Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/2709C3589B6F8A98917F8919D9B35B70ED4B3315.mft
File:                     2709C3589B6F8A98917F8919D9B35B70ED4B3315.mft (raw, json)
Hash identifier:          Ae/Q1cBan2a8mdRrj7ggqyE97HkG5DtcY45LxnA2L14=
Subject key identifier:   EE:AC:DE:C1:A9:67:9D:39:B1:3B:D8:E4:65:D8:F0:08:D4:3A:C0:E1
Authority key identifier: 27:09:C3:58:9B:6F:8A:98:91:7F:89:19:D9:B3:5B:70:ED:4B:33:15
Certificate issuer:       /CN=2709C3589B6F8A98917F8919D9B35B70ED4B3315
Certificate serial:       7A0FC2196E5F771CAEFFFD5DB2E8A362C65FC0AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2709C3589B6F8A98917F8919D9B35B70ED4B3315.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/2709C3589B6F8A98917F8919D9B35B70ED4B3315.mft
Manifest number:          0A
Signing time:             Tue 07 Mar 2023 23:23:29 +0000
Manifest this update:     Tue 07 Mar 2023 23:18:29 +0000
Manifest next update:     Wed 08 Mar 2023 23:55:29 +0000
Files and hashes:         1: 34352e3232352e3233322e302f32332d3233203d3e20323636393634.roa (hash: pfhEWANo31x/Ykmx67cmmU+ogoAG11R5sVWmDf/eEw0=)
                          2: 323830343a343630383a3a2f33322d3536203d3e20323636393634.roa (hash: pZ1339IjPzhO6+4l4ck0tjZ/CAQDlcNsxK2gqRbx8m4=)
                          3: 34352e3232352e3233322e302f32342d3234203d3e20323636393634.roa (hash: krSeK3W6JpfbgKrWDD6ZNKGbBZK9ssiW0/GONPCuhx0=)
                          4: 34352e3232352e3233342e302f32342d3234203d3e20323636393634.roa (hash: CMKjxe0mVbqnlpnKTGVZh/J8vAcp0bJjcs1g18foQ70=)
                          5: 34352e3232352e3233332e302f32342d3234203d3e20323636393634.roa (hash: h23oM7mgERx3YMqv75LPyyMNxqWu6LJ3+7fFmu817Dc=)
                          6: 34352e3232352e3233342e302f32332d3233203d3e20323636393634.roa (hash: +6LE6g0PmlrZJMHk2Hf6kndwLboOKvts0+7a5L91XGA=)
                          7: 2709C3589B6F8A98917F8919D9B35B70ED4B3315.crl (hash: Wlrn2LkvyDrWBZ3HzInwKTOjIesrL1n5zQW5ixNX7GE=)
                          8: 34352e3232352e3233322e302f32322d3232203d3e20323636393634.roa (hash: Y0pgcXJmAioKsPjD5qe+Q+MDBS0cEOtnPdEAOW2NXJA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:0f:c2:19:6e:5f:77:1c:ae:ff:fd:5d:b2:e8:a3:62:c6:5f:c0:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2709C3589B6F8A98917F8919D9B35B70ED4B3315
        Validity
            Not Before: Mar  7 23:18:29 2023 GMT
            Not After : Mar  8 23:55:29 2023 GMT
        Subject: CN=EEACDEC1A9679D39B13BD8E465D8F008D43AC0E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:53:fc:5c:d5:4a:fc:7b:d3:8b:41:38:8a:9a:
                    3c:ae:4c:c4:d3:a2:a1:c8:de:ca:c7:4b:c8:7c:96:
                    dd:c7:ec:23:b6:7b:2c:a7:84:78:c3:d6:9e:c9:87:
                    7d:04:c6:5f:1c:ea:d3:41:67:3a:fe:af:b1:78:a1:
                    29:7e:e9:ab:3c:a0:f7:99:4d:91:ca:7d:7d:b4:3b:
                    e4:3e:32:3f:60:4a:98:db:a4:82:37:c7:1a:66:30:
                    42:5c:b3:58:c5:7a:1b:14:7a:ea:7c:41:a9:8b:44:
                    5c:ea:ea:f8:12:93:f3:1f:5d:c3:f5:d3:3c:a9:ee:
                    42:b1:8a:d2:35:b8:48:ec:ab:18:e5:9b:b3:0e:dc:
                    e9:3c:aa:34:8c:f7:05:65:64:78:2d:74:27:e9:b1:
                    e6:e0:13:e2:41:86:c3:04:5a:a6:71:a6:df:f5:f6:
                    dd:fb:71:6b:fc:dc:71:66:f3:71:0a:0d:a4:14:b2:
                    8c:de:6f:42:38:fd:53:63:75:17:a1:19:b0:33:40:
                    9f:92:12:b1:fb:fa:ec:e6:f5:27:b4:c8:33:2f:22:
                    9f:74:3c:d3:29:4f:92:83:d8:0b:b7:aa:c8:9d:6b:
                    7e:0e:ac:4a:29:89:13:02:ac:3b:6f:94:86:43:98:
                    b1:a9:b2:33:c5:5c:0c:a9:97:4d:20:17:c6:26:e2:
                    63:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:AC:DE:C1:A9:67:9D:39:B1:3B:D8:E4:65:D8:F0:08:D4:3A:C0:E1
            X509v3 Authority Key Identifier:
                keyid:27:09:C3:58:9B:6F:8A:98:91:7F:89:19:D9:B3:5B:70:ED:4B:33:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/2709C3589B6F8A98917F8919D9B35B70ED4B3315.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2709C3589B6F8A98917F8919D9B35B70ED4B3315.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/2709C3589B6F8A98917F8919D9B35B70ED4B3315.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:10:11:62:80:f3:60:1e:6a:05:a7:2a:6e:b8:67:2a:87:b3:
         2d:4f:e0:22:6d:a6:68:4d:e2:0f:56:67:ab:b4:10:25:7f:cd:
         2b:3d:fe:8e:ae:80:49:d1:d4:6e:2c:cc:ca:93:41:7e:6f:9a:
         06:c0:5c:57:60:23:a2:41:a2:0a:25:af:40:5b:bd:97:83:72:
         88:ae:ed:4b:ad:34:81:27:dd:57:70:9e:64:23:4a:b2:2e:fe:
         9f:f5:5d:c0:c4:f2:3a:7d:ac:bd:20:29:49:38:ac:ae:c1:db:
         46:f1:06:4a:21:11:b5:30:24:62:6f:00:d1:31:be:d9:fd:d0:
         4f:7a:d0:d9:e3:bc:10:e7:da:7b:bb:c1:8e:3e:d8:01:27:91:
         49:d9:6a:02:2a:99:ae:9d:fc:e7:88:5c:77:13:c2:a7:5f:cf:
         d9:fa:47:cd:85:44:63:d9:62:1e:1f:02:f0:1b:2a:88:85:70:
         f1:55:de:ad:bd:b2:90:a6:98:0e:93:e8:13:25:60:1d:77:b0:
         6b:f0:69:02:74:d4:c3:15:61:d4:e6:80:78:8f:0e:f8:bc:1d:
         d7:50:68:d5:e3:8d:52:6f:38:e1:44:51:09:65:9e:c2:c0:b7:
         44:ac:db:ae:72:d3:89:ac:d1:c6:a7:2d:18:90:91:8f:37:32:
         49:2c:20:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----