Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/0/ACED7F3D5F45458F3754EC755B6951DE6D19CDDE.mft
File:                     ACED7F3D5F45458F3754EC755B6951DE6D19CDDE.mft (raw, json)
Hash identifier:          54/CSWU0FFXX9ZaPAW5cr2fLeFA1YeoQf21nIGWqVbw=
Subject key identifier:   89:5B:5B:D7:81:5B:EB:21:E6:24:28:05:EE:38:C7:0D:89:F0:7B:21
Authority key identifier: AC:ED:7F:3D:5F:45:45:8F:37:54:EC:75:5B:69:51:DE:6D:19:CD:DE
Certificate issuer:       /CN=ACED7F3D5F45458F3754EC755B6951DE6D19CDDE
Certificate serial:       0BEC607676397929B45AC9BB373C2F534FA1ACD8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ACED7F3D5F45458F3754EC755B6951DE6D19CDDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/0/ACED7F3D5F45458F3754EC755B6951DE6D19CDDE.mft
Manifest number:          01F3
Signing time:             Sun 14 Apr 2024 16:09:31 +0000
Manifest this update:     Sun 14 Apr 2024 16:04:31 +0000
Manifest next update:     Mon 15 Apr 2024 19:38:31 +0000
Files and hashes:         1: 323830343a353931633a3a2f33322d3438203d3e203238333730.roa (hash: TnZreNb6omB7UFehykUHp3+0dwhaiNvUfCVdAYRFoH8=)
                          2: 34352e3137322e3134342e302f32322d3234203d3e203238333730.roa (hash: 0Y1orWoT1kke8NsXR59wGMRxRbIeAME5E+Ex0JPnGy0=)
                          3: 3138372e34352e3134342e302f32302d3234203d3e203238333730.roa (hash: WAD3QqFxRT9+/HQPlbPh/bjTdxt8CjubTvpR8c//vyg=)
                          4: 3138392e38342e3134342e302f32302d3234203d3e203238333730.roa (hash: X1BOU5gKvQmXYdvvFfkkoLJNirR5f7EIhAv1pY2x8LE=)
                          5: ACED7F3D5F45458F3754EC755B6951DE6D19CDDE.crl (hash: Un/bU1j7B2MfO5Lq1vzsL4vuvouD7GT2GQZGm2Q9wQ4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ec:60:76:76:39:79:29:b4:5a:c9:bb:37:3c:2f:53:4f:a1:ac:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACED7F3D5F45458F3754EC755B6951DE6D19CDDE
        Validity
            Not Before: Apr 14 16:04:31 2024 GMT
            Not After : Apr 15 19:38:31 2024 GMT
        Subject: CN=895B5BD7815BEB21E6242805EE38C70D89F07B21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8d:4f:47:cc:29:37:db:88:41:6c:11:40:7d:
                    5d:02:b0:84:4a:42:d0:fa:99:f8:d7:35:0a:36:23:
                    90:92:22:79:ee:6c:75:a1:cd:97:0f:67:c7:bf:a1:
                    e2:9e:44:d9:f8:8a:72:40:16:5a:06:6a:ac:54:b5:
                    46:18:7a:36:8d:a1:b7:38:7e:98:0b:3e:41:49:f1:
                    87:22:7e:41:6e:72:a7:28:98:44:d6:b1:4d:41:62:
                    00:c1:4a:68:25:88:f6:9f:45:45:e6:5e:5b:17:0c:
                    72:c0:45:52:1c:6b:16:b9:0a:49:01:ae:ab:5e:fc:
                    ca:5e:79:ef:4a:24:1a:37:e1:a9:2e:f5:e5:df:17:
                    38:72:ad:65:34:62:50:3d:08:6c:e7:d9:2b:df:f7:
                    9e:a1:1f:26:e2:1e:07:7d:34:89:ef:33:b0:11:64:
                    0e:b0:6d:85:d8:97:d3:1a:b3:b2:80:e6:a6:10:1a:
                    dd:4e:c1:53:e1:c1:1f:8b:16:e8:92:de:78:6c:99:
                    c1:7a:f3:88:b8:54:41:23:72:9b:f6:8a:6a:ab:23:
                    d7:11:d2:21:6f:f5:fc:1c:7c:ed:aa:c2:40:f9:6c:
                    a3:5a:ad:a8:6b:f8:cc:87:e3:b9:1c:ff:5e:73:1f:
                    1e:be:1c:22:8e:10:04:97:6f:a2:14:66:16:8e:fe:
                    26:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:5B:5B:D7:81:5B:EB:21:E6:24:28:05:EE:38:C7:0D:89:F0:7B:21
            X509v3 Authority Key Identifier:
                keyid:AC:ED:7F:3D:5F:45:45:8F:37:54:EC:75:5B:69:51:DE:6D:19:CD:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/0/ACED7F3D5F45458F3754EC755B6951DE6D19CDDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ACED7F3D5F45458F3754EC755B6951DE6D19CDDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/0/ACED7F3D5F45458F3754EC755B6951DE6D19CDDE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:c0:e2:f8:46:f2:43:a9:02:b9:65:3f:f6:72:b7:7c:ca:60:
         ad:d0:19:d9:9a:dd:f0:a3:13:61:40:b5:70:5f:08:04:4d:d7:
         3b:2b:c0:02:79:e4:fd:a5:4f:bb:ce:e7:b0:b0:ec:50:61:78:
         b3:01:05:a4:14:ca:bc:c1:d3:63:f0:66:7e:96:e4:43:e3:a4:
         4e:dd:7a:2b:85:54:b7:d5:66:20:b1:4b:d6:48:c0:58:fc:d6:
         22:cd:0d:e3:54:0e:6e:de:4c:50:3a:1f:cb:6e:d7:51:dd:04:
         4e:0a:2e:f6:fd:76:96:8c:c1:f0:15:fc:8a:22:29:17:4c:dc:
         a4:8b:16:5d:92:74:34:fd:76:f5:50:e9:e1:74:c7:9d:4f:28:
         ca:9d:c4:28:66:07:e1:c5:c0:15:dd:82:ca:80:0c:5c:08:2f:
         93:ea:06:6b:fb:a5:a6:d8:50:98:f4:ad:fd:f9:f0:03:37:f2:
         f9:1b:0a:d8:2a:fc:ad:93:7b:3f:5f:1d:da:6b:b0:a4:3a:7f:
         da:ef:da:5f:8f:68:ae:25:b0:bb:08:07:8b:10:44:37:3d:00:
         d0:3c:84:fa:1e:e6:b9:55:98:c1:3a:51:1b:1c:dd:d1:39:b7:
         3a:96:5c:0f:ac:be:28:c7:c9:e8:ea:f8:10:1c:b9:36:8b:ab:
         44:95:3c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----