Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5AytXKqz7C7BMo25kBqCzNiaoFGNJ8RaJnT3cpbead1w/1/531E45221C7D5F16652A745C08A7911AEF763553.mft
File:                     531E45221C7D5F16652A745C08A7911AEF763553.mft (raw, json)
Hash identifier:          x639aNC3u/ORb+/t6/vOCXKFVZOl6xQ+mkUN+LBLWcU=
Subject key identifier:   B8:AC:14:45:AE:9C:4E:56:0A:71:F0:12:31:CA:9D:3D:0B:05:22:C9
Authority key identifier: 53:1E:45:22:1C:7D:5F:16:65:2A:74:5C:08:A7:91:1A:EF:76:35:53
Certificate issuer:       /CN=531E45221C7D5F16652A745C08A7911AEF763553
Certificate serial:       6EE991D3E42B0D39D04E4E1764F580344E05EF91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/531E45221C7D5F16652A745C08A7911AEF763553.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5AytXKqz7C7BMo25kBqCzNiaoFGNJ8RaJnT3cpbead1w/1/531E45221C7D5F16652A745C08A7911AEF763553.mft
Manifest number:          11
Signing time:             Wed 17 Apr 2024 21:09:10 +0000
Manifest this update:     Wed 17 Apr 2024 21:04:10 +0000
Manifest next update:     Thu 18 Apr 2024 21:54:10 +0000
Files and hashes:         1: 531E45221C7D5F16652A745C08A7911AEF763553.crl (hash: gb2CUKhjisKGcV9JNSlNt2aD90LpdWxXJ5TjT49sVjI=)
                          2: 3137372e3132342e38302e302f32322d3234203d3e20323731333035.roa (hash: siL/t3Xqz/UznAWeHkvlaowSyIfzT5iDfZpJVYD7Fvg=)
                          3: 323830343a373937303a3a2f33322d3438203d3e20323731333035.roa (hash: H1r7ZV2Kt3sdALkSDJBxeRqQWIRS1aNCf0AoGEbh9gE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:e9:91:d3:e4:2b:0d:39:d0:4e:4e:17:64:f5:80:34:4e:05:ef:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=531E45221C7D5F16652A745C08A7911AEF763553
        Validity
            Not Before: Apr 17 21:04:10 2024 GMT
            Not After : Apr 18 21:54:10 2024 GMT
        Subject: CN=B8AC1445AE9C4E560A71F01231CA9D3D0B0522C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:50:97:3f:e2:e6:24:02:04:e5:ae:df:9e:b5:
                    36:a2:ed:39:3f:0f:a6:39:f0:fa:14:20:9d:18:47:
                    30:a9:8b:b9:91:96:ab:88:c5:4f:1e:84:0e:7a:4b:
                    e5:a4:97:3d:52:51:d1:74:f4:23:7f:bb:e8:2b:d2:
                    6d:19:f4:da:6e:b3:8f:df:8b:dd:f9:b6:09:47:b1:
                    67:16:f9:8b:4d:45:cd:2f:73:e9:93:94:78:90:3b:
                    9a:b1:ee:23:5b:eb:c5:11:98:d6:7f:05:58:18:94:
                    ac:2f:c6:bc:41:78:5b:37:7a:6e:9e:10:0e:32:c5:
                    c9:08:0c:fa:e6:b4:a1:9e:a6:62:45:63:d9:51:2c:
                    f4:08:93:31:30:58:c8:b2:57:20:d2:57:36:b4:a8:
                    4a:eb:d0:c1:fd:cf:f9:c7:70:8b:29:a6:1d:8c:9e:
                    ba:f5:6a:69:dd:f9:80:3a:51:79:48:bc:9e:d8:1d:
                    ce:20:cb:2e:1d:b7:74:8e:c1:a2:aa:d0:31:e2:fa:
                    9c:62:29:e5:54:0e:55:52:ff:36:43:67:2e:22:41:
                    88:56:36:10:25:12:68:b9:12:e9:9c:23:39:04:5f:
                    78:96:ed:cf:d5:42:e2:5b:90:55:1e:77:ef:c3:b7:
                    28:da:4f:f9:64:4f:6c:cc:75:61:1e:83:65:47:d7:
                    7d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:AC:14:45:AE:9C:4E:56:0A:71:F0:12:31:CA:9D:3D:0B:05:22:C9
            X509v3 Authority Key Identifier:
                keyid:53:1E:45:22:1C:7D:5F:16:65:2A:74:5C:08:A7:91:1A:EF:76:35:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5AytXKqz7C7BMo25kBqCzNiaoFGNJ8RaJnT3cpbead1w/1/531E45221C7D5F16652A745C08A7911AEF763553.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/531E45221C7D5F16652A745C08A7911AEF763553.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5AytXKqz7C7BMo25kBqCzNiaoFGNJ8RaJnT3cpbead1w/1/531E45221C7D5F16652A745C08A7911AEF763553.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:ec:2c:59:93:c0:95:18:44:d7:ba:a9:15:35:db:e6:20:41:
         f9:c7:51:d7:3d:6d:5f:d8:be:2f:aa:8d:ed:e6:bc:7a:be:48:
         64:39:3c:4a:c1:ce:88:03:a4:e3:4e:67:6a:dc:68:d4:4c:43:
         a8:49:2f:5c:ad:23:f1:8e:e0:d2:cc:fb:05:35:77:7c:ed:f1:
         5c:07:95:cc:82:11:46:c4:df:a6:d3:6e:89:1d:91:c9:12:ad:
         ec:66:54:a2:b5:80:3c:42:a3:8a:54:46:3f:f2:8d:73:46:ad:
         7f:63:92:87:16:e0:b7:12:8a:fd:92:9d:9b:a8:14:0c:c5:83:
         bb:d4:0e:db:a2:f8:68:9b:bb:f3:ea:69:cb:d9:57:b8:68:9e:
         e3:34:e1:1b:aa:b8:c0:59:69:e8:9f:da:a3:de:fd:d3:84:0f:
         8f:ca:3b:ca:1c:01:2a:b1:b0:e0:1a:53:43:e0:53:c1:02:ba:
         d0:9b:36:4d:52:32:51:58:43:8b:5b:66:b3:b4:70:8e:1b:6a:
         1a:e4:97:a6:f6:cf:17:04:f9:55:1c:e9:74:4a:f2:80:55:23:
         64:e0:5e:e1:b5:e7:7e:72:c1:ab:a3:8b:fd:d3:d0:54:93:22:
         08:3e:ab:02:22:0f:ad:72:7c:e4:10:c8:1a:23:f8:53:07:e3:
         f2:14:3b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----