Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7JhjAbKcWXVuJdb1H6g82uLzDJpiWgy6giVHdkbSEZHz/0/EC571E80B2214BA73D116B3D5B7AA95F82B2DB99.mft
File:                     EC571E80B2214BA73D116B3D5B7AA95F82B2DB99.mft (raw, json)
Hash identifier:          l40m8ch/As2Tfx464YWrjnodJttPgdP136vH6Zsi0EE=
Subject key identifier:   1B:96:B4:3A:56:29:49:EB:20:32:6B:A5:CC:48:7D:63:CF:1D:2E:96
Authority key identifier: EC:57:1E:80:B2:21:4B:A7:3D:11:6B:3D:5B:7A:A9:5F:82:B2:DB:99
Certificate issuer:       /CN=EC571E80B2214BA73D116B3D5B7AA95F82B2DB99
Certificate serial:       5C93CDD75235D36DB6C0DF3D25C6BBC0C778399E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC571E80B2214BA73D116B3D5B7AA95F82B2DB99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7JhjAbKcWXVuJdb1H6g82uLzDJpiWgy6giVHdkbSEZHz/0/EC571E80B2214BA73D116B3D5B7AA95F82B2DB99.mft
Manifest number:          ED
Signing time:             Wed 01 Nov 2023 15:34:27 +0000
Manifest this update:     Wed 01 Nov 2023 15:29:27 +0000
Manifest next update:     Thu 02 Nov 2023 18:06:27 +0000
Files and hashes:         1: 323830343a333732303a3a2f33322d313238203d3e20323636333931.roa (hash: 1lz5CPqSK+O7QRPA9pcmHca29xxqGoTnW/Dc3wUq6Js=)
                          2: 3137302e38302e3139322e302f32322d3332203d3e20323636333931.roa (hash: QVOkBxj2SByuflcKase2I0Ql9yLk7kLabE1fZ9Hujhw=)
                          3: EC571E80B2214BA73D116B3D5B7AA95F82B2DB99.crl (hash: qRP/99Tsbt/ZfdpSHmOeHSyLwjqC428JTyGyQKqFNeU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:93:cd:d7:52:35:d3:6d:b6:c0:df:3d:25:c6:bb:c0:c7:78:39:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC571E80B2214BA73D116B3D5B7AA95F82B2DB99
        Validity
            Not Before: Nov  1 15:29:27 2023 GMT
            Not After : Nov  2 18:06:27 2023 GMT
        Subject: CN=1B96B43A562949EB20326BA5CC487D63CF1D2E96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ee:b6:64:4a:b1:7f:53:f4:bc:a8:a9:ab:b1:
                    b5:03:aa:e9:d2:70:29:84:2f:26:e3:42:69:3f:ac:
                    6d:48:e8:d5:9e:20:1f:d3:49:c6:3e:f6:2f:68:7b:
                    f7:30:1e:4f:71:31:fa:7d:65:ce:9a:8a:3c:f3:44:
                    78:67:01:c9:ef:c9:e2:85:d6:d0:47:ee:20:b8:6b:
                    62:5a:9c:f2:5d:f7:d7:e5:36:77:de:98:26:62:f5:
                    58:9a:b0:fe:e9:5a:d7:46:1f:e8:27:47:d2:d3:d6:
                    be:eb:26:07:bd:d9:67:01:db:63:c9:28:28:9d:88:
                    97:59:26:8f:36:94:42:c5:9e:24:f3:59:e8:fe:e9:
                    36:5f:6f:f2:32:18:a4:5e:52:80:92:cf:7b:1e:e0:
                    98:35:b5:44:f5:bf:ed:66:c7:dc:11:19:ad:ca:8c:
                    d2:fa:da:fe:5c:53:d9:86:48:06:c8:75:9d:6c:02:
                    00:c2:21:21:c9:fe:b0:d0:fb:18:2f:a6:0c:97:99:
                    e5:2f:22:e0:58:10:7a:58:94:e5:b3:f6:0b:76:fc:
                    da:54:9c:13:ec:86:d2:38:ec:13:6a:90:82:e9:09:
                    48:2e:95:11:f9:cf:d1:3e:33:dd:bd:ea:a3:3b:4e:
                    6e:5e:4f:6c:b9:19:62:9b:a5:be:df:4a:db:c9:77:
                    aa:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:96:B4:3A:56:29:49:EB:20:32:6B:A5:CC:48:7D:63:CF:1D:2E:96
            X509v3 Authority Key Identifier:
                keyid:EC:57:1E:80:B2:21:4B:A7:3D:11:6B:3D:5B:7A:A9:5F:82:B2:DB:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7JhjAbKcWXVuJdb1H6g82uLzDJpiWgy6giVHdkbSEZHz/0/EC571E80B2214BA73D116B3D5B7AA95F82B2DB99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC571E80B2214BA73D116B3D5B7AA95F82B2DB99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7JhjAbKcWXVuJdb1H6g82uLzDJpiWgy6giVHdkbSEZHz/0/EC571E80B2214BA73D116B3D5B7AA95F82B2DB99.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:41:eb:3a:f3:ed:5b:1b:f5:9c:2b:13:d0:3d:28:df:ed:9e:
         ba:ae:52:61:01:1b:ff:6e:7e:e9:a0:5c:df:c2:0f:28:58:35:
         cf:8b:4f:e0:f1:bf:57:44:f5:2d:a1:34:80:11:49:4c:30:11:
         81:b1:5c:65:95:9b:e6:06:31:a0:18:4f:57:1c:82:a6:ab:ad:
         fa:da:5c:4b:b4:b5:04:4b:3c:45:26:f5:4f:ed:e0:ff:48:b1:
         26:e7:a8:67:d9:8c:6f:f3:f2:73:c1:80:e3:b8:d9:69:ea:1a:
         db:05:f8:cc:8c:b3:6f:e5:15:1c:ce:51:c5:60:f5:28:b2:1d:
         e5:e4:42:fa:d7:60:89:e1:cb:16:3a:e4:55:5c:2f:32:65:22:
         35:ef:2a:bd:17:26:2d:ef:a4:ae:95:54:1a:4a:c6:a8:bf:0a:
         df:b7:0f:dc:61:ab:18:6c:93:3f:f0:69:57:9a:41:13:0c:a4:
         2b:91:53:6a:16:b3:59:0f:2e:fb:28:f8:1f:53:ce:c8:89:84:
         4c:f2:8c:3b:55:bc:61:d9:c2:ea:a2:9d:c6:eb:04:56:56:21:
         69:83:69:3b:66:60:e9:96:00:20:2c:c0:3c:d2:00:2a:84:14:
         ea:b1:83:e1:ea:f9:db:91:16:6d:7f:f3:7d:a1:54:9e:ad:ff:
         ff:db:35:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----