Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/0/53DBD8550574BFB1767083FAD3A327CD5351750E.mft
File:                     53DBD8550574BFB1767083FAD3A327CD5351750E.mft (raw, json)
Hash identifier:          zeG6IqsEupAr+1lcL4nNIV8oC4xF+crLmIY7jxIdFx4=
Subject key identifier:   16:F5:9B:88:61:78:AE:3B:E4:CC:A7:EB:06:5F:D8:97:71:FC:22:76
Authority key identifier: 53:DB:D8:55:05:74:BF:B1:76:70:83:FA:D3:A3:27:CD:53:51:75:0E
Certificate issuer:       /CN=53DBD8550574BFB1767083FAD3A327CD5351750E
Certificate serial:       1D46638C1E07158E67CEA5FA10AE3760A3A67816
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53DBD8550574BFB1767083FAD3A327CD5351750E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/0/53DBD8550574BFB1767083FAD3A327CD5351750E.mft
Manifest number:          02D4
Signing time:             Sun 14 Apr 2024 22:17:09 +0000
Manifest this update:     Sun 14 Apr 2024 22:12:09 +0000
Manifest next update:     Mon 15 Apr 2024 23:18:09 +0000
Files and hashes:         1: 3137302e302e3230382e302f32322d3234203d3e20323633393139.roa (hash: d66dbuDR47wZyRw7Mxm6eiq7qicUguK771CokoJTvi4=)
                          2: 323830343a323762633a3a2f33322d3438203d3e20323633393139.roa (hash: MwBRDpRCZhkfevGbBx5VZ6a71vdx5CZuKT85D/FJIpI=)
                          3: 3133382e3138352e3233362e302f32322d3234203d3e20323633393139.roa (hash: gtO7u7SaGXt743Dz5i77WGX0ChBE8JgzK4kWy+YfAns=)
                          4: 53DBD8550574BFB1767083FAD3A327CD5351750E.crl (hash: 0Mjje5QkmZ6bc2tGtXAZLMVPld2RARR8HJFd9uqOTFg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:46:63:8c:1e:07:15:8e:67:ce:a5:fa:10:ae:37:60:a3:a6:78:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53DBD8550574BFB1767083FAD3A327CD5351750E
        Validity
            Not Before: Apr 14 22:12:09 2024 GMT
            Not After : Apr 15 23:18:09 2024 GMT
        Subject: CN=16F59B886178AE3BE4CCA7EB065FD89771FC2276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:55:61:b4:86:5e:ae:b2:ca:47:a9:c5:de:bd:
                    7d:eb:fe:71:27:4d:f9:0e:f7:9a:04:74:c9:62:7e:
                    e6:6e:a5:9e:fc:04:a1:d0:19:5d:6f:24:81:04:59:
                    c4:da:a1:42:15:36:f9:d4:03:71:24:73:d7:45:7a:
                    3c:65:26:69:58:03:e1:7c:33:ff:cc:c1:51:81:fc:
                    46:c6:ef:ee:a4:59:c5:6a:d9:12:c8:d8:c1:ee:25:
                    4a:e8:36:2e:81:ac:0a:9d:e1:b2:9b:8a:6d:d3:9d:
                    7a:67:d1:8e:21:80:f8:89:4a:88:f1:d2:ea:38:c3:
                    e5:66:ba:1b:81:eb:99:09:f0:58:c9:ee:d6:07:6e:
                    2f:a0:e6:22:c7:ad:dd:ad:cc:0f:75:4c:71:fe:18:
                    2a:4d:2f:06:f2:fd:13:ba:57:63:b4:8f:65:25:53:
                    61:9d:9f:e5:24:88:47:56:38:97:b2:76:53:24:eb:
                    dc:da:b2:0e:67:b5:4b:56:e8:bc:ba:dd:da:59:ac:
                    c6:04:63:24:9b:d6:d8:16:63:0b:f6:51:f1:a5:aa:
                    5c:03:73:29:b9:05:dc:d2:f6:a4:48:0f:da:60:af:
                    4a:f0:d6:4d:98:98:ed:40:83:62:c5:93:89:43:2a:
                    65:e9:e8:89:b4:18:4a:85:2b:28:48:80:3a:af:01:
                    c9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F5:9B:88:61:78:AE:3B:E4:CC:A7:EB:06:5F:D8:97:71:FC:22:76
            X509v3 Authority Key Identifier:
                keyid:53:DB:D8:55:05:74:BF:B1:76:70:83:FA:D3:A3:27:CD:53:51:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/0/53DBD8550574BFB1767083FAD3A327CD5351750E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53DBD8550574BFB1767083FAD3A327CD5351750E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/0/53DBD8550574BFB1767083FAD3A327CD5351750E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:4a:5c:80:86:76:42:40:fe:6a:42:94:96:61:35:8d:82:ce:
         fd:12:a9:10:bb:91:17:ce:51:e8:22:e4:f8:21:0b:27:4c:98:
         c6:60:85:fd:43:c0:58:af:72:1c:c4:b5:9e:52:2d:63:19:09:
         e0:24:75:6d:a6:f9:be:1e:3f:e4:34:88:61:b8:2f:7b:cb:b4:
         35:cc:a7:48:5c:06:99:dc:98:d7:a9:23:45:ca:76:f3:7e:a4:
         fb:b9:3b:44:ef:77:8d:c8:b7:f2:d3:ae:b2:90:19:e2:8e:4e:
         be:25:c6:43:46:50:19:82:e6:c6:fd:a2:ba:d5:14:43:b1:42:
         e3:bb:a0:2a:5f:d0:a1:ac:71:d3:a4:fa:2f:11:7d:e4:9f:f5:
         86:a7:32:aa:b1:47:49:9f:17:84:ca:43:5a:0b:5f:86:d0:f9:
         fc:b3:b5:ee:dd:92:a2:d9:00:ce:80:f7:5e:11:e5:aa:fa:1e:
         40:61:fd:b1:a0:8e:e5:cd:f1:ee:16:1d:fc:52:4a:7e:23:f3:
         46:6f:43:15:dd:c0:53:11:bf:4e:59:f2:22:9f:9c:28:f1:f8:
         7f:f2:5c:eb:47:f9:26:f4:8d:e9:89:07:fa:07:50:a6:5a:85:
         4b:60:db:2f:99:0d:a2:88:46:ef:73:88:ff:79:a7:8c:00:36:
         0b:18:4c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----