Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/0/68EBF9E7509F0C8F461084CC21FC968DD29C8FB2.mft
File:                     68EBF9E7509F0C8F461084CC21FC968DD29C8FB2.mft (raw, json)
Hash identifier:          nSCD2Q7VfQG/P6/HO2eD2xd5/KHc0C0lcT+xlLiXWeg=
Subject key identifier:   C9:39:94:C7:88:2E:5A:24:C8:8B:BB:18:DF:F1:4A:8F:6D:FE:D9:61
Authority key identifier: 68:EB:F9:E7:50:9F:0C:8F:46:10:84:CC:21:FC:96:8D:D2:9C:8F:B2
Certificate issuer:       /CN=68EBF9E7509F0C8F461084CC21FC968DD29C8FB2
Certificate serial:       50B08EB633BEB411B6D67D73263659EB12B8AEC4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68EBF9E7509F0C8F461084CC21FC968DD29C8FB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/0/68EBF9E7509F0C8F461084CC21FC968DD29C8FB2.mft
Manifest number:          02A4
Signing time:             Sun 14 Apr 2024 18:14:13 +0000
Manifest this update:     Sun 14 Apr 2024 18:09:13 +0000
Manifest next update:     Mon 15 Apr 2024 20:57:13 +0000
Files and hashes:         1: 323830343a356564383a3a2f33322d3438203d3e20323639303630.roa (hash: JA1Pow0sctRb3uKet+7hFQ32+kWRiWY0t2uohIB6Sm8=)
                          2: 34352e3137392e34382e302f32322d3234203d3e20323639303630.roa (hash: MOYyW9VdvFxbouGHgMNnLK+2OpP392nMvDDzmMymWhQ=)
                          3: 68EBF9E7509F0C8F461084CC21FC968DD29C8FB2.crl (hash: IfH8TywWx+7Hc+Y61VA+L7G1IJETenj38yRek90ERPA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b0:8e:b6:33:be:b4:11:b6:d6:7d:73:26:36:59:eb:12:b8:ae:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68EBF9E7509F0C8F461084CC21FC968DD29C8FB2
        Validity
            Not Before: Apr 14 18:09:13 2024 GMT
            Not After : Apr 15 20:57:13 2024 GMT
        Subject: CN=C93994C7882E5A24C88BBB18DFF14A8F6DFED961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b1:f4:c4:b3:ce:79:32:33:ff:a8:4b:84:c1:
                    eb:05:a6:20:a9:41:a3:0d:18:5d:e0:07:a7:bb:4c:
                    38:60:e2:de:ab:1b:39:36:82:44:9c:33:1b:58:c1:
                    cc:fa:b1:11:41:fb:43:5a:d8:27:d2:c6:f9:42:51:
                    5a:a1:98:db:79:68:18:29:84:57:15:e3:76:31:42:
                    6d:e2:da:37:1c:fc:fa:54:5f:75:3c:51:ae:aa:10:
                    38:b0:56:ea:c6:23:2a:a9:37:30:72:0c:5a:ce:4d:
                    a6:ca:5b:5a:22:86:a5:5e:0e:73:64:4f:15:01:05:
                    25:c8:b5:cb:f3:dd:4c:b6:5a:04:09:60:1d:29:e4:
                    9e:68:37:51:43:3c:c2:3c:fb:3e:9c:1a:5a:9b:a6:
                    57:85:8c:2b:01:70:45:88:9c:b7:4c:41:da:95:db:
                    9d:31:af:11:73:55:1e:77:26:e6:5b:a4:89:71:e5:
                    5a:6e:6c:5b:48:a2:42:be:d8:ef:be:2b:fa:f5:4b:
                    61:6f:e4:39:1e:3d:26:d3:a3:42:67:e8:0f:92:2c:
                    ee:78:1b:e0:f5:b8:8f:cb:37:73:64:ba:e9:6a:f8:
                    90:39:54:75:e5:4e:de:a9:1d:fd:59:c9:b8:86:94:
                    ac:d2:50:1f:8b:c0:3b:58:df:fc:e4:ad:b0:29:46:
                    71:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:39:94:C7:88:2E:5A:24:C8:8B:BB:18:DF:F1:4A:8F:6D:FE:D9:61
            X509v3 Authority Key Identifier:
                keyid:68:EB:F9:E7:50:9F:0C:8F:46:10:84:CC:21:FC:96:8D:D2:9C:8F:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/0/68EBF9E7509F0C8F461084CC21FC968DD29C8FB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68EBF9E7509F0C8F461084CC21FC968DD29C8FB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/0/68EBF9E7509F0C8F461084CC21FC968DD29C8FB2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:ea:f7:c1:f6:d6:24:9f:79:e5:3b:46:de:ff:08:f2:86:d2:
         79:2e:1a:83:f2:be:c9:4f:6b:95:b1:71:85:a5:5a:c9:62:09:
         16:6c:f6:10:56:a7:1c:03:e6:49:cb:19:aa:39:66:a4:fc:e7:
         2d:f3:7a:dd:27:1a:e0:02:2b:ba:44:58:c0:bd:ad:82:c9:24:
         8c:13:ed:50:c6:93:4a:2d:39:42:4f:22:a9:e5:0f:99:03:83:
         58:b7:0b:fd:11:f6:f2:4e:12:0b:13:f2:2e:81:6b:61:67:1f:
         67:e0:bf:31:ea:a9:d9:43:42:33:ff:1e:07:11:bc:4d:6d:37:
         03:88:72:ee:c9:cf:ec:04:83:77:e1:28:48:b1:af:dd:c2:97:
         5a:15:4b:31:fa:27:df:ba:8a:46:90:1c:67:92:bc:c7:0b:70:
         05:27:d9:12:ef:a3:52:c6:6d:10:30:0c:a6:0f:b1:10:3b:f2:
         a1:2f:97:18:18:79:ea:8a:d0:ad:df:34:55:d2:bf:b1:e3:fa:
         7e:4c:ef:85:54:cb:94:95:a0:8a:4d:a9:07:76:ed:2b:1e:35:
         95:d7:b6:b4:2b:4e:9d:7e:52:a2:61:2b:19:d4:0d:98:77:e5:
         9d:7e:5f:eb:21:e5:00:4f:21:69:93:f0:4a:b6:46:43:5c:d2:
         91:4e:b8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----