Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/AC88E2B8518089044D3F00C0A71F5699DC4E11FA.mft
File:                     AC88E2B8518089044D3F00C0A71F5699DC4E11FA.mft (raw, json)
Hash identifier:          ELPb++LRkYQQeU43XFE+djOdEZ6BErb4XdGpARstY6Q=
Subject key identifier:   5B:BC:16:AA:C4:4F:A1:0B:CB:9A:D6:40:E7:07:27:A9:07:6F:1B:87
Authority key identifier: AC:88:E2:B8:51:80:89:04:4D:3F:00:C0:A7:1F:56:99:DC:4E:11:FA
Certificate issuer:       /CN=AC88E2B8518089044D3F00C0A71F5699DC4E11FA
Certificate serial:       1925C5A09E325E741AFDFB6A2DEB193D06CF52B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC88E2B8518089044D3F00C0A71F5699DC4E11FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/AC88E2B8518089044D3F00C0A71F5699DC4E11FA.mft
Manifest number:          E7
Signing time:             Mon 15 Apr 2024 06:10:58 +0000
Manifest this update:     Mon 15 Apr 2024 06:05:58 +0000
Manifest next update:     Tue 16 Apr 2024 09:19:58 +0000
Files and hashes:         1: 323830343a376362303a3a2f33322d3438203d3e20323731353132.roa (hash: 51e19FXmb1cMc7QYzaQF2WcUrWkkaZod8UGpgC/C4Io=)
                          2: AC88E2B8518089044D3F00C0A71F5699DC4E11FA.crl (hash: o97Xxve+7oLdJycAfOF7uXny1zBC3nNKBTbgAPBOM98=)
                          3: 3138312e3233322e3132382e302f32322d3234203d3e20323731353132.roa (hash: KPtMT86kJEBLXuP4YyBmGeVaqWT/lDmxP0ESV8qnqy4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:25:c5:a0:9e:32:5e:74:1a:fd:fb:6a:2d:eb:19:3d:06:cf:52:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC88E2B8518089044D3F00C0A71F5699DC4E11FA
        Validity
            Not Before: Apr 15 06:05:58 2024 GMT
            Not After : Apr 16 09:19:58 2024 GMT
        Subject: CN=5BBC16AAC44FA10BCB9AD640E70727A9076F1B87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:aa:d1:dd:81:4b:52:2c:08:88:b8:9f:aa:af:
                    11:87:33:4b:72:2d:a4:5e:dd:9b:88:3b:e8:cd:40:
                    c5:5c:60:99:4b:17:5a:4d:3c:0b:86:58:e5:12:d3:
                    2c:48:46:05:5f:10:f5:b8:85:66:b2:f4:e1:7f:fc:
                    d3:66:d0:d0:3c:40:d4:ee:30:e0:df:f3:6d:46:82:
                    ce:35:10:e9:08:f9:48:ad:13:a1:e8:88:6a:6d:c8:
                    c3:76:7a:28:90:ca:85:9c:24:22:eb:64:06:48:3d:
                    f6:64:52:07:83:ac:7a:ea:0f:d9:5f:f3:6a:c3:ac:
                    e9:fd:6b:12:0c:55:9a:1f:b5:87:78:fc:90:84:75:
                    12:d9:57:73:5a:d5:04:6c:3e:4a:82:a5:8f:44:d2:
                    45:ad:32:17:c4:22:32:1d:7c:54:e3:87:ad:2a:ff:
                    32:e4:82:cf:47:4d:59:60:82:9b:43:40:c9:be:3b:
                    ab:96:3c:fe:4c:2c:0b:bc:57:0d:45:04:fc:51:e6:
                    40:1d:32:46:25:de:77:86:d2:35:c4:90:9d:f6:d8:
                    f9:c7:15:d8:56:0b:e1:59:9b:44:ca:cd:a6:2e:09:
                    3e:e5:ff:fc:d4:5f:7d:00:8b:5d:25:e8:a5:07:65:
                    84:d8:15:e3:17:04:c5:c6:ed:43:3c:56:37:cb:74:
                    8f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BC:16:AA:C4:4F:A1:0B:CB:9A:D6:40:E7:07:27:A9:07:6F:1B:87
            X509v3 Authority Key Identifier:
                keyid:AC:88:E2:B8:51:80:89:04:4D:3F:00:C0:A7:1F:56:99:DC:4E:11:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/AC88E2B8518089044D3F00C0A71F5699DC4E11FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC88E2B8518089044D3F00C0A71F5699DC4E11FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/AC88E2B8518089044D3F00C0A71F5699DC4E11FA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:a1:1c:60:01:1a:3a:ae:88:42:bf:a8:b3:fd:ee:ea:60:fb:
         86:a5:be:12:b3:23:9a:82:52:4f:f6:db:03:55:5f:5f:98:e8:
         ff:94:dd:91:c9:0f:86:19:4c:2c:17:ba:54:7f:d1:47:20:43:
         d6:fe:d0:b6:2e:2c:c4:9a:e9:f7:43:aa:70:eb:5e:09:36:48:
         cc:2d:9e:24:72:6c:f8:d0:6b:2b:9d:de:33:7e:a1:39:03:f6:
         a0:7d:2d:1d:63:58:a2:7b:a6:38:28:20:a6:b3:06:0b:22:b2:
         b3:8a:3d:03:2e:46:c1:26:66:55:55:55:39:91:ce:49:9b:90:
         8b:32:7c:e0:3b:2e:49:4c:2f:4a:f8:c4:98:81:f0:1a:91:83:
         a8:d0:99:85:5d:a8:bb:e6:c3:b3:df:c3:83:8e:4c:64:39:df:
         6b:d1:88:7e:50:12:f8:1c:79:2c:a6:23:21:9f:2d:29:03:2a:
         02:e4:ff:62:4a:52:27:eb:40:4b:06:c4:bf:3c:68:94:40:46:
         99:b2:f8:29:da:e0:49:67:38:5b:a6:7b:eb:94:91:ac:15:64:
         23:66:54:53:9a:49:3b:af:59:4e:a3:8f:9b:e0:a6:47:23:94:
         4f:97:6f:e9:ad:ee:b7:fd:10:a5:1e:cd:f6:ca:3c:d9:35:0f:
         de:bc:25:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----