Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HmVHWjfnmLpUrRHyQfn6izxN1cCgucL4nBQY5jJox7bw/0/EB17E0694107C259FEF04A344BD07C7351A91DD2.mft
File:                     EB17E0694107C259FEF04A344BD07C7351A91DD2.mft (raw, json)
Hash identifier:          uKJcLCE5oX9dFgPJFhcnCQNVTNsub1VMRSlvf4rUsrc=
Subject key identifier:   5F:07:A8:7E:EF:CE:95:8B:94:0D:79:15:59:1C:C5:B1:15:77:25:8C
Authority key identifier: EB:17:E0:69:41:07:C2:59:FE:F0:4A:34:4B:D0:7C:73:51:A9:1D:D2
Certificate issuer:       /CN=EB17E0694107C259FEF04A344BD07C7351A91DD2
Certificate serial:       7E34DFDCFF173269C44AC6E72ADD01CA5E1BCD94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB17E0694107C259FEF04A344BD07C7351A91DD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmVHWjfnmLpUrRHyQfn6izxN1cCgucL4nBQY5jJox7bw/0/EB17E0694107C259FEF04A344BD07C7351A91DD2.mft
Manifest number:          06E4
Signing time:             Mon 08 Jan 2024 23:00:00 +0000
Manifest this update:     Mon 08 Jan 2024 22:55:00 +0000
Manifest next update:     Tue 09 Jan 2024 23:00:00 +0000
Files and hashes:         1: EB17E0694107C259FEF04A344BD07C7351A91DD2.crl (hash: c86lkJ2rVqxmj/xUnY7ZZO+nxs+NAkP/KrfhnZ7+hUM=)
                          2: 34352e3138322e3139322e302f32322d3234203d3e20323639323436.roa (hash: csPFzmNpFzUiv363f+Ab1cPwyTLUOOe6RtT7Vr9/qHs=)
                          3: 323830343a363161303a3a2f33322d3438203d3e20323639323436.roa (hash: /Zb13f+cgX9WhX3z1AoT0frgl4D8BzVehJ3/EfUi7i4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:34:df:dc:ff:17:32:69:c4:4a:c6:e7:2a:dd:01:ca:5e:1b:cd:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB17E0694107C259FEF04A344BD07C7351A91DD2
        Validity
            Not Before: Jan  8 22:55:00 2024 GMT
            Not After : Jan 15 23:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b4:12:47:e3:c0:d4:01:be:74:b3:e3:f5:3d:
                    18:df:68:a6:3a:45:b0:97:35:32:de:70:ee:4d:ff:
                    61:c1:6f:71:4c:42:d4:6a:0a:d3:55:1f:58:a2:f1:
                    b2:d7:34:71:d9:c6:15:01:37:6a:9e:eb:76:36:9b:
                    e9:80:fb:f1:f6:61:a9:46:09:05:d0:bd:02:a2:6f:
                    70:ea:9c:40:39:9a:31:d8:15:da:5e:95:7f:72:93:
                    c4:db:0e:7b:d9:49:08:d7:29:b7:74:9a:6d:56:c1:
                    ad:d5:ca:1d:4b:ee:00:b0:50:c7:11:46:d4:9b:a3:
                    3a:4b:43:c0:f6:26:c0:b2:c8:d5:36:0f:b7:4e:1a:
                    6b:eb:a1:5a:b8:ac:5a:dd:16:32:4d:bc:96:0d:a1:
                    8f:94:73:c1:0c:52:4c:20:08:f2:c9:9f:f3:18:bf:
                    f8:4d:69:9f:16:65:34:bf:5b:58:97:38:35:d2:e7:
                    1c:c5:25:b0:17:cc:ec:5f:4a:4b:a1:4e:06:af:08:
                    af:cc:e1:9e:a3:4a:cd:75:12:87:99:62:a5:c4:b3:
                    22:e9:fe:1a:39:23:71:9b:ce:24:51:cd:a3:b8:36:
                    2a:99:d4:d8:94:5e:91:be:69:e1:87:74:11:01:e5:
                    2a:6c:55:e5:69:6b:b6:bc:12:f2:4a:8a:34:9d:97:
                    6b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:07:A8:7E:EF:CE:95:8B:94:0D:79:15:59:1C:C5:B1:15:77:25:8C
            X509v3 Authority Key Identifier:
                keyid:EB:17:E0:69:41:07:C2:59:FE:F0:4A:34:4B:D0:7C:73:51:A9:1D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmVHWjfnmLpUrRHyQfn6izxN1cCgucL4nBQY5jJox7bw/0/EB17E0694107C259FEF04A344BD07C7351A91DD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB17E0694107C259FEF04A344BD07C7351A91DD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmVHWjfnmLpUrRHyQfn6izxN1cCgucL4nBQY5jJox7bw/0/EB17E0694107C259FEF04A344BD07C7351A91DD2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:bc:ca:de:e3:f1:a6:77:54:c1:46:79:72:24:ed:ad:80:8d:
         33:d7:d8:c0:f9:e2:73:a1:78:de:58:01:80:02:2e:82:94:39:
         e5:8d:d0:72:91:95:4e:a2:fb:d4:a3:c4:2f:96:90:56:aa:33:
         cd:ea:6b:b4:14:82:1d:ab:f7:d9:d7:16:e1:ed:53:bd:48:dc:
         c3:9c:93:68:30:62:17:e2:5c:fb:a1:76:35:e3:70:5f:b0:d8:
         52:af:50:31:2d:d7:8c:7e:a8:db:8f:ca:6a:b0:18:e4:81:7e:
         73:1e:60:83:a9:7f:e9:3b:6e:a3:84:e7:9d:fb:32:82:de:9b:
         ce:78:82:c6:fd:f8:62:fa:d1:2a:c7:20:15:09:43:83:bb:7b:
         c0:a9:48:c3:b1:ad:15:33:4e:8c:ca:0f:ad:bf:0e:b1:80:24:
         89:a1:dc:69:85:71:a9:52:16:57:00:5b:03:86:5f:3f:a6:8f:
         b1:c6:a9:35:05:88:36:b0:2f:ec:4c:c0:cf:6b:2e:6f:5d:07:
         af:fc:3d:9d:c1:d3:95:07:62:bd:b4:86:02:2d:7c:b3:d0:51:
         a5:8b:ef:ed:1d:0b:d4:00:9b:98:ed:98:e7:0b:ae:25:9f:6c:
         1a:57:6d:c2:93:eb:ad:a9:90:28:33:58:60:94:9b:4c:dc:e8:
         12:17:d7:ad
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----