Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5Jd5fpkjeDmi1tz2qY1Bet6rHRiCfAWVQd64gr6MYK2m/0/D24F0FB8CCC9129B5EE6F1E7DF8184CC34C42C2A.mft
File:                     D24F0FB8CCC9129B5EE6F1E7DF8184CC34C42C2A.mft (raw, json)
Hash identifier:          Fq3codfjiIF6Sw+2W/XaFXQXZBOCmVTPNeQBimSF5IQ=
Subject key identifier:   CA:53:AC:EB:25:F6:48:FE:00:88:FC:9E:76:95:56:0E:41:97:D7:CA
Authority key identifier: D2:4F:0F:B8:CC:C9:12:9B:5E:E6:F1:E7:DF:81:84:CC:34:C4:2C:2A
Certificate issuer:       /CN=D24F0FB8CCC9129B5EE6F1E7DF8184CC34C42C2A
Certificate serial:       0A54E17ECF96FB0F3B7AA1B39C6B8832B8A51FAD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D24F0FB8CCC9129B5EE6F1E7DF8184CC34C42C2A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Jd5fpkjeDmi1tz2qY1Bet6rHRiCfAWVQd64gr6MYK2m/0/D24F0FB8CCC9129B5EE6F1E7DF8184CC34C42C2A.mft
Manifest number:          4B
Signing time:             Mon 15 Apr 2024 07:20:00 +0000
Manifest this update:     Mon 15 Apr 2024 07:15:00 +0000
Manifest next update:     Tue 16 Apr 2024 07:20:00 +0000
Files and hashes:         1: 3137372e32332e34342e302f32342d3234203d3e20323633303338.roa (hash: aRFDfwZiCf0pTngBgt/PgwUDLCaAURvka+k2Q5L3Ai4=)
                          2: 3137372e32332e34302e302f32312d3231203d3e20323633303338.roa (hash: opaTynSyYuHYvRD4JK7a+zXOAcgtkI1wgKSQLnLkUeQ=)
                          3: 3137372e32332e34332e302f32342d3234203d3e20323633303338.roa (hash: DwpnMt6lyfNbPEqYByKicweqpGTH6yCx42Z0XQmBnho=)
                          4: D24F0FB8CCC9129B5EE6F1E7DF8184CC34C42C2A.crl (hash: XY1djK4i0ve8/JmtzHit93G0qtECw2tRW4uKYENOwI8=)
                          5: 3137372e32332e34372e302f32342d3234203d3e20323633303338.roa (hash: PJ8nhgWEDUMYqQhl1wnLfLpw+pMceDowzY5sB6Nh954=)
                          6: 3137372e32332e34352e302f32342d3234203d3e20323633303338.roa (hash: qfRYfylNB5FBGw+yUfYtmxR+UHOr1cD4gvp1+l/Tujk=)
                          7: 3137372e32332e34312e302f32342d3234203d3e20323633303338.roa (hash: 4K0lsx3QsL+QNEirq/U24WjfyDQZWDaF+004iShU/jo=)
                          8: 3137372e32332e34362e302f32342d3234203d3e20323633303338.roa (hash: d90jSg8WbawR9F5ZX/GffRWuJrujAj8Q8zC2WL2zQyM=)
                          9: 3137372e32332e34322e302f32342d3234203d3e20323633303338.roa (hash: jF408B5OWnqSgWwnVdEWm8nUj42/ryegaIcqlT+Pbc0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:54:e1:7e:cf:96:fb:0f:3b:7a:a1:b3:9c:6b:88:32:b8:a5:1f:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D24F0FB8CCC9129B5EE6F1E7DF8184CC34C42C2A
        Validity
            Not Before: Apr 15 07:15:00 2024 GMT
            Not After : Apr 22 07:20:00 2024 GMT
        Subject: CN=3082010A0282010100B202707005EFD52CDF1F0A0972DBCEF80B8FB87C26E87471E5D6A0E3F617DB510B4FA715F7EE387DC55E2569FD98629DAF28F6AB212DF552B89C1B38246BB26CC746A87413C62D497B67048E2E6AB7D4783318C0D1CB304F503892FC66FECE1B7B206BEE852BAE8E1F77DC2ACECC8486256F13C9C058441F62BF590946B9CC6EB5952C34C58C4FDAACA81D043E30C4180AA0F442C4D113AB7273C11C990A7824C9397B3EA9554CACE70C69ED5D61F207F36B4D9F6AFD8DC4743124E67E77351A6B6C4C810719A34813370B5A258F495429355AA9A7DAA5AADA0FD206A266823EEE6CB3760F69AD28B71C4C9EB466F84437BCBFAFD1A8BF04C9E12BEC771ED7930203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:02:70:70:05:ef:d5:2c:df:1f:0a:09:72:db:
                    ce:f8:0b:8f:b8:7c:26:e8:74:71:e5:d6:a0:e3:f6:
                    17:db:51:0b:4f:a7:15:f7:ee:38:7d:c5:5e:25:69:
                    fd:98:62:9d:af:28:f6:ab:21:2d:f5:52:b8:9c:1b:
                    38:24:6b:b2:6c:c7:46:a8:74:13:c6:2d:49:7b:67:
                    04:8e:2e:6a:b7:d4:78:33:18:c0:d1:cb:30:4f:50:
                    38:92:fc:66:fe:ce:1b:7b:20:6b:ee:85:2b:ae:8e:
                    1f:77:dc:2a:ce:cc:84:86:25:6f:13:c9:c0:58:44:
                    1f:62:bf:59:09:46:b9:cc:6e:b5:95:2c:34:c5:8c:
                    4f:da:ac:a8:1d:04:3e:30:c4:18:0a:a0:f4:42:c4:
                    d1:13:ab:72:73:c1:1c:99:0a:78:24:c9:39:7b:3e:
                    a9:55:4c:ac:e7:0c:69:ed:5d:61:f2:07:f3:6b:4d:
                    9f:6a:fd:8d:c4:74:31:24:e6:7e:77:35:1a:6b:6c:
                    4c:81:07:19:a3:48:13:37:0b:5a:25:8f:49:54:29:
                    35:5a:a9:a7:da:a5:aa:da:0f:d2:06:a2:66:82:3e:
                    ee:6c:b3:76:0f:69:ad:28:b7:1c:4c:9e:b4:66:f8:
                    44:37:bc:bf:af:d1:a8:bf:04:c9:e1:2b:ec:77:1e:
                    d7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:53:AC:EB:25:F6:48:FE:00:88:FC:9E:76:95:56:0E:41:97:D7:CA
            X509v3 Authority Key Identifier:
                keyid:D2:4F:0F:B8:CC:C9:12:9B:5E:E6:F1:E7:DF:81:84:CC:34:C4:2C:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Jd5fpkjeDmi1tz2qY1Bet6rHRiCfAWVQd64gr6MYK2m/0/D24F0FB8CCC9129B5EE6F1E7DF8184CC34C42C2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D24F0FB8CCC9129B5EE6F1E7DF8184CC34C42C2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Jd5fpkjeDmi1tz2qY1Bet6rHRiCfAWVQd64gr6MYK2m/0/D24F0FB8CCC9129B5EE6F1E7DF8184CC34C42C2A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:78:4a:e8:ca:88:70:41:dc:73:bf:9a:b7:7d:e2:cf:fd:3a:
         bd:66:25:8e:c2:93:ac:b7:31:a0:78:64:0a:68:d1:50:60:a9:
         68:33:9f:81:7d:82:53:e8:74:18:e5:6d:45:26:ce:4d:9d:d0:
         73:ac:42:00:47:03:85:41:86:51:2e:49:c2:0c:34:38:2b:f4:
         3d:e2:e3:5f:28:b2:08:cf:2d:a0:97:fa:ea:ee:bc:da:54:a8:
         96:15:97:17:65:2a:c6:bc:72:d1:af:02:30:ea:dd:ae:02:ab:
         f8:93:b6:07:02:55:50:87:96:f0:9f:a1:8f:42:a3:f2:c1:11:
         0d:ca:91:5e:de:69:b2:60:9e:59:9f:75:97:09:51:9d:60:b4:
         87:8a:ac:24:ff:e0:2f:07:7c:72:80:a3:23:78:44:8d:b7:61:
         d2:23:54:bd:95:d4:9c:84:2a:8e:e9:49:8e:e4:73:7b:9f:6f:
         ca:d7:f4:9b:84:b2:18:b5:00:ce:d1:d3:9f:9c:f5:31:61:36:
         78:7c:c6:5d:5a:83:04:50:cb:70:a1:8a:41:36:f8:01:88:08:
         94:74:2f:ba:57:95:c7:bd:dd:ea:90:8d:e3:2a:0f:aa:45:84:
         b5:a4:ba:82:99:f7:15:6a:1a:07:95:56:01:be:bd:9d:2c:74:
         b3:4e:e0:88
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----