Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/EC875FA85A1BEAB5C7B068927C636B5908F78397.mft
File:                     EC875FA85A1BEAB5C7B068927C636B5908F78397.mft (raw, json)
Hash identifier:          prIWWPHI64waNMgirhTTRvrsTbDR3NTU7OyKQXxGsJs=
Subject key identifier:   3F:CD:73:41:E2:BF:F6:F9:69:BA:30:AC:6F:C7:71:74:A1:61:B7:38
Authority key identifier: EC:87:5F:A8:5A:1B:EA:B5:C7:B0:68:92:7C:63:6B:59:08:F7:83:97
Certificate issuer:       /CN=EC875FA85A1BEAB5C7B068927C636B5908F78397
Certificate serial:       4386944D0DF1150116485A4488001A788F668181
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC875FA85A1BEAB5C7B068927C636B5908F78397.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/EC875FA85A1BEAB5C7B068927C636B5908F78397.mft
Manifest number:          0C
Signing time:             Sat 24 Feb 2024 04:39:44 +0000
Manifest this update:     Sat 24 Feb 2024 04:34:44 +0000
Manifest next update:     Sun 25 Feb 2024 06:02:44 +0000
Files and hashes:         1: 3137372e33392e3135362e302f32322d3234203d3e203532373732.roa (hash: Q2Ua3f7mvuUQ5ZXdxndV1IhlKsDk3N7P/nQQ0M2WFdM=)
                          2: 323830343a323539633a3a2f33322d3438203d3e203532373732.roa (hash: gPvFqjL8fAbduR8MYQD1PJhHGfXllSuopDdYffsngaw=)
                          3: EC875FA85A1BEAB5C7B068927C636B5908F78397.crl (hash: T8Qpg5THu+3LkF6RX53Y+6B8AWnnSPh3ut8unNVu2F8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:86:94:4d:0d:f1:15:01:16:48:5a:44:88:00:1a:78:8f:66:81:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC875FA85A1BEAB5C7B068927C636B5908F78397
        Validity
            Not Before: Feb 24 04:34:44 2024 GMT
            Not After : Feb 25 06:02:44 2024 GMT
        Subject: CN=3FCD7341E2BFF6F969BA30AC6FC77174A161B738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:94:99:af:7c:95:d8:45:b0:24:23:0d:6c:ba:
                    7e:f8:7d:60:57:6b:90:c4:b1:e7:86:9c:5c:77:ec:
                    fd:65:08:cd:80:96:a8:e1:50:11:d4:1d:f0:62:df:
                    03:36:a8:f8:9b:b7:76:15:c7:ce:58:a7:73:21:5b:
                    06:76:ea:f4:0f:08:b8:56:30:b9:fd:e6:b3:6e:ff:
                    f6:2e:d9:6b:32:9e:c0:c4:c8:77:7c:29:f3:26:7e:
                    02:ec:85:f2:d9:00:e4:0c:96:cb:e3:57:07:ad:ec:
                    dc:42:93:11:e7:07:02:ba:6c:41:4d:88:be:7d:5a:
                    18:43:04:25:b3:16:0f:c8:7e:8e:89:d2:2e:59:9d:
                    5b:47:a0:a9:08:31:a5:58:9b:0e:b2:b6:b6:3a:51:
                    1c:39:3f:3b:80:59:47:dc:84:b9:1a:10:41:e9:7f:
                    6f:c5:1b:b0:3f:09:38:42:05:86:66:84:1f:2f:24:
                    c3:f1:2a:20:39:b9:5f:c9:58:f9:35:01:cd:a2:2b:
                    fc:32:b0:8c:98:e7:ed:33:55:9a:d9:d0:4a:93:83:
                    86:83:27:71:9b:0c:a0:61:4a:3d:d9:10:db:7b:df:
                    84:61:21:76:8f:a0:86:ae:b6:aa:19:a0:40:8b:5c:
                    1b:ba:db:cf:67:f5:dc:c1:6b:68:28:7a:71:0c:52:
                    98:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:CD:73:41:E2:BF:F6:F9:69:BA:30:AC:6F:C7:71:74:A1:61:B7:38
            X509v3 Authority Key Identifier:
                keyid:EC:87:5F:A8:5A:1B:EA:B5:C7:B0:68:92:7C:63:6B:59:08:F7:83:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/EC875FA85A1BEAB5C7B068927C636B5908F78397.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC875FA85A1BEAB5C7B068927C636B5908F78397.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/EC875FA85A1BEAB5C7B068927C636B5908F78397.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:4d:a1:57:c3:d9:12:d9:42:7d:17:68:10:1e:1f:2f:97:48:
         e8:e6:a0:90:24:ce:66:3c:1a:da:fa:b6:30:8f:77:c6:2b:9d:
         61:68:42:63:6b:16:3d:5e:53:81:a4:70:1f:d9:d3:00:ec:d4:
         4c:99:23:68:2a:9e:48:61:e7:d9:3c:4b:5a:fa:9d:ce:77:e2:
         08:9c:85:0d:1d:b2:6e:ea:67:3e:63:76:73:af:24:9b:bf:26:
         76:ed:66:a4:13:49:3d:5f:ea:d5:fc:db:06:ff:01:38:e6:92:
         ab:61:10:8f:6d:02:19:f8:03:e8:09:02:0c:67:67:3b:29:68:
         c3:79:48:42:54:9d:3c:3e:21:a2:97:c7:a3:de:39:14:d3:cb:
         b8:9d:5d:e9:1d:5c:c1:91:8f:ab:9d:1d:f9:c5:e5:3a:dd:9a:
         9b:da:04:9d:e0:3e:c3:dd:56:a4:fa:6a:59:5e:80:87:70:1c:
         aa:83:81:ae:3a:cc:5b:21:63:88:0e:37:2e:fa:3c:0f:89:94:
         50:2d:64:43:01:f8:51:2e:36:cf:c6:67:16:8a:01:6f:fc:a3:
         d8:d3:b9:fd:38:06:5f:ea:7d:d3:f1:a0:a3:22:54:fb:22:11:
         d9:9f:5f:9e:84:83:86:1c:8f:4c:f7:0a:0e:92:fc:ea:63:94:
         9b:ec:93:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----