Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DQNWaGBLkLHnCh65yNU3J4T13qDV1RJJhqxHjHC8TB25/1/EFD561DB9E03BE1890E4391CF346AC9B46BB2A23.mft
File:                     EFD561DB9E03BE1890E4391CF346AC9B46BB2A23.mft (raw, json)
Hash identifier:          BdLpyAO7N4LdHzFm6dC9UdvGUOtTv14JDxefRTyhcSg=
Subject key identifier:   C3:CE:A1:05:99:6F:D8:5B:2B:51:E3:2B:CF:D9:EE:87:B0:27:12:40
Authority key identifier: EF:D5:61:DB:9E:03:BE:18:90:E4:39:1C:F3:46:AC:9B:46:BB:2A:23
Certificate issuer:       /CN=EFD561DB9E03BE1890E4391CF346AC9B46BB2A23
Certificate serial:       19CB018B886E0B8658548BB14707B9F6C8FE3E4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFD561DB9E03BE1890E4391CF346AC9B46BB2A23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQNWaGBLkLHnCh65yNU3J4T13qDV1RJJhqxHjHC8TB25/1/EFD561DB9E03BE1890E4391CF346AC9B46BB2A23.mft
Manifest number:          37
Signing time:             Wed 15 May 2024 14:02:57 +0000
Manifest this update:     Wed 15 May 2024 13:57:57 +0000
Manifest next update:     Thu 16 May 2024 15:39:57 +0000
Files and hashes:         1: 3139322e3134302e32302e302f32322d3234203d3e20323731333736.roa (hash: WhBaqbYLNjNkjo+KZXaXgoUPnWtytQS06SHnQJduR/U=)
                          2: 323830343a376138343a3a2f33322d3336203d3e20323731333736.roa (hash: o3u55MRHFqN9mwKcl6wqve54Pl2WChugGY2SUFHBWsY=)
                          3: EFD561DB9E03BE1890E4391CF346AC9B46BB2A23.crl (hash: JjM3haxppfNaJn5scQZggT0f3GR+mKd0hK89Ls5EUl8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:cb:01:8b:88:6e:0b:86:58:54:8b:b1:47:07:b9:f6:c8:fe:3e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFD561DB9E03BE1890E4391CF346AC9B46BB2A23
        Validity
            Not Before: May 15 13:57:57 2024 GMT
            Not After : May 16 15:39:57 2024 GMT
        Subject: CN=C3CEA105996FD85B2B51E32BCFD9EE87B0271240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8a:47:76:f2:ef:2b:a7:41:79:a4:d2:dc:a6:
                    1a:4c:1b:1c:65:89:7a:89:d9:b3:27:d2:c5:59:a6:
                    04:6a:23:c3:25:7a:f3:22:b9:d7:9e:b0:da:8a:4a:
                    ff:6b:b5:02:04:fa:8f:9d:15:ec:9a:0b:fa:20:de:
                    cb:e7:5c:1d:cf:7e:59:c8:cf:1b:8c:ea:1c:a5:4a:
                    40:9c:6d:03:df:0f:a4:1c:90:b6:bb:20:2f:81:ef:
                    73:b9:a6:c6:46:84:f1:4e:19:ac:fa:a0:7c:4e:93:
                    3b:73:14:ec:e6:c6:0b:e6:d1:9f:8e:b5:7b:d6:d5:
                    ce:ca:25:fc:09:7d:51:a9:55:2b:1f:78:67:78:bc:
                    9c:91:50:c9:87:4c:f3:9c:3f:20:4d:f8:54:b6:eb:
                    01:e6:5a:14:4a:8b:90:1e:e7:58:f9:4a:72:0f:d8:
                    71:56:46:b4:6b:48:22:63:79:b0:1e:80:45:42:bd:
                    b6:ea:a8:a2:29:b0:71:62:8e:3b:e6:b6:12:62:dd:
                    a3:cb:7d:b3:cd:48:e0:03:dc:89:19:3d:92:f1:51:
                    d1:50:5a:f1:bb:81:39:ae:9e:c1:60:08:c4:c3:da:
                    35:37:a0:d8:8f:22:34:89:c9:fa:35:b1:3e:bf:b7:
                    b7:01:07:14:d5:15:33:c9:f1:19:0f:c0:dd:d8:f7:
                    ae:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:CE:A1:05:99:6F:D8:5B:2B:51:E3:2B:CF:D9:EE:87:B0:27:12:40
            X509v3 Authority Key Identifier:
                keyid:EF:D5:61:DB:9E:03:BE:18:90:E4:39:1C:F3:46:AC:9B:46:BB:2A:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQNWaGBLkLHnCh65yNU3J4T13qDV1RJJhqxHjHC8TB25/1/EFD561DB9E03BE1890E4391CF346AC9B46BB2A23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFD561DB9E03BE1890E4391CF346AC9B46BB2A23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQNWaGBLkLHnCh65yNU3J4T13qDV1RJJhqxHjHC8TB25/1/EFD561DB9E03BE1890E4391CF346AC9B46BB2A23.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:8f:a1:c3:ca:67:4c:fc:8c:7c:9a:a8:68:8d:f9:9f:6a:e4:
         bc:e3:3f:08:50:97:32:4c:78:5f:24:7d:44:53:35:c0:8a:72:
         34:45:d5:6f:a5:8a:90:e3:4d:66:dd:2c:aa:15:58:1e:55:04:
         ff:0b:37:a4:5d:50:b3:ba:30:ad:d5:15:d8:11:2b:7b:83:b9:
         9b:89:25:1b:07:19:a3:98:39:93:00:20:57:a7:a3:4f:1e:27:
         51:3c:a8:0d:3a:81:7b:c3:c6:41:30:be:32:49:37:9b:1e:b2:
         28:99:53:fb:1f:32:3f:84:0e:c3:51:ac:b4:59:2e:56:0a:ec:
         1a:30:89:64:31:8a:cd:c4:c0:4e:1d:6c:d9:c0:a6:fc:88:a5:
         d1:7a:19:a3:1b:a2:73:4d:ea:3b:fe:06:7a:3c:25:fc:0e:55:
         fa:93:76:8d:76:e8:0a:1a:85:46:ea:12:37:8c:bb:56:30:9f:
         e8:94:a9:0d:5e:63:49:22:21:b9:33:57:3d:21:45:46:be:37:
         bc:d4:ba:0d:4b:50:b9:50:52:74:5a:4d:35:7e:45:1f:5c:6c:
         f9:e0:65:1e:46:2f:17:b5:86:a1:48:39:10:19:48:10:79:91:
         5d:f6:8f:97:05:68:23:9b:dc:10:6b:8e:3b:6a:f6:64:ba:5b:
         f8:dd:9f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----