Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/9184FB2E872C3EA8E80D8A101E98FBE8C5E96DEF.mft
File:                     9184FB2E872C3EA8E80D8A101E98FBE8C5E96DEF.mft (raw, json)
Hash identifier:          5HhkDMyYNEgxImDHAbLE1PxUpqy7Yi40fC+6rPfNK4A=
Subject key identifier:   3F:C0:FC:01:4F:5B:03:2A:7E:DC:F9:AD:26:A7:43:39:D5:D1:D1:70
Authority key identifier: 91:84:FB:2E:87:2C:3E:A8:E8:0D:8A:10:1E:98:FB:E8:C5:E9:6D:EF
Certificate issuer:       /CN=9184FB2E872C3EA8E80D8A101E98FBE8C5E96DEF
Certificate serial:       5E12E59040BE1484382AEB3A876CB1DB1DA65921
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9184FB2E872C3EA8E80D8A101E98FBE8C5E96DEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/9184FB2E872C3EA8E80D8A101E98FBE8C5E96DEF.mft
Manifest number:          011E
Signing time:             Sun 14 Apr 2024 22:31:46 +0000
Manifest this update:     Sun 14 Apr 2024 22:26:46 +0000
Manifest next update:     Tue 16 Apr 2024 00:54:46 +0000
Files and hashes:         1: 323830343a346531383a3a2f33322d3438203d3e20323638323339.roa (hash: eQ62XF/Aacb03F5FgBEBPz1yoU7hgJWPO15k8dXMJgU=)
                          2: 9184FB2E872C3EA8E80D8A101E98FBE8C5E96DEF.crl (hash: 4XC/0/ON3btMo2SZGDSGQcBpZPFJtFQJjZQGQEkzei4=)
                          3: 34352e3233362e33362e302f32322d3234203d3e20323638323339.roa (hash: TGxQge6kNeZ2lTdeSrFMG1ugNweshvJGNNASPATEidc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:12:e5:90:40:be:14:84:38:2a:eb:3a:87:6c:b1:db:1d:a6:59:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9184FB2E872C3EA8E80D8A101E98FBE8C5E96DEF
        Validity
            Not Before: Apr 14 22:26:46 2024 GMT
            Not After : Apr 16 00:54:46 2024 GMT
        Subject: CN=3FC0FC014F5B032A7EDCF9AD26A74339D5D1D170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2d:fa:c6:53:fa:da:dc:1c:b4:c9:ae:5c:a7:
                    3d:b8:58:9c:db:de:55:38:8d:84:f7:7e:67:cd:4a:
                    f3:0c:b3:17:7e:df:2c:18:6a:38:44:5b:c0:04:5a:
                    2b:48:a0:96:12:90:1e:8c:31:42:9e:bb:fc:33:ed:
                    ef:0b:1a:ff:8e:af:34:d6:4e:5b:ef:51:aa:82:dc:
                    9b:7b:15:92:45:e1:88:ee:28:26:2b:1e:ed:29:ba:
                    ff:ef:d3:e5:56:ca:ee:33:a8:5e:35:d9:5e:a4:00:
                    af:15:fe:24:bd:41:fd:de:3d:c9:02:18:fa:ba:5d:
                    80:d2:bd:fa:6f:16:a9:34:f2:af:96:9f:2f:c4:1a:
                    52:72:97:1d:8a:bb:c5:82:01:0d:b5:95:15:12:8f:
                    7e:e1:b0:53:85:98:f3:62:28:4f:2e:86:39:dc:62:
                    61:6d:05:1d:2f:8a:e0:45:bf:a8:ae:17:47:54:a3:
                    15:2b:aa:08:0d:e0:4c:ae:bd:43:05:21:b2:c7:34:
                    79:ca:c5:bc:46:10:17:26:3c:45:7d:ec:79:43:e7:
                    36:2b:b0:00:c7:13:d7:be:f3:66:28:bc:85:65:f8:
                    b3:f5:8f:ca:d8:03:43:02:97:03:1f:c9:5c:24:6c:
                    0f:31:8c:31:f0:96:38:36:f6:27:d0:72:70:a5:da:
                    a2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C0:FC:01:4F:5B:03:2A:7E:DC:F9:AD:26:A7:43:39:D5:D1:D1:70
            X509v3 Authority Key Identifier:
                keyid:91:84:FB:2E:87:2C:3E:A8:E8:0D:8A:10:1E:98:FB:E8:C5:E9:6D:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/9184FB2E872C3EA8E80D8A101E98FBE8C5E96DEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9184FB2E872C3EA8E80D8A101E98FBE8C5E96DEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/9184FB2E872C3EA8E80D8A101E98FBE8C5E96DEF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:8b:7a:d5:19:2a:1a:da:a8:95:df:ab:d5:ea:ee:23:b3:d7:
         d9:72:12:c0:0f:e7:2d:ea:d9:91:ef:bf:ce:0f:4a:b2:00:38:
         6a:bd:62:c4:33:e2:25:0a:dd:5b:e6:9e:eb:d7:4b:97:00:7f:
         6e:59:d5:ab:dd:df:15:a2:1a:5d:af:68:10:39:c7:46:f5:d1:
         b0:2c:b2:12:43:5e:b4:83:c7:67:b7:dd:12:53:54:20:53:c7:
         c8:db:6a:8c:35:89:7e:f8:2b:18:df:c5:f1:7a:25:e4:ef:8c:
         17:3c:8e:1b:d3:23:66:83:55:af:56:00:c9:ca:ca:fd:3a:3f:
         eb:cf:c8:26:6c:7c:fd:4f:17:b3:de:43:62:7f:a9:29:07:fa:
         62:ed:b4:7d:6c:ce:be:cd:21:c6:fb:73:e4:41:5d:cd:f9:c4:
         e7:98:9d:c5:0a:d0:7c:12:86:74:66:d0:0f:74:0c:a6:57:75:
         24:8f:04:5a:42:74:6e:f8:d0:e3:f0:be:b7:a4:c6:e9:ac:19:
         ae:d7:5d:db:82:4c:62:d2:a7:3d:f0:69:fc:99:eb:03:4d:0b:
         92:44:93:23:60:3c:3c:ca:ea:cc:9c:3e:d1:28:43:66:28:2f:
         66:3e:3e:5a:f6:98:d9:1e:89:04:ee:bf:b4:03:dd:03:12:aa:
         57:c3:59:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----