Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/0/E7D8FAB52F7674C1DFA353660F987AD06D90CB72.mft
File:                     E7D8FAB52F7674C1DFA353660F987AD06D90CB72.mft (raw, json)
Hash identifier:          /XRB4FZlSkEtMqVypbX0JfAJjmdd3w3Uc9uMT47Ngx0=
Subject key identifier:   E8:77:97:00:20:6E:38:A4:46:A3:2A:2E:4E:F4:34:A5:F3:79:FB:BC
Authority key identifier: E7:D8:FA:B5:2F:76:74:C1:DF:A3:53:66:0F:98:7A:D0:6D:90:CB:72
Certificate issuer:       /CN=E7D8FAB52F7674C1DFA353660F987AD06D90CB72
Certificate serial:       11978B172F938D3A780A3825EFF2BCA0A8E2087F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E7D8FAB52F7674C1DFA353660F987AD06D90CB72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/0/E7D8FAB52F7674C1DFA353660F987AD06D90CB72.mft
Manifest number:          C6
Signing time:             Tue 12 Dec 2023 22:01:58 +0000
Manifest this update:     Tue 12 Dec 2023 21:56:58 +0000
Manifest next update:     Thu 14 Dec 2023 00:43:58 +0000
Files and hashes:         1: 323830343a363133303a3a2f33322d3333203d3e20323639323139.roa (hash: DiZUTLfasoCrjGRnvOQ24AjFoD8H/i6hG952xsGNpLo=)
                          2: 34352e3138322e302e302f32322d3234203d3e20323639323139.roa (hash: Sg0SAqIC0EeanfWvSBdN8WPyxiTcM9xcDi2yAKzZsJs=)
                          3: E7D8FAB52F7674C1DFA353660F987AD06D90CB72.crl (hash: wxlKmehGf+DWmzs0oL668moIF6kPZ9Q4f8YdoKWw364=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:97:8b:17:2f:93:8d:3a:78:0a:38:25:ef:f2:bc:a0:a8:e2:08:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7D8FAB52F7674C1DFA353660F987AD06D90CB72
        Validity
            Not Before: Dec 12 21:56:58 2023 GMT
            Not After : Dec 14 00:43:58 2023 GMT
        Subject: CN=E8779700206E38A446A32A2E4EF434A5F379FBBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f7:58:ee:09:8e:67:a9:06:ae:9f:d1:3d:9f:
                    98:f7:fd:5e:f5:5d:44:c6:1a:1e:e6:2d:86:b4:3e:
                    e4:b9:9c:c1:36:ab:66:e4:b5:8c:19:2a:e2:56:88:
                    95:ac:b2:af:0b:c0:00:41:13:01:35:0a:f0:21:75:
                    49:86:12:d8:09:04:d4:4f:56:f4:87:52:be:84:9a:
                    af:64:03:6d:0a:eb:28:25:78:11:9d:ac:7b:1e:ea:
                    aa:57:87:c6:2f:6e:88:bc:7e:21:4f:9d:03:13:78:
                    e7:36:59:fe:34:05:c3:f6:c3:90:be:68:72:ca:d5:
                    1c:af:ae:2d:a5:80:6a:40:05:ba:cc:f0:c6:b2:ed:
                    d9:c5:8e:08:83:84:aa:a5:8b:42:b9:6e:67:82:33:
                    86:c8:5b:8d:fa:b7:38:b1:56:e8:c3:95:51:e0:8d:
                    7e:8a:88:06:79:9a:4e:43:73:3a:61:e3:6f:30:4e:
                    cf:ed:17:15:b6:8b:ff:8c:4b:b5:94:85:68:2f:b1:
                    0e:ed:73:d7:46:21:d1:0c:f9:91:e9:b8:6e:19:89:
                    24:f0:88:31:d6:69:1d:9a:5b:c8:48:ae:e8:d0:67:
                    7d:db:9e:5b:60:ed:df:0e:87:59:70:8b:52:e7:79:
                    9d:27:f1:b8:49:b6:47:66:ef:81:99:4d:b0:dd:8a:
                    85:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:77:97:00:20:6E:38:A4:46:A3:2A:2E:4E:F4:34:A5:F3:79:FB:BC
            X509v3 Authority Key Identifier:
                keyid:E7:D8:FA:B5:2F:76:74:C1:DF:A3:53:66:0F:98:7A:D0:6D:90:CB:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/0/E7D8FAB52F7674C1DFA353660F987AD06D90CB72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E7D8FAB52F7674C1DFA353660F987AD06D90CB72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/0/E7D8FAB52F7674C1DFA353660F987AD06D90CB72.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:52:f9:5c:51:84:4e:19:ef:f8:41:de:9d:e5:09:8f:a1:54:
         50:25:65:b1:e9:6d:60:64:29:4f:68:e9:1b:ca:c6:9a:76:31:
         b3:60:24:8d:dc:2f:39:a7:f6:0c:46:e8:68:29:26:a8:f6:bc:
         68:9b:44:80:c1:9c:e2:8c:ee:e4:c9:65:07:bd:80:43:92:5b:
         e2:d1:82:a0:de:88:8f:f6:8e:3a:22:15:02:94:95:27:2f:47:
         6e:b3:c0:a7:f9:0a:33:0b:f2:12:6f:6f:a3:fb:3d:29:f9:71:
         3f:3e:cf:35:d9:bf:e0:9d:d3:25:07:43:7f:a1:1f:6a:c8:9c:
         e6:a2:cb:23:e9:aa:5f:dc:96:fa:1e:ef:f3:5d:44:9f:d4:50:
         f0:e9:bb:77:50:02:3b:1b:4d:8b:1e:4f:76:34:a2:8a:59:36:
         69:4e:f1:13:06:8b:c0:ed:58:3e:59:87:68:4c:6a:84:48:eb:
         10:1a:59:ce:bf:6f:e7:4a:ad:17:7f:b7:f2:a8:34:db:45:c7:
         12:e7:be:38:d3:72:78:d2:55:d2:b7:e3:ee:ad:22:7d:93:1e:
         72:16:84:2e:4b:fd:98:cd:8c:ab:97:64:50:c7:93:44:0f:bd:
         3b:92:98:a5:05:99:b4:59:cd:c9:23:6b:e1:fc:3c:e1:7d:dd:
         0f:5c:e7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----