Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A3uPy2vKawxLSvQgredYqK93UwgQ9EbfUbE8r2aVihp3/0/E4E930115352E8D716089CC9D548A7853F79F50E.mft
File:                     E4E930115352E8D716089CC9D548A7853F79F50E.mft (raw, json)
Hash identifier:          2UCE3VqYi6muKtvR0X7sniCAk2+ki38uZPcwvk44/Nk=
Subject key identifier:   C1:95:8B:D8:0C:13:72:AB:CF:50:F2:51:48:FD:50:62:54:A9:DB:B3
Authority key identifier: E4:E9:30:11:53:52:E8:D7:16:08:9C:C9:D5:48:A7:85:3F:79:F5:0E
Certificate issuer:       /CN=E4E930115352E8D716089CC9D548A7853F79F50E
Certificate serial:       16233488466A58B89D12F9322EA559E2671CE04A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E4E930115352E8D716089CC9D548A7853F79F50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3uPy2vKawxLSvQgredYqK93UwgQ9EbfUbE8r2aVihp3/0/E4E930115352E8D716089CC9D548A7853F79F50E.mft
Manifest number:          0288
Signing time:             Mon 15 Apr 2024 07:48:34 +0000
Manifest this update:     Mon 15 Apr 2024 07:43:34 +0000
Manifest next update:     Tue 16 Apr 2024 11:07:34 +0000
Files and hashes:         1: 323830343a363761303a3a2f33322d3438203d3e20323639363430.roa (hash: j4j8k6MRAOZXWKxbhhxkJtpz8jWNgH2aLdM4KsPY1/w=)
                          2: E4E930115352E8D716089CC9D548A7853F79F50E.crl (hash: ss9a2Xa/lRiGOANkdHZs6vRlXWltPr9/7H48FxIH7MI=)
                          3: 34352e3139302e36382e302f32322d3234203d3e20323639363430.roa (hash: KjHKh7kABqXwQ0eB12H9arC8T53QKv2t3Ma5vHFNYME=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:23:34:88:46:6a:58:b8:9d:12:f9:32:2e:a5:59:e2:67:1c:e0:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4E930115352E8D716089CC9D548A7853F79F50E
        Validity
            Not Before: Apr 15 07:43:34 2024 GMT
            Not After : Apr 16 11:07:34 2024 GMT
        Subject: CN=C1958BD80C1372ABCF50F25148FD506254A9DBB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:08:c5:ed:99:d8:c3:db:35:b7:3b:da:71:5f:
                    52:01:bc:69:03:dc:4f:51:c8:7e:2c:60:eb:66:3d:
                    b1:52:e8:c7:cd:ce:4b:36:66:08:1f:5b:aa:e5:de:
                    db:fb:a7:22:ec:57:67:ce:3c:2b:50:8b:27:5d:35:
                    a6:62:64:3c:80:94:1f:25:b9:db:10:2b:68:96:91:
                    5f:68:2b:02:9a:13:dd:f2:ac:96:9e:d1:39:92:68:
                    c6:56:2e:a4:f5:e8:0a:08:77:b4:c5:ac:01:6b:d0:
                    ed:7a:4a:8f:83:73:f3:f1:ee:eb:cb:36:0b:de:00:
                    cc:fe:6b:17:6c:4d:e9:ca:be:55:c4:63:f4:9b:52:
                    e5:90:bc:8a:2b:f8:e5:0a:62:38:af:6b:51:3d:a0:
                    65:4b:61:66:62:79:28:b5:e1:18:5f:da:94:10:16:
                    c9:e1:d4:13:e8:6b:2d:8c:95:a8:b8:ae:bf:b9:a3:
                    85:dd:ad:59:7f:ba:63:4c:f2:d3:18:24:70:e9:24:
                    93:b7:53:81:20:ca:a8:b8:3d:0d:d7:8c:83:fc:bd:
                    1b:ec:8f:e2:88:84:f2:68:ad:65:6a:25:3c:8d:ed:
                    1a:44:dc:c4:eb:d2:ce:75:4d:19:88:d1:01:72:be:
                    90:6a:23:d7:90:2f:9e:93:c5:e9:5f:66:d0:7a:b1:
                    3f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:95:8B:D8:0C:13:72:AB:CF:50:F2:51:48:FD:50:62:54:A9:DB:B3
            X509v3 Authority Key Identifier:
                keyid:E4:E9:30:11:53:52:E8:D7:16:08:9C:C9:D5:48:A7:85:3F:79:F5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3uPy2vKawxLSvQgredYqK93UwgQ9EbfUbE8r2aVihp3/0/E4E930115352E8D716089CC9D548A7853F79F50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E4E930115352E8D716089CC9D548A7853F79F50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3uPy2vKawxLSvQgredYqK93UwgQ9EbfUbE8r2aVihp3/0/E4E930115352E8D716089CC9D548A7853F79F50E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:21:8c:35:41:2b:32:c9:b7:87:08:d9:fe:a3:f4:4e:60:43:
         a9:ab:a1:be:d0:0c:0c:ff:8f:b8:a9:53:45:75:1f:4c:26:5e:
         32:26:c4:e8:51:92:a3:fc:1f:c9:f2:f5:01:2d:84:01:50:ac:
         56:5a:52:18:cd:8c:f2:3b:13:a2:9a:71:52:9a:ab:64:d6:cf:
         8d:43:13:5e:9a:5c:b6:84:75:d9:0d:bb:9e:e8:50:94:95:ae:
         23:4e:13:21:76:6a:e1:4a:f3:3c:3b:64:19:40:9f:99:37:b0:
         a6:25:43:bf:45:1a:e2:f3:d1:51:e4:38:30:e2:a9:bc:2d:79:
         a0:fa:3d:23:ab:ff:5f:d1:cd:7f:aa:60:e5:84:94:90:10:75:
         d7:d3:2e:58:04:48:be:01:0b:7f:e4:e1:47:92:23:30:f5:95:
         f2:ed:30:55:f9:6a:82:83:58:22:ef:02:84:d4:29:21:4a:64:
         31:95:f2:33:e7:36:e2:76:2e:0f:7d:94:c8:0b:a6:fb:5d:8a:
         f2:5b:1c:98:8f:5d:d4:ec:96:c1:75:e9:0c:0a:57:69:74:86:
         1e:3a:3e:9d:9b:46:fe:09:e7:b9:50:d4:1e:c6:9e:b8:82:f6:
         c8:e2:9d:36:b3:4c:bf:05:d7:8f:c5:cd:04:65:06:84:21:c8:
         56:b8:11:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----