Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/0/E239018413238D8FC9938F9C53BE175FEE6B7085.mft
File:                     E239018413238D8FC9938F9C53BE175FEE6B7085.mft (raw, json)
Hash identifier:          iE90dFAnxN+lYv+Lc2j8ACn6ZJ+w3Baf9zmLhzhgFuY=
Subject key identifier:   02:61:70:F1:A6:D8:F2:D4:51:2D:08:24:7D:A4:A9:4E:0B:85:7E:97
Authority key identifier: E2:39:01:84:13:23:8D:8F:C9:93:8F:9C:53:BE:17:5F:EE:6B:70:85
Certificate issuer:       /CN=E239018413238D8FC9938F9C53BE175FEE6B7085
Certificate serial:       0BBEB3CC580F447FC8A03669FD5440E01DF4B670
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E239018413238D8FC9938F9C53BE175FEE6B7085.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/0/E239018413238D8FC9938F9C53BE175FEE6B7085.mft
Manifest number:          010D
Signing time:             Mon 15 Apr 2024 02:29:36 +0000
Manifest this update:     Mon 15 Apr 2024 02:24:36 +0000
Manifest next update:     Tue 16 Apr 2024 05:00:36 +0000
Files and hashes:         1: 34352e3136392e3132302e302f32322d3332203d3e20323638313132.roa (hash: c58LM1j0SDTytFVLKUAUImZ7i8CgAURb+q3AcaW4Vuo=)
                          2: E239018413238D8FC9938F9C53BE175FEE6B7085.crl (hash: j2oVCgLfpcblep6v9jVNFaUeL4/LJekzhbYZ7vYJ4wc=)
                          3: 323830343a353833303a3a2f33322d313238203d3e20323638313132.roa (hash: idjohCl6lude+cADBHv3JRCudZq0QmxZRRhlQVjLYxk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:be:b3:cc:58:0f:44:7f:c8:a0:36:69:fd:54:40:e0:1d:f4:b6:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E239018413238D8FC9938F9C53BE175FEE6B7085
        Validity
            Not Before: Apr 15 02:24:36 2024 GMT
            Not After : Apr 16 05:00:36 2024 GMT
        Subject: CN=026170F1A6D8F2D4512D08247DA4A94E0B857E97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:85:de:63:64:9d:66:45:76:b8:53:b6:27:11:
                    8e:6d:2b:d7:e4:d2:13:7f:37:74:06:9f:d0:29:cc:
                    2b:12:b1:53:fd:e7:ae:98:ff:ca:13:fa:55:d5:a9:
                    29:e5:8a:09:50:ab:4e:fa:9d:f2:1e:4e:a1:fd:fa:
                    bc:37:92:0b:3b:2c:f0:b5:ab:d9:a6:36:d1:3d:d6:
                    fd:8b:2a:7f:dc:38:d5:43:89:62:d2:d2:90:2c:4d:
                    b8:26:45:a5:bd:ca:d8:31:8b:cf:4e:bd:68:ff:d7:
                    8e:f5:8c:b1:9d:e5:7c:21:a1:78:84:06:a1:66:fc:
                    cd:5b:b3:bf:a8:60:47:3a:f1:b5:ce:33:89:8f:c9:
                    6c:81:2d:65:85:b8:5c:ce:37:b7:2c:bb:c7:be:1a:
                    e0:2b:80:1b:f8:90:f7:f7:77:5b:5a:ef:fe:4a:41:
                    5c:1b:a9:51:cf:10:85:6a:d4:fd:9d:9a:fd:09:04:
                    3b:e2:5f:93:7b:72:74:58:50:2e:c2:eb:97:fb:92:
                    a5:4a:60:bd:85:f7:3c:be:e0:f7:95:36:d3:c6:cd:
                    2c:3b:3b:d6:6a:57:d7:0d:88:08:b7:dd:b5:fd:44:
                    bb:19:6d:00:80:2d:d7:84:15:0e:f9:cf:c7:ec:c1:
                    64:60:6e:be:c5:e5:af:40:4e:30:6f:cf:3a:68:5b:
                    d0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:61:70:F1:A6:D8:F2:D4:51:2D:08:24:7D:A4:A9:4E:0B:85:7E:97
            X509v3 Authority Key Identifier:
                keyid:E2:39:01:84:13:23:8D:8F:C9:93:8F:9C:53:BE:17:5F:EE:6B:70:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/0/E239018413238D8FC9938F9C53BE175FEE6B7085.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E239018413238D8FC9938F9C53BE175FEE6B7085.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/0/E239018413238D8FC9938F9C53BE175FEE6B7085.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:b9:1f:98:8e:0a:85:b3:8f:1a:0a:cf:b4:7b:2d:e2:fb:8f:
         27:54:1c:d0:51:1b:1c:fe:47:f3:54:ca:69:99:a2:3c:d8:ca:
         f5:55:38:0d:9f:50:54:29:ea:17:9c:b7:fb:27:54:46:4a:2c:
         25:1d:00:f4:cf:a9:a3:cd:b1:95:95:ff:fc:b6:14:9f:00:fe:
         92:b7:5f:f1:40:a2:70:16:f7:0b:aa:de:32:78:47:7c:c2:3f:
         7c:17:23:53:08:8c:fe:12:51:5d:45:bb:86:b8:1e:10:b3:da:
         4f:72:57:f5:ff:8c:a2:04:df:ef:d8:cb:7d:b4:cc:47:98:c3:
         8d:2d:a3:d6:2b:be:1d:fb:b4:7c:58:92:af:50:64:d2:ed:62:
         ea:6d:80:bc:23:70:55:25:39:d5:50:f3:64:33:56:47:37:ac:
         a1:b2:44:99:e7:70:8d:a6:2b:f6:95:58:82:ca:aa:e4:36:b6:
         e1:ea:2a:4c:ba:7d:27:f3:78:6e:60:c0:11:84:51:82:6d:46:
         11:96:d9:48:12:67:37:13:ee:09:7f:80:92:32:e8:50:f6:74:
         df:e9:69:c9:d3:5e:79:dc:2c:9e:e4:8c:99:4d:a6:ab:95:a0:
         24:99:1d:06:c9:e9:b6:27:be:12:2f:d7:e5:9d:d7:0f:63:68:
         c3:40:b5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----