Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/E2FSX6tpVNLyQp2p9YDk58RPZ3CEA2FFyDnRDTJyvVaX/0/E5A0E2BFCC7CD4B5FFFE241544B3CA7F46356F56.mft
File:                     E5A0E2BFCC7CD4B5FFFE241544B3CA7F46356F56.mft (raw, json)
Hash identifier:          4F72qBmtHB06v0MCPHSotOzP+2W6fqLRwhKl8Dm0pYA=
Subject key identifier:   DA:B6:3F:D7:55:8E:56:AA:F2:F6:41:E4:90:81:60:B3:80:95:6B:BC
Authority key identifier: E5:A0:E2:BF:CC:7C:D4:B5:FF:FE:24:15:44:B3:CA:7F:46:35:6F:56
Certificate issuer:       /CN=E5A0E2BFCC7CD4B5FFFE241544B3CA7F46356F56
Certificate serial:       42517AD151F2C108954A0925909E7B02AD25725D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5A0E2BFCC7CD4B5FFFE241544B3CA7F46356F56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2FSX6tpVNLyQp2p9YDk58RPZ3CEA2FFyDnRDTJyvVaX/0/E5A0E2BFCC7CD4B5FFFE241544B3CA7F46356F56.mft
Manifest number:          E8
Signing time:             Mon 15 Apr 2024 02:45:10 +0000
Manifest this update:     Mon 15 Apr 2024 02:40:10 +0000
Manifest next update:     Tue 16 Apr 2024 05:26:10 +0000
Files and hashes:         1: 323830343a373735383a3a2f33322d3438203d3e20323731313732.roa (hash: eP/UkNcPwbRQyEP8Zi14MzVfXzda5bAFjQGsQHpoR/w=)
                          2: E5A0E2BFCC7CD4B5FFFE241544B3CA7F46356F56.crl (hash: wwDQscSkUp1mFSENrSuhGmDwVgwXi41CStuUSK5z7Ys=)
                          3: 3137372e3232332e3133362e302f32322d3234203d3e20323731313732.roa (hash: Phv1A1qb2Js4VSlB0pXOeLZs+OpuWRG44uh3WIDd5Z4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:51:7a:d1:51:f2:c1:08:95:4a:09:25:90:9e:7b:02:ad:25:72:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A0E2BFCC7CD4B5FFFE241544B3CA7F46356F56
        Validity
            Not Before: Apr 15 02:40:10 2024 GMT
            Not After : Apr 16 05:26:10 2024 GMT
        Subject: CN=DAB63FD7558E56AAF2F641E4908160B380956BBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:db:d3:e5:d7:e2:7c:b7:aa:fc:d9:c6:eb:af:
                    ba:c4:ef:04:d4:f5:d8:fd:94:99:ca:a5:93:37:e7:
                    26:d2:e5:45:e9:66:71:6b:f7:94:61:60:ee:bd:34:
                    cc:50:6d:0a:24:99:6b:c1:ad:44:a5:b8:67:58:f8:
                    dc:fa:1a:9f:74:c0:fc:39:49:ca:e7:de:0e:3b:45:
                    18:cd:83:36:e4:b4:64:b2:55:56:13:69:46:cf:bf:
                    5c:c8:35:c5:93:60:1c:68:b7:e9:90:b7:3d:c5:5c:
                    fc:c7:76:e8:da:d3:44:ba:38:d8:6f:e4:ce:b6:3c:
                    20:d1:f3:60:ed:e4:33:58:15:6c:0b:f7:6f:d5:30:
                    d6:40:05:16:ca:63:88:3e:21:56:36:05:df:77:82:
                    53:d7:0c:4f:05:73:91:af:e2:86:32:75:23:6d:f6:
                    20:e6:47:60:9e:df:fe:d1:85:3a:e3:d2:3c:b2:0b:
                    3c:39:ac:8b:b2:bb:e0:21:3c:8f:99:fd:59:c1:d4:
                    e9:cd:54:94:9c:54:51:a6:a8:ed:94:56:69:1d:bb:
                    ed:b4:51:d1:1c:12:ca:c6:bc:79:87:46:61:47:1c:
                    d1:5e:a6:5e:b5:72:db:89:b2:64:f3:13:83:95:0b:
                    63:dc:24:89:98:c3:17:39:a3:0d:ba:4a:47:cf:3d:
                    a8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B6:3F:D7:55:8E:56:AA:F2:F6:41:E4:90:81:60:B3:80:95:6B:BC
            X509v3 Authority Key Identifier:
                keyid:E5:A0:E2:BF:CC:7C:D4:B5:FF:FE:24:15:44:B3:CA:7F:46:35:6F:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2FSX6tpVNLyQp2p9YDk58RPZ3CEA2FFyDnRDTJyvVaX/0/E5A0E2BFCC7CD4B5FFFE241544B3CA7F46356F56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5A0E2BFCC7CD4B5FFFE241544B3CA7F46356F56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2FSX6tpVNLyQp2p9YDk58RPZ3CEA2FFyDnRDTJyvVaX/0/E5A0E2BFCC7CD4B5FFFE241544B3CA7F46356F56.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:eb:76:36:0f:00:05:85:85:54:91:33:f2:b2:e8:96:52:83:
         e5:d1:2e:21:f7:12:01:34:41:a8:f7:46:15:cf:ec:a2:52:2e:
         c7:31:46:17:dd:03:fa:cf:94:73:c3:29:47:92:28:9d:e0:98:
         87:0d:e9:22:d0:fa:f8:8c:1e:90:eb:d8:e5:5e:e2:d2:91:83:
         d4:bf:91:fa:5f:e4:6f:ae:e5:ca:bb:0e:0b:9b:5f:29:96:8b:
         a4:9e:e9:ae:e6:57:7c:e6:5b:7f:86:20:e9:5a:8c:ab:33:01:
         d7:36:a1:1d:fe:d5:30:d0:1f:5b:bd:a9:ee:28:2d:c1:2a:a5:
         38:0a:52:14:a1:7d:37:79:dc:ca:0e:fa:9e:7b:fd:a1:59:1c:
         3e:d9:e2:2b:43:95:7c:4e:f0:bc:ab:24:04:82:65:a7:b8:42:
         b6:7b:d9:c9:e7:85:b4:be:98:52:52:1d:18:a8:4f:6f:16:af:
         9f:18:84:97:7a:a2:a2:7c:07:29:5a:ce:f0:42:76:c0:ed:68:
         4e:9d:0b:ba:c9:34:14:4e:e8:af:b5:71:f4:fd:c4:49:ff:bc:
         97:c8:cd:74:d5:b8:93:06:61:2c:dc:1f:35:c5:b2:27:b9:9d:
         b3:f7:0e:cf:08:22:27:46:06:d6:79:20:5d:b0:98:64:4f:39:
         aa:65:63:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----