Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/0/5E5173B0E1228A29F5FC14D19B31ACC3E65FCE29.mft
File:                     5E5173B0E1228A29F5FC14D19B31ACC3E65FCE29.mft (raw, json)
Hash identifier:          wHzu94cHHS2JA8HPuJoDQNbEKpglAKbpvwhptVT/gF4=
Subject key identifier:   9A:EA:88:C5:35:C6:1F:DD:E5:7E:FE:73:B8:7E:3B:0F:97:C0:85:FF
Authority key identifier: 5E:51:73:B0:E1:22:8A:29:F5:FC:14:D1:9B:31:AC:C3:E6:5F:CE:29
Certificate issuer:       /CN=5E5173B0E1228A29F5FC14D19B31ACC3E65FCE29
Certificate serial:       257BFAE554EDB5A26ADD26A4E3EDD330FC3B5DB9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5E5173B0E1228A29F5FC14D19B31ACC3E65FCE29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/0/5E5173B0E1228A29F5FC14D19B31ACC3E65FCE29.mft
Manifest number:          CF
Signing time:             Tue 25 Apr 2023 02:43:10 +0000
Manifest this update:     Tue 25 Apr 2023 02:38:10 +0000
Manifest next update:     Wed 26 Apr 2023 05:38:10 +0000
Files and hashes:         1: 3138362e36352e3130342e302f32322d3234203d3e20323636313432.roa (hash: aTrM6s2E70NnT6lfQjhkPky1yqVJ/Z2A3GeUnFNQvh4=)
                          2: 5E5173B0E1228A29F5FC14D19B31ACC3E65FCE29.crl (hash: tNjnTax0RabG4a6fTOL/BP35A5quZzV6+Em89aJuTfY=)
                          3: 323830343a336235343a3a2f33322d3334203d3e20323636313432.roa (hash: tmpq6oGfZhXtZ4jtLIdHkXwW3fY9x//IXwy33c308dY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:7b:fa:e5:54:ed:b5:a2:6a:dd:26:a4:e3:ed:d3:30:fc:3b:5d:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E5173B0E1228A29F5FC14D19B31ACC3E65FCE29
        Validity
            Not Before: Apr 25 02:38:10 2023 GMT
            Not After : Apr 26 05:38:10 2023 GMT
        Subject: CN=9AEA88C535C61FDDE57EFE73B87E3B0F97C085FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d1:08:b4:c7:7a:0a:01:49:a9:27:07:07:77:
                    55:7b:03:0d:49:ad:44:1b:35:41:fc:6e:ff:5f:99:
                    9b:12:3c:3b:11:ca:c6:0f:d3:10:a2:ac:c4:c0:44:
                    92:bb:5f:36:1d:0a:3c:1b:83:5a:77:8d:d3:93:85:
                    f4:26:8b:1b:e5:e7:8d:8d:ff:23:a8:6a:bc:70:ee:
                    ed:a9:22:75:5b:71:45:db:dc:97:31:8b:85:73:ee:
                    fd:f4:dd:07:6f:38:fc:f7:7d:47:0d:17:b4:f3:d4:
                    08:63:fc:36:3d:c8:49:65:14:30:e7:65:0e:a4:a2:
                    99:8f:34:28:a0:30:6e:66:b1:a2:74:10:1d:e9:49:
                    fd:5e:7e:fd:57:d2:89:fa:30:ff:5b:41:7a:83:6a:
                    e3:44:54:b3:0c:75:24:98:bf:47:16:99:92:4d:96:
                    9c:85:47:c2:ef:35:4e:b5:c4:0f:ff:3e:31:95:64:
                    9c:33:89:46:21:d9:3a:ad:c3:16:83:5d:d2:56:df:
                    2a:5a:6e:d5:17:e6:93:e1:69:c9:cc:39:b2:53:e4:
                    f4:f2:81:07:b3:7b:50:07:39:1e:f5:0d:78:37:81:
                    e8:b1:13:85:9c:23:08:f8:ee:1c:1a:51:a9:58:77:
                    5b:78:18:d4:83:56:f3:31:ec:c3:34:39:12:5c:1a:
                    77:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:EA:88:C5:35:C6:1F:DD:E5:7E:FE:73:B8:7E:3B:0F:97:C0:85:FF
            X509v3 Authority Key Identifier:
                keyid:5E:51:73:B0:E1:22:8A:29:F5:FC:14:D1:9B:31:AC:C3:E6:5F:CE:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/0/5E5173B0E1228A29F5FC14D19B31ACC3E65FCE29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5E5173B0E1228A29F5FC14D19B31ACC3E65FCE29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/0/5E5173B0E1228A29F5FC14D19B31ACC3E65FCE29.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:4c:6f:f0:48:c9:d0:b0:81:67:eb:af:df:78:ee:ec:cd:b9:
         a6:e7:7a:29:94:f6:7c:85:a2:3c:9c:94:53:6b:ae:af:30:2b:
         c6:d6:79:dc:c2:53:cb:98:a3:5f:7b:4e:4a:72:3a:eb:10:05:
         20:1b:fa:6c:2f:86:c2:1c:14:a1:fd:e5:48:2e:4d:3b:f0:77:
         b8:40:cb:7c:62:c6:0b:c4:41:8a:8b:2f:85:7e:7d:78:cb:ed:
         96:73:4b:e5:18:fe:ed:ef:15:bd:fe:17:17:ce:d4:b3:bd:62:
         17:52:1d:8d:51:9d:61:f6:dd:ba:65:a1:66:0e:1e:21:e2:65:
         86:9f:ff:54:02:08:20:ba:b9:d9:7a:af:8a:67:74:2f:4d:6c:
         97:45:84:89:0b:51:3a:f3:8f:4b:3b:76:54:2a:cd:2f:8f:64:
         ef:3b:51:c1:4b:cb:4c:f4:ae:15:2d:43:b5:49:db:ac:84:cf:
         37:8c:e3:06:74:8f:a3:ac:a7:e7:02:9d:0f:29:e4:7f:31:2d:
         76:2d:9b:02:31:08:d3:f3:8d:3a:78:4f:09:2b:19:93:e5:fb:
         69:d0:f2:9e:a6:54:e6:d9:64:0b:17:78:1b:cb:37:82:06:0c:
         e3:54:6c:d7:8b:77:ed:f6:59:fe:54:d8:a3:42:b2:b9:74:8d:
         83:58:b9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----