Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/5F7B2DF3850B02FEE629765FD292F8969D8CD3C5.mft
File:                     5F7B2DF3850B02FEE629765FD292F8969D8CD3C5.mft (raw, json)
Hash identifier:          Tj7F8R0+kv5pT8A+bcptUbqfJseJc7mP353vkJFkx14=
Subject key identifier:   92:A6:EA:0E:1C:D8:3B:AD:63:07:EA:83:9E:69:42:02:8F:C6:71:06
Authority key identifier: 5F:7B:2D:F3:85:0B:02:FE:E6:29:76:5F:D2:92:F8:96:9D:8C:D3:C5
Certificate issuer:       /CN=5F7B2DF3850B02FEE629765FD292F8969D8CD3C5
Certificate serial:       244141DFA671CED776A84D97F85429C9A04DB071
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5F7B2DF3850B02FEE629765FD292F8969D8CD3C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/5F7B2DF3850B02FEE629765FD292F8969D8CD3C5.mft
Manifest number:          3D
Signing time:             Sun 14 Apr 2024 18:42:26 +0000
Manifest this update:     Sun 14 Apr 2024 18:37:26 +0000
Manifest next update:     Mon 15 Apr 2024 21:45:26 +0000
Files and hashes:         1: 5F7B2DF3850B02FEE629765FD292F8969D8CD3C5.crl (hash: r/rXrxtJKQo8rkkt+ono1AD0UhUbTfiIOAMTye/g6JE=)
                          2: 3138362e3232372e37362e302f32322d3232203d3e20323733343331.roa (hash: 9MNWJwR7OD39gexX6Z5Yv9wsI+kgOYtK/JvRqwKQKeo=)
                          3: 3138362e3232372e37392e302f32342d3234203d3e20323733343331.roa (hash: lkD6wqX1Laq2YsEl+ZshXGgF73rpzg8luK0YBeTct50=)
                          4: 3138362e3232372e37382e302f32332d3233203d3e20323733343331.roa (hash: UJFp9Ev1WyvdmbsdEQd9Kz/4ZrrfsDGvAZ9vM4oCEnE=)
                          5: 3138362e3232372e37372e302f32342d3234203d3e20323733343331.roa (hash: pO7YpDwQHAnPh8z9PoGqAG5pEv4kWVm/rDN2Aw+cGYI=)
                          6: 323830343a386538343a3a2f33322d3332203d3e20323733343331.roa (hash: 22EQVytAtZgzwYIbSzTSvK5RD8i5keEd4DsLARHKmuo=)
                          7: 3138362e3232372e37362e302f32332d3233203d3e20323733343331.roa (hash: hJAKes6+6SYTyCOqDeuwjFDHwo+zAZ1AqTgP13WoeKw=)
                          8: 3138362e3232372e37382e302f32342d3234203d3e20323733343331.roa (hash: nLs89zuxGQcM0AcFBCGEfmm2W2BwzchvVcesurTQGWw=)
                          9: 3138362e3232372e37362e302f32342d3234203d3e20323733343331.roa (hash: 2Eu0/KvsxOfClJwLNH/TbBo8y6MT/q9c6hg9BjzGQqc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:41:41:df:a6:71:ce:d7:76:a8:4d:97:f8:54:29:c9:a0:4d:b0:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F7B2DF3850B02FEE629765FD292F8969D8CD3C5
        Validity
            Not Before: Apr 14 18:37:26 2024 GMT
            Not After : Apr 15 21:45:26 2024 GMT
        Subject: CN=92A6EA0E1CD83BAD6307EA839E6942028FC67106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8d:52:5f:c2:6f:a2:62:16:12:61:39:11:6d:
                    eb:70:a4:15:3d:bd:44:5b:46:d2:5f:c2:7b:8a:e7:
                    4e:36:77:2c:ec:ab:b3:1e:cc:d7:ae:a6:ce:70:e0:
                    12:fa:3b:ed:1a:8b:67:a9:06:d8:bf:61:7a:89:ae:
                    75:1a:5a:3e:7d:66:8c:9d:38:72:1e:83:42:6a:fc:
                    74:70:07:96:22:df:37:08:af:9a:ca:0e:92:88:c3:
                    1b:fd:27:4e:88:db:3b:24:6a:f1:f4:95:1e:6e:9b:
                    fd:5b:f6:d0:a9:6d:55:f3:fc:0f:8d:42:7a:99:a0:
                    3b:f0:5a:05:52:40:be:1c:fd:0a:97:98:2c:10:7d:
                    34:f1:a8:74:bd:dd:2a:6b:d4:1d:08:97:eb:47:5b:
                    7e:de:02:49:94:cf:42:3d:72:cb:5e:70:4f:8d:88:
                    c3:d8:cd:30:78:5e:83:bf:48:46:5d:95:6d:70:f0:
                    59:01:b5:dd:22:e4:a2:42:78:75:0f:a5:2d:e1:c4:
                    8c:28:d8:0b:f4:e5:00:fa:fd:49:0a:80:4f:24:ac:
                    f1:f2:65:e8:38:db:be:4c:cc:de:8f:ba:d0:0f:b6:
                    fa:b1:63:2f:2b:ce:40:54:96:50:85:5b:93:e4:1a:
                    b4:9a:b8:ff:de:d4:3c:bb:fa:89:94:bd:e5:91:b3:
                    83:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A6:EA:0E:1C:D8:3B:AD:63:07:EA:83:9E:69:42:02:8F:C6:71:06
            X509v3 Authority Key Identifier:
                keyid:5F:7B:2D:F3:85:0B:02:FE:E6:29:76:5F:D2:92:F8:96:9D:8C:D3:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/5F7B2DF3850B02FEE629765FD292F8969D8CD3C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5F7B2DF3850B02FEE629765FD292F8969D8CD3C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/5F7B2DF3850B02FEE629765FD292F8969D8CD3C5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:a6:66:5c:80:c6:81:e0:6e:fb:52:fc:22:62:e0:6d:e4:e9:
         5b:21:68:27:ce:5b:df:5c:53:be:df:f8:1c:7d:0d:05:da:bd:
         f6:1c:d8:5a:3d:2a:db:12:8f:0e:8c:fc:18:1b:d7:0b:fa:83:
         04:a4:8f:12:a6:ee:ab:8a:10:64:02:12:ca:91:70:17:5e:0d:
         c8:ed:95:79:78:f2:bc:e1:a2:81:c6:56:30:26:f2:4a:f2:a6:
         1f:20:8f:3e:4d:d6:62:ae:de:6d:3f:78:d6:fa:db:dd:b1:6e:
         c6:38:4f:a2:6f:6a:a6:47:af:96:ee:67:0b:ed:d2:a8:f4:42:
         49:ea:29:78:bd:02:80:1a:c8:38:d3:00:ab:8f:8c:6c:a4:10:
         21:c2:94:48:30:d3:84:7e:2f:8e:b5:f6:c3:d7:23:e7:33:4a:
         92:b0:c2:f0:3d:4d:96:c5:8a:83:c5:9a:91:11:41:63:36:37:
         5d:0d:35:53:e3:6b:bd:43:7c:e9:6a:5c:2e:64:dc:bc:9f:a7:
         3e:3e:8b:93:d2:66:8a:79:02:13:c2:14:4a:11:64:a2:cf:1a:
         ea:be:50:28:55:89:b3:3b:a2:f0:01:d9:1d:c2:3f:d7:e3:22:
         cd:3f:aa:e9:4c:40:83:19:a5:1c:e0:b0:bb:ee:69:10:0b:c8:
         7c:e3:68:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----