Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/5C908AE2A50DFF743C0A2B041FD20DD3BC047668.mft
File:                     5C908AE2A50DFF743C0A2B041FD20DD3BC047668.mft (raw, json)
Hash identifier:          ldbMyPcvoyuNsgvpwfrDZpp3fTV499KwDfSxTVDMMlc=
Subject key identifier:   AA:1C:1A:8F:05:E7:61:45:E3:E7:AF:59:74:3E:91:1B:16:42:90:7C
Authority key identifier: 5C:90:8A:E2:A5:0D:FF:74:3C:0A:2B:04:1F:D2:0D:D3:BC:04:76:68
Certificate issuer:       /CN=5C908AE2A50DFF743C0A2B041FD20DD3BC047668
Certificate serial:       5C84C7A7FF421AEDBB48B2F47C054C139CF655EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C908AE2A50DFF743C0A2B041FD20DD3BC047668.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/5C908AE2A50DFF743C0A2B041FD20DD3BC047668.mft
Manifest number:          04F9
Signing time:             Mon 15 Apr 2024 04:44:11 +0000
Manifest this update:     Mon 15 Apr 2024 04:39:11 +0000
Manifest next update:     Tue 16 Apr 2024 05:19:11 +0000
Files and hashes:         1: 3137372e3138352e3234302e302f32312d3231203d3e20323633363233.roa (hash: 3xOhNEpKradudh3FnsquxUqMY235AA+fhB10KATej4c=)
                          2: 3137372e3138352e3234302e302f32302d3332203d3e20323633363233.roa (hash: Vb9CDibMVdwVqOG5bDjS5Rb1+mVF4SgXJNROObWI7WA=)
                          3: 5C908AE2A50DFF743C0A2B041FD20DD3BC047668.crl (hash: tRbF83MCvIK5KlCpJe5X12e1ac1fJZTWQx6PWfBdeNc=)
                          4: 323830343a313032633a3a2f33322d3334203d3e20323633363233.roa (hash: 1RM3ZwEuYuuNpmYhDFWK1mWEWtfdna/uqyFNwL/X/F8=)
                          5: 3137372e3138352e3234382e302f32332d3234203d3e20323633363233.roa (hash: CuBB9mNOw5Qu884lG06rb+xgLkniIqFkSuQiiVS1HV8=)
                          6: 3134332e3235352e34342e302f32322d3332203d3e20323633363233.roa (hash: kD/mcCblsKi+MJ582MghJE0uyPEo48jKT8Z6FpMVNqw=)
                          7: 3137372e3138352e3234382e302f32312d3231203d3e20323633363233.roa (hash: kg5SNUPQxNTvXgpzeosS5ruXXsu2zJ+Z3a0Z00/ne5g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:84:c7:a7:ff:42:1a:ed:bb:48:b2:f4:7c:05:4c:13:9c:f6:55:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C908AE2A50DFF743C0A2B041FD20DD3BC047668
        Validity
            Not Before: Apr 15 04:39:11 2024 GMT
            Not After : Apr 16 05:19:11 2024 GMT
        Subject: CN=AA1C1A8F05E76145E3E7AF59743E911B1642907C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:17:5f:15:b6:86:fe:b1:c1:c9:42:a3:e8:89:
                    af:7d:a0:0f:42:27:d9:87:22:ad:b9:f8:6a:cb:fa:
                    63:67:f1:2f:3e:a2:b9:84:af:48:e1:65:87:b3:ca:
                    78:49:b1:d1:98:a7:c2:1b:9a:c4:7a:60:7b:61:91:
                    c6:85:df:ce:43:32:00:d3:d6:70:50:de:85:f8:30:
                    c4:ad:91:12:54:10:7b:9a:1c:0a:f6:af:2f:5b:65:
                    03:1e:df:af:d3:b6:66:c9:72:74:f4:80:a5:99:37:
                    3d:8d:7c:32:24:1e:46:6f:33:ff:89:32:41:39:b0:
                    dd:7e:5c:a7:db:56:b3:cc:c9:d3:e9:27:20:c6:bd:
                    42:08:27:3d:bb:fc:55:42:45:19:f8:ed:99:c4:da:
                    f5:65:ed:c8:d7:e5:4c:3f:23:00:c9:0d:3a:42:43:
                    d6:9c:ad:df:a9:74:59:98:80:98:85:ce:17:ad:2e:
                    44:7e:e9:cc:d8:20:34:de:cf:30:b9:2b:81:29:16:
                    6a:89:25:99:1b:7e:aa:76:31:22:9c:be:01:f4:72:
                    82:56:5b:6b:19:ec:49:d6:22:18:00:9d:c7:be:d7:
                    0d:a3:d8:7d:d4:e8:34:4e:75:91:78:f4:55:96:72:
                    3f:e5:41:52:ff:b6:35:b0:9a:97:68:1b:a2:c1:01:
                    4c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:1C:1A:8F:05:E7:61:45:E3:E7:AF:59:74:3E:91:1B:16:42:90:7C
            X509v3 Authority Key Identifier:
                keyid:5C:90:8A:E2:A5:0D:FF:74:3C:0A:2B:04:1F:D2:0D:D3:BC:04:76:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/5C908AE2A50DFF743C0A2B041FD20DD3BC047668.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C908AE2A50DFF743C0A2B041FD20DD3BC047668.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/5C908AE2A50DFF743C0A2B041FD20DD3BC047668.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:7b:e6:56:ea:50:b3:12:3c:d2:b9:89:97:ba:8f:61:cb:ac:
         4d:79:47:56:3e:bb:81:de:2c:10:6c:38:73:54:a8:97:c7:65:
         20:9d:25:43:61:0f:3f:c2:ba:0e:9b:54:44:85:57:f0:ab:25:
         e5:c1:ba:0c:36:09:3d:da:26:ce:d2:94:36:1f:a8:01:a8:e8:
         5c:cf:70:b5:52:79:e5:06:05:c7:c1:77:d4:5d:3e:2b:24:61:
         8d:58:95:ce:44:0d:7d:20:79:ac:03:e0:ef:d7:c8:69:5c:d1:
         84:53:83:3f:82:5a:0a:20:0d:72:c1:0b:8a:25:52:f2:a1:dd:
         9c:10:8e:82:f8:5f:83:8a:ab:c5:37:f2:ce:db:4c:cf:b4:42:
         5c:41:b1:0e:97:a1:0c:ef:85:1e:78:f1:a2:d4:3a:a8:4f:8c:
         88:25:ed:08:be:52:4a:7e:fc:eb:70:2e:bc:ef:3a:6f:11:7f:
         60:5c:de:94:a7:37:fb:77:8a:f1:64:87:79:50:1d:34:2c:c9:
         24:49:17:80:3d:69:a8:d4:72:93:07:26:c0:f1:d7:76:af:5d:
         15:ed:4a:0d:b3:13:21:8c:4e:d0:65:f2:f9:ab:f0:6a:c1:96:
         14:0e:9c:e4:6f:e3:72:e8:25:03:21:2b:a6:85:cd:1d:3f:58:
         37:96:78:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----