Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/233E118443A043992508F4E6C8544E88CFF5C84A.mft
File:                     233E118443A043992508F4E6C8544E88CFF5C84A.mft (raw, json)
Hash identifier:          upun+SGFfpWkrymKfzjPfB86q2ivBAycsIwDkqcJ9NI=
Subject key identifier:   33:15:5D:25:09:30:C3:4F:B0:F8:59:18:D0:60:88:1E:E5:DD:9A:35
Authority key identifier: 23:3E:11:84:43:A0:43:99:25:08:F4:E6:C8:54:4E:88:CF:F5:C8:4A
Certificate issuer:       /CN=233E118443A043992508F4E6C8544E88CFF5C84A
Certificate serial:       1011737642E5B1177D47F35BFF4C70C54AB06A39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/233E118443A043992508F4E6C8544E88CFF5C84A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/233E118443A043992508F4E6C8544E88CFF5C84A.mft
Manifest number:          04
Signing time:             Thu 27 Jul 2023 17:48:15 +0000
Manifest this update:     Thu 27 Jul 2023 17:43:15 +0000
Manifest next update:     Fri 28 Jul 2023 19:20:15 +0000
Files and hashes:         1: 3132382e3230312e3134302e302f32322d3234203d3e20323636363331.roa (hash: eGD+ayZwklj0ZMz7tBvc1/jQi/pNNmJyLFtTfPvr7bs=)
                          2: 233E118443A043992508F4E6C8544E88CFF5C84A.crl (hash: 09nka1MDSQr3kRoBw1iujeboOu2VCjbROUZ53f/NwDQ=)
                          3: 323830343a336566343a3a2f33322d3438203d3e20323636363331.roa (hash: +T4VG2rdl3sgDJO1CzWZ7dHiZ0GONM1NscrFrta3O8U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:11:73:76:42:e5:b1:17:7d:47:f3:5b:ff:4c:70:c5:4a:b0:6a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=233E118443A043992508F4E6C8544E88CFF5C84A
        Validity
            Not Before: Jul 27 17:43:15 2023 GMT
            Not After : Jul 28 19:20:15 2023 GMT
        Subject: CN=33155D250930C34FB0F85918D060881EE5DD9A35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5a:ac:53:7b:6a:7b:56:2b:d1:97:91:a8:fe:
                    64:63:73:3c:01:96:9d:25:a7:13:cf:1a:0e:cc:0f:
                    49:13:a5:dd:d7:36:d0:11:2b:0d:87:28:70:fd:81:
                    21:1f:30:8c:f8:1c:ce:0b:db:03:ef:37:4d:13:cf:
                    56:d0:21:39:30:8e:38:0f:14:35:98:0a:6d:8d:ef:
                    0a:bb:88:81:35:74:d9:a3:89:b8:bc:ca:c4:ff:0a:
                    bb:48:08:ef:c1:82:ea:0f:a4:e5:56:60:8d:e0:be:
                    b8:d3:f3:87:64:8b:79:c4:0d:12:79:a4:6a:58:75:
                    a7:8d:20:4e:07:7f:d7:94:e3:a2:30:43:b7:6e:03:
                    2a:90:a6:b1:90:aa:13:d5:18:90:bc:8a:18:6a:1a:
                    50:6f:74:34:7e:ac:6a:2e:ad:b2:46:d1:09:07:5a:
                    ad:22:36:35:c4:fd:2b:09:fd:2b:1d:bd:7d:c4:57:
                    b3:d3:bf:db:4c:60:74:a5:fa:3e:9c:ef:d9:3e:ee:
                    6e:ac:07:a8:1c:51:74:6e:cf:2d:68:39:20:82:6e:
                    c4:fa:9a:90:c1:49:ba:74:3c:28:72:2d:2c:26:a6:
                    e7:5a:ce:c5:3f:75:f1:28:c3:e0:7d:5d:39:cd:4f:
                    fd:6c:6a:03:87:1c:7c:f2:be:93:3f:c8:56:8c:b7:
                    b9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:15:5D:25:09:30:C3:4F:B0:F8:59:18:D0:60:88:1E:E5:DD:9A:35
            X509v3 Authority Key Identifier:
                keyid:23:3E:11:84:43:A0:43:99:25:08:F4:E6:C8:54:4E:88:CF:F5:C8:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/233E118443A043992508F4E6C8544E88CFF5C84A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/233E118443A043992508F4E6C8544E88CFF5C84A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/233E118443A043992508F4E6C8544E88CFF5C84A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:b1:8b:b4:0e:e5:ba:f3:04:c7:18:8f:ee:a6:d3:45:2e:2d:
         a9:d1:c3:91:a3:4d:e0:92:5d:e0:2f:b9:89:d1:91:80:ae:5f:
         df:13:f6:c4:63:b8:b9:84:5c:78:20:bc:0b:72:a8:6d:39:95:
         dd:d5:6d:be:eb:59:fc:b4:04:72:ae:e2:ed:36:07:32:b8:89:
         da:ff:4e:a6:79:dd:7e:7d:3b:f8:ee:e8:e2:6c:80:64:66:d7:
         e4:9c:92:7b:d4:f5:46:07:58:9e:fa:6b:10:0c:81:7c:84:5f:
         ed:2c:67:36:3b:3d:85:ec:b3:bb:22:34:23:6b:20:38:94:c0:
         12:62:fc:7b:2f:16:bb:e4:15:c8:f0:f5:06:3a:47:be:0c:69:
         2d:b1:48:7c:08:56:e6:8b:94:12:aa:75:f8:2e:e5:bd:48:49:
         16:19:26:58:e9:68:f2:ee:b3:fe:eb:f2:96:18:e2:a5:d0:c8:
         ec:10:08:ef:f0:c8:d2:95:27:7e:1a:75:47:b3:7b:fb:48:4c:
         63:25:1c:3b:90:80:3a:24:54:78:3e:e3:a2:a9:ea:00:54:61:
         18:d9:dc:d3:18:07:b7:39:15:f1:a7:29:51:b8:2b:61:93:4a:
         96:0b:69:38:51:63:87:b1:a2:f2:c3:b6:bc:27:9a:4b:2b:d4:
         fe:f1:a6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----