Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/1/A2EF5A29320B90E1B74D49BF320060FEC27F394F.mft
File:                     A2EF5A29320B90E1B74D49BF320060FEC27F394F.mft (raw, json)
Hash identifier:          k/Pc0oEW99KEjKg78nqOrwaW6lMs0buJNKCGUFBAyCs=
Subject key identifier:   04:8B:9A:F8:4C:95:42:05:46:D9:DF:B1:E6:A0:A2:0B:8F:56:6A:D3
Authority key identifier: A2:EF:5A:29:32:0B:90:E1:B7:4D:49:BF:32:00:60:FE:C2:7F:39:4F
Certificate issuer:       /CN=A2EF5A29320B90E1B74D49BF320060FEC27F394F
Certificate serial:       1EF15FFF5C63117DDC1A9EC58F703E9A7BEC977A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2EF5A29320B90E1B74D49BF320060FEC27F394F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/1/A2EF5A29320B90E1B74D49BF320060FEC27F394F.mft
Manifest number:          3C
Signing time:             Sat 18 May 2024 11:48:54 +0000
Manifest this update:     Sat 18 May 2024 11:43:54 +0000
Manifest next update:     Sun 19 May 2024 12:54:54 +0000
Files and hashes:         1: A2EF5A29320B90E1B74D49BF320060FEC27F394F.crl (hash: 1TdLO1gwmNl7CVhDo5T1BzGcuxG8cTbfChI6W2ylkcE=)
                          2: 323830343a333635633a3a2f33322d313238203d3e20323636333433.roa (hash: /pGnGKd0BF6QI7rYWkcqqgIpYiI7SdtH0VB8sIzm+ak=)
                          3: 3137302e3233392e342e302f32322d3332203d3e20323636333433.roa (hash: IpDQIDAK4ltT5DPivkk+ZITrKbAQc/6slJsOAtbO6UM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:f1:5f:ff:5c:63:11:7d:dc:1a:9e:c5:8f:70:3e:9a:7b:ec:97:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2EF5A29320B90E1B74D49BF320060FEC27F394F
        Validity
            Not Before: May 18 11:43:54 2024 GMT
            Not After : May 19 12:54:54 2024 GMT
        Subject: CN=048B9AF84C95420546D9DFB1E6A0A20B8F566AD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f0:35:1c:78:44:1d:66:a4:01:87:a2:ba:b9:
                    00:56:c6:fb:ef:08:75:75:4b:a4:82:c9:4c:6d:71:
                    c4:02:04:0c:b0:0d:81:a0:ac:af:e3:de:ae:57:4e:
                    52:4c:ed:d5:87:13:37:49:fe:f2:b3:86:ab:08:a7:
                    69:8f:c1:88:29:26:81:93:47:f7:ae:f9:5f:1f:bf:
                    40:db:93:af:d1:ec:38:7d:3d:4a:36:a4:29:09:14:
                    9f:75:08:c8:c1:80:f8:47:7c:f8:df:a5:79:02:de:
                    57:0f:ba:36:d9:4f:8f:61:8c:78:96:21:43:1e:c4:
                    92:45:da:ae:02:2d:e3:e3:40:48:47:4c:69:f7:1d:
                    d4:d8:72:61:53:1f:f3:6b:65:78:a1:86:66:7d:d3:
                    71:2e:4f:6c:41:3e:f0:2d:17:f4:89:08:e5:eb:61:
                    bc:9d:4c:1a:ed:fe:7d:37:2e:d5:78:02:33:23:09:
                    33:0f:3d:32:e6:d1:93:ed:c6:59:a0:a9:e7:34:fa:
                    30:a1:32:dc:75:4c:53:47:2e:32:6a:28:d6:02:10:
                    98:38:8a:e2:d6:96:14:92:1c:15:6e:a9:77:10:0d:
                    75:1d:4c:cb:ae:9e:7c:6e:b9:8b:dc:39:0b:aa:20:
                    88:a8:39:5c:54:a0:46:d9:50:fe:6e:43:3e:98:3f:
                    ef:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:8B:9A:F8:4C:95:42:05:46:D9:DF:B1:E6:A0:A2:0B:8F:56:6A:D3
            X509v3 Authority Key Identifier:
                keyid:A2:EF:5A:29:32:0B:90:E1:B7:4D:49:BF:32:00:60:FE:C2:7F:39:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/1/A2EF5A29320B90E1B74D49BF320060FEC27F394F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2EF5A29320B90E1B74D49BF320060FEC27F394F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/1/A2EF5A29320B90E1B74D49BF320060FEC27F394F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:fd:8d:0b:fb:19:a8:03:e0:5c:2f:a1:7b:c1:c6:8e:3f:23:
         9d:73:98:9a:21:91:a1:02:3b:b7:fc:69:82:79:01:c5:3f:ac:
         39:78:4e:68:de:48:81:ce:b7:c7:03:c0:fa:2d:2b:21:c7:71:
         b2:7c:96:6e:e7:7b:fb:83:c9:9e:aa:12:38:13:5a:6c:a4:a4:
         35:5d:ed:e0:0c:a1:cf:a3:41:86:fc:dc:db:9e:f0:ab:83:1a:
         45:7c:02:bf:2b:93:b8:94:58:65:94:23:1e:54:02:52:e9:fe:
         c4:16:1a:87:2a:53:97:ef:73:c5:af:11:14:35:c7:e6:9f:90:
         ca:65:86:77:f9:00:8c:06:00:da:ed:42:d7:46:d2:49:05:3c:
         ba:20:19:e2:84:29:1b:84:47:fe:43:4a:33:dd:c4:3a:a9:db:
         45:42:16:91:a3:9d:c2:11:cd:63:c2:46:94:9d:28:f6:4c:14:
         a3:fe:de:7c:63:fc:81:b4:b4:47:83:a2:bc:db:56:1a:c3:1b:
         45:f8:22:e2:36:cd:aa:62:45:88:0e:70:99:56:e3:be:fe:23:
         9f:db:be:5d:12:9f:97:e7:41:8d:e5:b2:b9:8c:53:e4:6a:7c:
         9c:71:ef:10:7f:d8:0e:89:32:19:27:ac:de:01:9d:d0:a7:07:
         7a:aa:35:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----