Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DibuFSdUvjJabtVDqcojWWQUCKXNRF6jnSfMMFqCGzLm/1/0E9EDABF2339FADCF0CE68027578300DDD9E58FE.mft
File:                     0E9EDABF2339FADCF0CE68027578300DDD9E58FE.mft (raw, json)
Hash identifier:          LcavnbUKpjLW2Qc6DKY6O3vCvprddJKxHpSZPZ+D/SE=
Subject key identifier:   05:58:0C:36:FF:5D:29:5A:1F:79:A4:36:C6:49:6C:FE:D1:84:81:63
Authority key identifier: 0E:9E:DA:BF:23:39:FA:DC:F0:CE:68:02:75:78:30:0D:DD:9E:58:FE
Certificate issuer:       /CN=0E9EDABF2339FADCF0CE68027578300DDD9E58FE
Certificate serial:       3D7E50E30312DAB1133CCE80B5A4FAE61F4F367B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E9EDABF2339FADCF0CE68027578300DDD9E58FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DibuFSdUvjJabtVDqcojWWQUCKXNRF6jnSfMMFqCGzLm/1/0E9EDABF2339FADCF0CE68027578300DDD9E58FE.mft
Manifest number:          4D
Signing time:             Wed 29 May 2024 18:24:57 +0000
Manifest this update:     Wed 29 May 2024 18:19:57 +0000
Manifest next update:     Thu 30 May 2024 19:56:57 +0000
Files and hashes:         1: 3230302e3134322e3138342e302f32322d3234203d3e203533303439.roa (hash: mbhp7yl0Ep8ZM6cBZ24Rc9lvdXKQ6W8CRRJUr59hDpQ=)
                          2: 323830343a313863343a3a2f33322d3336203d3e203533303439.roa (hash: yUYc/aHohKKINugX8JY3S7KygUAfE9u9MYB2+BgBf2g=)
                          3: 0E9EDABF2339FADCF0CE68027578300DDD9E58FE.crl (hash: sbBvpvvcMxH0H59AD1lkLV88oYVH+14wuE95QCyCvWo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:7e:50:e3:03:12:da:b1:13:3c:ce:80:b5:a4:fa:e6:1f:4f:36:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E9EDABF2339FADCF0CE68027578300DDD9E58FE
        Validity
            Not Before: May 29 18:19:57 2024 GMT
            Not After : May 30 19:56:57 2024 GMT
        Subject: CN=05580C36FF5D295A1F79A436C6496CFED1848163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:17:42:24:e9:51:73:4d:33:14:de:a0:82:fe:
                    3a:60:81:53:83:22:3c:0b:2a:dc:f1:a1:a7:31:77:
                    41:ec:2f:58:8c:84:2f:74:7a:c0:44:db:11:ff:06:
                    ec:18:10:1c:9e:2c:a6:12:8d:9e:d0:ff:d8:55:e7:
                    48:ff:6a:55:75:fe:2b:f0:7e:28:68:83:2e:89:23:
                    52:54:16:85:ee:6a:4e:2e:94:e3:98:53:62:01:6e:
                    70:1f:40:35:6a:98:aa:fc:48:0e:8f:d1:67:2e:f2:
                    d4:83:6d:a8:ee:f2:49:e8:fc:5c:e8:38:a4:38:72:
                    ca:87:f9:f5:b1:80:d0:d8:9a:7a:0c:19:95:4b:6e:
                    c1:fc:b4:83:5a:31:24:0c:b9:97:73:f1:f8:0a:47:
                    a6:2d:a6:48:79:fb:39:84:4b:5c:fd:5a:9e:1f:54:
                    ea:1c:13:36:65:b1:0e:fc:c2:ca:bc:fd:9a:c8:52:
                    29:09:b5:f8:8b:f0:3c:7b:b3:05:c3:61:4b:e2:8b:
                    fa:f3:70:aa:d5:31:45:f8:35:81:0d:57:7c:43:c2:
                    86:82:44:e0:38:b7:34:53:6b:86:52:4e:77:0b:78:
                    22:3d:dd:70:36:14:bf:33:83:11:e4:c7:30:7b:87:
                    02:a0:e4:f8:b7:3f:15:9b:fc:5e:2a:b4:1d:33:8b:
                    33:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:58:0C:36:FF:5D:29:5A:1F:79:A4:36:C6:49:6C:FE:D1:84:81:63
            X509v3 Authority Key Identifier:
                keyid:0E:9E:DA:BF:23:39:FA:DC:F0:CE:68:02:75:78:30:0D:DD:9E:58:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DibuFSdUvjJabtVDqcojWWQUCKXNRF6jnSfMMFqCGzLm/1/0E9EDABF2339FADCF0CE68027578300DDD9E58FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E9EDABF2339FADCF0CE68027578300DDD9E58FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DibuFSdUvjJabtVDqcojWWQUCKXNRF6jnSfMMFqCGzLm/1/0E9EDABF2339FADCF0CE68027578300DDD9E58FE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:24:b8:4f:26:25:66:50:18:fc:ca:b9:2d:71:5d:1a:50:2d:
         3f:c0:54:8e:6f:2e:36:24:13:31:71:1b:96:36:1d:9e:65:30:
         0d:b4:12:37:a4:d6:4b:e9:62:a1:44:eb:6a:79:d7:c5:b6:9c:
         bc:22:78:a9:2b:60:7a:3c:2d:89:c1:f9:ce:dd:50:56:72:cf:
         ce:fc:4a:73:52:c6:f6:12:83:3e:b2:5f:10:49:af:a6:d1:e8:
         a3:06:d2:f8:e6:ae:48:e9:c3:65:14:8c:b6:c7:ca:9e:58:af:
         bb:04:7f:c3:83:ae:37:5f:6a:81:c2:67:75:9c:b2:65:bd:53:
         99:fc:e9:47:b6:73:4b:46:dd:58:5e:17:34:4d:f0:d7:75:73:
         b1:3f:db:56:ae:54:e1:a6:74:1b:aa:7a:4f:05:09:d1:c9:e2:
         a6:1a:62:5b:51:ed:59:14:d7:80:5c:75:b7:46:55:bc:05:50:
         1f:55:5f:b8:d6:81:6e:73:ba:c0:a8:81:5d:e5:6d:16:e1:4d:
         04:9f:2e:9e:bc:1d:ff:55:f2:1c:eb:41:ec:aa:c8:0e:4a:3d:
         01:73:8a:86:b9:07:bf:6d:ef:76:10:3d:14:b3:28:57:70:9f:
         31:29:41:66:bc:1d:f3:5b:6d:b1:cf:69:37:a2:7d:9c:be:68:
         6e:d4:14:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----