Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/0/5E949731D7EF929D5DA84BEE40B64F54667860B9.mft
File:                     5E949731D7EF929D5DA84BEE40B64F54667860B9.mft (raw, json)
Hash identifier:          wEZluJZhCAPIf0k2jW5WHuqCywcj56c537azSs2r20s=
Subject key identifier:   DD:59:4C:96:DB:30:53:51:CE:B8:B9:87:70:3F:07:04:CA:90:48:19
Authority key identifier: 5E:94:97:31:D7:EF:92:9D:5D:A8:4B:EE:40:B6:4F:54:66:78:60:B9
Certificate issuer:       /CN=5E949731D7EF929D5DA84BEE40B64F54667860B9
Certificate serial:       475D30946FB9BCECFEE37BD7377A5103967CF40E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5E949731D7EF929D5DA84BEE40B64F54667860B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/0/5E949731D7EF929D5DA84BEE40B64F54667860B9.mft
Manifest number:          0355
Signing time:             Sun 14 Apr 2024 22:07:40 +0000
Manifest this update:     Sun 14 Apr 2024 22:02:40 +0000
Manifest next update:     Tue 16 Apr 2024 00:52:40 +0000
Files and hashes:         1: 3137372e3133302e31362e302f32302d3234203d3e203532373432.roa (hash: NrCuBqVqaP3h9g+6VHGnM/Qzzu/8XTVIf7QU+RIinRY=)
                          2: 323830343a6362303a3a2f33322d3438203d3e203532373432.roa (hash: jk5BSr1EdYzNEcjq0HgC90RidggQp3IFL2f3bjitBP0=)
                          3: 5E949731D7EF929D5DA84BEE40B64F54667860B9.crl (hash: DCboYcYK4J5/KzHs707ADf2gJgeGA7cxkCV+ZJuJO9U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:5d:30:94:6f:b9:bc:ec:fe:e3:7b:d7:37:7a:51:03:96:7c:f4:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E949731D7EF929D5DA84BEE40B64F54667860B9
        Validity
            Not Before: Apr 14 22:02:40 2024 GMT
            Not After : Apr 16 00:52:40 2024 GMT
        Subject: CN=DD594C96DB305351CEB8B987703F0704CA904819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:25:d3:b0:2d:67:13:7e:21:be:1e:0a:e9:f1:
                    97:b5:5a:b1:5c:b7:4e:9d:08:aa:54:79:c9:9f:08:
                    c1:f3:d5:f6:d8:ad:a9:77:15:fe:9b:31:c6:84:5f:
                    0a:a1:25:ca:37:93:ca:b8:f1:4f:05:dc:af:fe:8e:
                    f2:3b:77:e4:0a:06:97:22:d8:1a:8f:58:7b:4b:c8:
                    c2:63:11:c1:b2:00:96:e7:d0:07:60:36:90:52:19:
                    fd:ba:5b:0c:fd:d2:db:05:33:4b:03:1f:ab:85:ae:
                    6b:f3:0a:87:fc:22:18:2a:91:06:8a:db:c7:1d:e9:
                    34:a7:55:8d:36:ac:0f:b0:84:38:8c:e9:32:a5:0e:
                    3c:49:f1:93:19:3a:f6:d8:f9:b2:db:3c:c6:ff:9a:
                    68:de:6c:3e:58:4b:ac:9c:8a:41:19:a4:b3:cb:c2:
                    cb:b6:e2:ab:b8:f3:33:09:cc:eb:6c:d2:11:6d:3c:
                    48:20:24:fc:58:f5:3b:77:81:99:cb:5a:e2:50:fc:
                    4c:7d:4e:8c:4f:66:80:54:80:00:8e:3b:f8:dd:ba:
                    ad:20:df:b9:30:6f:e9:21:72:bd:ba:90:f4:df:77:
                    d8:54:b7:11:0f:27:4e:ad:3a:6c:be:b4:b7:b2:db:
                    28:9a:ce:e8:37:83:7a:3f:25:74:ee:c2:a3:0f:4f:
                    8d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:59:4C:96:DB:30:53:51:CE:B8:B9:87:70:3F:07:04:CA:90:48:19
            X509v3 Authority Key Identifier:
                keyid:5E:94:97:31:D7:EF:92:9D:5D:A8:4B:EE:40:B6:4F:54:66:78:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/0/5E949731D7EF929D5DA84BEE40B64F54667860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5E949731D7EF929D5DA84BEE40B64F54667860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/0/5E949731D7EF929D5DA84BEE40B64F54667860B9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:ed:8f:c5:56:39:f7:24:bf:b0:3e:b3:27:78:53:82:de:24:
         3c:70:75:9d:c4:07:77:12:d1:ff:93:3c:04:90:8b:59:38:71:
         7d:40:7a:34:59:1b:68:9b:68:49:58:6a:31:d1:67:20:24:7d:
         86:f7:27:d1:4b:8e:f6:86:93:78:6d:64:7b:f5:23:98:a5:69:
         49:c7:1e:fb:3c:c3:17:ee:51:72:7f:4f:f5:09:4e:92:43:83:
         55:a0:54:3b:3c:2c:cf:a9:aa:20:5c:8f:1b:06:52:46:4c:e2:
         ad:ea:35:dd:42:00:c3:37:07:51:6b:76:4d:7e:ab:ba:2a:61:
         c8:f3:7f:a2:00:9b:c9:af:5a:e5:54:22:c4:23:22:e1:62:13:
         82:ab:75:4f:4b:fc:2c:0b:ee:52:c2:6f:d0:28:d9:cb:f3:4b:
         e0:71:4e:eb:a0:09:1a:3c:9c:42:d5:76:7b:1e:fd:ab:b7:83:
         9f:dd:a7:bd:52:ed:14:06:d8:d1:72:43:d5:c8:ed:3e:3a:af:
         2f:e0:c7:1d:99:1a:d7:dc:45:45:81:21:66:77:30:ef:c7:de:
         98:33:57:cd:d8:47:82:86:ce:7f:0e:0a:87:a5:da:ea:24:39:
         cf:30:dd:83:ac:4c:77:89:7e:cf:2d:cf:eb:c2:8e:20:32:b9:
         4b:8b:1b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----