Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/0/56E56C0A6BB9145C47505907F91F128D80240CA8.mft
File:                     56E56C0A6BB9145C47505907F91F128D80240CA8.mft (raw, json)
Hash identifier:          dH21gcQW9a+MO/s1jMjKaAarxHxdCZvtw7AWFL0x+Ow=
Subject key identifier:   11:5F:44:9C:AD:A2:61:7D:3E:5C:D8:D8:9D:32:20:56:06:1B:1F:D3
Authority key identifier: 56:E5:6C:0A:6B:B9:14:5C:47:50:59:07:F9:1F:12:8D:80:24:0C:A8
Certificate issuer:       /CN=56E56C0A6BB9145C47505907F91F128D80240CA8
Certificate serial:       13B1FC410C4905BDEDE1E38498084BA7BDC9F5ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56E56C0A6BB9145C47505907F91F128D80240CA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/0/56E56C0A6BB9145C47505907F91F128D80240CA8.mft
Manifest number:          01F3
Signing time:             Mon 15 Apr 2024 08:41:30 +0000
Manifest this update:     Mon 15 Apr 2024 08:36:30 +0000
Manifest next update:     Tue 16 Apr 2024 12:25:30 +0000
Files and hashes:         1: 34352e3136342e382e302f32332d3233203d3e20323638353835.roa (hash: jhHz0agherj5HWFPnNQSLWs5qbyzth2waSy61udRQ/Y=)
                          2: 34352e3136342e31312e302f32342d3234203d3e20323638353835.roa (hash: d5vu8/Op4Rad62lMSwjO8OUE6pPLwogRRrgaF8I5wtg=)
                          3: 56E56C0A6BB9145C47505907F91F128D80240CA8.crl (hash: sWdUtoFBFl25ym/DwDID7WgqgXW8zvCyOIAXfPO1DqI=)
                          4: 323830343a353337343a3a2f33322d3332203d3e20323638353835.roa (hash: AjOAuc+90/MYnQ+QfzqBaUfge9FA8PldIPgBJroTB64=)
                          5: 34352e3136342e31302e302f32342d3234203d3e20323638353835.roa (hash: AcoOWTitqgnN0TF8kpDr8Fkb6YBRI61YoK03DrGvAS0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:b1:fc:41:0c:49:05:bd:ed:e1:e3:84:98:08:4b:a7:bd:c9:f5:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56E56C0A6BB9145C47505907F91F128D80240CA8
        Validity
            Not Before: Apr 15 08:36:30 2024 GMT
            Not After : Apr 16 12:25:30 2024 GMT
        Subject: CN=115F449CADA2617D3E5CD8D89D322056061B1FD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:18:f1:8f:54:6d:f8:dc:20:4e:9d:e0:bc:45:
                    1c:24:27:73:52:05:35:7e:a1:a5:ab:64:f5:84:a9:
                    05:47:a0:91:c5:e8:28:cd:90:74:dd:65:b7:23:29:
                    b1:4f:77:82:1b:37:4f:0a:c2:db:a6:c4:3a:70:fd:
                    51:dc:d1:36:9c:82:18:7d:39:18:a0:7e:a9:cb:8b:
                    35:25:39:66:a2:38:8b:3e:69:de:0e:1a:e7:ca:ad:
                    88:ef:3a:26:66:b6:9a:be:be:09:12:6a:03:b4:d4:
                    50:39:83:07:8a:60:93:c2:29:67:f8:4b:19:1a:bd:
                    56:26:7c:8f:7e:46:2a:02:72:b1:a5:95:37:b6:bc:
                    14:c2:ef:06:48:c1:40:f4:0a:ea:a7:c4:50:fb:0d:
                    4d:f9:c8:04:f6:89:88:34:24:f7:b4:ba:af:4e:7c:
                    94:7b:58:2b:f6:25:38:00:ee:8b:7c:6f:64:b2:de:
                    8e:ad:94:ba:6f:4c:8c:15:9a:0f:85:c5:5d:58:8d:
                    2f:77:ae:9e:1f:57:63:87:14:74:f8:b9:dd:d5:a6:
                    02:d2:c8:d4:61:10:01:28:77:00:0a:65:a2:88:f1:
                    bb:c6:41:2e:b4:b7:ba:b6:d5:ff:f7:33:c9:77:dc:
                    e8:09:52:45:ea:9f:7b:f3:5f:9c:d0:a7:1d:92:0f:
                    b0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:5F:44:9C:AD:A2:61:7D:3E:5C:D8:D8:9D:32:20:56:06:1B:1F:D3
            X509v3 Authority Key Identifier:
                keyid:56:E5:6C:0A:6B:B9:14:5C:47:50:59:07:F9:1F:12:8D:80:24:0C:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/0/56E56C0A6BB9145C47505907F91F128D80240CA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56E56C0A6BB9145C47505907F91F128D80240CA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/0/56E56C0A6BB9145C47505907F91F128D80240CA8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:87:4a:05:2a:79:f0:8d:49:f0:2a:46:68:3e:aa:f3:28:52:
         6a:ab:a2:6e:7a:e9:a9:08:4b:e6:6f:da:e9:94:87:6d:2b:b3:
         f6:40:e1:81:f8:24:2f:f5:75:a6:35:1c:d5:a1:c8:b9:28:22:
         3f:11:71:94:cf:91:10:10:49:82:a8:ec:54:08:c2:27:05:1a:
         5f:f7:df:8e:23:b4:06:e5:12:a8:88:d1:86:7c:cc:70:0d:9c:
         52:79:f3:64:98:6e:83:b0:4c:dd:70:a8:8d:a2:ae:e4:77:4c:
         b7:5f:f1:ff:55:be:57:a9:44:d8:98:52:98:dd:39:22:66:6d:
         fa:97:b4:58:bb:df:c4:6e:0c:43:92:8b:f4:a9:4e:06:ba:52:
         01:cc:66:34:1c:bc:22:5e:17:12:42:92:8d:5a:2b:0e:43:58:
         09:b5:35:fb:db:de:6d:6d:2f:d1:05:2a:28:cb:63:8a:ec:d2:
         f0:d0:fc:70:35:fa:fa:86:fd:bd:ee:ac:59:65:d1:ed:2b:c1:
         b7:a5:45:06:18:24:e6:70:7d:8a:12:98:4b:ce:fb:d7:90:c5:
         91:68:73:de:ae:bc:ed:3c:8e:7f:a7:d7:7f:17:dd:83:69:2a:
         8c:c9:a6:4f:1e:1e:6f:2a:94:96:c1:cc:eb:04:ac:21:7d:b0:
         13:07:c7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----