Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2YLArYCJA7ZVYvDMFHN18RfvsLTE8HVvHhx2MTwsRjWr/0/D7004F6EF21A9EFA15D2CE42DB7E6796BFD967B5.mft
File:                     D7004F6EF21A9EFA15D2CE42DB7E6796BFD967B5.mft (raw, json)
Hash identifier:          C4m1VIOE+uhVGSBL846lPCvL+562GR4xQ2gT/d7tsRc=
Subject key identifier:   5F:A7:58:4F:08:76:FC:FA:33:12:E3:98:AA:CF:19:0C:F8:07:73:F0
Authority key identifier: D7:00:4F:6E:F2:1A:9E:FA:15:D2:CE:42:DB:7E:67:96:BF:D9:67:B5
Certificate issuer:       /CN=D7004F6EF21A9EFA15D2CE42DB7E6796BFD967B5
Certificate serial:       105C56962D8D71003ED1D42E36D36B814F05ADFE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7004F6EF21A9EFA15D2CE42DB7E6796BFD967B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2YLArYCJA7ZVYvDMFHN18RfvsLTE8HVvHhx2MTwsRjWr/0/D7004F6EF21A9EFA15D2CE42DB7E6796BFD967B5.mft
Manifest number:          052E
Signing time:             Mon 15 Apr 2024 11:32:21 +0000
Manifest this update:     Mon 15 Apr 2024 11:27:20 +0000
Manifest next update:     Tue 16 Apr 2024 12:28:20 +0000
Files and hashes:         1: 3137392e34382e3234302e302f32322d3234203d3e20323731303630.roa (hash: 42n30Q9J+SD023pUcUq+RshkL+OcamxmLjbMYFkYo90=)
                          2: D7004F6EF21A9EFA15D2CE42DB7E6796BFD967B5.crl (hash: pUYMOFzf0fs64cIVZM7mUvQ7O5V6rX74scRVhjvnjzs=)
                          3: 323830343a373561343a3a2f33322d3438203d3e20323731303630.roa (hash: gwcUSNrErxu1yELPEzomauSsPkw8lYYgpXApMVzrRcA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:5c:56:96:2d:8d:71:00:3e:d1:d4:2e:36:d3:6b:81:4f:05:ad:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7004F6EF21A9EFA15D2CE42DB7E6796BFD967B5
        Validity
            Not Before: Apr 15 11:27:20 2024 GMT
            Not After : Apr 16 12:28:20 2024 GMT
        Subject: CN=5FA7584F0876FCFA3312E398AACF190CF80773F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:78:ca:63:d0:a9:8e:dd:a1:3b:cc:09:ce:8b:
                    ad:72:99:ab:88:91:df:b4:89:64:f4:fe:9d:40:d9:
                    1e:19:df:b1:16:d1:57:5e:ea:42:e8:08:ff:72:02:
                    a3:48:16:07:4a:a6:54:7f:35:1b:ff:3a:34:ba:c4:
                    23:cb:ef:cc:53:c6:e8:fe:ae:95:34:b7:9a:47:a7:
                    f7:76:e2:32:0c:99:93:c3:f0:3d:87:db:4a:c0:a3:
                    c6:25:80:af:fa:cf:43:cc:d5:14:4e:34:fb:cf:3c:
                    85:21:b3:ce:6e:98:df:02:b6:b4:4e:7f:75:65:f8:
                    ec:a7:f1:2d:77:c2:c7:d3:22:53:43:9a:9f:32:87:
                    0f:46:f6:d9:65:b6:1d:30:53:e0:3f:32:a8:10:05:
                    b7:6f:72:41:86:37:22:c3:32:1d:3c:e1:c4:dd:e9:
                    b4:90:ba:da:39:55:d9:94:cd:7c:04:b2:75:5f:e0:
                    99:da:9e:76:be:99:f0:77:e0:36:ce:a7:87:fe:fc:
                    73:c7:ac:82:5f:d7:cd:b8:24:d9:26:9a:ad:d5:e9:
                    e6:7a:f7:be:4d:73:f7:69:5c:14:06:87:65:a8:ab:
                    21:80:98:c1:13:b4:cf:b7:23:38:e7:f5:cd:a7:a0:
                    4c:90:fc:5a:f3:30:a1:cb:cf:1a:f5:f8:ba:ed:76:
                    9b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A7:58:4F:08:76:FC:FA:33:12:E3:98:AA:CF:19:0C:F8:07:73:F0
            X509v3 Authority Key Identifier:
                keyid:D7:00:4F:6E:F2:1A:9E:FA:15:D2:CE:42:DB:7E:67:96:BF:D9:67:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2YLArYCJA7ZVYvDMFHN18RfvsLTE8HVvHhx2MTwsRjWr/0/D7004F6EF21A9EFA15D2CE42DB7E6796BFD967B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7004F6EF21A9EFA15D2CE42DB7E6796BFD967B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2YLArYCJA7ZVYvDMFHN18RfvsLTE8HVvHhx2MTwsRjWr/0/D7004F6EF21A9EFA15D2CE42DB7E6796BFD967B5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:60:a5:fa:57:09:f3:c3:ff:a3:4f:b2:00:2d:ac:05:34:05:
         11:6f:c5:1e:2d:61:90:6d:e7:86:c3:3e:69:ea:23:b9:b6:2b:
         36:48:ce:18:7b:4d:a1:26:65:cd:89:d8:9c:0c:e8:56:11:b9:
         a7:d5:3f:c8:16:c7:e9:40:0f:23:00:00:f0:56:db:58:0c:b4:
         82:47:d6:ba:e1:b3:51:8d:9c:2f:ad:18:b1:f9:8f:68:f2:28:
         00:a5:8f:0b:28:02:2f:82:4e:51:25:fd:cd:36:7b:86:e1:e0:
         99:3e:e4:98:5d:32:b2:a8:4c:03:61:7e:14:e9:89:70:90:b6:
         27:86:8b:52:96:82:6a:10:0a:1b:e5:e9:6b:f3:f0:26:81:1f:
         fb:e0:66:e3:dd:a2:0a:63:89:6c:ef:45:d1:37:28:c3:4d:47:
         85:5c:8c:3f:dd:0c:3a:fc:61:55:51:e0:ae:89:ef:57:67:04:
         bf:73:0c:26:5d:b2:db:8d:a3:be:d7:65:64:3d:88:e3:5b:51:
         45:f1:ec:9c:b6:a4:d5:2d:ee:16:16:a5:75:bc:dc:e3:01:b2:
         2a:ac:fd:b4:a9:94:84:ea:5d:18:b4:46:6e:28:a9:98:11:35:
         9f:45:b1:fc:fa:9b:01:47:79:d4:e8:33:32:1c:8b:95:16:4d:
         20:0c:3e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----