Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/1/A5B00DCE5A3ED6DF76BE34EEA35647AD51B8A931.mft
File:                     A5B00DCE5A3ED6DF76BE34EEA35647AD51B8A931.mft (raw, json)
Hash identifier:          yQZeGVFkJnBjfPeOrAH9Wa/UA1TOWQc8iwcmJTTysKg=
Subject key identifier:   D3:A8:1B:1C:3E:96:CD:BB:4E:16:27:04:B7:39:0B:81:18:B3:1E:D5
Authority key identifier: A5:B0:0D:CE:5A:3E:D6:DF:76:BE:34:EE:A3:56:47:AD:51:B8:A9:31
Certificate issuer:       /CN=A5B00DCE5A3ED6DF76BE34EEA35647AD51B8A931
Certificate serial:       7AF7690BE876FC40BCE8F3833FE527AA58AD7AF2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5B00DCE5A3ED6DF76BE34EEA35647AD51B8A931.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/1/A5B00DCE5A3ED6DF76BE34EEA35647AD51B8A931.mft
Manifest number:          4F
Signing time:             Tue 10 Oct 2023 10:39:45 +0000
Manifest this update:     Tue 10 Oct 2023 10:34:45 +0000
Manifest next update:     Wed 11 Oct 2023 11:23:45 +0000
Files and hashes:         1: 323830343a356166343a3a2f33332d3333203d3e20323638383039.roa (hash: gSoxbPeK8Bq5p5g6uCe9ITArbezHrD5/DKHJGYtXffE=)
                          2: A5B00DCE5A3ED6DF76BE34EEA35647AD51B8A931.crl (hash: Xt6/ad53af3GqmctmyldWz7/enbJgEm1B7FPmecAKGs=)
                          3: 323830343a356166343a383030303a3a2f33332d3333203d3e20323638383039.roa (hash: pgbTL6QiDJkaDX1/6Lk8w0SS5/AtTBYLsPGbvZxFyGY=)
                          4: 323830343a356166343a3a2f33322d3332203d3e20323638383039.roa (hash: bpXddPLCHcMH8MyVON1W2otOcNcOECmAGnnqNN3C3No=)
                          5: 34352e3137332e3130302e302f32322d3234203d3e20323638383039.roa (hash: u/f3wXBa5dHoXXpkWRnZZ6rq5Bf6Zqic2br3lO7NiiA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:f7:69:0b:e8:76:fc:40:bc:e8:f3:83:3f:e5:27:aa:58:ad:7a:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5B00DCE5A3ED6DF76BE34EEA35647AD51B8A931
        Validity
            Not Before: Oct 10 10:34:45 2023 GMT
            Not After : Oct 11 11:23:45 2023 GMT
        Subject: CN=D3A81B1C3E96CDBB4E162704B7390B8118B31ED5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:74:02:ab:2e:bd:c4:11:f9:64:05:35:91:a6:
                    41:ca:87:94:54:b9:03:11:1f:5b:44:b6:b6:1d:e7:
                    7c:49:02:36:24:ae:09:15:8d:2e:6e:06:cc:50:b5:
                    db:7e:a1:f6:1d:c5:cd:35:ac:bf:ec:28:9a:0f:1e:
                    c5:d3:dd:c5:d4:49:37:5c:ad:18:34:07:89:2c:8c:
                    f8:2b:f0:8c:6d:03:53:48:e5:45:2b:3a:40:62:5f:
                    2f:bf:e9:33:6f:1e:79:b2:c5:c0:c9:d9:be:64:94:
                    f5:83:e8:ac:73:b5:da:d0:65:5f:b0:ca:3d:62:ff:
                    d2:8d:1c:a5:92:74:85:62:b7:18:68:97:ab:29:fd:
                    a9:48:8e:f9:ab:3f:93:f1:e1:e2:8f:ff:61:42:65:
                    12:1e:c4:e4:74:81:d8:67:a9:48:9a:01:45:11:e6:
                    cc:23:84:a7:aa:52:81:aa:74:b1:a9:05:da:da:61:
                    fc:c3:c9:e3:96:7c:b3:7d:d7:3e:67:69:2d:df:b4:
                    7d:9a:5c:e3:ff:a2:3f:f0:6f:d4:08:40:32:07:39:
                    84:f0:e5:5d:4c:87:12:1e:b0:ae:aa:21:f6:07:8f:
                    cc:65:18:3e:8b:c0:50:25:f5:f9:e3:22:bc:1d:60:
                    03:86:c4:33:51:f3:39:98:e9:28:03:60:8a:78:ba:
                    4b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A8:1B:1C:3E:96:CD:BB:4E:16:27:04:B7:39:0B:81:18:B3:1E:D5
            X509v3 Authority Key Identifier:
                keyid:A5:B0:0D:CE:5A:3E:D6:DF:76:BE:34:EE:A3:56:47:AD:51:B8:A9:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/1/A5B00DCE5A3ED6DF76BE34EEA35647AD51B8A931.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5B00DCE5A3ED6DF76BE34EEA35647AD51B8A931.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/1/A5B00DCE5A3ED6DF76BE34EEA35647AD51B8A931.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:74:a0:24:ac:9e:bd:86:09:c9:68:e4:51:76:7b:bf:db:ae:
         f2:ad:fb:22:c5:b6:47:55:ad:7f:60:c1:e8:f6:8b:04:19:84:
         d3:f9:a8:f7:82:88:1e:8b:ff:65:28:75:e6:8b:b9:15:3b:92:
         0d:39:c6:d7:e0:2c:9c:6f:7d:45:f0:6a:ed:69:63:21:16:1a:
         9a:c6:27:81:46:fa:6c:67:51:58:c2:ce:89:a3:36:c1:75:2c:
         50:6b:6e:d4:df:ef:fa:c9:5c:04:e4:69:64:98:cc:cd:84:7f:
         44:0d:84:84:92:c3:d0:93:97:f7:10:ec:6b:0d:fc:b8:83:ba:
         b4:3e:48:2c:0d:a8:99:81:c5:59:96:2d:ac:f2:39:d4:8f:8f:
         75:de:b4:a3:1f:63:5c:ea:f4:c2:82:31:77:75:8a:d8:47:16:
         a7:c1:c7:3c:2e:93:d9:ef:e7:4b:d8:22:90:fa:68:60:86:80:
         f5:9d:ca:14:48:d1:70:2c:1c:63:fa:e4:ed:78:48:5a:91:cf:
         48:78:82:97:91:54:d9:be:97:75:35:88:01:b4:5c:88:33:0b:
         40:a9:50:c7:f0:51:36:0d:75:b0:cb:1c:e2:13:c4:31:90:2d:
         93:3f:6f:2c:35:52:e6:9f:1b:77:83:c0:62:14:61:6a:32:43:
         27:78:fb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----