Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/8DC0C433D57D2C2F89C5DD89889B318EACD8AB6E.mft
File:                     8DC0C433D57D2C2F89C5DD89889B318EACD8AB6E.mft (raw, json)
Hash identifier:          9TUtxpbLdStSEvZuWt4OkLmujp4s3tJTRFcj9zfxFDo=
Subject key identifier:   DB:72:71:CF:74:DC:F2:3F:B6:44:0B:E0:AE:E7:1B:4D:F3:20:B7:35
Authority key identifier: 8D:C0:C4:33:D5:7D:2C:2F:89:C5:DD:89:88:9B:31:8E:AC:D8:AB:6E
Certificate issuer:       /CN=8DC0C433D57D2C2F89C5DD89889B318EACD8AB6E
Certificate serial:       366D40ACE4BAEB83BE29A16F37E41420C554B5B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DC0C433D57D2C2F89C5DD89889B318EACD8AB6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/8DC0C433D57D2C2F89C5DD89889B318EACD8AB6E.mft
Manifest number:          78
Signing time:             Sun 14 Apr 2024 21:34:08 +0000
Manifest this update:     Sun 14 Apr 2024 21:29:08 +0000
Manifest next update:     Mon 15 Apr 2024 22:16:08 +0000
Files and hashes:         1: 3133312e3130382e36302e302f32322d3234203d3e203631363634.roa (hash: AZkKVUVi3WKHTMPoEYojLCqqCP1to6kDGL/XmUBFzO0=)
                          2: 8DC0C433D57D2C2F89C5DD89889B318EACD8AB6E.crl (hash: kHiE7ivjUMDUUdqzeVdcvJN9HdMyABZ7r18IK+Mwaoo=)
                          3: 323830343a316339383a3a2f33322d3336203d3e203631363634.roa (hash: OqVYApePRgvAKhd+YGUgpXFu9UnNnBSONgKwkeXnL30=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:6d:40:ac:e4:ba:eb:83:be:29:a1:6f:37:e4:14:20:c5:54:b5:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DC0C433D57D2C2F89C5DD89889B318EACD8AB6E
        Validity
            Not Before: Apr 14 21:29:08 2024 GMT
            Not After : Apr 15 22:16:08 2024 GMT
        Subject: CN=DB7271CF74DCF23FB6440BE0AEE71B4DF320B735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:ee:a6:d5:f2:b6:2a:3c:a3:f6:cc:28:f2:09:
                    f4:ec:25:58:bb:4c:a0:6d:90:ed:38:05:a9:27:fc:
                    48:f1:33:dc:ad:31:a0:ec:1e:c6:37:a9:da:ba:ef:
                    e0:5f:a9:5c:55:62:ee:f9:1e:e9:c6:33:10:ff:1b:
                    ab:91:0b:c8:93:56:1e:3c:cc:e8:1e:3c:14:2d:85:
                    da:02:3c:97:e9:ad:e0:a7:55:91:aa:dd:04:43:54:
                    04:3d:bd:e3:2f:ad:8d:6b:00:80:35:0d:4d:b1:0a:
                    fc:41:ae:f5:13:14:a4:48:76:20:d5:c7:10:32:ad:
                    e2:c1:b0:61:2c:56:bb:23:37:31:e8:f1:47:7e:cd:
                    4b:78:40:41:49:f0:e8:f7:75:62:cd:e3:38:f6:a6:
                    2b:b7:e3:d1:dd:99:33:09:90:e5:5c:3b:99:01:67:
                    64:16:20:1b:d0:1b:27:94:db:cd:d5:b2:b6:38:37:
                    3c:44:1b:00:b7:73:2c:98:2a:00:51:ff:96:d6:62:
                    68:89:8d:3f:89:fc:07:7b:5b:cf:6b:e0:5d:21:8c:
                    92:a9:4a:11:b4:f2:fc:dc:c6:1a:fb:de:ed:62:72:
                    23:19:56:6f:94:ff:ba:fc:52:74:03:f0:50:4c:5a:
                    e7:ab:41:9e:45:ae:5e:bf:b8:60:1f:82:ff:6d:d5:
                    e8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:72:71:CF:74:DC:F2:3F:B6:44:0B:E0:AE:E7:1B:4D:F3:20:B7:35
            X509v3 Authority Key Identifier:
                keyid:8D:C0:C4:33:D5:7D:2C:2F:89:C5:DD:89:88:9B:31:8E:AC:D8:AB:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/8DC0C433D57D2C2F89C5DD89889B318EACD8AB6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DC0C433D57D2C2F89C5DD89889B318EACD8AB6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/8DC0C433D57D2C2F89C5DD89889B318EACD8AB6E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:13:19:fb:d1:37:8f:47:f5:3d:fd:60:56:0e:a9:fb:dc:10:
         2d:69:4e:65:06:e0:d5:ff:eb:f3:29:1f:3d:6a:f0:5a:e4:6d:
         58:0d:02:80:24:3f:f1:2c:7e:86:08:32:67:9f:e2:31:e9:df:
         dd:7a:78:1d:2f:bb:7f:57:b6:f8:bf:aa:b8:4f:15:f2:ae:be:
         b4:41:79:67:bb:31:8a:a8:61:96:81:5a:71:83:1f:5a:15:53:
         83:fe:f7:2f:9d:6a:23:1d:80:27:2b:22:85:22:38:a1:d2:c3:
         b6:94:e7:73:5e:c1:b3:59:96:b4:b9:40:a6:41:11:1c:c8:1f:
         57:0c:01:60:cc:dd:bb:3f:46:c7:4d:8c:b9:8f:5b:06:e1:43:
         3c:0b:a9:1c:36:45:34:dc:ec:dd:c1:e9:95:3f:4f:86:d9:93:
         36:69:46:d2:db:e6:fd:f6:cd:9c:68:5b:b1:49:7d:17:81:06:
         48:18:3c:de:a3:6a:eb:a3:6c:86:b2:0e:08:cc:6b:f3:ca:cd:
         d0:3d:3f:7f:9b:a1:12:e9:81:ce:55:6b:59:3d:60:e6:56:a0:
         ab:5e:79:1b:83:3d:58:6d:89:4e:40:24:ec:c4:1a:e9:f8:ac:
         f8:20:78:28:25:60:3c:16:3a:50:bd:ab:c7:6e:65:a7:8f:14:
         49:98:25:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----