Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/8E443FD1F05F76E9C306FEF6685D2F4527493550.mft
File:                     8E443FD1F05F76E9C306FEF6685D2F4527493550.mft (raw, json)
Hash identifier:          5SGTo5BbNg+3PwKw7PyoQnwiFlgYAyquvMAJ7AmE9sM=
Subject key identifier:   29:76:C6:80:C1:4D:CD:44:2D:E3:DF:2F:70:E6:6B:A0:DF:67:C9:4F
Authority key identifier: 8E:44:3F:D1:F0:5F:76:E9:C3:06:FE:F6:68:5D:2F:45:27:49:35:50
Certificate issuer:       /CN=8E443FD1F05F76E9C306FEF6685D2F4527493550
Certificate serial:       03B4BF1BB511D6B215E2BB6904DE7590FD8D4F74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E443FD1F05F76E9C306FEF6685D2F4527493550.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/8E443FD1F05F76E9C306FEF6685D2F4527493550.mft
Manifest number:          0623
Signing time:             Sun 14 Apr 2024 21:07:53 +0000
Manifest this update:     Sun 14 Apr 2024 21:02:53 +0000
Manifest next update:     Mon 15 Apr 2024 21:58:53 +0000
Files and hashes:         1: 8E443FD1F05F76E9C306FEF6685D2F4527493550.crl (hash: MFXBY7OP/5by2tW94SeOhHz51CeieJNrzqUtkphAnCM=)
                          2: 3138392e31342e3230382e302f32302d3234203d3e203238333238.roa (hash: EF5bati0o+TgFEOw3Dqwdi+fxG6MjDsiCfPcSGY/k6Q=)
                          3: 323830343a3637343a3a2f33322d3333203d3e203238333238.roa (hash: RFrNy/mGGbzjzujsPvzsGs3LnnjgOxWfP5Wg21n6R7k=)
                          4: 323830343a3637343a3130303a3a2f34302d3430203d3e203238333238.roa (hash: I7fa4c3CBJv+q/Z4itxIdbQzVPIxJ8Aab8ZUj8Jgb6M=)
                          5: 3138392e31342e3139322e302f31392d3230203d3e203238333238.roa (hash: vHbSzn0Z5ES4D5L3/j2eXgufwqiojOHo5KzPurc8nRo=)
                          6: 323830343a3637343a383030303a3a2f34302d3430203d3e203238333238.roa (hash: FxMLoBi7uonDf9IMAzN/eXcYBVqFqW9lf7Ar3g/IrEU=)
                          7: 3138392e31342e3139322e302f32302d3234203d3e203238333238.roa (hash: eaVgWYa2om2OqTXWMX4LzxKrTcDBWybyPz/laAkBFDc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:b4:bf:1b:b5:11:d6:b2:15:e2:bb:69:04:de:75:90:fd:8d:4f:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E443FD1F05F76E9C306FEF6685D2F4527493550
        Validity
            Not Before: Apr 14 21:02:53 2024 GMT
            Not After : Apr 15 21:58:53 2024 GMT
        Subject: CN=2976C680C14DCD442DE3DF2F70E66BA0DF67C94F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f6:9d:fc:43:f8:57:bf:b9:4f:ad:d9:d9:99:
                    bd:2d:77:79:b0:47:3c:c0:f4:0b:b2:5a:18:84:1a:
                    e9:2a:71:ac:10:bd:56:2b:55:a7:66:2b:b2:d4:95:
                    2f:aa:05:7f:79:82:2a:22:a7:bd:96:00:7b:d4:5c:
                    4b:14:61:40:be:82:5a:60:17:6e:cb:dc:5d:75:61:
                    0d:81:86:ab:f1:1f:bb:d4:68:1f:ac:1a:a0:2f:c3:
                    13:ce:79:e7:d8:6d:2b:01:74:0a:18:7b:f5:db:79:
                    a9:e9:f1:6e:84:5d:92:4f:a6:60:89:85:88:d4:e9:
                    90:6d:43:54:3d:5e:55:39:6b:fa:12:5d:70:eb:1b:
                    d4:a4:9a:47:c6:ce:61:1a:16:93:2d:7e:99:3a:37:
                    57:6d:c9:4b:7f:2a:fc:1e:28:40:82:ed:6c:7c:23:
                    e5:dc:cd:84:97:5f:a3:be:91:a5:08:8d:d7:bf:bf:
                    81:9f:54:e4:84:c0:f0:20:3f:c4:ed:78:88:04:67:
                    d3:2f:dc:78:4f:f1:1e:9a:8b:8d:a0:c2:ab:ad:17:
                    6f:7a:d8:14:ea:74:39:cb:20:6b:89:29:6b:17:97:
                    d2:11:33:24:cb:77:df:4f:03:ea:d5:c3:a5:d0:25:
                    1d:52:ec:cd:f5:7b:03:f2:34:02:76:bb:fb:da:40:
                    82:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:76:C6:80:C1:4D:CD:44:2D:E3:DF:2F:70:E6:6B:A0:DF:67:C9:4F
            X509v3 Authority Key Identifier:
                keyid:8E:44:3F:D1:F0:5F:76:E9:C3:06:FE:F6:68:5D:2F:45:27:49:35:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/8E443FD1F05F76E9C306FEF6685D2F4527493550.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E443FD1F05F76E9C306FEF6685D2F4527493550.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/8E443FD1F05F76E9C306FEF6685D2F4527493550.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:4e:ed:29:f1:05:c6:7e:42:6a:a7:9a:52:79:de:a6:9d:db:
         5a:0f:a2:eb:6f:26:8b:5a:95:2f:0a:64:9e:75:d8:6d:a1:3a:
         8c:be:92:43:1f:21:d4:9c:be:3f:7b:34:2f:0b:3f:84:ce:c7:
         4a:27:d4:71:a8:fa:4e:ac:43:87:ff:1c:e1:80:29:1b:e7:42:
         28:a1:6f:ea:22:cc:37:f9:ba:ff:09:a5:9e:94:88:f4:2b:06:
         7b:21:df:b6:d1:6e:66:84:fd:1c:eb:6d:fb:84:52:4e:7b:79:
         b5:97:06:3e:15:1a:6e:44:83:f0:fa:d4:33:5e:c9:d4:4f:a0:
         c6:60:53:30:e0:e4:d2:c3:9c:4c:6b:87:5f:e1:f4:21:aa:37:
         b3:ba:01:fa:c2:13:46:c0:60:e6:1d:28:90:c1:a9:6c:a0:17:
         45:de:2e:13:e9:1a:20:46:16:c0:ab:36:ca:d7:cf:99:9a:1b:
         28:d6:76:f5:94:aa:1e:3b:fd:11:95:d9:3f:e5:80:70:42:6e:
         94:5b:2f:88:45:fa:a5:1b:4b:f3:e8:64:e9:27:34:69:4a:44:
         50:33:04:9b:aa:b5:3e:be:2a:18:c1:1c:b6:0b:31:0e:6c:9a:
         2d:6c:59:db:09:76:66:f2:1b:3f:7e:5d:03:72:a0:52:66:a7:
         07:b5:c7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----