Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ASipeTL7apH2NCaHUJ3Nu7heXcouCsMxT6vcujqwUcMi/0/E8A7437AF4AE5C7941AC3596DC385F13E6034DAD.mft
File:                     E8A7437AF4AE5C7941AC3596DC385F13E6034DAD.mft (raw, json)
Hash identifier:          f+95S8F6v6fThtXPC4pJKXCnu0lykMD8YUbwCRtA8TM=
Subject key identifier:   2C:65:1C:C4:EC:84:43:70:C1:E5:D0:89:7A:CB:CF:F1:1A:47:0B:F6
Authority key identifier: E8:A7:43:7A:F4:AE:5C:79:41:AC:35:96:DC:38:5F:13:E6:03:4D:AD
Certificate issuer:       /CN=E8A7437AF4AE5C7941AC3596DC385F13E6034DAD
Certificate serial:       5CCC83F5D14A6729F42CF126AB3B8D4E267429E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8A7437AF4AE5C7941AC3596DC385F13E6034DAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ASipeTL7apH2NCaHUJ3Nu7heXcouCsMxT6vcujqwUcMi/0/E8A7437AF4AE5C7941AC3596DC385F13E6034DAD.mft
Manifest number:          5A
Signing time:             Mon 15 Apr 2024 04:55:34 +0000
Manifest this update:     Mon 15 Apr 2024 04:50:34 +0000
Manifest next update:     Tue 16 Apr 2024 08:06:34 +0000
Files and hashes:         1: E8A7437AF4AE5C7941AC3596DC385F13E6034DAD.crl (hash: mzhuSyfFow45mfTrT2pkfeOg4t6aWR70KaSs8bd5Pkc=)
                          2: 323830343a386163343a3a2f33322d3438203d3e20323733363931.roa (hash: oK2IVdi9xjuZ9eFgBW3sQBhB2eM4mAB+jQgnx9qoups=)
                          3: 323830343a386163343a3a2f33322d3332203d3e20323733363931.roa (hash: 5nmN+GwOoxihX3HxABuQUe4mh4+0lS3zL69ODHAXsLE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:cc:83:f5:d1:4a:67:29:f4:2c:f1:26:ab:3b:8d:4e:26:74:29:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8A7437AF4AE5C7941AC3596DC385F13E6034DAD
        Validity
            Not Before: Apr 15 04:50:34 2024 GMT
            Not After : Apr 16 08:06:34 2024 GMT
        Subject: CN=2C651CC4EC844370C1E5D0897ACBCFF11A470BF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ff:1c:bc:ef:5c:d0:8d:9c:04:22:f6:b9:43:
                    ff:e8:98:36:25:24:5e:5d:f9:d2:72:68:2d:88:af:
                    45:0d:5b:6f:13:d7:94:92:fa:4b:1d:cf:d2:d0:7f:
                    92:f2:b6:b8:aa:df:55:3d:92:6d:d7:4d:cb:08:d3:
                    1b:8d:32:e3:da:c1:69:1e:b2:fd:1b:f0:07:47:7d:
                    51:cc:5f:92:31:3b:54:23:8c:7b:e0:7e:3c:1e:8f:
                    1b:42:70:1a:e8:e4:cc:fd:43:ad:d1:98:88:31:aa:
                    a9:5e:73:6c:8e:65:21:9c:0b:0b:6c:1b:18:85:03:
                    a8:7c:2d:bd:ad:dd:15:a7:f8:0f:48:88:17:aa:51:
                    01:f8:86:c7:40:6d:f3:33:fe:89:01:89:9e:69:8c:
                    9c:24:64:2b:80:17:88:96:5f:5b:fe:ce:70:c3:e0:
                    74:54:77:18:4c:e0:14:da:49:5a:c4:2d:6f:c3:62:
                    36:bb:75:40:3e:e0:ad:05:3e:c1:4a:fa:86:07:79:
                    ca:27:d6:83:a8:00:41:ef:46:ce:34:ea:52:84:5c:
                    0d:40:85:78:e4:ca:29:8b:14:e4:3e:fd:af:59:a5:
                    aa:3a:74:f1:ca:84:1a:7b:b7:d9:4b:18:51:d7:d4:
                    ae:77:4d:1f:49:64:da:67:8f:31:68:5b:ef:e7:67:
                    da:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:65:1C:C4:EC:84:43:70:C1:E5:D0:89:7A:CB:CF:F1:1A:47:0B:F6
            X509v3 Authority Key Identifier:
                keyid:E8:A7:43:7A:F4:AE:5C:79:41:AC:35:96:DC:38:5F:13:E6:03:4D:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ASipeTL7apH2NCaHUJ3Nu7heXcouCsMxT6vcujqwUcMi/0/E8A7437AF4AE5C7941AC3596DC385F13E6034DAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8A7437AF4AE5C7941AC3596DC385F13E6034DAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ASipeTL7apH2NCaHUJ3Nu7heXcouCsMxT6vcujqwUcMi/0/E8A7437AF4AE5C7941AC3596DC385F13E6034DAD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:59:2a:c9:b8:5a:47:0b:54:2b:e2:a5:1c:b7:69:81:8b:1a:
         9a:92:83:5a:a6:49:8b:e4:84:da:7a:b1:50:33:16:7d:ca:0e:
         85:9c:56:b4:15:34:12:77:3b:c5:69:dc:ee:27:0f:77:a2:6c:
         67:04:ce:61:77:26:72:46:28:25:77:03:43:25:95:62:8d:f9:
         6a:b9:6f:b3:12:ad:63:36:7d:29:4c:0e:63:05:c7:6c:be:fd:
         59:15:c7:58:fc:45:5f:64:cd:3d:b9:f7:ef:90:aa:d8:70:29:
         61:ea:c9:69:08:35:02:d1:58:7b:05:84:39:9e:f4:67:60:96:
         01:3b:b2:48:e2:d5:c3:55:2f:f1:9d:5f:cc:9a:8e:ec:cf:05:
         55:56:91:c0:e3:ac:c2:b1:df:b7:82:52:73:98:67:44:64:a6:
         94:3a:c9:84:6f:5d:9e:ee:97:cb:ba:8a:09:27:ac:7a:5f:ee:
         e5:5a:53:27:c9:b8:0a:96:6c:9a:19:7f:94:5a:9f:bb:d8:91:
         b7:99:d7:00:ef:1c:0e:26:20:e2:59:16:58:39:6a:e7:2c:48:
         9f:b7:fb:f7:0f:cd:4a:75:4f:67:c0:ef:83:ce:a3:cb:83:26:
         61:6e:08:ae:18:6b:b3:a0:55:d9:25:cb:6f:b1:b0:8d:61:cb:
         2d:44:ba:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----