Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H599g2B2KGPbiCjtjZWfzFyY8NsSYjTeArpMBu2VuuNh/1/1EB0B43D2FFB7CF2F289BBB0701DCC58F9DDE217.mft
File:                     1EB0B43D2FFB7CF2F289BBB0701DCC58F9DDE217.mft (raw, json)
Hash identifier:          nXLAbHJ8J0cdsxjr9lE/sYjrwVHhKbr990xtOhsPWsU=
Subject key identifier:   A0:74:8D:D7:30:57:C8:8A:42:61:26:8E:0B:1D:AC:9C:E4:F1:43:AB
Authority key identifier: 1E:B0:B4:3D:2F:FB:7C:F2:F2:89:BB:B0:70:1D:CC:58:F9:DD:E2:17
Certificate issuer:       /CN=1EB0B43D2FFB7CF2F289BBB0701DCC58F9DDE217
Certificate serial:       59E93471CE6AB04561176F444921243C77382711
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1EB0B43D2FFB7CF2F289BBB0701DCC58F9DDE217.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H599g2B2KGPbiCjtjZWfzFyY8NsSYjTeArpMBu2VuuNh/1/1EB0B43D2FFB7CF2F289BBB0701DCC58F9DDE217.mft
Manifest number:          0C
Signing time:             Mon 15 Apr 2024 07:59:59 +0000
Manifest this update:     Mon 15 Apr 2024 07:54:59 +0000
Manifest next update:     Tue 16 Apr 2024 08:23:59 +0000
Files and hashes:         1: 1EB0B43D2FFB7CF2F289BBB0701DCC58F9DDE217.crl (hash: VR13RTJDKfYpR+DmLLDxpcLYf88ntN6VFOvXJx6jB0s=)
                          2: 3136342e3136332e3130342e302f32322d3234203d3e20323635393534.roa (hash: SQjQ8sujeBs75xG/1rTHLgnYjcmVcYesaJ25xXKlDUY=)
                          3: 323830343a343035633a3a2f33322d3438203d3e20323635393534.roa (hash: kFi9oSyM4vqs3FwKVly6CdOZbbu+2CNcrHVgEaXE3Ig=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e9:34:71:ce:6a:b0:45:61:17:6f:44:49:21:24:3c:77:38:27:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EB0B43D2FFB7CF2F289BBB0701DCC58F9DDE217
        Validity
            Not Before: Apr 15 07:54:59 2024 GMT
            Not After : Apr 16 08:23:59 2024 GMT
        Subject: CN=A0748DD73057C88A4261268E0B1DAC9CE4F143AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:22:6b:4f:88:97:a7:7d:58:58:fe:00:7d:4f:
                    ae:86:cd:d0:6d:74:10:83:e9:9f:5f:03:18:11:85:
                    09:a0:16:48:de:5f:8b:78:8c:28:61:2c:2e:7b:a3:
                    0c:a5:90:6e:2b:7f:07:0a:3e:27:ed:c0:00:9e:ed:
                    2f:3c:c7:00:17:c1:34:cd:69:47:6c:f0:3a:c5:f4:
                    f8:7e:f1:f7:74:f2:7a:ab:54:03:4a:25:c6:ec:5b:
                    24:5a:e3:0d:2c:bf:21:3d:2b:06:b5:55:5c:83:06:
                    f7:e8:73:f5:19:76:e4:ef:0b:b3:c0:0c:3d:d7:70:
                    f6:3e:79:9d:15:94:bd:fa:eb:4d:40:f9:b4:ab:fa:
                    a9:29:fb:e9:c2:57:d8:b8:ff:4c:4c:94:d5:c7:09:
                    44:68:c5:1d:72:90:ec:37:60:d5:b2:74:9b:06:64:
                    ee:5e:f9:4f:7d:27:fd:2b:a5:22:ef:e5:5d:54:be:
                    f9:22:c8:30:1d:12:5d:ba:d3:cb:91:52:d8:b5:b1:
                    d1:c4:86:2c:ed:f7:36:6d:67:81:63:cb:64:8f:6b:
                    32:b5:16:67:97:31:0b:cb:ea:d4:48:d1:a1:a8:4e:
                    71:b6:be:54:d5:5c:2d:9d:61:ae:97:44:ac:10:cd:
                    df:08:11:c3:a8:22:b8:98:38:87:40:34:4d:55:8b:
                    59:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:74:8D:D7:30:57:C8:8A:42:61:26:8E:0B:1D:AC:9C:E4:F1:43:AB
            X509v3 Authority Key Identifier:
                keyid:1E:B0:B4:3D:2F:FB:7C:F2:F2:89:BB:B0:70:1D:CC:58:F9:DD:E2:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H599g2B2KGPbiCjtjZWfzFyY8NsSYjTeArpMBu2VuuNh/1/1EB0B43D2FFB7CF2F289BBB0701DCC58F9DDE217.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1EB0B43D2FFB7CF2F289BBB0701DCC58F9DDE217.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H599g2B2KGPbiCjtjZWfzFyY8NsSYjTeArpMBu2VuuNh/1/1EB0B43D2FFB7CF2F289BBB0701DCC58F9DDE217.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:fa:83:7e:15:d7:9d:b6:23:cd:4f:4f:5d:9c:6c:6c:b0:36:
         86:f4:1b:6c:83:ac:28:6e:be:4d:c7:15:59:69:29:6b:51:29:
         4c:ae:76:3f:ec:06:a9:e7:1b:0c:58:0a:c6:bd:43:b9:ab:91:
         94:79:d9:79:3a:bf:32:23:13:e0:1d:16:37:c7:b8:94:9c:64:
         51:c8:df:bd:0b:f8:d9:76:ae:6e:82:28:49:04:b0:45:00:d4:
         00:38:41:0f:21:93:cb:6e:57:af:d3:61:72:50:cc:f5:64:47:
         3b:0c:78:15:aa:56:d3:22:22:bb:af:da:56:b9:e9:4e:17:bc:
         9b:f2:db:dc:e3:9e:1f:6a:d9:c0:de:8a:42:a9:ce:37:f7:88:
         0f:b0:ff:0a:d3:78:d2:af:2b:8c:86:09:81:1f:58:df:01:6c:
         b6:00:07:d4:a5:2a:af:07:50:ea:c9:01:e7:46:6e:ab:5c:f7:
         8a:82:33:c8:5a:fe:5f:49:a5:c3:b5:68:f7:9f:61:cb:bb:49:
         dc:c7:31:ea:fd:8f:2d:b6:29:b0:8d:a0:f9:45:b0:95:b4:6f:
         37:a2:76:27:a7:b5:64:de:8a:88:4b:88:0b:58:89:7f:fa:bd:
         e1:ac:6e:5b:47:bb:8d:3b:8f:bd:af:37:16:c0:68:89:b3:3a:
         b6:f5:6e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----