Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9WfFyQFP6rVQyBoJrkSP44oFq8czYknxBgMcoouuHXvS/0/E24FA91D4BC06D0AC6625AE77CB8922782C93BBC.mft
File:                     E24FA91D4BC06D0AC6625AE77CB8922782C93BBC.mft (raw, json)
Hash identifier:          2rrc2oEM+sKd2R2udKsF7YOGv81icoYmbKZgZjcaykg=
Subject key identifier:   AA:1B:E8:6A:6C:AE:64:3D:93:F9:18:AA:CE:0B:29:C5:3F:04:24:F3
Authority key identifier: E2:4F:A9:1D:4B:C0:6D:0A:C6:62:5A:E7:7C:B8:92:27:82:C9:3B:BC
Certificate issuer:       /CN=E24FA91D4BC06D0AC6625AE77CB8922782C93BBC
Certificate serial:       4F0169FFC54A013D5EE40C99BEA2CBFF4B20F020
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E24FA91D4BC06D0AC6625AE77CB8922782C93BBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9WfFyQFP6rVQyBoJrkSP44oFq8czYknxBgMcoouuHXvS/0/E24FA91D4BC06D0AC6625AE77CB8922782C93BBC.mft
Manifest number:          1E
Signing time:             Tue 19 Mar 2024 16:37:56 +0000
Manifest this update:     Tue 19 Mar 2024 16:32:56 +0000
Manifest next update:     Wed 20 Mar 2024 18:29:56 +0000
Files and hashes:         1: 34352e3137302e3232302e302f32322d3332203d3e20323638313734.roa (hash: 3qWaeCgP7yPauxWxlUfudNeOVWYi+dA1y0XEU3Ssc7E=)
                          2: E24FA91D4BC06D0AC6625AE77CB8922782C93BBC.crl (hash: gZCmbIVP7+ARX0Eu+b5dMM4z12vnQ66+/MQvaDXPN58=)
                          3: 323830343a353933303a3a2f33322d313238203d3e20323638313734.roa (hash: y2tgbbjW3XT30I1p8qtbh8CJJ88iuPknqAd5QmkAVXE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:01:69:ff:c5:4a:01:3d:5e:e4:0c:99:be:a2:cb:ff:4b:20:f0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E24FA91D4BC06D0AC6625AE77CB8922782C93BBC
        Validity
            Not Before: Mar 19 16:32:56 2024 GMT
            Not After : Mar 20 18:29:56 2024 GMT
        Subject: CN=AA1BE86A6CAE643D93F918AACE0B29C53F0424F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a9:7d:5a:e6:67:84:a2:c7:4a:95:e3:56:cc:
                    20:ad:fa:33:7d:9b:a3:9b:4d:6a:69:ce:36:20:97:
                    30:68:2b:76:0e:63:2e:9e:16:5a:c4:eb:26:11:94:
                    f1:05:ed:31:14:11:ac:51:f8:ef:60:8c:27:5d:c9:
                    71:4e:41:af:5d:ef:0d:1e:e8:39:3e:24:9a:6b:f0:
                    f3:b4:68:3c:f3:db:89:8e:16:b9:8c:fa:91:90:90:
                    74:51:17:4a:40:a6:f2:9a:54:16:05:5f:46:66:c1:
                    ae:83:fc:24:27:19:34:44:2f:50:71:d7:c3:e1:aa:
                    7d:c0:6b:5e:f2:a7:62:18:5e:b5:3d:06:e5:a2:50:
                    3a:46:70:d1:89:e4:ec:b9:dc:49:30:2b:25:9c:8f:
                    41:2d:9e:c5:db:89:34:55:78:60:24:ad:3d:30:ec:
                    68:74:fd:9c:64:94:23:f3:9f:ce:03:aa:c6:96:b7:
                    36:5e:00:ef:7a:29:04:09:df:c9:d7:30:1b:f9:7c:
                    f9:42:e9:89:b2:ea:73:05:f2:31:44:37:db:2f:48:
                    4e:ae:ee:31:eb:9e:74:77:ca:6b:cb:32:86:98:94:
                    43:9c:d8:82:5b:ff:da:7c:aa:ef:94:8d:89:e2:30:
                    78:84:e5:97:9a:f6:b5:2f:0d:94:51:ee:36:09:6b:
                    5b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:1B:E8:6A:6C:AE:64:3D:93:F9:18:AA:CE:0B:29:C5:3F:04:24:F3
            X509v3 Authority Key Identifier:
                keyid:E2:4F:A9:1D:4B:C0:6D:0A:C6:62:5A:E7:7C:B8:92:27:82:C9:3B:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9WfFyQFP6rVQyBoJrkSP44oFq8czYknxBgMcoouuHXvS/0/E24FA91D4BC06D0AC6625AE77CB8922782C93BBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E24FA91D4BC06D0AC6625AE77CB8922782C93BBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9WfFyQFP6rVQyBoJrkSP44oFq8czYknxBgMcoouuHXvS/0/E24FA91D4BC06D0AC6625AE77CB8922782C93BBC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:5a:0e:33:10:46:84:7a:b7:f0:48:c6:17:5f:ab:d0:f4:e9:
         af:e3:44:ae:70:56:d9:42:95:11:35:61:87:f8:f5:ea:39:a7:
         d6:a7:9c:38:74:12:9c:ba:10:b2:c0:02:c8:ff:89:49:54:0e:
         0d:17:40:28:ac:88:49:1f:27:1c:3b:de:d2:46:70:ab:cf:1c:
         46:5d:ea:c0:70:81:49:1b:93:7d:0b:2d:98:83:35:e7:66:fa:
         1b:29:cd:10:c1:d8:13:9a:02:a1:3c:91:22:76:9b:38:1f:7e:
         3c:29:79:c5:f6:98:50:85:e1:84:37:48:01:c0:75:f3:d5:58:
         55:99:7b:9f:f6:9c:fc:e7:8b:23:fc:41:39:6c:65:32:2e:47:
         29:4d:aa:58:2c:b0:36:a1:ff:17:55:65:ae:3e:b8:50:33:7e:
         36:7d:27:53:d4:47:91:80:20:8b:92:e7:1b:81:1d:b6:2b:7a:
         bc:39:bd:e8:37:e1:f9:b7:c6:8f:a9:f2:36:2a:d4:7c:d8:7e:
         e7:3b:d0:c4:a0:3a:00:a8:33:fe:1c:d6:d2:a0:30:cd:df:82:
         4b:35:48:35:63:15:46:90:3f:c7:ae:68:8e:e5:8b:42:15:86:
         9d:38:a3:c2:c5:43:ed:6d:c3:15:b6:bc:e6:2a:5f:f0:af:3a:
         97:b5:93:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----