Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/EC4E0DBD1EC8C2208CC7CEB44A8440D36BD4EAF7.mft
File:                     EC4E0DBD1EC8C2208CC7CEB44A8440D36BD4EAF7.mft (raw, json)
Hash identifier:          GldFBdXHQeI1tbEgJUq9zKy695kdjI2n/OvRYvL5XD0=
Subject key identifier:   DA:9C:98:4C:51:4C:C6:BC:EA:09:47:B4:39:E6:75:D4:C2:38:98:9A
Authority key identifier: EC:4E:0D:BD:1E:C8:C2:20:8C:C7:CE:B4:4A:84:40:D3:6B:D4:EA:F7
Certificate issuer:       /CN=EC4E0DBD1EC8C2208CC7CEB44A8440D36BD4EAF7
Certificate serial:       34B341A90688E28F1CCCB642C0E4C957C7851AA3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC4E0DBD1EC8C2208CC7CEB44A8440D36BD4EAF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/EC4E0DBD1EC8C2208CC7CEB44A8440D36BD4EAF7.mft
Manifest number:          5B
Signing time:             Fri 28 Jun 2024 04:38:20 +0000
Manifest this update:     Fri 28 Jun 2024 04:33:20 +0000
Manifest next update:     Sat 29 Jun 2024 07:25:20 +0000
Files and hashes:         1: 3230302e37332e3231362e302f32342d3234203d3e20323730343833.roa (hash: 29+YuEGrB8E6FMoNH7TGDxFeWHwfQQFE4nDth89DlMA=)
                          2: 3230302e37332e3231372e302f32342d3234203d3e20323730343833.roa (hash: xfrTFVVOFBXbekXTbla1XyD6o7WsdGcun8mCug3K7hE=)
                          3: 3230302e37332e3231362e302f32332d3233203d3e20323730343833.roa (hash: qu5M9tJVTRVv5wA336SjVkgCn/CWIGl8V3piNbS3Fj8=)
                          4: 3230302e37332e3231382e302f32342d3234203d3e20323730343833.roa (hash: OUb3imRt4YUDZopmLcpNUHv4+KIxLOx+Vpq/Oo5Pjpo=)
                          5: EC4E0DBD1EC8C2208CC7CEB44A8440D36BD4EAF7.crl (hash: DXHVX1hUlA9IbfOmHB8QZdWkS6hKfZOH55Elv+hVgNc=)
                          6: 323830343a366361383a3a2f33322d3332203d3e20323730343833.roa (hash: qvW3sA80iGt9BlvuHRtDNek9BJPzxLurAXZSoviZwvw=)
                          7: 3230302e37332e3231392e302f32342d3234203d3e20323730343833.roa (hash: DxSFaPmQG/xup3HsiNn2CqqCYzPUihWiu0zcAqx3qaE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:b3:41:a9:06:88:e2:8f:1c:cc:b6:42:c0:e4:c9:57:c7:85:1a:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC4E0DBD1EC8C2208CC7CEB44A8440D36BD4EAF7
        Validity
            Not Before: Jun 28 04:33:20 2024 GMT
            Not After : Jun 29 07:25:20 2024 GMT
        Subject: CN=DA9C984C514CC6BCEA0947B439E675D4C238989A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:41:e9:ad:01:5f:7a:d8:f5:9e:24:ab:93:3d:
                    53:ce:e2:db:a5:b5:5a:d3:55:74:40:95:f3:f1:f0:
                    e5:f3:44:d5:99:62:85:31:7a:36:66:d7:68:bc:a7:
                    05:d6:38:9b:bd:64:7c:d9:5b:39:c9:9a:14:af:15:
                    3d:0d:74:d7:50:50:7d:12:b7:9c:c1:56:07:bb:cf:
                    ca:09:40:19:50:e8:54:35:4a:85:f6:3e:5d:c5:4f:
                    cf:77:53:ba:89:ac:57:1a:94:cd:67:32:a7:71:72:
                    ad:44:48:a4:0d:6a:fe:9b:02:ef:ef:e1:b0:0b:2f:
                    7d:d3:ca:c3:b4:67:41:f6:61:a1:c8:a5:0d:08:fd:
                    6f:34:1b:b3:d8:e0:b1:84:26:00:14:0d:3e:fd:2c:
                    4e:65:36:bf:53:7c:f5:0d:7c:94:2c:19:b3:97:2f:
                    a6:98:24:2b:f0:d9:45:73:15:eb:dd:cb:49:39:28:
                    d6:82:1e:28:13:10:69:7a:03:bb:2c:9e:2d:da:dc:
                    31:07:ca:fc:20:25:55:20:c4:dc:32:c1:08:31:29:
                    66:a1:ca:f6:3a:9d:c8:3f:f6:b7:d9:0d:77:83:58:
                    92:f0:16:38:a1:60:10:91:fd:97:2f:a7:96:46:f5:
                    ca:4a:ce:01:19:f4:6f:13:c9:70:02:04:f4:66:44:
                    67:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:9C:98:4C:51:4C:C6:BC:EA:09:47:B4:39:E6:75:D4:C2:38:98:9A
            X509v3 Authority Key Identifier:
                keyid:EC:4E:0D:BD:1E:C8:C2:20:8C:C7:CE:B4:4A:84:40:D3:6B:D4:EA:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/EC4E0DBD1EC8C2208CC7CEB44A8440D36BD4EAF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC4E0DBD1EC8C2208CC7CEB44A8440D36BD4EAF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/EC4E0DBD1EC8C2208CC7CEB44A8440D36BD4EAF7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:94:8e:07:5c:dd:ed:21:cb:5f:53:49:dc:4d:80:86:a6:eb:
         cf:b4:a9:13:9d:10:dd:c7:46:c1:c1:ec:0b:b0:db:92:09:4e:
         97:89:f8:5e:75:24:53:84:fb:c9:40:b4:31:69:a2:ee:df:65:
         da:26:02:da:e5:28:aa:0a:c6:2a:a5:66:4a:86:34:f0:53:10:
         d8:60:c6:c0:9d:6c:e7:4f:39:b4:03:18:de:bb:1e:24:0d:1e:
         82:06:2a:8d:7f:b4:7f:9f:ed:b1:cf:61:03:9d:a9:d5:bc:8d:
         2e:fb:fe:eb:9d:de:65:15:48:4e:07:0e:6e:20:0a:a2:47:49:
         22:b1:91:61:28:58:dc:b9:a0:5d:b8:3c:88:27:eb:19:67:e6:
         52:9c:1f:b8:23:2f:b2:ba:a7:fa:25:6e:bf:07:d2:17:15:46:
         51:2a:64:4a:02:70:6a:56:32:1b:9c:fc:87:4a:54:fc:0a:2a:
         db:84:30:a8:23:e1:53:11:3d:d7:e4:cb:bc:27:fb:cb:e8:44:
         32:e5:3e:5a:4d:ab:15:2d:a6:0f:9b:d2:bf:60:39:f3:bf:aa:
         26:ac:13:95:3d:4c:7f:ea:d9:d4:20:0d:e4:f9:56:4a:8b:93:
         ba:32:83:4e:a5:66:6a:25:95:ac:2b:2b:27:13:05:e8:50:73:
         9e:14:c9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----