Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/0/53BE384039FD4C6C2926817808F1792F9AE6CD0D.mft
File:                     53BE384039FD4C6C2926817808F1792F9AE6CD0D.mft (raw, json)
Hash identifier:          yySA2rgXxdXhusZsM25jpFjFSdHJnDKV5562mV5b9cE=
Subject key identifier:   4F:35:16:8D:48:20:3A:6A:01:E5:56:91:7D:EE:24:77:41:22:70:10
Authority key identifier: 53:BE:38:40:39:FD:4C:6C:29:26:81:78:08:F1:79:2F:9A:E6:CD:0D
Certificate issuer:       /CN=53BE384039FD4C6C2926817808F1792F9AE6CD0D
Certificate serial:       79089FA0AFC6101638C31D04374E5B380B9C2AD6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53BE384039FD4C6C2926817808F1792F9AE6CD0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/0/53BE384039FD4C6C2926817808F1792F9AE6CD0D.mft
Manifest number:          BB
Signing time:             Mon 15 May 2023 19:03:43 +0000
Manifest this update:     Mon 15 May 2023 18:58:43 +0000
Manifest next update:     Tue 16 May 2023 19:43:43 +0000
Files and hashes:         1: 323830343a383630343a313030303a3a2f33362d3336203d3e20323732363134.roa (hash: dWwa2nHXdD+Jr9PVhRPDFvaTcTIgjc0ZWOh4Oy+2cAg=)
                          2: 323830343a383630343a323030303a3a2f33362d3336203d3e20323732363134.roa (hash: MRydXNW4GXUBBcFqpDViNIokx2uoAVUk7dEP1ok1qWc=)
                          3: 53BE384039FD4C6C2926817808F1792F9AE6CD0D.crl (hash: Hs7XoGMmvjn96kVvK6vy3qK+ib4hctr3Y7zcTqJNYB0=)
                          4: 323830343a383630343a3a2f33362d3336203d3e20323732363134.roa (hash: wELeSKPujykZocIwIPvSzkhPbA/eg7dCU+Vz6d2W8zQ=)
                          5: 323830343a383630343a3a2f33322d3332203d3e20323732363134.roa (hash: Mj7US8REMGPIEnTwLQroekq2hKtoQ2oPnxP3zVWumuE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:08:9f:a0:af:c6:10:16:38:c3:1d:04:37:4e:5b:38:0b:9c:2a:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53BE384039FD4C6C2926817808F1792F9AE6CD0D
        Validity
            Not Before: May 15 18:58:43 2023 GMT
            Not After : May 16 19:43:43 2023 GMT
        Subject: CN=4F35168D48203A6A01E556917DEE247741227010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:de:1e:7e:fd:ab:b3:3b:b7:71:31:b5:54:c5:
                    e5:10:4b:b8:7e:19:de:8e:73:d6:49:c0:b4:ad:7a:
                    e9:99:d7:04:39:e7:f7:4e:a9:25:8b:7d:01:fc:3d:
                    4d:10:73:f9:0c:dd:07:27:fd:d0:f7:57:7a:ba:90:
                    3a:41:54:a7:56:43:01:26:cd:53:83:a8:90:dc:46:
                    de:2c:a9:e3:89:2e:65:9a:54:cb:47:23:83:08:0f:
                    30:09:d0:8e:73:ef:47:3c:2b:df:70:05:28:21:e3:
                    5d:0c:da:14:a7:67:1d:08:93:2c:49:84:7a:ee:5e:
                    51:5e:83:72:d6:2e:8c:19:34:66:ec:7f:01:74:99:
                    bc:eb:4e:c7:2f:87:e0:ad:86:85:60:dc:59:2a:5c:
                    ff:d4:ac:95:ec:ce:45:35:b8:42:35:01:d7:b0:2e:
                    ab:0a:1f:57:7e:66:74:19:21:9b:71:93:08:4d:4d:
                    aa:62:f1:ec:67:63:dc:9b:a5:6e:2a:6d:36:8f:e9:
                    c2:09:11:02:54:02:0c:6d:bd:85:9a:88:30:2a:0e:
                    79:85:f3:6a:5c:21:28:89:31:d4:c6:71:cd:a3:3b:
                    40:bd:be:4c:30:0d:3a:85:ad:5f:34:f5:9d:ba:1c:
                    00:c7:a3:b2:ea:e9:07:a4:88:c3:a6:53:32:00:5d:
                    d4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:35:16:8D:48:20:3A:6A:01:E5:56:91:7D:EE:24:77:41:22:70:10
            X509v3 Authority Key Identifier:
                keyid:53:BE:38:40:39:FD:4C:6C:29:26:81:78:08:F1:79:2F:9A:E6:CD:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/0/53BE384039FD4C6C2926817808F1792F9AE6CD0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53BE384039FD4C6C2926817808F1792F9AE6CD0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/0/53BE384039FD4C6C2926817808F1792F9AE6CD0D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:82:00:33:9d:ed:da:8e:6d:fe:86:b7:9c:d0:51:25:2f:e6:
         71:bd:6a:2e:ca:f7:6b:fc:88:2d:fe:0d:ae:b8:7b:d4:0e:e7:
         0e:cf:6f:f7:b2:bd:78:49:e8:11:3e:69:10:dd:4e:ee:bc:36:
         e6:50:39:43:e2:44:d3:4d:40:d7:86:bd:86:48:ac:31:3a:62:
         3b:97:4d:de:b8:6e:bb:a8:32:74:f0:6a:05:b4:5b:aa:f4:60:
         91:51:18:6f:a9:2e:03:ca:ed:ad:d9:73:39:ad:d8:f9:57:85:
         bf:b4:fc:bc:fa:fb:bf:ad:c8:e6:a7:87:90:32:7e:3d:f6:dc:
         a0:74:88:41:54:df:cb:4a:42:69:e1:42:63:06:56:80:f2:9c:
         1c:1a:d3:78:bc:a5:d0:28:74:9d:f1:36:52:05:eb:2f:72:5b:
         7f:58:e8:cd:f4:28:07:8d:53:03:cd:25:9b:e4:72:3c:27:6f:
         a6:80:05:e2:7b:91:62:a8:a3:a7:12:b7:66:c9:1b:00:89:ce:
         66:a5:a0:24:43:57:94:53:0a:e4:e1:6a:f8:d8:be:b6:90:15:
         87:19:25:9c:c7:f2:0b:ad:a9:b9:38:90:6c:36:09:08:db:fc:
         0a:50:84:5f:b3:f9:48:18:fc:27:0b:52:d1:cd:be:f0:0b:37:
         cc:d2:53:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----