Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/E509BAA2693B17A541A242E2F31A9A5BB0EE68AE.mft
File:                     E509BAA2693B17A541A242E2F31A9A5BB0EE68AE.mft (raw, json)
Hash identifier:          WvLMuVcCm/5lmWGlx67eFWflCAtx+/kCVNwyfeyOCvY=
Subject key identifier:   C7:CB:5B:48:20:E7:D7:D7:6E:01:32:B5:5E:1A:DF:AC:0A:61:C9:A0
Authority key identifier: E5:09:BA:A2:69:3B:17:A5:41:A2:42:E2:F3:1A:9A:5B:B0:EE:68:AE
Certificate issuer:       /CN=E509BAA2693B17A541A242E2F31A9A5BB0EE68AE
Certificate serial:       2D730F844CF7D4061EC610F66FEE0EF27F14B06C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E509BAA2693B17A541A242E2F31A9A5BB0EE68AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/E509BAA2693B17A541A242E2F31A9A5BB0EE68AE.mft
Manifest number:          29
Signing time:             Sun 14 Apr 2024 21:53:39 +0000
Manifest this update:     Sun 14 Apr 2024 21:48:39 +0000
Manifest next update:     Tue 16 Apr 2024 01:41:39 +0000
Files and hashes:         1: 3138392e38352e3130382e302f32322d3332203d3e20323730353533.roa (hash: ofA/uRIEAkXG+paAGg8j28C1JkdF00zj0zlM5btYGHw=)
                          2: E509BAA2693B17A541A242E2F31A9A5BB0EE68AE.crl (hash: Dz7UpkkcEViiEbqQRw1rbV6OmMuBY7bhdj+Oc87Spd4=)
                          3: 323830343a366463303a3a2f33322d313238203d3e20323730353533.roa (hash: fkmPB/HoEhkdJeaSf3xKNjANl9IhKUw+d9PMDr81jkw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:73:0f:84:4c:f7:d4:06:1e:c6:10:f6:6f:ee:0e:f2:7f:14:b0:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E509BAA2693B17A541A242E2F31A9A5BB0EE68AE
        Validity
            Not Before: Apr 14 21:48:39 2024 GMT
            Not After : Apr 16 01:41:39 2024 GMT
        Subject: CN=C7CB5B4820E7D7D76E0132B55E1ADFAC0A61C9A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e5:c9:a7:2e:e3:20:d6:d8:f7:51:b0:cc:c3:
                    c7:63:0b:71:11:5e:ef:08:ff:68:86:ff:cc:71:62:
                    a4:10:9c:53:4d:ff:68:ab:f5:6b:e8:a2:16:18:95:
                    4f:49:5d:f5:74:88:7d:05:23:71:47:fb:8f:5d:20:
                    a2:18:89:a0:d7:53:4e:ac:48:d7:68:3d:4f:fd:7b:
                    05:b5:99:1b:4f:ef:d7:02:2a:f8:10:9d:7b:90:69:
                    2e:39:a7:0b:f0:67:0b:a9:1d:5a:3c:0b:35:12:99:
                    66:fd:61:a2:4b:73:a0:83:cc:02:f5:ae:9d:cb:9f:
                    1f:c6:b7:1c:d1:f7:21:9d:e2:44:d0:7a:1d:89:12:
                    8e:3c:ac:fc:00:7d:02:3d:0a:29:90:ed:06:32:68:
                    a5:f1:fe:a6:8b:b5:05:ab:24:f5:13:30:bf:3c:64:
                    95:b1:21:fd:65:34:1f:8a:76:9b:1f:f2:56:9a:ff:
                    a4:07:7f:3d:4b:da:ad:4f:49:6b:27:39:05:70:d7:
                    28:bf:9b:7c:b5:ac:25:c7:cc:e6:e4:2e:ea:9b:24:
                    04:f1:b8:76:ea:e8:1b:3b:bd:2d:c9:39:36:98:c1:
                    4d:c2:40:72:86:1a:04:0d:89:27:81:b8:3f:24:5a:
                    48:c1:3e:0b:bf:6e:2c:7a:16:59:50:2b:8e:73:26:
                    34:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:CB:5B:48:20:E7:D7:D7:6E:01:32:B5:5E:1A:DF:AC:0A:61:C9:A0
            X509v3 Authority Key Identifier:
                keyid:E5:09:BA:A2:69:3B:17:A5:41:A2:42:E2:F3:1A:9A:5B:B0:EE:68:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/E509BAA2693B17A541A242E2F31A9A5BB0EE68AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E509BAA2693B17A541A242E2F31A9A5BB0EE68AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/E509BAA2693B17A541A242E2F31A9A5BB0EE68AE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:d5:f9:9b:8f:1a:f5:17:77:a5:b6:06:a1:97:49:97:30:60:
         42:e5:12:14:b1:eb:17:3f:a5:3a:e0:ac:a7:0c:51:2c:b2:c2:
         82:b5:5c:05:4b:26:dc:48:29:d2:47:3e:e1:ca:eb:f2:ff:07:
         da:03:93:bc:e7:bb:1a:a5:5c:08:38:93:85:1e:25:1b:81:43:
         d4:63:3f:5f:f2:8d:34:87:4b:c7:41:57:fe:04:e1:66:1e:9d:
         73:d4:f3:ef:1b:24:56:f1:fd:b0:4e:29:70:ac:63:8e:cb:e5:
         48:d1:05:02:65:75:e6:40:3b:c2:f2:45:53:8e:4f:17:ab:ef:
         f1:2b:27:ab:ae:ad:41:55:2a:a9:ac:93:6b:5a:8f:d8:2c:eb:
         b7:44:3e:b0:cb:4d:43:8f:b5:25:52:a6:89:9c:6f:03:92:da:
         c8:21:7a:0a:16:c8:2e:b3:53:9a:e0:92:54:6d:b2:18:60:3c:
         0e:16:df:03:26:e8:ae:64:26:cc:44:5e:27:a5:cc:ea:a8:8c:
         90:da:6e:82:2b:51:53:31:22:24:55:c8:35:25:19:c1:20:74:
         b8:89:e0:9b:4d:86:74:d8:90:39:1a:b8:66:47:c1:d8:a8:2a:
         5d:84:60:9e:85:08:8c:4e:47:16:50:64:0d:99:22:e4:8b:46:
         f0:1e:16:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----