Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/E820888BFB0DAD374E0F751AA350D4880C41FA44.mft
File:                     E820888BFB0DAD374E0F751AA350D4880C41FA44.mft (raw, json)
Hash identifier:          ADGva+WeoE8FysppY3ZWR00q0JofPEAKpk31B/86+YY=
Subject key identifier:   F5:E7:81:C8:84:8E:89:BB:15:B3:DA:C8:AE:CB:39:6E:EB:1C:E7:21
Authority key identifier: E8:20:88:8B:FB:0D:AD:37:4E:0F:75:1A:A3:50:D4:88:0C:41:FA:44
Certificate issuer:       /CN=E820888BFB0DAD374E0F751AA350D4880C41FA44
Certificate serial:       1FC89F1635F9CEA2B860243102B255B569FCE988
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E820888BFB0DAD374E0F751AA350D4880C41FA44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/E820888BFB0DAD374E0F751AA350D4880C41FA44.mft
Manifest number:          0C
Signing time:             Mon 20 Jan 2025 09:11:32 +0000
Manifest this update:     Mon 20 Jan 2025 09:06:32 +0000
Manifest next update:     Tue 21 Jan 2025 10:52:32 +0000
Files and hashes:         1: 323830343a346433633a393030373a3a2f34382d3438203d3e203631363231.roa (hash: riLmuPHmYgAOaaMzfXb3XTXFbjJHZ48OV2noq9YAnjs=)
                          2: E820888BFB0DAD374E0F751AA350D4880C41FA44.crl (hash: e2lrr2QY3s0CoOj0D6+j5VsDyNB7UzDYgp7iSX+dqhg=)
                          3: 3138362e3230392e3232322e302f32332d3234203d3e203631363231.roa (hash: wEkWeN+aq8zp1pcDoICehNtBj4dmlpAx6+R0B6K7zRU=)
                          4: 34352e3233352e3136302e302f32322d3234203d3e203631363231.roa (hash: lAAKQX8JmMXh7YICbasAqSGQveyLRFdNn8MzDZ1BrTw=)
                          5: 3137372e32332e3235322e302f32322d3234203d3e203631363231.roa (hash: Z1mUElAd/017ZKAOExM49Asl9L/q+8GJdlhLEVfKpHU=)
                          6: 3138362e3230392e3132332e302f32342d3234203d3e203631363231.roa (hash: gToZc4RucLTXJLX3WOjwTjSlO6GCIZ7TEj2Z/zTjByo=)
                          7: 323830343a346433633a3a2f33322d3336203d3e203631363231.roa (hash: VrQ9aGmFa2esxcz2yoAMzKGw/Zam7rbjAK2svLDOI4w=)
                          8: 3137302e3233312e3230382e302f32322d3234203d3e203631363231.roa (hash: 6qQh9ziyFOy5vSUICqeHAoUCAuCLaDRsuLkhVkspEpE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:c8:9f:16:35:f9:ce:a2:b8:60:24:31:02:b2:55:b5:69:fc:e9:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E820888BFB0DAD374E0F751AA350D4880C41FA44
        Validity
            Not Before: Jan 20 09:06:32 2025 GMT
            Not After : Jan 21 10:52:32 2025 GMT
        Subject: CN=F5E781C8848E89BB15B3DAC8AECB396EEB1CE721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1a:ba:fc:a0:06:7f:8f:04:2a:d3:29:ed:4f:
                    19:90:00:83:e4:d5:8e:27:a8:eb:07:bf:9b:6d:39:
                    3d:2e:58:e0:75:bf:8f:74:cf:18:1c:1d:08:84:3b:
                    ba:06:29:02:9c:22:5a:4b:60:db:94:b3:90:32:fe:
                    f7:48:6c:ca:2f:55:d2:24:fe:6a:97:72:ae:5b:1d:
                    3c:08:17:5a:9e:21:80:98:7e:a7:0b:4a:ed:d0:59:
                    1a:6d:5b:d8:8e:ed:f5:3d:63:10:db:b1:a9:3a:00:
                    68:a7:ae:ae:55:57:60:a5:3c:09:3b:21:f6:93:ca:
                    bd:38:08:d7:e4:a7:1a:55:2a:50:90:39:06:41:d7:
                    b9:46:18:89:48:1e:8c:4d:cc:c8:8f:21:ba:21:ad:
                    1b:67:cd:8b:90:8d:06:41:66:71:f0:63:7c:29:0c:
                    03:88:58:7e:58:40:8c:69:e8:36:b8:a8:14:a2:f1:
                    59:0e:14:57:72:2b:3f:62:d5:8f:6a:62:8b:64:b8:
                    26:22:45:86:ff:cf:40:4d:3a:81:c7:17:eb:da:02:
                    02:20:3a:37:ee:f5:26:a0:6a:20:fe:65:af:71:b4:
                    f9:f5:a8:db:01:ef:ab:30:d5:da:8a:42:c1:91:69:
                    51:ce:de:c6:ac:b9:51:50:a6:87:d7:d8:3c:20:d2:
                    15:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E7:81:C8:84:8E:89:BB:15:B3:DA:C8:AE:CB:39:6E:EB:1C:E7:21
            X509v3 Authority Key Identifier:
                keyid:E8:20:88:8B:FB:0D:AD:37:4E:0F:75:1A:A3:50:D4:88:0C:41:FA:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/E820888BFB0DAD374E0F751AA350D4880C41FA44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E820888BFB0DAD374E0F751AA350D4880C41FA44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/E820888BFB0DAD374E0F751AA350D4880C41FA44.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:b0:7e:a0:23:e2:2f:c7:76:1d:58:7b:66:78:18:97:47:16:
         54:56:b4:8f:ce:dd:29:33:67:c6:94:60:c6:05:b2:98:2f:ee:
         59:9a:2e:34:7b:46:a9:ab:db:d0:8f:00:14:01:e8:3e:61:88:
         3f:03:63:02:78:ca:c6:36:f9:ca:7d:43:97:d1:1e:90:9a:93:
         a1:52:a7:9d:5b:4b:78:e4:d8:82:3e:ba:2b:dc:f1:9d:79:c9:
         fb:12:26:78:99:55:bf:c8:23:9d:2c:50:f9:95:70:b8:b6:3c:
         4c:3d:2f:07:3f:41:83:4f:f8:ee:1c:c8:36:f2:35:b0:4a:a2:
         0c:ce:a9:22:13:f9:75:9c:7d:d9:96:01:f4:aa:32:d5:7b:25:
         b8:d7:88:dd:0c:af:a4:65:7d:b8:cf:5a:22:f2:55:4f:52:c5:
         a8:d9:07:57:58:ee:14:ad:1a:c3:26:0d:66:07:87:0d:9a:5c:
         e3:82:31:ab:3f:77:b5:c3:c3:0e:90:37:69:16:0d:59:5d:55:
         28:2c:0a:22:06:17:de:2c:f3:b7:31:1d:9a:19:00:63:7a:d4:
         f9:59:3c:a8:c7:2d:90:30:90:44:63:5e:4b:79:87:18:18:43:
         16:bf:0d:69:f3:ea:bd:c9:f3:77:a2:89:bc:68:1b:a4:ca:9a:
         33:7f:06:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:52:44 2025 by rpki-client