f:45:50:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----