Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/0/5D3E9920CB3EA518E5033995FF7833D02B0BA31D.mft
File:                     5D3E9920CB3EA518E5033995FF7833D02B0BA31D.mft (raw, json)
Hash identifier:          Nk5d19L/FwPnvwnpUy/rIA15uQTFozQa/4BqWmWGbd0=
Subject key identifier:   DE:D7:64:30:2A:5F:F2:12:4B:1A:15:3C:56:FA:9B:B6:B8:B0:3A:74
Authority key identifier: 5D:3E:99:20:CB:3E:A5:18:E5:03:39:95:FF:78:33:D0:2B:0B:A3:1D
Certificate issuer:       /CN=5D3E9920CB3EA518E5033995FF7833D02B0BA31D
Certificate serial:       6F3C997339D83BCFB33495EE63A386B8426CF0AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D3E9920CB3EA518E5033995FF7833D02B0BA31D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/0/5D3E9920CB3EA518E5033995FF7833D02B0BA31D.mft
Manifest number:          0283
Signing time:             Mon 15 Apr 2024 03:04:14 +0000
Manifest this update:     Mon 15 Apr 2024 02:59:14 +0000
Manifest next update:     Tue 16 Apr 2024 06:27:14 +0000
Files and hashes:         1: 3137302e38302e38302e302f32322d3332203d3e20323636343130.roa (hash: ECSHQqeJxZ5Mq6d1SeR1Vm8oDkkZvaV9S+zWH+Pr/Pw=)
                          2: 323830343a333736383a3a2f33322d313238203d3e20323636343130.roa (hash: kYYu2MNcWZHwCQYIwgiSoaC3hzgNMj1yktaZ5WmyX8A=)
                          3: 5D3E9920CB3EA518E5033995FF7833D02B0BA31D.crl (hash: QJ0reev5ARDtgSXECzZ69ntkFJjsRFKYT6faUILieq4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:3c:99:73:39:d8:3b:cf:b3:34:95:ee:63:a3:86:b8:42:6c:f0:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D3E9920CB3EA518E5033995FF7833D02B0BA31D
        Validity
            Not Before: Apr 15 02:59:14 2024 GMT
            Not After : Apr 16 06:27:14 2024 GMT
        Subject: CN=DED764302A5FF2124B1A153C56FA9BB6B8B03A74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a0:10:db:70:3e:f2:b2:7a:c2:6b:3a:f7:b6:
                    b4:c7:d3:3b:a3:7c:bb:b9:66:f6:29:7d:bd:55:f1:
                    49:ff:d1:bf:54:0f:f9:ed:d1:c2:7e:11:17:41:71:
                    66:96:e2:ce:5e:01:dd:a1:b6:c9:3b:87:25:6c:bb:
                    bd:55:3c:bf:8c:1a:00:0e:6e:d0:bd:30:9a:27:e9:
                    5b:3c:a9:16:a8:14:fc:5b:c9:d0:9e:fe:14:55:52:
                    25:df:a5:08:d1:cb:85:48:61:04:57:e0:bd:1f:9f:
                    9b:10:53:06:bd:9f:df:b5:69:09:5b:aa:c3:0a:f7:
                    83:d2:73:da:05:ef:40:9d:ef:ad:cb:98:42:27:b7:
                    47:ba:d9:40:78:52:ba:c8:3c:5d:79:00:8e:3c:2d:
                    f7:65:28:df:c1:cf:3e:94:ff:c9:7e:dd:b6:bc:ba:
                    0a:aa:a7:25:51:be:8b:4d:61:d9:67:46:6c:df:dd:
                    70:20:cb:81:29:35:0a:a9:a9:d7:33:cb:c6:de:1d:
                    00:8f:00:2e:18:27:11:81:24:e3:8a:9a:2d:5f:7a:
                    63:f2:36:9b:54:b7:ba:37:21:9d:bc:64:88:f9:b3:
                    da:fb:10:bd:56:3d:e5:05:2d:b8:f1:8c:9f:c2:48:
                    72:05:a4:87:d4:c0:c2:28:56:0c:93:c4:ab:20:48:
                    04:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D7:64:30:2A:5F:F2:12:4B:1A:15:3C:56:FA:9B:B6:B8:B0:3A:74
            X509v3 Authority Key Identifier:
                keyid:5D:3E:99:20:CB:3E:A5:18:E5:03:39:95:FF:78:33:D0:2B:0B:A3:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/0/5D3E9920CB3EA518E5033995FF7833D02B0BA31D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D3E9920CB3EA518E5033995FF7833D02B0BA31D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/0/5D3E9920CB3EA518E5033995FF7833D02B0BA31D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:16:46:3c:d9:7b:0f:46:6b:13:59:8e:77:fd:04:57:8f:b9:
         89:3b:33:61:4d:cd:2b:ea:64:ea:e3:b2:29:18:a3:44:55:66:
         33:b5:1c:f1:41:db:fd:15:2b:5d:f8:4a:b7:80:5e:11:5b:39:
         58:e7:87:a3:b8:86:98:a8:27:7c:9a:cd:0f:b6:f6:c4:06:d0:
         7b:9d:ea:d1:bc:f6:33:a3:14:a7:2f:2d:ab:21:92:b2:7e:a6:
         5b:5a:8a:31:5a:11:50:8f:66:8a:b8:64:e2:79:51:e8:80:dd:
         67:42:d8:d1:f4:7f:a6:c2:d1:5e:64:ef:c7:64:3e:68:ed:b8:
         73:a5:d2:ae:e3:b3:df:2e:e6:46:4b:a8:be:fe:79:d5:56:34:
         db:d5:90:86:d2:d7:41:ed:92:29:f2:8f:66:ef:45:34:fb:c6:
         8f:90:66:6c:c7:cb:12:30:07:39:51:81:3b:85:aa:c6:53:2c:
         dc:f1:44:ad:f0:3c:42:7f:be:2b:9f:64:fb:22:8b:03:ef:37:
         03:22:1b:df:ef:19:62:c9:ad:4a:e2:22:cd:06:d3:89:2f:7e:
         e2:30:5d:0b:55:63:24:2f:9b:b1:10:61:52:fb:46:91:ce:87:
         01:89:53:c5:dd:9e:30:a4:80:c3:62:e7:ec:1f:67:44:e4:bc:
         15:14:5b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----