Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/DE52C578BC0F9A7B70A231782F69295C2543D000.mft
File:                     DE52C578BC0F9A7B70A231782F69295C2543D000.mft (raw, json)
Hash identifier:          CVQDRX0WvZyQdwSUFr19GPHMEFCG2LmkIVg6lzx609k=
Subject key identifier:   A2:09:64:60:25:31:20:58:24:9C:8A:89:79:14:B2:C7:2C:C3:AC:C9
Authority key identifier: DE:52:C5:78:BC:0F:9A:7B:70:A2:31:78:2F:69:29:5C:25:43:D0:00
Certificate issuer:       /CN=DE52C578BC0F9A7B70A231782F69295C2543D000
Certificate serial:       769B3AA378BE2A86C9BA9BA15FCBC9DBCF761AED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE52C578BC0F9A7B70A231782F69295C2543D000.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/DE52C578BC0F9A7B70A231782F69295C2543D000.mft
Manifest number:          0353
Signing time:             Wed 24 May 2023 11:46:57 +0000
Manifest this update:     Wed 24 May 2023 11:41:57 +0000
Manifest next update:     Thu 25 May 2023 14:06:57 +0000
Files and hashes:         1: 34352e3137362e3135322e302f32322d3234203d3e20323639303037.roa (hash: qkxLkC5aNYORS9xOdUGd3gc9C82nX4R3BOHcw4D9ihs=)
                          2: 323830343a356530383a3a2f33322d3438203d3e20323639303037.roa (hash: u5c4k+kLYA7b4fQLZTSJ9M33qK7BUaqwHvIi8+yfclM=)
                          3: DE52C578BC0F9A7B70A231782F69295C2543D000.crl (hash: MKNKwc9TaS3hBef/eaV9EFAlJQYn/axS+j+Uwh83IIU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:9b:3a:a3:78:be:2a:86:c9:ba:9b:a1:5f:cb:c9:db:cf:76:1a:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE52C578BC0F9A7B70A231782F69295C2543D000
        Validity
            Not Before: May 24 11:41:57 2023 GMT
            Not After : May 25 14:06:57 2023 GMT
        Subject: CN=A209646025312058249C8A897914B2C72CC3ACC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9c:1e:8e:82:54:9a:2e:29:9b:3d:12:59:d1:
                    8b:05:7c:b1:c2:1f:b6:11:93:26:de:36:88:80:ba:
                    d8:7b:eb:9b:99:e1:ce:f3:db:28:ce:e9:45:53:fe:
                    97:11:11:e1:8b:b7:8b:27:31:e4:e5:3c:b8:12:fd:
                    cb:b4:01:db:75:8f:92:7d:fe:ac:58:34:bc:bf:9c:
                    a4:27:07:ee:cf:5a:5b:c1:46:1b:f7:4c:14:e9:9a:
                    41:db:88:d2:a4:aa:75:31:67:a8:5e:2f:02:57:1a:
                    d4:aa:c3:86:41:00:a5:f7:6c:65:96:5a:66:ea:1b:
                    88:06:f3:f7:f1:0e:3f:ad:e4:0a:8a:3d:d4:3c:a2:
                    9d:45:de:fc:68:80:6a:e1:78:cf:2f:da:6b:af:3e:
                    9d:ac:d4:10:b4:02:47:cc:27:40:b4:93:a6:63:da:
                    e5:65:52:03:76:55:aa:82:54:63:02:7a:ea:35:36:
                    fe:b0:5b:89:51:97:8c:c5:20:98:32:33:ab:83:ad:
                    bd:66:5b:7f:f4:61:c7:2b:48:ae:58:da:75:4c:90:
                    7d:e2:11:8b:d1:b5:bc:e8:0f:02:50:71:08:00:22:
                    b4:1a:5a:6c:39:23:54:0a:9a:1c:36:be:aa:57:2c:
                    93:d5:fd:55:09:15:a4:f8:18:7e:a9:50:89:0a:11:
                    b2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:09:64:60:25:31:20:58:24:9C:8A:89:79:14:B2:C7:2C:C3:AC:C9
            X509v3 Authority Key Identifier:
                keyid:DE:52:C5:78:BC:0F:9A:7B:70:A2:31:78:2F:69:29:5C:25:43:D0:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/DE52C578BC0F9A7B70A231782F69295C2543D000.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE52C578BC0F9A7B70A231782F69295C2543D000.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/DE52C578BC0F9A7B70A231782F69295C2543D000.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:1c:55:cb:bc:54:53:06:01:ba:6a:eb:dc:12:8b:79:58:18:
         9d:e4:d8:dd:b9:9e:94:47:78:c8:e3:ac:7a:46:19:97:25:3c:
         86:7f:a6:00:06:5f:ac:48:91:ac:f3:52:b1:01:f4:74:99:1d:
         67:f5:66:ca:c8:c6:82:b2:a2:44:f1:6b:9e:ff:8b:df:c4:45:
         d0:f1:9e:dd:be:e5:00:82:96:89:03:5f:91:14:e7:aa:a6:14:
         f8:53:19:d8:fe:0a:82:61:3d:e2:75:aa:b2:9f:28:e5:45:43:
         bb:75:be:04:59:18:8d:29:ef:8a:a0:ae:fa:af:35:ce:21:04:
         86:7c:42:33:79:17:48:b7:b6:fc:c4:56:ec:21:5c:41:0c:4e:
         50:31:75:18:bf:c4:2f:aa:92:7e:10:c7:cf:d3:e5:08:a4:9a:
         64:e4:06:f7:9e:f4:e3:1a:3b:a8:35:95:8a:6c:cc:62:13:88:
         80:e6:3d:e4:3f:7c:50:53:da:f0:20:28:ed:2e:f4:ea:0e:c0:
         3f:89:ab:ea:79:c7:21:f5:ac:7f:b7:96:d7:54:8d:d5:48:db:
         51:19:11:e6:7b:7c:14:e2:b8:87:3d:16:ef:98:c4:02:7b:72:
         d8:bd:18:c9:41:83:aa:cf:12:d9:8c:c9:01:26:ca:98:46:8b:
         7a:8c:88:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----