Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/0/490DE9D487209F7FB1D8289E1D5AE81A1F208955.mft
File:                     490DE9D487209F7FB1D8289E1D5AE81A1F208955.mft (raw, json)
Hash identifier:          kmSuGs4nP1Q3MFCDMp9+ZVFl7Cx79VqpFxK9wR9ua2k=
Subject key identifier:   A0:6B:2B:94:BE:AD:55:3E:C3:98:0B:02:28:04:00:2C:D8:F8:2F:12
Authority key identifier: 49:0D:E9:D4:87:20:9F:7F:B1:D8:28:9E:1D:5A:E8:1A:1F:20:89:55
Certificate issuer:       /CN=490DE9D487209F7FB1D8289E1D5AE81A1F208955
Certificate serial:       33AB0DA85D43AF8F8602BC4DFD71A7ECA46CE880
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/490DE9D487209F7FB1D8289E1D5AE81A1F208955.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/0/490DE9D487209F7FB1D8289E1D5AE81A1F208955.mft
Manifest number:          029E
Signing time:             Sun 14 Apr 2024 21:14:38 +0000
Manifest this update:     Sun 14 Apr 2024 21:09:38 +0000
Manifest next update:     Mon 15 Apr 2024 23:20:38 +0000
Files and hashes:         1: 490DE9D487209F7FB1D8289E1D5AE81A1F208955.crl (hash: SeKZKtddWq+Y2tbUf5LOtqJKm/0n3OksGbKZs+HJGoc=)
                          2: 3133312e3130382e32382e302f32322d3234203d3e203631363539.roa (hash: wPfGrppykcVVpnusF6/noRtIQGrTfAFbrywUoBTqip4=)
                          3: 323830343a316338343a3a2f33322d3438203d3e203631363539.roa (hash: j7ZgRQLH0DY60jAOis1lbrtNNFgdFc51XD6Ui6kM6mU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ab:0d:a8:5d:43:af:8f:86:02:bc:4d:fd:71:a7:ec:a4:6c:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490DE9D487209F7FB1D8289E1D5AE81A1F208955
        Validity
            Not Before: Apr 14 21:09:38 2024 GMT
            Not After : Apr 15 23:20:38 2024 GMT
        Subject: CN=A06B2B94BEAD553EC3980B022804002CD8F82F12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:01:32:41:62:96:6e:73:a6:33:03:57:86:78:
                    b8:c5:4d:9a:24:f4:1d:df:4f:b1:63:2d:6b:85:95:
                    22:d0:1b:1a:d5:a4:7f:fd:55:da:61:07:52:41:b4:
                    cf:4c:01:a9:80:d8:1d:53:0b:4d:bc:13:61:b7:ee:
                    1e:98:fa:ba:8f:1a:b3:4c:35:e0:f1:37:13:6a:75:
                    72:50:f2:0f:63:5f:f8:82:72:36:c9:9b:b8:54:4b:
                    0d:63:fb:3e:5b:66:a7:e3:c2:e6:ca:60:b2:8f:20:
                    38:7f:c8:ca:00:de:01:cb:da:16:95:b1:98:54:f9:
                    5a:67:af:c6:dc:4c:9b:21:2e:4e:46:a2:77:e3:b1:
                    89:c0:53:9d:e5:65:c7:a5:52:94:72:52:f7:a4:7d:
                    14:d3:0c:fc:66:ed:28:e0:cf:0c:7c:da:4a:99:db:
                    69:d5:bd:77:db:3c:4b:1a:7c:d6:92:c9:fd:3f:35:
                    52:eb:c1:ed:d0:be:95:a1:33:bc:70:3d:9c:e5:a4:
                    c2:72:72:74:83:bc:51:0e:02:15:fa:94:72:39:3e:
                    a7:5a:f3:03:d8:78:ec:79:0f:61:a1:8b:44:47:fb:
                    b3:17:1f:7a:86:96:a6:d0:47:0d:ef:83:97:83:8d:
                    16:fd:c8:c3:e0:8b:85:54:6c:56:ba:67:9b:43:66:
                    88:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:6B:2B:94:BE:AD:55:3E:C3:98:0B:02:28:04:00:2C:D8:F8:2F:12
            X509v3 Authority Key Identifier:
                keyid:49:0D:E9:D4:87:20:9F:7F:B1:D8:28:9E:1D:5A:E8:1A:1F:20:89:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/0/490DE9D487209F7FB1D8289E1D5AE81A1F208955.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/490DE9D487209F7FB1D8289E1D5AE81A1F208955.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/0/490DE9D487209F7FB1D8289E1D5AE81A1F208955.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:7c:17:b8:c5:62:42:34:1d:fa:0c:fb:cc:ec:08:a5:4b:fa:
         f0:27:43:28:90:3f:f5:ed:30:a6:ff:a2:6d:41:6c:18:c2:6d:
         f4:a3:c3:cb:22:aa:88:0a:24:a1:0c:f1:d4:e1:48:28:c7:2d:
         0c:58:2c:90:35:9e:6b:89:62:2b:2d:26:df:78:09:b9:2a:e9:
         09:48:88:d7:ea:94:00:ef:db:b2:62:6b:ec:fd:64:1a:8c:82:
         ef:3b:8f:19:13:7c:7b:f9:2a:cc:02:c1:e8:0f:11:36:bc:d1:
         ca:63:d1:ec:34:ee:f0:71:33:7f:46:61:c2:33:0f:9c:e4:a9:
         96:a4:4f:db:60:bc:80:c9:ea:5c:a5:13:5b:23:9e:82:30:40:
         ed:d2:e8:b0:47:0a:c8:a6:0c:55:5e:b8:81:75:84:7c:5d:e7:
         53:67:d1:30:e3:44:43:65:38:41:96:68:6a:0d:23:c6:86:68:
         c7:ff:aa:fb:6b:0c:8d:53:3f:74:4e:84:03:6c:19:a8:a5:20:
         5d:7b:92:45:79:0c:55:a5:84:2b:15:f2:de:a7:42:c7:00:9c:
         e0:2b:68:b0:61:5f:17:ed:3e:75:9e:6d:86:c2:cb:25:99:ba:
         6e:f9:0d:80:a7:2c:9a:43:a5:ef:70:4e:f4:98:70:51:c4:2a:
         1a:6a:f9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----