Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/0/EB058BC4599DA18E2DE409D6D276CD29941C7B1A.mft
File:                     EB058BC4599DA18E2DE409D6D276CD29941C7B1A.mft (raw, json)
Hash identifier:          kLpaYxmTlwS1kgNvEwVxX/pJHOE1z7bzKm9XMhUaWUE=
Subject key identifier:   78:AD:AD:8D:C2:9D:9E:B2:A1:B7:B0:B5:03:0B:30:BE:E2:47:70:BB
Authority key identifier: EB:05:8B:C4:59:9D:A1:8E:2D:E4:09:D6:D2:76:CD:29:94:1C:7B:1A
Certificate issuer:       /CN=EB058BC4599DA18E2DE409D6D276CD29941C7B1A
Certificate serial:       7B168DC77B2A1F40409227FF3AB6EC01C0F4175E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB058BC4599DA18E2DE409D6D276CD29941C7B1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/0/EB058BC4599DA18E2DE409D6D276CD29941C7B1A.mft
Manifest number:          0314
Signing time:             Thu 14 Sep 2023 12:50:00 +0000
Manifest this update:     Thu 14 Sep 2023 12:45:00 +0000
Manifest next update:     Fri 15 Sep 2023 14:37:00 +0000
Files and hashes:         1: 323830343a323134343a3a2f33322d3438203d3e203532373935.roa (hash: y9VWH33UU5XMYUYik2BoDsXsyVnyomZckxykM6cGPgM=)
                          2: EB058BC4599DA18E2DE409D6D276CD29941C7B1A.crl (hash: TYhljlunWK31Sy0BQf2HB0msmhM9y5j9hiUAO6dDG/s=)
                          3: 3137372e33392e3231362e302f32312d3234203d3e203532373935.roa (hash: FJdKO7N9UHieCSRlXjp7B5ZyfJFehl2XjK/GJ/FkmcQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:16:8d:c7:7b:2a:1f:40:40:92:27:ff:3a:b6:ec:01:c0:f4:17:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB058BC4599DA18E2DE409D6D276CD29941C7B1A
        Validity
            Not Before: Sep 14 12:45:00 2023 GMT
            Not After : Sep 15 14:37:00 2023 GMT
        Subject: CN=78ADAD8DC29D9EB2A1B7B0B5030B30BEE24770BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:5c:8f:39:fe:d1:98:39:eb:24:09:7e:ca:10:
                    b1:60:58:f0:ea:82:a9:74:1e:f7:1f:69:c0:a0:5e:
                    d3:59:91:d2:2a:86:73:63:c3:68:8e:91:19:20:94:
                    68:ed:5f:49:a9:4f:78:35:28:29:31:6b:16:76:30:
                    e1:a1:07:0a:54:53:cb:7d:93:a3:02:26:df:35:fc:
                    93:b0:b7:02:e8:75:42:aa:2a:b5:44:fd:fa:59:89:
                    a0:64:a1:16:e6:7b:e0:6d:4e:6c:09:5f:ed:43:9c:
                    7b:4b:2f:94:87:bd:8f:77:06:85:fe:49:b8:c4:76:
                    d8:0e:a0:35:84:dd:de:51:fb:4d:07:54:dd:c5:7c:
                    4c:7f:c3:d5:a9:3d:a7:54:9d:62:24:0a:7b:e3:c0:
                    1d:67:68:db:7b:e6:58:9b:44:06:cd:29:b3:2e:45:
                    01:a9:b0:17:bb:2f:d0:be:43:0e:4e:b5:3d:32:a6:
                    a7:99:74:74:3b:1e:58:2e:33:3b:63:2c:50:58:92:
                    6a:bd:d3:fe:3d:51:5a:1e:e1:5b:64:0d:5d:b0:ff:
                    79:f2:ee:83:a6:8b:0b:bc:8a:2e:de:45:0c:f9:f9:
                    ef:0e:d8:1d:ca:48:d5:af:c6:02:71:5d:5b:0c:35:
                    d6:5a:13:cc:3b:f2:9c:49:27:75:ca:aa:5a:be:37:
                    36:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:AD:AD:8D:C2:9D:9E:B2:A1:B7:B0:B5:03:0B:30:BE:E2:47:70:BB
            X509v3 Authority Key Identifier:
                keyid:EB:05:8B:C4:59:9D:A1:8E:2D:E4:09:D6:D2:76:CD:29:94:1C:7B:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/0/EB058BC4599DA18E2DE409D6D276CD29941C7B1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB058BC4599DA18E2DE409D6D276CD29941C7B1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/0/EB058BC4599DA18E2DE409D6D276CD29941C7B1A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:16:c5:76:20:06:e0:9e:75:f9:b5:57:66:d7:7c:14:12:59:
         e9:0a:66:07:10:4a:f3:9b:57:80:91:7c:1c:08:3f:77:48:bb:
         cc:2f:9c:a7:d0:ff:27:c2:bb:14:ac:cb:66:ec:4c:6c:fc:f2:
         9c:b3:c4:5d:38:11:61:0c:fd:46:4f:b6:cf:e8:c2:4c:d9:35:
         2f:1d:c7:89:ad:1f:e8:d6:23:6b:d5:68:98:c0:45:8d:7b:91:
         f3:a4:41:e0:82:25:e0:81:8c:e0:02:d1:e3:4b:86:a2:58:ae:
         31:e0:00:a3:d5:02:2a:c3:ae:0f:7c:bf:aa:97:ee:d8:8c:96:
         43:90:0c:b7:4b:7e:cc:28:d1:af:39:9a:55:72:16:e0:c9:a8:
         74:64:86:0e:75:7c:88:a4:27:81:f8:0c:82:78:bd:d7:fb:7e:
         05:15:9d:af:7f:0c:ad:8a:86:ac:e1:6f:16:e6:f0:db:50:c3:
         f0:bd:2b:be:58:9e:a7:5a:cd:5c:3e:d3:d0:06:6e:9b:74:cb:
         6c:82:bd:d7:38:43:64:72:24:9d:42:a8:4b:d4:ad:6d:5a:8f:
         84:85:80:f7:a4:f4:b9:cf:67:d2:d8:ae:7a:16:7a:20:7f:0d:
         07:82:66:b1:da:a6:cc:99:98:dd:af:ed:71:64:2c:1a:95:b7:
         15:70:40:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----