Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5UbQ9SkZDWwvKjGWCP3D2EJWXjAeBNJ3nPSso3be6jhJ/0/22BA8C95A162C8887B9C582CAC130995742F1CEB.mft
File:                     22BA8C95A162C8887B9C582CAC130995742F1CEB.mft (raw, json)
Hash identifier:          f8Oer/+ZSZ3MGYzWsjIXdV+yFSFKKpmQyCUnf3qxPzs=
Subject key identifier:   EE:AE:8A:A9:7B:4E:F1:79:7A:30:77:76:9E:40:2D:9D:81:F5:0D:A5
Authority key identifier: 22:BA:8C:95:A1:62:C8:88:7B:9C:58:2C:AC:13:09:95:74:2F:1C:EB
Certificate issuer:       /CN=22BA8C95A162C8887B9C582CAC130995742F1CEB
Certificate serial:       2F8428B35CA6D7AD09DCFD367B1CFF5E9B7AEB93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22BA8C95A162C8887B9C582CAC130995742F1CEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5UbQ9SkZDWwvKjGWCP3D2EJWXjAeBNJ3nPSso3be6jhJ/0/22BA8C95A162C8887B9C582CAC130995742F1CEB.mft
Manifest number:          0165
Signing time:             Mon 15 Apr 2024 04:05:03 +0000
Manifest this update:     Mon 15 Apr 2024 04:00:03 +0000
Manifest next update:     Tue 16 Apr 2024 07:23:03 +0000
Files and hashes:         1: 34352e3137372e3139332e302f32342d3234203d3e20323639303330.roa (hash: AmY0SG/hjoLlGQX4Zf5kSPzIR4SIHNeWmYqFY0DDwIQ=)
                          2: 34352e3137372e3139322e302f32322d3232203d3e20323639303330.roa (hash: DGLQmX6ZdmqpYtZrf2sOlHGUU7BhgAm2CydtiLFE3cU=)
                          3: 34352e3137372e3139352e302f32342d3234203d3e20323639303330.roa (hash: 5VFC+WIRirk73lOkMiqxt9zWSLVLHrfPiqhUS9YA33Y=)
                          4: 34352e3137372e3139322e302f32342d3234203d3e20323639303330.roa (hash: LaHPclw9L6VHIZrmMfVXINtnY8z09HZdS5Y6xVHmC6E=)
                          5: 34352e3137372e3139342e302f32342d3234203d3e20323639303330.roa (hash: vgWPnsFLeyPi73dQ6Yo7svNE7/s++TQy2SjQeXLHd9I=)
                          6: 22BA8C95A162C8887B9C582CAC130995742F1CEB.crl (hash: fomeIucf/E73atxP2CxKQUEXMllK3ToXK3Wc9nOxQ8w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:84:28:b3:5c:a6:d7:ad:09:dc:fd:36:7b:1c:ff:5e:9b:7a:eb:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22BA8C95A162C8887B9C582CAC130995742F1CEB
        Validity
            Not Before: Apr 15 04:00:03 2024 GMT
            Not After : Apr 16 07:23:03 2024 GMT
        Subject: CN=EEAE8AA97B4EF1797A3077769E402D9D81F50DA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:86:a4:b9:56:74:40:70:69:12:09:85:fd:35:
                    dd:fa:a8:4a:79:df:5a:bc:9f:4f:e2:c8:f0:b2:0c:
                    23:06:fd:09:4d:34:63:0c:0d:67:ee:34:8a:23:23:
                    cf:25:cd:73:d0:07:df:fb:bf:ea:89:c3:cc:7c:c0:
                    4d:e3:c1:0f:5b:1b:6d:c4:4e:af:f8:53:d4:e1:97:
                    6f:9a:33:a5:c3:c5:fd:c3:24:f8:17:08:43:57:a8:
                    13:9b:0d:e3:0c:98:d0:7d:7c:f9:9a:eb:a2:5d:a3:
                    cc:ca:da:7a:12:39:dc:c8:ae:19:12:c1:16:32:37:
                    b6:99:de:da:c6:91:73:22:38:bb:ca:75:b8:70:2a:
                    40:cd:44:14:42:e2:2c:08:c3:d6:23:61:52:0a:11:
                    1b:5e:fb:34:b5:c1:17:da:50:e0:f4:52:be:4b:a3:
                    00:f7:91:69:ca:88:32:0c:93:d1:2f:d0:cd:34:7b:
                    e1:f9:54:8c:67:f5:ac:7e:72:d1:23:3a:95:ae:11:
                    5f:3e:eb:c7:86:58:51:a9:96:fe:81:22:20:dc:b8:
                    3f:e7:d4:53:7c:1e:59:80:94:51:40:a5:ff:9a:5f:
                    fb:9a:e4:c6:c0:dc:23:a0:ad:3d:8d:29:2a:e9:36:
                    fb:dc:72:6a:89:f8:63:82:bf:34:43:83:e3:89:cf:
                    a1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:AE:8A:A9:7B:4E:F1:79:7A:30:77:76:9E:40:2D:9D:81:F5:0D:A5
            X509v3 Authority Key Identifier:
                keyid:22:BA:8C:95:A1:62:C8:88:7B:9C:58:2C:AC:13:09:95:74:2F:1C:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5UbQ9SkZDWwvKjGWCP3D2EJWXjAeBNJ3nPSso3be6jhJ/0/22BA8C95A162C8887B9C582CAC130995742F1CEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22BA8C95A162C8887B9C582CAC130995742F1CEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5UbQ9SkZDWwvKjGWCP3D2EJWXjAeBNJ3nPSso3be6jhJ/0/22BA8C95A162C8887B9C582CAC130995742F1CEB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:73:cc:9a:f2:66:f6:85:32:c4:11:5b:ce:01:f4:5e:7f:a7:
         41:4b:58:58:43:90:ff:e2:aa:5d:eb:ac:50:8a:a6:40:b6:de:
         52:f5:1b:ed:cf:46:2f:70:80:32:4d:3f:28:e8:e1:28:b9:65:
         1f:2e:f0:ec:13:7a:a5:49:8d:67:7e:54:38:04:4d:59:6a:42:
         bf:2b:00:d4:a2:a7:62:5d:cf:b1:48:fe:1a:34:4a:ba:1f:a3:
         1a:5c:39:6a:f1:ca:fb:3e:e4:d6:4c:64:fc:a1:90:39:5f:65:
         5d:a6:ec:56:bb:de:54:65:d4:05:55:0e:98:20:aa:ba:0d:45:
         4e:51:16:cb:ee:44:c5:d4:7b:82:fc:00:ec:e2:b6:80:18:0b:
         27:a1:3b:b0:10:68:af:12:6e:6a:c3:fd:56:0f:84:84:97:f6:
         ce:22:30:cc:c0:dc:0d:ec:b0:2e:c6:07:a0:85:87:f3:0f:2d:
         86:76:0d:12:3d:a0:c2:a6:a3:6f:61:bd:c1:28:92:d6:a2:00:
         7b:d7:bf:f2:8f:5d:62:23:e0:85:98:df:a8:b1:6c:01:d0:de:
         a1:1b:21:ab:97:17:b8:73:f1:81:30:5a:45:ff:e2:0b:05:59:
         06:0d:7e:de:fe:88:5d:be:e6:41:e9:25:96:f5:db:da:25:07:
         6d:0e:6d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----