Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/A2838E50EF4130DD6AD153940830854022E210E9.mft
File:                     A2838E50EF4130DD6AD153940830854022E210E9.mft (raw, json)
Hash identifier:          D9lGsP5jQtRL2Wn3AIfHiS8uEDJOAIVft6JeWtiAx3c=
Subject key identifier:   DE:E9:AA:D4:E5:F0:54:2E:34:9C:8A:94:C9:60:6F:79:4A:75:66:8F
Authority key identifier: A2:83:8E:50:EF:41:30:DD:6A:D1:53:94:08:30:85:40:22:E2:10:E9
Certificate issuer:       /CN=A2838E50EF4130DD6AD153940830854022E210E9
Certificate serial:       73256A672F21EC06EAAF8B639C8327EBB974EFEA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2838E50EF4130DD6AD153940830854022E210E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/A2838E50EF4130DD6AD153940830854022E210E9.mft
Manifest number:          03
Signing time:             Fri 25 Oct 2024 19:31:03 +0000
Manifest this update:     Fri 25 Oct 2024 19:26:03 +0000
Manifest next update:     Sat 26 Oct 2024 21:50:03 +0000
Files and hashes:         1: A2838E50EF4130DD6AD153940830854022E210E9.crl (hash: XjRh3oTV/PiCqKDrEi5VcShxOBVgO8T71jHJhN2nKFY=)
                          2: 3133312e3130382e36302e302f32322d3232203d3e203631363634.roa (hash: WBkgJ56WmkoX9XJAKJufgYy1MkiQk+Uj+Fhqhb0NK3k=)
                          3: 323830343a316339383a3a2f33322d3332203d3e203631363634.roa (hash: STHubNZAL3tFFthpohtz81VsamuMiMc5/MQ2PT0ESrs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:25:6a:67:2f:21:ec:06:ea:af:8b:63:9c:83:27:eb:b9:74:ef:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2838E50EF4130DD6AD153940830854022E210E9
        Validity
            Not Before: Oct 25 19:26:03 2024 GMT
            Not After : Oct 26 21:50:03 2024 GMT
        Subject: CN=DEE9AAD4E5F0542E349C8A94C9606F794A75668F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8d:e0:e2:e6:a9:14:13:7a:38:da:ee:8a:88:
                    86:d1:73:e6:24:1e:10:31:04:30:d1:7a:be:9f:7b:
                    e1:df:80:84:7d:26:d3:79:cf:e6:9d:c3:af:75:b5:
                    b3:d4:2c:04:29:47:45:ac:d9:8a:ee:d1:94:55:fe:
                    af:33:b3:16:47:8c:9d:ce:a1:04:78:e1:96:b7:a7:
                    9d:7c:fe:e9:39:82:73:f7:e3:c0:50:77:6c:04:8f:
                    86:06:58:3a:ab:8a:fe:5c:b1:89:94:77:d7:8c:a1:
                    9b:e4:a7:c2:8f:9f:82:96:2f:b5:bf:bb:9a:89:f4:
                    e5:4e:bb:97:0e:3d:f0:90:78:db:2c:4a:1b:df:32:
                    45:31:fc:08:6b:94:3f:54:7c:29:72:1e:81:b0:6f:
                    2c:1f:1f:00:ea:d4:72:1c:1f:12:3e:50:c0:72:61:
                    26:0f:08:49:58:be:5a:48:dd:28:e5:7a:70:fa:e3:
                    10:e5:d3:bd:dd:d1:0e:e1:fa:3b:d1:57:4a:af:ab:
                    a1:c3:c5:21:8f:02:e4:20:26:01:d5:d2:88:6d:0a:
                    c6:01:4f:e5:c3:2f:c9:29:c2:8d:60:74:b9:e6:0e:
                    8f:11:22:2d:32:34:d8:94:0f:2a:32:18:32:19:25:
                    ea:ec:4d:48:d2:61:74:7e:05:cc:a6:12:fe:91:9d:
                    2f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E9:AA:D4:E5:F0:54:2E:34:9C:8A:94:C9:60:6F:79:4A:75:66:8F
            X509v3 Authority Key Identifier:
                keyid:A2:83:8E:50:EF:41:30:DD:6A:D1:53:94:08:30:85:40:22:E2:10:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/A2838E50EF4130DD6AD153940830854022E210E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2838E50EF4130DD6AD153940830854022E210E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/A2838E50EF4130DD6AD153940830854022E210E9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:52:8e:f3:36:ba:4a:b3:ea:35:e3:85:01:84:66:e6:55:25:
         10:58:ab:f9:5f:b4:f8:60:64:13:ba:9c:15:41:62:c4:c9:78:
         15:f3:e3:ca:a3:ee:14:28:84:ab:db:7a:75:6c:94:12:c8:55:
         86:13:a7:11:b1:c1:5a:6d:ae:04:01:9e:45:bb:66:8a:e0:14:
         2d:7c:5b:fa:35:23:7d:f0:20:f4:a8:5d:e6:23:8d:69:52:cd:
         0f:4c:ab:67:82:f7:15:b7:bc:60:3c:c0:04:2e:ac:9d:3a:73:
         84:2f:f7:cd:4e:bc:6d:00:3e:87:1a:b8:83:f7:6b:36:cb:c4:
         0e:66:d3:2e:f3:c1:59:0a:0d:ea:9d:e3:84:51:e2:01:82:43:
         0b:6d:42:32:33:16:de:f2:ee:e8:ca:21:d0:4a:b0:ed:b3:8d:
         dd:5f:bf:48:8a:8e:fd:c6:66:57:40:b5:0e:be:d4:f9:b8:be:
         c4:4f:5a:c5:35:55:a8:cf:bd:30:32:94:15:4d:18:db:8e:54:
         cc:9d:4c:0f:5a:e9:c3:2a:7d:ca:33:64:ea:e6:6c:a1:4f:6c:
         a7:41:55:eb:7a:e3:5b:92:04:0b:05:60:14:cf:e6:42:93:94:
         39:54:5a:19:96:a4:f5:16:55:8a:60:cb:74:af:a6:a2:a2:9b:
         5a:b3:69:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----