Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FXw3rc59bScZgyvsoRGTJ9nhyxXJY7YBwV6QcKbGNPDZ/0/0EBDAB27D6E11B1CFA885FC77E1DDB193D619748.mft
File:                     0EBDAB27D6E11B1CFA885FC77E1DDB193D619748.mft (raw, json)
Hash identifier:          b8HTi4BHzbHed1eFIq7lPh/siZu7f79EaWToM6WO9TE=
Subject key identifier:   55:BD:49:52:E2:FF:D8:AB:81:E3:8A:09:6D:2A:1D:50:47:F6:1B:8B
Authority key identifier: 0E:BD:AB:27:D6:E1:1B:1C:FA:88:5F:C7:7E:1D:DB:19:3D:61:97:48
Certificate issuer:       /CN=0EBDAB27D6E11B1CFA885FC77E1DDB193D619748
Certificate serial:       77CB2D2BB9B431A7C251E7DF5E83073EE85B7EE7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0EBDAB27D6E11B1CFA885FC77E1DDB193D619748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FXw3rc59bScZgyvsoRGTJ9nhyxXJY7YBwV6QcKbGNPDZ/0/0EBDAB27D6E11B1CFA885FC77E1DDB193D619748.mft
Manifest number:          02A1
Signing time:             Mon 15 Apr 2024 07:26:30 +0000
Manifest this update:     Mon 15 Apr 2024 07:21:30 +0000
Manifest next update:     Tue 16 Apr 2024 10:20:30 +0000
Files and hashes:         1: 0EBDAB27D6E11B1CFA885FC77E1DDB193D619748.crl (hash: 3sHTIMsEZhUilz/saCB2fxdS/NnZe/3gciM8Cyl7z90=)
                          2: 323830343a343931383a3a2f33322d3438203d3e20323637313634.roa (hash: dcLap0DikZH/iG0gaK8pXKNOIEnM0VwlWabShlKttog=)
                          3: 34352e3233302e3135362e302f32322d3234203d3e20323637313634.roa (hash: m57ul8nMj5rdkam78XlRvbeikSN91o7mqLmUmZoKtgw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:cb:2d:2b:b9:b4:31:a7:c2:51:e7:df:5e:83:07:3e:e8:5b:7e:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EBDAB27D6E11B1CFA885FC77E1DDB193D619748
        Validity
            Not Before: Apr 15 07:21:30 2024 GMT
            Not After : Apr 16 10:20:30 2024 GMT
        Subject: CN=55BD4952E2FFD8AB81E38A096D2A1D5047F61B8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a2:0f:0a:83:5d:4a:6a:f3:f2:1c:51:3c:9c:
                    b4:15:18:8f:35:24:db:f5:e1:80:03:2a:39:02:38:
                    a8:30:e2:37:df:d0:c0:8b:56:80:18:62:ae:ed:ca:
                    bf:82:0d:11:c2:4b:73:4a:c5:cb:a7:1c:5b:c4:0a:
                    86:c9:3a:c2:dd:5c:d9:32:db:cd:07:b1:a6:38:bd:
                    c4:ae:54:ca:10:0d:dd:d5:69:e1:35:71:68:23:c6:
                    fb:73:c1:42:4c:35:3f:3a:61:5f:9f:a9:76:b7:42:
                    a1:a7:8f:d8:63:f7:af:b2:82:c5:ec:39:8d:42:05:
                    ca:9a:79:4d:8f:0b:bc:3b:74:02:1f:7f:3b:1d:83:
                    b4:0d:a5:b5:00:27:ab:7f:18:43:0c:ad:e7:af:20:
                    ca:cc:5b:e3:15:0e:58:be:e7:a3:d8:9d:68:cf:ed:
                    48:a2:b9:bd:e3:9b:84:4a:e0:49:ab:ab:f6:26:3b:
                    39:84:32:c1:54:8a:68:56:fc:ab:5f:2d:70:9f:16:
                    0b:25:13:11:41:78:12:8e:7c:ed:7d:fd:f4:74:0d:
                    99:7a:a7:c6:9a:50:2a:08:90:9e:41:2c:f5:a4:a0:
                    fc:6c:f3:d4:e8:28:56:9c:cd:6b:ac:cd:c4:05:99:
                    df:19:96:3a:4d:70:1b:b7:04:e1:61:e3:4f:7a:95:
                    4f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:BD:49:52:E2:FF:D8:AB:81:E3:8A:09:6D:2A:1D:50:47:F6:1B:8B
            X509v3 Authority Key Identifier:
                keyid:0E:BD:AB:27:D6:E1:1B:1C:FA:88:5F:C7:7E:1D:DB:19:3D:61:97:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FXw3rc59bScZgyvsoRGTJ9nhyxXJY7YBwV6QcKbGNPDZ/0/0EBDAB27D6E11B1CFA885FC77E1DDB193D619748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0EBDAB27D6E11B1CFA885FC77E1DDB193D619748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FXw3rc59bScZgyvsoRGTJ9nhyxXJY7YBwV6QcKbGNPDZ/0/0EBDAB27D6E11B1CFA885FC77E1DDB193D619748.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:5e:fe:f5:e1:b0:2b:b3:54:80:b0:7c:a3:fc:96:ac:9a:6b:
         b9:6a:61:95:55:f2:35:45:1e:0a:c9:88:05:92:74:42:d3:b9:
         99:dd:d0:e4:57:f1:32:46:50:a5:e8:6c:06:38:95:6c:ca:a9:
         18:0a:ff:86:4c:ca:90:11:ba:ec:24:90:b0:a6:0c:62:31:85:
         4f:be:45:80:cf:e7:45:5e:41:20:99:7c:1a:72:ee:15:6c:16:
         be:e2:1e:66:11:31:a2:6e:f4:43:36:46:74:f1:56:38:d8:4d:
         17:87:69:5f:be:d6:62:3f:a2:6e:b5:21:a0:a4:59:32:b3:4d:
         b6:78:bc:ca:96:21:cf:71:80:b8:9e:89:76:ed:88:3e:8b:e8:
         06:5d:10:5b:1e:5e:d1:a6:8e:44:3f:c2:67:40:b9:cd:fa:20:
         6c:1c:f7:a1:a3:cf:2a:4b:6e:56:92:f4:4d:97:12:2f:5a:82:
         04:f2:ff:8b:6b:13:4a:bb:bf:25:52:f8:ad:a7:58:64:b0:87:
         c3:79:3c:b6:81:55:ce:f7:f2:d5:0d:40:6d:2b:c9:a7:43:94:
         f2:05:8d:3d:41:64:cf:db:22:80:c6:2b:bd:2d:15:dd:3f:6e:
         14:03:1c:0d:7c:b8:61:f3:a0:71:46:2c:e1:71:9c:ad:88:b7:
         7a:a1:74:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----