Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/0/E6884DDE2F5B2C7B995B400D56CF93DB81460987.mft
File:                     E6884DDE2F5B2C7B995B400D56CF93DB81460987.mft (raw, json)
Hash identifier:          x52BOlBQ67+CE3mViaIDs0MMOWwhzuTZcQ5HnnoWIFQ=
Subject key identifier:   2E:01:DD:15:5E:E2:33:38:C9:EC:0F:F6:7F:6D:2A:48:E0:56:C5:E6
Authority key identifier: E6:88:4D:DE:2F:5B:2C:7B:99:5B:40:0D:56:CF:93:DB:81:46:09:87
Certificate issuer:       /CN=E6884DDE2F5B2C7B995B400D56CF93DB81460987
Certificate serial:       687BE82DE39117505F217293357E8A8310E7BB01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6884DDE2F5B2C7B995B400D56CF93DB81460987.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/0/E6884DDE2F5B2C7B995B400D56CF93DB81460987.mft
Manifest number:          08
Signing time:             Thu 12 Jan 2023 10:25:33 +0000
Manifest this update:     Thu 12 Jan 2023 10:20:33 +0000
Manifest next update:     Fri 13 Jan 2023 14:13:33 +0000
Files and hashes:         1: E6884DDE2F5B2C7B995B400D56CF93DB81460987.crl (hash: KStZ7hOg8TJxKwI0jbwUmZWvP1SxxGRZWLPNutWVU0A=)
                          2: 3136372e3235302e36382e302f32322d3233203d3e20323635323035.roa (hash: RLhzmyvt8jxSVj1tWXY709AcbrgQ+03p1+rjl0AHci4=)
                          3: 3136372e3235302e36392e302f32342d3234203d3e20323635323035.roa (hash: 7DVNGUdhmjtKze0mnFbK8Po6r3EEp0OKiu0czul+HS4=)
                          4: 323830343a326333633a3a2f33322d3335203d3e20323635323035.roa (hash: 95RHgd+/eZ+dlKOPB2LQApC/D3NunFkHb/OGr7aiSj4=)
                          5: 3136372e3235302e37302e302f32342d3234203d3e20323635323035.roa (hash: P/VT/0EMlfUtyIto/wDp4y9fBs2b1Tj82P0nrM1RRnU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:7b:e8:2d:e3:91:17:50:5f:21:72:93:35:7e:8a:83:10:e7:bb:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6884DDE2F5B2C7B995B400D56CF93DB81460987
        Validity
            Not Before: Jan 12 10:20:33 2023 GMT
            Not After : Jan 13 14:13:33 2023 GMT
        Subject: CN=2E01DD155EE23338C9EC0FF67F6D2A48E056C5E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ff:38:24:3a:fd:08:d6:9c:1b:68:4a:33:d0:
                    b2:35:e8:2a:7b:8b:66:37:19:0e:0a:b7:8f:c6:54:
                    d1:25:ca:cd:ac:d5:11:00:e3:0a:21:ec:95:17:97:
                    ea:83:81:e6:20:60:e0:4d:ad:67:3c:2d:09:15:3b:
                    0d:f6:32:d6:2f:05:2c:12:47:3f:8f:9f:eb:21:84:
                    b0:9d:c1:92:a1:cd:2b:91:a5:1b:fa:0c:1c:48:87:
                    53:5f:a1:fc:0f:f1:33:80:1b:b6:89:72:f1:6d:90:
                    34:4b:49:bd:7c:e7:53:ae:af:dd:55:8b:b8:1f:2d:
                    92:5a:59:fc:40:ac:3c:57:d4:8f:8f:08:24:f4:50:
                    04:90:80:c3:7e:4e:28:04:ff:97:9a:54:64:8e:5e:
                    08:a8:2a:f6:51:19:1c:29:b5:40:10:f3:14:95:a3:
                    0f:d4:42:82:34:be:0e:c8:96:13:0b:67:00:03:93:
                    b8:d2:a8:87:b5:a5:5e:73:d0:06:20:b2:29:f9:c0:
                    99:2e:4a:09:07:c4:4d:ba:29:b5:42:45:1e:33:4b:
                    9a:70:f9:08:00:96:50:47:fd:6a:e7:cc:72:ea:c9:
                    13:1d:ba:85:d0:8a:e9:41:e5:5d:eb:4f:b8:04:1f:
                    58:f3:ba:43:78:0b:32:ad:3f:a7:b1:ea:aa:da:6e:
                    1c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:01:DD:15:5E:E2:33:38:C9:EC:0F:F6:7F:6D:2A:48:E0:56:C5:E6
            X509v3 Authority Key Identifier:
                keyid:E6:88:4D:DE:2F:5B:2C:7B:99:5B:40:0D:56:CF:93:DB:81:46:09:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/0/E6884DDE2F5B2C7B995B400D56CF93DB81460987.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6884DDE2F5B2C7B995B400D56CF93DB81460987.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/0/E6884DDE2F5B2C7B995B400D56CF93DB81460987.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:17:52:d2:1d:d9:ef:31:85:c5:c6:62:ef:80:5b:6e:4d:e9:
         53:b0:5c:f9:a3:0d:c6:c2:f6:e9:6e:b2:d5:4c:ff:d0:38:80:
         fe:ef:5f:0b:64:55:50:ca:80:33:87:15:aa:da:12:cf:48:a7:
         c1:9b:74:a0:a3:94:6c:26:31:05:9e:64:b2:23:44:75:7c:6a:
         53:d1:5c:89:7d:70:80:94:ef:e3:3e:27:c8:fe:67:31:d0:4b:
         49:2d:b9:ac:73:e3:31:c9:21:0c:19:fa:5b:98:2f:88:e5:3d:
         4f:08:a0:06:83:81:39:a3:f0:ad:14:06:20:54:fa:c5:6a:92:
         fd:b5:02:23:a3:23:f9:00:00:b5:30:6b:9a:45:c5:e6:a4:a7:
         b1:d1:6c:d4:ce:11:b9:9e:ca:5a:eb:b1:79:95:06:30:9f:8d:
         a4:92:90:fa:47:85:3e:cb:27:fa:75:96:f3:d5:4e:b8:4b:1b:
         52:6c:8e:9d:45:39:c1:25:35:20:ec:25:ba:b0:b4:69:8b:67:
         25:68:40:30:a7:72:32:15:50:0a:b0:66:a0:53:37:1d:49:0a:
         3c:3d:ec:eb:e1:41:ad:40:17:c6:01:c9:fd:39:40:1a:96:91:
         69:17:15:cf:af:80:84:51:6d:ed:30:c0:7f:78:22:e6:fc:22:
         0a:0e:d0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----