Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/0/D213ED718EDA94FF7D0326E32CDA595A1F8CBC0C.mft
File:                     D213ED718EDA94FF7D0326E32CDA595A1F8CBC0C.mft (raw, json)
Hash identifier:          0k/pZ9dSC2LAaj/lWvjM/Kj5wIjgOck/Q/NHIKmGxUM=
Subject key identifier:   E3:A0:3A:3D:EC:3E:A8:EC:A4:7B:98:A2:5F:36:C2:78:DB:D6:0F:0E
Authority key identifier: D2:13:ED:71:8E:DA:94:FF:7D:03:26:E3:2C:DA:59:5A:1F:8C:BC:0C
Certificate issuer:       /CN=D213ED718EDA94FF7D0326E32CDA595A1F8CBC0C
Certificate serial:       494472C0B69BB7F156EECD00C83B6BA7395801D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D213ED718EDA94FF7D0326E32CDA595A1F8CBC0C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/0/D213ED718EDA94FF7D0326E32CDA595A1F8CBC0C.mft
Manifest number:          0398
Signing time:             Mon 15 Apr 2024 08:00:42 +0000
Manifest this update:     Mon 15 Apr 2024 07:55:42 +0000
Manifest next update:     Tue 16 Apr 2024 09:50:42 +0000
Files and hashes:         1: D213ED718EDA94FF7D0326E32CDA595A1F8CBC0C.crl (hash: wp1ZVHUJFD8FRlXXS3AfuvxIALz4BT6MwM7Ronm3G8k=)
                          2: 3137302e37392e3232382e302f32322d3234203d3e20323636333131.roa (hash: u3o0baOvDdq1JBVRGOD53Iy4fH/jSb4EwQIdV4K7sNU=)
                          3: 323830343a333564633a3a2f33322d3334203d3e20323636333131.roa (hash: Xlh3WrWnredMXUbg1GAtCqt/OwGQAveLwYTg/9ScyvI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:44:72:c0:b6:9b:b7:f1:56:ee:cd:00:c8:3b:6b:a7:39:58:01:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D213ED718EDA94FF7D0326E32CDA595A1F8CBC0C
        Validity
            Not Before: Apr 15 07:55:42 2024 GMT
            Not After : Apr 16 09:50:42 2024 GMT
        Subject: CN=E3A03A3DEC3EA8ECA47B98A25F36C278DBD60F0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:21:a0:2a:26:f3:7a:11:8d:db:76:a2:d7:10:
                    9b:ee:29:fa:9d:06:3e:a9:0f:ad:83:d0:1f:7f:c9:
                    9b:c6:f2:6c:fe:20:d6:2e:e3:eb:c6:58:e8:80:1f:
                    71:30:01:7d:b6:d1:81:cc:54:31:d4:33:18:0b:1b:
                    8d:e4:46:7b:e4:60:3f:80:74:1f:aa:30:c8:7d:8c:
                    56:a9:e0:29:2d:16:1e:4e:f2:87:0b:f1:cb:22:99:
                    6f:44:e4:4a:59:e1:d1:40:05:6b:8e:55:66:43:6b:
                    d9:76:7c:3b:99:06:07:b1:28:22:06:df:83:06:f6:
                    f8:9d:53:2f:cb:e6:4b:b5:29:c8:00:ab:3a:44:24:
                    35:ab:c2:4e:29:58:63:53:4e:80:56:bc:b7:4e:aa:
                    18:ed:eb:25:2c:e8:d4:0c:58:4a:d0:44:b4:43:90:
                    c3:0d:d6:a6:ff:13:ca:03:26:8c:62:a8:9f:ae:36:
                    69:84:bf:ae:76:f1:9b:6f:87:1e:ff:54:7c:30:fb:
                    2f:d2:e9:84:ce:97:9f:75:a7:90:02:be:f5:f9:82:
                    9d:18:f4:51:1e:83:14:ff:86:17:7e:8a:f6:b6:af:
                    45:48:fb:29:e6:a6:f2:ba:74:a9:c5:45:85:f0:be:
                    79:41:bc:2c:62:39:0f:c8:23:4e:3b:f7:e7:44:89:
                    e6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A0:3A:3D:EC:3E:A8:EC:A4:7B:98:A2:5F:36:C2:78:DB:D6:0F:0E
            X509v3 Authority Key Identifier:
                keyid:D2:13:ED:71:8E:DA:94:FF:7D:03:26:E3:2C:DA:59:5A:1F:8C:BC:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/0/D213ED718EDA94FF7D0326E32CDA595A1F8CBC0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D213ED718EDA94FF7D0326E32CDA595A1F8CBC0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/0/D213ED718EDA94FF7D0326E32CDA595A1F8CBC0C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:05:17:0d:21:f7:18:d5:9b:4d:11:24:24:83:84:96:b2:46:
         b3:6d:e9:43:84:5e:1d:d4:56:5f:dc:d2:58:df:d5:37:d1:3e:
         7b:27:0a:30:d5:8a:d8:cd:39:8e:a6:65:d4:0d:01:f1:2c:ce:
         0b:9c:e0:b6:c5:fb:8f:3c:d5:84:85:71:24:17:06:1b:19:2b:
         8c:ad:75:5f:d7:90:62:d3:09:be:bc:f1:03:66:12:17:2c:4f:
         64:fa:09:d0:f9:30:8b:10:2c:60:9e:09:c3:98:b0:b0:4c:ab:
         18:33:c3:47:3d:65:e9:7a:7f:5a:9d:2b:31:08:a1:28:90:69:
         f4:62:9a:90:35:1d:77:50:6e:de:15:af:4f:00:94:c4:7c:f2:
         7a:c6:95:ab:58:2c:52:32:40:58:23:c1:c3:3b:66:29:1f:19:
         16:e1:ae:84:3a:c8:6a:b3:ae:c9:40:6c:7b:a7:4e:10:6a:a2:
         94:14:f9:35:44:8f:ff:f7:66:6b:f7:0b:f8:78:d2:9f:fd:83:
         8d:ad:15:b1:13:e7:14:c4:58:55:90:4f:87:a6:12:24:b3:bd:
         57:f5:37:aa:ac:4c:be:c6:c2:ff:c3:b5:1f:ac:34:17:a3:1b:
         f8:63:df:f5:5a:bc:68:b5:1c:18:d0:e2:23:30:4c:ac:78:f6:
         fd:4a:06:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----