Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/0/EF89BACE7105E71EC20EAFCA8404C3A4BA2C677A.mft
File:                     EF89BACE7105E71EC20EAFCA8404C3A4BA2C677A.mft (raw, json)
Hash identifier:          6ZekAtKoTYAeoPLOGAppM5x/CMMnhEb9oN6RyBq8jok=
Subject key identifier:   66:C0:07:3E:17:A2:41:8A:3E:14:36:44:FC:43:90:10:68:58:E9:A7
Authority key identifier: EF:89:BA:CE:71:05:E7:1E:C2:0E:AF:CA:84:04:C3:A4:BA:2C:67:7A
Certificate issuer:       /CN=EF89BACE7105E71EC20EAFCA8404C3A4BA2C677A
Certificate serial:       6F6B98B5D7A461E9041A1ABC22BDC66AF394F140
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EF89BACE7105E71EC20EAFCA8404C3A4BA2C677A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/0/EF89BACE7105E71EC20EAFCA8404C3A4BA2C677A.mft
Manifest number:          EC
Signing time:             Sun 14 Apr 2024 23:27:25 +0000
Manifest this update:     Sun 14 Apr 2024 23:22:25 +0000
Manifest next update:     Tue 16 Apr 2024 01:00:25 +0000
Files and hashes:         1: EF89BACE7105E71EC20EAFCA8404C3A4BA2C677A.crl (hash: FDwGBPkNJBOfXa2v5F73UC6Gsy1aurga0AW+cSjXEX4=)
                          2: 323830343a346136303a3a2f33322d3438203d3e20323637323336.roa (hash: /2IH78Zf1a2brmystzaIQVtbuhocKt+EDZuICOXWj9s=)
                          3: 34352e3233312e3130302e302f32322d3234203d3e20323637323336.roa (hash: +kJBCtOoQhQBi2hsSytnRJHU4atsgLEt0ru+jtMExFQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:6b:98:b5:d7:a4:61:e9:04:1a:1a:bc:22:bd:c6:6a:f3:94:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF89BACE7105E71EC20EAFCA8404C3A4BA2C677A
        Validity
            Not Before: Apr 14 23:22:25 2024 GMT
            Not After : Apr 16 01:00:25 2024 GMT
        Subject: CN=66C0073E17A2418A3E143644FC4390106858E9A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d1:99:73:d8:f6:72:ba:44:b4:bf:b8:bf:1c:
                    7d:e6:ab:25:d3:9f:0d:5c:9d:e4:9d:da:2c:50:a7:
                    4b:8b:fa:4e:44:d1:2f:b4:a7:a6:ec:d1:da:c6:ca:
                    ad:49:03:63:09:b7:fc:21:90:22:92:23:0e:42:e3:
                    43:01:a7:9b:53:9c:8a:29:54:79:28:34:95:c0:2f:
                    85:36:a5:dc:5f:2a:97:38:4e:d7:45:68:86:8d:5c:
                    8d:37:aa:30:c7:72:0b:84:04:de:94:13:5d:fd:23:
                    35:33:49:8e:3e:8d:8b:c1:a8:75:53:3b:3e:bf:45:
                    ac:0e:7e:bd:b0:a1:ca:d5:d5:6f:e6:ef:1f:bb:05:
                    5f:4e:b5:6f:a8:f0:83:1c:03:a4:1b:a7:d8:86:db:
                    9e:94:21:c7:7e:96:47:ca:60:7a:c3:3d:0d:b3:d2:
                    84:07:96:54:5f:92:6b:0a:70:dd:fa:26:96:b4:73:
                    dd:33:2d:a8:c2:40:86:20:ce:0e:de:02:96:83:6d:
                    8c:96:e2:12:ee:f5:cd:ac:28:dd:5f:30:ed:17:05:
                    33:73:e4:81:e7:b2:bf:38:ba:26:6d:bb:46:ee:c8:
                    5c:36:24:fe:3a:48:7a:5d:d9:33:55:52:d1:be:50:
                    99:d5:82:36:20:07:70:59:61:da:a5:fb:51:61:55:
                    53:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C0:07:3E:17:A2:41:8A:3E:14:36:44:FC:43:90:10:68:58:E9:A7
            X509v3 Authority Key Identifier:
                keyid:EF:89:BA:CE:71:05:E7:1E:C2:0E:AF:CA:84:04:C3:A4:BA:2C:67:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/0/EF89BACE7105E71EC20EAFCA8404C3A4BA2C677A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EF89BACE7105E71EC20EAFCA8404C3A4BA2C677A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/0/EF89BACE7105E71EC20EAFCA8404C3A4BA2C677A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:85:5c:fd:5c:4f:c7:d2:d6:47:11:2d:c3:ec:ed:5a:33:04:
         f7:4d:6c:6b:d9:70:90:9e:6d:dc:1b:33:a3:07:8f:3b:a1:4e:
         56:a5:e1:cc:7c:05:10:f7:6b:cc:98:01:e2:d0:cc:2c:f2:f1:
         38:06:1d:5e:13:ba:d9:b5:07:d3:51:98:2d:e7:8e:3e:9f:2f:
         e1:47:37:aa:4e:01:fe:b8:cb:ff:99:06:c2:97:b4:db:ef:96:
         bc:1b:2e:45:4c:e4:38:2c:b5:8c:83:dc:ba:78:97:98:29:07:
         8d:e9:c1:6a:a0:ed:10:b4:9c:7a:19:45:17:4b:ec:88:b7:5a:
         ab:bb:5c:39:c8:a4:bf:23:f7:9f:d6:45:5e:ae:1d:a7:5a:d2:
         a3:04:76:43:a9:88:41:4a:3d:f9:a0:9f:23:38:e9:fe:0c:71:
         35:4e:3e:15:1f:cc:94:44:2e:2e:e3:5e:03:27:53:dd:6d:c3:
         4f:bf:22:f0:9a:4c:f7:0a:2f:2b:b1:75:e3:53:9a:92:fa:7d:
         f7:c8:ba:e4:08:83:d7:4c:36:a8:74:e3:d2:ba:e6:f5:88:be:
         30:18:f0:f9:51:21:d0:82:95:33:c0:05:df:0c:b7:0e:0d:bf:
         af:26:1e:32:9c:fb:28:19:b0:81:a3:3d:75:ad:95:6b:2e:ad:
         3e:cc:6c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----