Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/C14D7736E61FBB5407090B52CAF4DAC5BBAF8964.mft
File:                     C14D7736E61FBB5407090B52CAF4DAC5BBAF8964.mft (raw, json)
Hash identifier:          5yBOv2UUc5eS4hadG5c/84/OSerVJod+ip3Lbaun9d0=
Subject key identifier:   BD:E1:01:7E:BD:51:52:30:34:18:78:01:51:27:18:E1:5B:FE:AC:2B
Authority key identifier: C1:4D:77:36:E6:1F:BB:54:07:09:0B:52:CA:F4:DA:C5:BB:AF:89:64
Certificate issuer:       /CN=C14D7736E61FBB5407090B52CAF4DAC5BBAF8964
Certificate serial:       7131E35010D5631AFD8BD34A1AF387C29F65A13F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C14D7736E61FBB5407090B52CAF4DAC5BBAF8964.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/C14D7736E61FBB5407090B52CAF4DAC5BBAF8964.mft
Manifest number:          34
Signing time:             Mon 17 Apr 2023 04:25:58 +0000
Manifest this update:     Mon 17 Apr 2023 04:20:58 +0000
Manifest next update:     Tue 18 Apr 2023 07:08:58 +0000
Files and hashes:         1: 3139302e3131312e3138342e302f32322d3234203d3e20323730343238.roa (hash: o6ptnAxA8kdluNLb5//2bVj5UwAdPqHyi7QAiiHwtMs=)
                          2: 323830343a366264343a3a2f33322d3334203d3e20323730343238.roa (hash: 5+NdBTsyPsYtquAbmHxDpce3ueruG1ZTGIkNwiak71E=)
                          3: C14D7736E61FBB5407090B52CAF4DAC5BBAF8964.crl (hash: c6q5ocYF+UVZY98LB0iS2Z+DzB6meVkEbG9go+WZFyM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:31:e3:50:10:d5:63:1a:fd:8b:d3:4a:1a:f3:87:c2:9f:65:a1:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C14D7736E61FBB5407090B52CAF4DAC5BBAF8964
        Validity
            Not Before: Apr 17 04:20:58 2023 GMT
            Not After : Apr 18 07:08:58 2023 GMT
        Subject: CN=BDE1017EBD51523034187801512718E15BFEAC2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:26:74:e8:9e:45:52:cb:11:d4:0b:d4:7a:94:
                    05:be:85:e8:18:19:16:b2:68:28:52:f2:06:8e:f7:
                    c1:3b:b2:f4:87:d9:cf:c7:26:09:c5:75:d0:73:34:
                    6d:24:ce:c9:40:d3:c3:d0:11:65:51:ab:54:6a:88:
                    66:62:3c:a9:1b:d7:59:2f:95:3c:4b:1a:0b:cd:c7:
                    1a:82:3a:6e:a7:79:75:5a:71:83:0b:05:48:22:9d:
                    de:ac:d5:e8:9d:8e:41:8d:b9:29:91:02:64:a1:b0:
                    b6:84:ab:24:23:e3:99:7c:91:bf:e5:24:75:42:8e:
                    94:a4:95:57:85:a0:40:63:72:60:9e:09:bb:2b:96:
                    0b:81:7f:d2:d4:55:1e:87:4a:69:73:e2:05:79:a1:
                    bb:cf:92:6d:af:22:7e:cf:06:44:7c:c7:9a:1a:55:
                    67:3d:df:f4:9c:74:6b:79:df:a2:60:b5:a9:f2:ef:
                    b5:c9:0a:df:b2:d2:ad:40:5f:07:cf:56:79:92:23:
                    a6:a7:36:eb:c7:5e:5a:a2:d9:75:30:27:3b:11:43:
                    6f:87:d5:7d:f8:b3:20:d9:3c:a0:8e:a2:d2:ca:9f:
                    c6:91:8e:2e:63:46:57:88:6a:09:8d:22:aa:c5:db:
                    0b:f2:29:99:ee:57:b3:e9:ef:33:a1:3c:4e:b1:b9:
                    18:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E1:01:7E:BD:51:52:30:34:18:78:01:51:27:18:E1:5B:FE:AC:2B
            X509v3 Authority Key Identifier:
                keyid:C1:4D:77:36:E6:1F:BB:54:07:09:0B:52:CA:F4:DA:C5:BB:AF:89:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/C14D7736E61FBB5407090B52CAF4DAC5BBAF8964.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C14D7736E61FBB5407090B52CAF4DAC5BBAF8964.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/C14D7736E61FBB5407090B52CAF4DAC5BBAF8964.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:34:03:98:5e:f4:c6:f1:35:7a:69:77:97:de:e9:1f:a8:de:
         56:04:45:9c:1e:a5:f4:fa:e4:14:07:4d:83:98:f0:eb:bb:57:
         ce:40:34:17:53:f6:c8:3f:63:81:b6:a1:c3:fc:f1:a2:74:3f:
         d7:bd:45:75:c3:5a:1d:1a:61:b4:ab:d8:82:5e:b2:0e:fa:f9:
         cf:14:1a:3d:1c:35:82:7a:ae:78:d1:3a:56:c6:96:68:3e:2d:
         88:e0:97:d4:bd:9f:ab:81:0e:7f:97:0e:fa:04:5c:f0:a2:00:
         c4:f0:50:d9:71:ec:b9:74:15:26:60:c8:9e:9c:36:fe:76:4d:
         2d:a9:a4:dd:97:e2:a9:44:50:9e:ff:9b:84:71:16:d5:00:f8:
         ae:50:99:fb:fc:71:7f:51:7e:b5:c7:d5:eb:e0:76:16:4a:56:
         d3:6f:63:c9:14:1d:02:ad:8d:d6:e0:8a:0e:52:c5:0f:ec:3f:
         91:6a:39:55:da:2f:1f:b3:d0:94:65:8c:41:d4:3d:8b:e8:d9:
         5f:c0:4b:4e:46:81:ac:8d:ec:e6:29:be:b8:42:1c:49:9a:ba:
         b5:09:22:79:2e:c4:c0:00:be:86:44:88:48:73:6e:a9:90:1c:
         ba:bb:f4:06:d5:7a:02:1c:d1:7b:49:a4:e5:c6:10:80:8d:89:
         26:5b:be:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----