Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/0/8E929E44F4E460DD232A372077C8427817A7F840.mft
File:                     8E929E44F4E460DD232A372077C8427817A7F840.mft (raw, json)
Hash identifier:          7sC6vh7PKe4TUJM+IZubZ8U1PNTpYXd7reHeSxXH358=
Subject key identifier:   C9:BF:C0:90:91:7C:93:92:6B:0C:1B:57:F9:ED:55:73:5B:08:FB:82
Authority key identifier: 8E:92:9E:44:F4:E4:60:DD:23:2A:37:20:77:C8:42:78:17:A7:F8:40
Certificate issuer:       /CN=8E929E44F4E460DD232A372077C8427817A7F840
Certificate serial:       0B99A03A80311CEDE2E1BA5FF0E750990A7E080E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E929E44F4E460DD232A372077C8427817A7F840.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/0/8E929E44F4E460DD232A372077C8427817A7F840.mft
Manifest number:          014F
Signing time:             Mon 15 Apr 2024 04:32:05 +0000
Manifest this update:     Mon 15 Apr 2024 04:27:05 +0000
Manifest next update:     Tue 16 Apr 2024 06:13:05 +0000
Files and hashes:         1: 3137372e37322e3138302e302f32322d3232203d3e20323632353439.roa (hash: d1rS5Y+42NaiL2brIqaObaXDWB2g1QEOOM0zA4h2tH0=)
                          2: 3137372e37322e3137362e302f32322d3232203d3e20323632353439.roa (hash: hZF8mvBY9ZzseY8kcjEOJ0j9+hq6/RMZveeXTQmmiH8=)
                          3: 3137372e37322e3138302e302f32332d3233203d3e20323632353439.roa (hash: 5uWpoOy3vC9VfmYxDfePnQeIqAlAuteIMkDfmYf8irs=)
                          4: 3137372e37322e3137362e302f32312d3231203d3e20323632353439.roa (hash: dLvGMgvZttf1dAxAaxMbD1AoAz6bgpAVxuxRAIzjkqs=)
                          5: 8E929E44F4E460DD232A372077C8427817A7F840.crl (hash: /VJe1mytGEEGqyqa5DYQxYn31squCSbZ5E08M8n7nYM=)
                          6: 323830343a3565383a3a2f33322d3332203d3e20323632353439.roa (hash: ktArl7R57/k+S98BR2LOoV+k448omwxA+3ae8ENUxE4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:99:a0:3a:80:31:1c:ed:e2:e1:ba:5f:f0:e7:50:99:0a:7e:08:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E929E44F4E460DD232A372077C8427817A7F840
        Validity
            Not Before: Apr 15 04:27:05 2024 GMT
            Not After : Apr 16 06:13:05 2024 GMT
        Subject: CN=C9BFC090917C93926B0C1B57F9ED55735B08FB82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:45:74:c2:92:e4:6f:01:19:82:52:ef:9f:43:
                    44:85:5f:8d:1b:d4:f9:1b:03:0c:3b:35:b8:82:fa:
                    ef:d5:6d:ca:ee:95:91:55:6d:12:b5:3e:49:b2:c0:
                    af:6e:20:6f:49:da:c2:0c:63:18:c8:f7:38:d4:29:
                    be:42:13:6d:e1:83:19:fc:75:26:a3:58:20:40:bd:
                    33:f2:e1:4d:7a:88:b5:87:2b:cb:8e:62:bc:28:cf:
                    96:54:63:05:f4:9f:6c:16:52:3e:d2:33:ba:80:67:
                    3e:24:e1:7a:44:43:21:18:fb:6d:06:6d:c3:4a:e2:
                    da:d9:7e:25:4e:83:3e:c6:5d:4b:d6:5e:7f:4e:4d:
                    6f:af:ac:fa:a8:ce:9e:bd:5c:8a:ef:6b:93:fd:93:
                    3d:8c:f1:6d:36:69:81:35:de:2d:fa:58:ab:87:8e:
                    61:a1:d5:f9:e4:d9:bc:ad:08:e6:af:92:bb:e6:15:
                    d5:3d:24:c3:fc:82:7d:ad:05:e4:b6:e4:f8:14:11:
                    72:d2:d5:c2:c1:46:58:aa:e2:03:ae:52:58:1f:fe:
                    83:3a:a1:78:e1:bb:be:75:2f:46:39:88:12:d0:e6:
                    3c:a7:47:a9:76:84:32:96:8b:72:50:7c:62:59:44:
                    9e:ea:7e:ba:69:c4:8a:c2:0e:95:53:40:22:2d:fe:
                    26:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:BF:C0:90:91:7C:93:92:6B:0C:1B:57:F9:ED:55:73:5B:08:FB:82
            X509v3 Authority Key Identifier:
                keyid:8E:92:9E:44:F4:E4:60:DD:23:2A:37:20:77:C8:42:78:17:A7:F8:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/0/8E929E44F4E460DD232A372077C8427817A7F840.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E929E44F4E460DD232A372077C8427817A7F840.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/0/8E929E44F4E460DD232A372077C8427817A7F840.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:e9:9f:1e:35:94:48:57:64:e0:46:05:36:39:99:32:8e:44:
         fc:76:c5:0a:e4:b1:a7:50:9b:d2:33:93:fc:0e:e5:50:17:d3:
         fc:ef:4b:84:62:46:33:1b:ec:ed:1e:a8:c7:6e:ac:a3:76:ec:
         41:31:60:8d:43:da:d2:4a:d5:0d:5f:f8:6a:a5:c8:b6:5c:c6:
         e6:bc:be:bf:8e:89:fd:90:fd:f4:2a:af:e8:b9:40:82:86:c3:
         7d:a8:fa:58:79:f2:a5:7b:d4:0b:0f:d1:a0:9c:d7:15:83:75:
         88:8b:8a:6f:c7:71:3b:ed:3a:98:b0:8d:68:6b:06:6a:94:e3:
         33:3d:f7:f2:ed:51:1c:10:ca:e2:23:45:9a:f3:29:d1:c7:a6:
         20:a5:0c:96:44:56:2c:55:ae:63:c8:f6:c4:70:5d:61:a5:ea:
         53:60:d2:65:38:c0:29:36:d8:3e:df:9b:7f:f8:13:d2:ec:34:
         39:05:47:b9:ca:98:b5:be:25:aa:61:cc:8c:b7:5e:98:14:8b:
         18:37:df:70:29:7c:49:21:4d:4b:32:56:7b:4f:5d:3b:6f:f8:
         42:6f:c2:5a:16:0d:7a:4f:dc:79:d3:77:32:c6:90:1b:5d:62:
         5b:22:a8:06:c6:4f:f7:79:0a:71:76:b2:d9:2c:f7:ff:95:f6:
         83:ab:70:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----