Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/A5889F35659E742837BEE520B02DAF77462D8041.mft
File:                     A5889F35659E742837BEE520B02DAF77462D8041.mft (raw, json)
Hash identifier:          BV1QLw74AePW5jlT/+2TgV9/Jc9kStx4lJBbXVx1lJI=
Subject key identifier:   36:CA:44:42:78:51:41:9C:4E:FE:03:F1:53:99:D6:E1:B6:DE:D8:DD
Authority key identifier: A5:88:9F:35:65:9E:74:28:37:BE:E5:20:B0:2D:AF:77:46:2D:80:41
Certificate issuer:       /CN=A5889F35659E742837BEE520B02DAF77462D8041
Certificate serial:       7AE958E0A5AEF80158C4D7F7E2222A585B32042A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5889F35659E742837BEE520B02DAF77462D8041.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/A5889F35659E742837BEE520B02DAF77462D8041.mft
Manifest number:          011B
Signing time:             Mon 15 Apr 2024 08:13:49 +0000
Manifest this update:     Mon 15 Apr 2024 08:08:49 +0000
Manifest next update:     Tue 16 Apr 2024 12:02:49 +0000
Files and hashes:         1: A5889F35659E742837BEE520B02DAF77462D8041.crl (hash: Lp9O+DDO7ergyPI07dlSQ/IXLpfM1dMv58GNGA47c/c=)
                          2: 323830343a386263633a3a2f33322d3438203d3e20323733373630.roa (hash: alXz5tLfS06nh1pQ8J0DkNFWEr6rel2CZ0QkxqJIfd4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:e9:58:e0:a5:ae:f8:01:58:c4:d7:f7:e2:22:2a:58:5b:32:04:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5889F35659E742837BEE520B02DAF77462D8041
        Validity
            Not Before: Apr 15 08:08:49 2024 GMT
            Not After : Apr 16 12:02:49 2024 GMT
        Subject: CN=36CA44427851419C4EFE03F15399D6E1B6DED8DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:04:91:27:5e:7d:72:1c:9f:f9:96:57:01:c7:
                    8f:14:c2:be:09:7e:54:eb:9e:9b:65:71:05:91:95:
                    c9:a9:0e:10:6a:c9:02:6c:0b:34:33:4c:8c:9d:3e:
                    a1:f6:28:dc:5a:d2:74:59:57:91:0e:9e:ba:34:41:
                    8f:65:66:60:14:5c:1b:c5:c5:31:3c:91:8d:bf:23:
                    de:fc:ad:8c:e0:1a:b7:27:b3:58:a0:d8:f5:7f:44:
                    a7:ac:02:75:62:5b:ee:8d:b8:40:d9:83:1b:fd:e9:
                    49:24:2b:ca:67:a7:18:f7:d7:0b:7e:dd:52:43:7f:
                    89:d0:02:0c:81:a6:ec:cb:d2:8b:80:30:88:f3:4b:
                    d9:cc:7b:b3:51:e5:28:69:32:80:06:98:25:f9:d7:
                    71:19:0a:2d:66:81:97:10:8c:48:94:e7:cb:72:4e:
                    e9:cd:7a:1a:87:59:e6:56:ed:06:2f:53:a6:26:93:
                    53:a9:da:3f:5b:58:bf:d4:95:a0:46:6b:ab:f0:f4:
                    a3:61:94:65:ee:62:1e:59:79:f9:47:9d:a2:53:9c:
                    eb:f1:fa:b8:65:be:66:36:6f:80:72:8d:68:86:02:
                    56:5d:35:64:fd:37:d4:c7:b0:a8:a2:1b:a8:e2:68:
                    9d:dd:d1:57:24:68:29:6d:e3:7a:dc:68:08:38:55:
                    fb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CA:44:42:78:51:41:9C:4E:FE:03:F1:53:99:D6:E1:B6:DE:D8:DD
            X509v3 Authority Key Identifier:
                keyid:A5:88:9F:35:65:9E:74:28:37:BE:E5:20:B0:2D:AF:77:46:2D:80:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/A5889F35659E742837BEE520B02DAF77462D8041.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5889F35659E742837BEE520B02DAF77462D8041.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/A5889F35659E742837BEE520B02DAF77462D8041.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:a7:08:85:23:20:ba:47:be:2b:6d:66:d4:6e:ce:3a:c5:e4:
         59:b0:d7:e6:a1:d0:82:bc:9f:04:ce:0e:0b:c0:d5:b2:d4:e8:
         b3:bb:58:9c:4a:07:72:91:03:49:8b:6a:76:db:8c:b4:1d:e0:
         0c:ea:17:33:4d:3b:33:9b:ad:f5:d1:df:e3:25:45:4b:ac:6e:
         aa:d3:e5:c9:62:49:e6:64:21:db:b7:f6:ff:be:bd:73:27:46:
         23:f1:4d:9d:c3:35:e6:a0:c5:f4:46:31:c9:4e:be:8b:dd:ff:
         15:9c:43:a2:e6:69:98:7d:2d:54:fc:1c:72:5d:e1:fb:ce:fd:
         a4:4c:4b:52:41:ea:19:0c:37:e1:b7:c7:c8:6b:b3:24:c2:81:
         01:fb:69:41:07:61:4a:52:91:dd:fb:59:94:93:0b:06:e2:06:
         21:e1:f3:ef:b7:d9:39:77:3a:d9:9d:6f:d6:cf:e1:c1:2b:b4:
         3e:91:1c:9a:28:7e:e3:e0:33:b3:79:b3:ad:c2:f9:38:a6:35:
         52:c8:cd:63:bb:c6:92:db:a0:73:eb:41:60:43:58:6a:80:64:
         fa:7f:f2:61:e1:13:53:21:78:ec:b1:0c:b4:60:78:70:1d:d2:
         57:3b:13:b0:6b:84:f8:f3:0c:ae:b9:8e:d8:37:54:99:bc:cc:
         e5:b1:14:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----