Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EYeycohVJ5C2Jx64GyyVMrtHXyK9kA8AXGerGkycon1N/0/BCD5CB39FAA4193938B37D129F47AA40B31468D9.mft
File:                     BCD5CB39FAA4193938B37D129F47AA40B31468D9.mft (raw, json)
Hash identifier:          tLFvOCW4PfVqhpnOnC24eBV+UmQhQR0l8DHOtkIXb2E=
Subject key identifier:   47:9E:E7:28:67:67:6D:BC:C2:C8:97:E4:87:FA:54:6A:D0:9F:9A:00
Authority key identifier: BC:D5:CB:39:FA:A4:19:39:38:B3:7D:12:9F:47:AA:40:B3:14:68:D9
Certificate issuer:       /CN=BCD5CB39FAA4193938B37D129F47AA40B31468D9
Certificate serial:       2A02FBB0A1DC5ADA2FE41DB827A9E60EF3890FEF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD5CB39FAA4193938B37D129F47AA40B31468D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYeycohVJ5C2Jx64GyyVMrtHXyK9kA8AXGerGkycon1N/0/BCD5CB39FAA4193938B37D129F47AA40B31468D9.mft
Manifest number:          028F
Signing time:             Mon 15 Apr 2024 04:14:45 +0000
Manifest this update:     Mon 15 Apr 2024 04:09:45 +0000
Manifest next update:     Tue 16 Apr 2024 05:44:45 +0000
Files and hashes:         1: BCD5CB39FAA4193938B37D129F47AA40B31468D9.crl (hash: UGzOzeCtODVNqcA33a/ZFCeUnx9qF2DvP7QCIMN7ZGg=)
                          2: 3138392e38352e34342e302f32322d3234203d3e20323730363434.roa (hash: H7q5PvpSefHwMOV03qqvlqb4Z5junlaBh5iaeQWseU0=)
                          3: 323830343a366633303a3a2f33322d3334203d3e20323730363434.roa (hash: qNzZ3IMCa5oXgZd3OeasY9+uvjzm2dv00i2T1iaEmzY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:02:fb:b0:a1:dc:5a:da:2f:e4:1d:b8:27:a9:e6:0e:f3:89:0f:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCD5CB39FAA4193938B37D129F47AA40B31468D9
        Validity
            Not Before: Apr 15 04:09:45 2024 GMT
            Not After : Apr 16 05:44:45 2024 GMT
        Subject: CN=479EE72867676DBCC2C897E487FA546AD09F9A00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:05:c1:32:2a:71:50:91:4a:b9:17:f7:57:44:
                    b3:47:84:bc:68:ea:6b:ac:ee:ca:3c:82:6a:19:c8:
                    6f:40:02:5a:96:d2:81:ac:e9:49:cc:19:2a:ee:67:
                    b6:3e:e3:da:50:1d:4d:9d:87:ba:35:f5:52:76:38:
                    7d:e5:5c:cf:d7:e3:11:b4:fa:fc:c8:e6:29:14:79:
                    02:cf:f2:df:89:7e:26:68:7d:0d:61:74:22:bb:cf:
                    9e:02:96:c7:6f:25:a4:f8:40:5d:91:ee:00:68:98:
                    2e:47:8c:7a:ca:4b:55:71:13:4a:bb:ee:d9:99:4a:
                    ee:f3:e9:ba:63:a3:f5:1d:70:7b:98:c6:6a:09:d1:
                    4e:0c:d8:1e:39:af:02:4c:f4:04:b1:32:f1:b5:a2:
                    dc:5c:53:89:b5:96:6f:a6:d1:24:a8:a9:19:26:25:
                    52:52:44:f4:d5:a3:71:39:6b:92:ee:ac:cd:71:21:
                    f5:28:30:be:3f:81:df:19:06:d9:0b:15:45:17:51:
                    91:c8:44:9e:e5:2c:b8:2b:1f:03:85:8e:d6:6a:d0:
                    1c:09:6e:2f:92:6c:6e:68:10:07:eb:4b:a0:fd:9f:
                    08:72:59:8b:e7:11:07:5b:98:9c:46:3f:a0:30:ce:
                    07:79:5c:23:10:fc:fd:b9:13:08:e7:29:57:8a:99:
                    da:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:9E:E7:28:67:67:6D:BC:C2:C8:97:E4:87:FA:54:6A:D0:9F:9A:00
            X509v3 Authority Key Identifier:
                keyid:BC:D5:CB:39:FA:A4:19:39:38:B3:7D:12:9F:47:AA:40:B3:14:68:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYeycohVJ5C2Jx64GyyVMrtHXyK9kA8AXGerGkycon1N/0/BCD5CB39FAA4193938B37D129F47AA40B31468D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD5CB39FAA4193938B37D129F47AA40B31468D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYeycohVJ5C2Jx64GyyVMrtHXyK9kA8AXGerGkycon1N/0/BCD5CB39FAA4193938B37D129F47AA40B31468D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:dc:98:b2:2e:b4:ba:6e:52:a9:68:a6:f7:58:82:8a:93:02:
         b1:bb:12:ca:aa:79:d7:4b:40:f2:e6:0c:4a:ec:1f:9e:c0:72:
         99:c5:00:07:b6:3b:28:e9:69:7f:e3:90:d6:04:b1:81:99:ab:
         46:28:4e:9f:00:a5:f7:d7:7b:c9:7a:70:6c:a3:74:fa:d5:30:
         77:7c:96:8a:fe:3b:3b:57:dd:87:50:0d:1d:b0:62:78:ce:71:
         c4:27:52:a0:fa:00:bd:e5:aa:64:6a:a6:33:fc:90:5b:d3:61:
         e9:ae:20:11:89:75:06:20:22:2c:b6:90:14:89:e4:e1:2f:5a:
         9e:f6:57:58:0c:c3:88:66:5d:99:5b:51:62:2a:39:fc:66:4a:
         ab:bb:b8:10:9c:ce:f3:73:26:e2:6a:5e:92:81:96:df:bd:c8:
         62:93:83:f6:19:d6:45:ac:ec:0b:d9:4c:85:23:eb:b7:e5:66:
         fb:fa:0f:c8:a1:81:2f:69:0f:2e:34:cf:a2:c7:cb:57:1b:8a:
         9a:cb:54:f7:1a:77:f0:58:f7:b6:f8:36:ce:59:df:16:98:19:
         33:40:06:27:8b:52:7d:91:1b:df:3d:ef:38:26:a4:5b:97:17:
         5f:27:8e:88:06:a7:2f:45:6c:f7:62:69:24:76:d7:fa:cd:65:
         88:9e:55:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----