Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/5ECF6E803016C892C6783D20B8A802F96C5B11EA.mft
File:                     5ECF6E803016C892C6783D20B8A802F96C5B11EA.mft (raw, json)
Hash identifier:          qLVl7NfjmsMytUzs61sSqLUR/vJWme+NWOYEkjWxkLk=
Subject key identifier:   7F:40:72:27:7F:18:1D:A3:D7:2A:9A:18:35:1F:90:BA:94:D6:C9:EC
Authority key identifier: 5E:CF:6E:80:30:16:C8:92:C6:78:3D:20:B8:A8:02:F9:6C:5B:11:EA
Certificate issuer:       /CN=5ECF6E803016C892C6783D20B8A802F96C5B11EA
Certificate serial:       18C61A932C8DEA5E391A413D80A0C0F5E38022A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5ECF6E803016C892C6783D20B8A802F96C5B11EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/5ECF6E803016C892C6783D20B8A802F96C5B11EA.mft
Manifest number:          044F
Signing time:             Sun 14 Jan 2024 15:45:44 +0000
Manifest this update:     Sun 14 Jan 2024 15:40:44 +0000
Manifest next update:     Mon 15 Jan 2024 18:31:44 +0000
Files and hashes:         1: 34352e3138362e3131362e302f32322d3234203d3e20323639343230.roa (hash: mPi+22p89DXU3z4+DRbutf0l6hqSIS4LHWECVtN9IU4=)
                          2: 5ECF6E803016C892C6783D20B8A802F96C5B11EA.crl (hash: pEcdA6hxn5nfN3GnyPKXoggKGbkDzNWDk6+ukC+B0eI=)
                          3: 323830343a363435303a3a2f33322d3438203d3e20323639343230.roa (hash: EFg9zgYt07qPw7yikNALQczLNnFyKvmnm4zufznEyJM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c6:1a:93:2c:8d:ea:5e:39:1a:41:3d:80:a0:c0:f5:e3:80:22:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ECF6E803016C892C6783D20B8A802F96C5B11EA
        Validity
            Not Before: Jan 14 15:40:44 2024 GMT
            Not After : Jan 15 18:31:44 2024 GMT
        Subject: CN=7F4072277F181DA3D72A9A18351F90BA94D6C9EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e8:1e:16:81:e4:f3:cb:bf:5a:99:d1:09:86:
                    e0:09:02:6f:8d:4d:08:69:22:c7:71:0d:68:ae:f8:
                    1a:9f:23:12:6c:61:d9:d7:4d:cf:39:60:ce:87:5b:
                    ed:53:99:25:24:03:a2:0e:c7:a1:26:8a:e5:55:c3:
                    d6:ba:53:b3:5b:3b:44:3c:f6:e8:85:75:e8:0f:92:
                    e6:7a:d8:37:97:e4:dd:59:87:33:12:aa:0e:8d:72:
                    4f:9a:06:3b:48:64:a3:c8:5d:a8:37:18:f8:25:ad:
                    b9:00:e3:8e:7c:d5:d0:06:79:e1:1d:e4:80:aa:06:
                    ce:00:65:f1:12:33:27:51:20:21:0b:31:e6:7a:68:
                    53:4e:84:f3:17:7e:3b:b7:c5:44:6e:ea:3e:95:fe:
                    51:12:08:69:46:ec:1c:32:e6:81:6d:c8:93:a1:26:
                    ba:e7:41:60:12:bc:87:28:67:29:40:92:1a:99:69:
                    b5:c7:ae:07:f9:51:5f:34:f9:7b:72:fa:e1:89:d7:
                    ab:ed:97:1c:fc:e9:2f:6f:72:88:33:12:e5:f8:ad:
                    ee:af:ef:72:7b:28:18:11:93:7a:9b:3d:9f:fa:48:
                    20:13:f2:58:56:72:67:d2:72:1d:12:9a:a4:3f:ad:
                    72:f9:cd:75:4f:4e:35:c0:b3:e5:9e:e4:15:76:0f:
                    31:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:40:72:27:7F:18:1D:A3:D7:2A:9A:18:35:1F:90:BA:94:D6:C9:EC
            X509v3 Authority Key Identifier:
                keyid:5E:CF:6E:80:30:16:C8:92:C6:78:3D:20:B8:A8:02:F9:6C:5B:11:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/5ECF6E803016C892C6783D20B8A802F96C5B11EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5ECF6E803016C892C6783D20B8A802F96C5B11EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/5ECF6E803016C892C6783D20B8A802F96C5B11EA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:98:80:1a:f9:68:d2:4f:4c:ff:72:d0:bf:13:56:3a:84:87:
         7e:d5:d3:d3:ce:8a:35:9c:f7:8a:23:cd:0d:cb:1b:17:7b:7d:
         75:e4:e1:85:fd:27:e3:26:7c:3a:6f:38:7e:fc:68:16:75:da:
         ce:de:fb:19:72:f2:74:f0:0f:a2:a3:42:f4:94:e0:36:95:f1:
         42:b1:a8:f5:dd:b1:92:d8:9a:46:e3:d4:6a:6c:24:ed:72:2f:
         8e:08:4e:31:2a:d3:4d:94:35:04:92:23:d9:21:fd:26:93:b2:
         70:44:e5:7a:f6:a4:54:db:66:8c:b3:f8:77:84:3e:b9:1d:ad:
         f7:5e:2d:56:c2:bb:82:f0:07:ca:32:7e:5d:1d:51:5b:a8:ab:
         70:99:a6:c8:fe:56:ee:b8:19:29:d8:63:f8:1c:fa:5f:a6:99:
         16:87:19:ff:42:6e:fc:ae:42:31:c0:0d:d0:74:c0:6a:cd:2c:
         23:0d:ba:f4:f5:fd:63:bd:a1:85:cf:63:ce:85:38:6a:ad:6d:
         72:be:6e:a0:fe:ff:3d:7d:4f:fe:ad:52:ee:1d:e3:fc:56:8b:
         a4:19:36:bb:f3:87:91:26:56:f8:53:cc:e4:45:34:1c:84:f5:
         3e:b8:d5:b8:d5:d7:14:cb:b4:12:bb:df:00:c7:bf:81:30:07:
         d3:9b:7d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----