Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/8D24ABD2CD282876D19E9E8E10198ACD520BC95C.mft
File:                     8D24ABD2CD282876D19E9E8E10198ACD520BC95C.mft (raw, json)
Hash identifier:          9Xj4iuDM/nXdYS5N2Nvo3LrsuHXbc7S4at9FYk+OdUw=
Subject key identifier:   91:56:3A:68:E0:D2:84:DD:FC:05:77:EF:F0:34:7A:29:18:B8:E3:0E
Authority key identifier: 8D:24:AB:D2:CD:28:28:76:D1:9E:9E:8E:10:19:8A:CD:52:0B:C9:5C
Certificate issuer:       /CN=8D24ABD2CD282876D19E9E8E10198ACD520BC95C
Certificate serial:       70D09520CB66E4DC974A1DF9209D2D156AF94445
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8D24ABD2CD282876D19E9E8E10198ACD520BC95C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/8D24ABD2CD282876D19E9E8E10198ACD520BC95C.mft
Manifest number:          01E4
Signing time:             Mon 15 Apr 2024 06:50:00 +0000
Manifest this update:     Mon 15 Apr 2024 06:45:00 +0000
Manifest next update:     Tue 16 Apr 2024 06:50:00 +0000
Files and hashes:         1: 323830343a376566303a3a2f33322d3438203d3e20323731363536.roa (hash: 5XovJjt1dtzs7VHGjWRDoW6i+mmGwhKu2OofXBiD67A=)
                          2: 34352e3138362e3233342e302f32332d3234203d3e20323731363536.roa (hash: Q1GhAnO/kV7ysDnd+VfOMEGinsL5VwCZXcuW+BRtF7Y=)
                          3: 8D24ABD2CD282876D19E9E8E10198ACD520BC95C.crl (hash: /mjxX/oPe/L0T6El49Wx+lB534m6EHe6yROSc/NOePI=)
                          4: 34352e3138362e3233322e302f32332d3234203d3e20323731363536.roa (hash: wMzI+Eygo3Vc368g8BjOxJWOgb2/Ka2blFbmPXWQBs8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d0:95:20:cb:66:e4:dc:97:4a:1d:f9:20:9d:2d:15:6a:f9:44:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D24ABD2CD282876D19E9E8E10198ACD520BC95C
        Validity
            Not Before: Apr 15 06:45:00 2024 GMT
            Not After : Apr 22 06:50:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:44:3c:a2:1a:29:26:b4:72:4e:01:18:37:3f:
                    f0:e6:e8:63:7e:b3:c5:d8:47:45:ec:55:c5:00:f3:
                    2a:f5:92:fa:be:ec:0a:09:bf:5f:20:9b:5d:2c:f5:
                    73:4a:ee:bf:9c:13:00:c1:db:27:39:e6:d5:f7:85:
                    28:3f:23:17:b7:cd:b5:8e:8e:e5:83:48:d9:86:30:
                    0f:eb:c0:a7:4a:b2:99:ed:87:e0:e9:71:00:15:43:
                    54:86:12:9e:28:b3:19:fa:60:00:53:01:24:1e:51:
                    50:5c:46:2c:a7:a2:df:1f:4b:2b:c5:68:3a:b5:34:
                    47:91:7a:31:b4:7e:48:8f:8b:44:dd:0e:25:d3:a4:
                    c8:b0:8e:f3:88:d0:b5:ce:3b:c3:90:5c:5d:47:39:
                    ab:79:e6:bc:fe:6d:00:29:05:d7:da:6f:ae:46:d7:
                    6c:59:db:4e:5f:fb:5a:74:e8:08:dd:2f:8c:9a:33:
                    13:ce:81:99:e8:c9:06:d3:04:5f:db:5b:f9:8d:dd:
                    c2:91:21:68:64:7c:93:9a:a1:22:74:c5:d6:a3:63:
                    24:76:10:b5:04:14:54:be:a5:18:3b:21:af:3c:d1:
                    18:50:af:fe:d0:17:4c:59:b7:a8:e8:cc:e4:f4:22:
                    ec:9c:bb:bb:88:c0:cf:57:67:26:af:18:ec:50:03:
                    e9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:56:3A:68:E0:D2:84:DD:FC:05:77:EF:F0:34:7A:29:18:B8:E3:0E
            X509v3 Authority Key Identifier:
                keyid:8D:24:AB:D2:CD:28:28:76:D1:9E:9E:8E:10:19:8A:CD:52:0B:C9:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/8D24ABD2CD282876D19E9E8E10198ACD520BC95C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8D24ABD2CD282876D19E9E8E10198ACD520BC95C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/8D24ABD2CD282876D19E9E8E10198ACD520BC95C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:ca:98:2e:75:14:fd:61:13:8a:49:f0:5f:02:50:14:d8:51:
         2a:14:ad:a4:ef:91:c1:09:36:b4:db:c4:83:8a:cb:ac:6e:73:
         e0:d6:7d:01:2e:ba:18:76:1e:e9:44:1c:16:d1:ad:61:23:9c:
         ca:e0:34:9e:f8:d1:8d:3a:a9:d0:ec:d0:b3:95:98:05:b3:3d:
         c3:68:79:72:d9:44:b7:97:02:91:3f:27:65:26:e9:99:d9:d9:
         8d:0e:16:bf:57:56:80:15:37:f5:e1:30:28:d0:d1:2f:ff:e0:
         43:b0:08:eb:fa:eb:17:97:ba:77:4f:7b:99:c9:be:ea:0c:fd:
         52:12:1b:50:82:00:e4:e2:59:dd:56:f5:6f:d4:33:e5:97:80:
         18:1d:1f:d5:fb:9c:a4:5d:08:09:49:3a:0a:d1:2a:86:29:d7:
         ae:3b:53:1f:e8:45:2f:2a:2c:5e:6d:cc:ef:1e:44:7b:e1:0e:
         c2:a8:b0:1b:87:87:a9:8e:c4:63:53:1d:6f:d3:7a:e2:52:c9:
         5a:74:f4:5f:44:c5:1a:7b:49:e2:fc:34:b5:c3:b8:ce:17:cc:
         87:17:5a:b5:dc:4b:2f:7c:51:a9:9e:1f:48:b2:77:ac:83:da:
         1e:00:05:2c:d7:68:1f:42:51:81:7b:83:65:fb:83:8a:71:a5:
         a8:b4:cd:5e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----