Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/EBD21F4D50C1984CFB56A3869C6D0FE9B3B8FC45.mft
File:                     EBD21F4D50C1984CFB56A3869C6D0FE9B3B8FC45.mft (raw, json)
Hash identifier:          pAe8Hm01dUakNzS3iILDGuYIUNjTyY2VyRGUWbC71Kg=
Subject key identifier:   4D:8C:F9:AA:D3:AE:D9:37:B7:7A:53:B8:6F:A9:D3:83:58:F7:0B:BA
Authority key identifier: EB:D2:1F:4D:50:C1:98:4C:FB:56:A3:86:9C:6D:0F:E9:B3:B8:FC:45
Certificate issuer:       /CN=EBD21F4D50C1984CFB56A3869C6D0FE9B3B8FC45
Certificate serial:       11327B3A553A459AF533DA39493BB88137713974
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EBD21F4D50C1984CFB56A3869C6D0FE9B3B8FC45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/EBD21F4D50C1984CFB56A3869C6D0FE9B3B8FC45.mft
Manifest number:          2D
Signing time:             Sat 13 Jan 2024 04:09:16 +0000
Manifest this update:     Sat 13 Jan 2024 04:04:16 +0000
Manifest next update:     Sun 14 Jan 2024 05:53:16 +0000
Files and hashes:         1: EBD21F4D50C1984CFB56A3869C6D0FE9B3B8FC45.crl (hash: rVsvUN7PEfAdUoziTY0cxUvmWAxaY9PkwX6imFZANgA=)
                          2: 3136302e32302e3136382e302f32322d3234203d3e20323636313938.roa (hash: oCBjhF1W4JN0DNFFY/z/mjGDmIKdlan1LvF1jPb3aig=)
                          3: 323830343a336333633a3a2f33322d3336203d3e20323636313938.roa (hash: cCGA6hCK1QLtsET4UIuqLJ8yESPPQg2LgdMk7I81bU0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:32:7b:3a:55:3a:45:9a:f5:33:da:39:49:3b:b8:81:37:71:39:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBD21F4D50C1984CFB56A3869C6D0FE9B3B8FC45
        Validity
            Not Before: Jan 13 04:04:16 2024 GMT
            Not After : Jan 14 05:53:16 2024 GMT
        Subject: CN=4D8CF9AAD3AED937B77A53B86FA9D38358F70BBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9a:65:6d:e7:b6:1e:99:a9:f7:1e:3c:77:12:
                    61:ff:55:25:ff:eb:3a:c7:58:e6:1a:bf:09:6a:78:
                    45:79:57:cb:19:e6:46:aa:54:07:ee:12:09:32:09:
                    46:c0:35:d0:38:c7:d3:90:a7:cd:30:3b:dd:e7:68:
                    e5:2c:62:9a:52:f5:44:24:63:bc:4a:35:86:3d:4e:
                    b5:1d:4d:7c:a9:1a:ae:b8:af:ac:9b:0b:45:02:d1:
                    15:66:49:31:f4:94:22:61:f8:61:ab:b0:44:51:46:
                    97:8a:ed:a5:3d:de:5b:5c:c5:4b:f6:8d:46:3f:af:
                    64:6a:22:66:e4:c0:5b:d0:49:6a:08:62:3f:7d:62:
                    08:59:9a:ec:48:13:4c:5d:90:d3:ba:43:ee:69:50:
                    98:b9:d4:af:19:8f:62:1b:4e:cb:82:3d:79:ed:4e:
                    0d:bf:9b:c0:33:32:8a:be:4d:e8:bc:27:e6:16:f0:
                    b7:f2:83:42:67:b9:31:52:f7:76:9e:e8:03:7c:30:
                    1a:1a:d8:63:1a:64:70:46:13:54:1c:d2:97:2c:35:
                    72:7d:fb:1a:c8:24:d7:57:c1:63:61:29:41:fc:e8:
                    8b:dc:ad:f0:3b:85:98:03:ee:8f:33:9b:b2:e2:f8:
                    69:21:a0:a2:2d:e3:2e:e9:73:ce:0f:1e:2c:c9:ef:
                    37:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:8C:F9:AA:D3:AE:D9:37:B7:7A:53:B8:6F:A9:D3:83:58:F7:0B:BA
            X509v3 Authority Key Identifier:
                keyid:EB:D2:1F:4D:50:C1:98:4C:FB:56:A3:86:9C:6D:0F:E9:B3:B8:FC:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/EBD21F4D50C1984CFB56A3869C6D0FE9B3B8FC45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EBD21F4D50C1984CFB56A3869C6D0FE9B3B8FC45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/EBD21F4D50C1984CFB56A3869C6D0FE9B3B8FC45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:d4:0d:7f:4f:eb:51:bc:a9:be:15:f6:2b:6b:73:b9:69:00:
         ef:ba:80:bc:0f:71:90:e8:e7:b9:d3:42:41:f4:69:23:87:0c:
         f5:bb:5c:75:15:c1:db:37:c8:8d:eb:32:47:22:56:4f:f3:29:
         05:df:41:ba:ea:b8:25:d6:7a:67:63:ed:be:85:6a:4b:1c:e8:
         2e:ba:6f:86:74:83:c6:fc:eb:e2:a1:bf:74:71:0c:ec:97:ea:
         5b:7e:1d:9b:ea:50:41:f2:ed:18:62:fb:76:5f:74:70:3e:87:
         38:dd:b9:d7:bc:26:9b:6c:cf:01:e5:44:a1:c8:2b:7f:cd:db:
         ff:6e:61:29:79:d1:a7:19:8b:17:67:5c:77:3c:a1:69:8a:b1:
         83:97:3b:17:39:ad:74:96:79:bb:36:25:0e:17:41:6f:ca:18:
         39:9c:a5:e8:92:6d:ec:74:b9:72:bb:5c:22:69:58:69:e0:3f:
         93:50:bc:3d:d0:ce:59:c1:37:64:7b:05:c8:3a:e0:1e:df:4f:
         5a:8e:0c:7a:04:5c:63:55:f9:0a:d1:8e:1b:fb:03:7c:46:f8:
         db:bd:94:34:d8:4f:f6:bb:f5:02:98:12:c7:21:7e:9c:a0:a1:
         f3:8d:a8:62:60:a7:fa:5a:3a:ba:b7:66:7d:1f:44:16:a7:bf:
         b6:af:31:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----