Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FCo1i8HXrNk73fYuaSpqNaSpm1RBNxLuPgaaFt67ZTfc/0/01E2790A292E718147C5F617CEC9E111BA6A14C7.mft
File:                     01E2790A292E718147C5F617CEC9E111BA6A14C7.mft (raw, json)
Hash identifier:          vWunYprSMtxF0YDZ4OktnHdg44gui1LGm4FuxjDlzmQ=
Subject key identifier:   1E:C9:50:D7:46:80:AD:3C:F8:57:42:D3:7E:AA:A2:B1:25:CA:36:47
Authority key identifier: 01:E2:79:0A:29:2E:71:81:47:C5:F6:17:CE:C9:E1:11:BA:6A:14:C7
Certificate issuer:       /CN=01E2790A292E718147C5F617CEC9E111BA6A14C7
Certificate serial:       3EF05A5CE585280F53B74C25C7739744030A079E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01E2790A292E718147C5F617CEC9E111BA6A14C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FCo1i8HXrNk73fYuaSpqNaSpm1RBNxLuPgaaFt67ZTfc/0/01E2790A292E718147C5F617CEC9E111BA6A14C7.mft
Manifest number:          0154
Signing time:             Sun 14 Apr 2024 22:59:04 +0000
Manifest this update:     Sun 14 Apr 2024 22:54:04 +0000
Manifest next update:     Tue 16 Apr 2024 00:58:04 +0000
Files and hashes:         1: 3133312e3130302e34342e302f32322d3234203d3e203631373535.roa (hash: cZ64I8V5QuSKOa3UDqyqsrcgUWVj7ZOQN9WLsOs0Cns=)
                          2: 01E2790A292E718147C5F617CEC9E111BA6A14C7.crl (hash: aiyYkbOaiziundvGL/q+Tkp4muAozx/UdgDmI/gsnx4=)
                          3: 323830343a316265343a3a2f33322d3438203d3e203631373535.roa (hash: TcizeaLVwtkhiFzEyT/JKzisbsKZyWHjtMGEtHpqMkA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f0:5a:5c:e5:85:28:0f:53:b7:4c:25:c7:73:97:44:03:0a:07:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01E2790A292E718147C5F617CEC9E111BA6A14C7
        Validity
            Not Before: Apr 14 22:54:04 2024 GMT
            Not After : Apr 16 00:58:04 2024 GMT
        Subject: CN=1EC950D74680AD3CF85742D37EAAA2B125CA3647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ed:b8:6e:d6:a3:a8:bc:21:bb:7e:4f:2b:fd:
                    e8:0f:a5:fe:8f:fa:ff:06:f7:f4:fa:2d:37:17:6f:
                    fd:67:af:7b:f5:6a:c6:0d:9d:14:ff:fa:94:23:83:
                    65:28:79:24:4f:e5:0f:8d:7c:50:98:5b:f1:65:c7:
                    2d:8b:02:f2:ca:d3:3e:80:15:fb:d1:2a:e7:b9:b5:
                    9d:73:ec:f0:f4:92:5d:e8:f4:d3:e4:8c:a2:90:9d:
                    7c:01:74:cc:ac:14:e3:fe:5e:0d:bb:31:85:80:0e:
                    22:c2:f3:3d:99:c7:45:81:7c:d1:29:eb:b0:39:79:
                    2d:cf:c9:29:61:72:c4:a4:10:2a:a7:e5:e8:25:c3:
                    22:21:5d:6b:72:59:5b:c9:bf:30:59:ac:dc:9a:6f:
                    4c:c9:29:69:0d:54:f5:26:32:f0:f5:2a:24:2b:08:
                    44:ee:00:6a:ff:11:13:bb:f0:1e:61:c9:df:80:ec:
                    34:76:b4:f5:46:c3:af:11:65:bb:71:56:aa:60:2a:
                    5d:94:e1:eb:3f:67:98:35:a6:17:06:5c:25:0f:b2:
                    f8:c8:f9:0d:5d:fe:c8:a4:86:b0:d5:9e:da:fc:49:
                    88:c1:3e:21:e3:87:6b:43:87:8c:35:20:55:18:49:
                    77:fa:86:e9:5f:b3:9d:fb:21:59:db:0b:ff:ae:1f:
                    65:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C9:50:D7:46:80:AD:3C:F8:57:42:D3:7E:AA:A2:B1:25:CA:36:47
            X509v3 Authority Key Identifier:
                keyid:01:E2:79:0A:29:2E:71:81:47:C5:F6:17:CE:C9:E1:11:BA:6A:14:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FCo1i8HXrNk73fYuaSpqNaSpm1RBNxLuPgaaFt67ZTfc/0/01E2790A292E718147C5F617CEC9E111BA6A14C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01E2790A292E718147C5F617CEC9E111BA6A14C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FCo1i8HXrNk73fYuaSpqNaSpm1RBNxLuPgaaFt67ZTfc/0/01E2790A292E718147C5F617CEC9E111BA6A14C7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:db:dc:78:f2:9a:ff:6a:3a:45:7a:fc:dd:c8:60:37:bf:b7:
         94:c7:9f:a3:f3:47:ca:f3:95:13:a3:98:e7:b4:67:41:4d:ae:
         53:b4:99:35:29:e5:2b:6a:c3:8f:85:55:5a:cd:10:32:0e:de:
         c8:61:5f:53:40:39:0b:bf:4d:dd:ed:a9:6a:9b:f2:53:e5:49:
         71:b9:57:02:d0:57:d7:c4:f5:b1:e5:a0:6c:00:ea:c5:f2:dd:
         19:4b:46:90:1c:81:40:97:c7:a8:65:ea:8f:60:68:a1:05:38:
         d9:1e:45:6b:a3:e2:b7:90:a3:a4:7e:c8:50:db:1c:3a:51:e8:
         49:7d:e1:d6:06:0f:ab:98:d4:0e:8f:7c:4f:e2:31:1d:9a:49:
         cb:0b:d1:57:d5:a5:aa:dc:f5:cd:74:d4:90:e0:91:f4:e8:07:
         75:e2:f0:da:2d:b1:17:ea:c9:c5:0a:59:23:3d:10:3a:28:7d:
         39:f1:fd:82:ca:92:2c:61:71:dd:1d:ba:8c:ce:fa:46:4d:2a:
         30:3e:60:f2:83:18:c5:7a:8c:aa:72:5b:34:04:e6:81:cc:b6:
         b3:52:f1:b0:e2:c2:c7:77:76:1f:c5:82:3f:72:c6:25:5f:f5:
         7b:8e:fb:bc:84:40:1f:cd:04:b1:d6:90:eb:4c:8d:39:8b:9f:
         88:f5:60:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----