Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/1/CAD8EF96AD8245BB46829DD684DDC3AC2143F0CA.mft
File:                     CAD8EF96AD8245BB46829DD684DDC3AC2143F0CA.mft (raw, json)
Hash identifier:          TJZAYND6PyOqn00gF9I7QsjkA3yWCKA43ssGnlKSlF0=
Subject key identifier:   52:F1:85:D3:A1:11:79:C1:1E:83:1C:58:88:71:8D:3A:EA:A2:DB:1D
Authority key identifier: CA:D8:EF:96:AD:82:45:BB:46:82:9D:D6:84:DD:C3:AC:21:43:F0:CA
Certificate issuer:       /CN=CAD8EF96AD8245BB46829DD684DDC3AC2143F0CA
Certificate serial:       1650CBD3553730D51E03F038BAC1BE9857D00766
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAD8EF96AD8245BB46829DD684DDC3AC2143F0CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/1/CAD8EF96AD8245BB46829DD684DDC3AC2143F0CA.mft
Manifest number:          7B
Signing time:             Fri 10 Nov 2023 04:14:44 +0000
Manifest this update:     Fri 10 Nov 2023 04:09:44 +0000
Manifest next update:     Sat 11 Nov 2023 05:40:44 +0000
Files and hashes:         1: 323830343a336566343a3a2f33322d3438203d3e20323636363331.roa (hash: 0goXa6amY4NT9XgQLqiN98trLJneUu8LqxZ++O9IR7c=)
                          2: 3132382e3230312e3134302e302f32322d3234203d3e20323636363331.roa (hash: g3dXJovBySiWOalro7zDOtS2z/iGssBIJrKC39g+fBQ=)
                          3: CAD8EF96AD8245BB46829DD684DDC3AC2143F0CA.crl (hash: cyZg1A4a6/0mk3fHUZNsjTe6NxlwZzbn5fH4XdSPhNA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:50:cb:d3:55:37:30:d5:1e:03:f0:38:ba:c1:be:98:57:d0:07:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAD8EF96AD8245BB46829DD684DDC3AC2143F0CA
        Validity
            Not Before: Nov 10 04:09:44 2023 GMT
            Not After : Nov 11 05:40:44 2023 GMT
        Subject: CN=52F185D3A11179C11E831C5888718D3AEAA2DB1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7c:e9:71:72:6e:a5:12:47:ba:45:a1:92:aa:
                    fa:ec:88:60:b0:40:81:d4:1a:c3:0b:ff:6d:44:bd:
                    c9:42:62:d7:f5:7b:ae:a2:80:2d:1a:76:34:11:19:
                    14:a5:06:52:05:28:c5:fb:2f:70:10:6b:84:58:65:
                    03:9e:12:0a:d6:48:a0:8d:5d:55:67:d6:ba:51:36:
                    26:dd:56:4d:1c:e9:04:54:17:b2:f7:cf:d1:13:c2:
                    fc:97:28:0c:22:cb:eb:61:33:93:f2:df:f0:60:68:
                    c0:5c:aa:21:58:4d:16:9c:19:e9:37:9a:62:65:af:
                    d1:cc:18:30:6d:12:30:53:18:8a:a1:c0:7b:70:6a:
                    7d:60:be:63:34:74:f9:47:ae:ae:b1:13:af:1b:b1:
                    a0:8a:03:e8:ed:cf:d3:7b:68:b5:65:97:9c:29:b6:
                    e5:dd:41:73:35:77:bf:0c:b9:6c:b4:72:a0:2c:4e:
                    c1:ca:d9:53:5d:64:b9:72:c8:3c:1e:c3:19:05:f1:
                    7f:f3:a8:e9:5d:ba:48:ef:54:10:85:85:e6:f0:78:
                    23:52:de:ef:03:6b:6c:fd:ee:e8:36:46:b1:60:e7:
                    02:02:a5:9f:18:b7:c7:64:e5:f6:bf:88:28:55:f5:
                    fa:ce:e3:9c:3d:22:b1:da:46:4c:b6:8a:0d:5e:03:
                    7f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F1:85:D3:A1:11:79:C1:1E:83:1C:58:88:71:8D:3A:EA:A2:DB:1D
            X509v3 Authority Key Identifier:
                keyid:CA:D8:EF:96:AD:82:45:BB:46:82:9D:D6:84:DD:C3:AC:21:43:F0:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/1/CAD8EF96AD8245BB46829DD684DDC3AC2143F0CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAD8EF96AD8245BB46829DD684DDC3AC2143F0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/1/CAD8EF96AD8245BB46829DD684DDC3AC2143F0CA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:ad:c3:b5:e1:89:59:5b:78:e6:8d:7e:ac:42:77:14:0a:2e:
         73:07:ca:1e:49:1f:f1:2f:e9:36:a9:26:cf:3f:56:70:ea:af:
         05:e0:97:64:9f:1e:e1:ff:0c:7c:24:40:04:54:f7:4e:b1:51:
         0f:94:87:a6:85:d7:12:58:98:96:d5:e0:f3:c1:f0:6f:a3:25:
         c6:15:95:22:04:fa:5d:df:d6:5d:ad:f8:0a:8f:56:b0:e9:9f:
         f0:da:b5:cb:ce:99:a7:84:cf:d2:6a:17:ab:a5:02:58:c0:08:
         90:62:35:06:b8:1a:63:1a:ac:2f:dc:1a:ca:02:90:6d:8d:78:
         06:38:ac:be:1e:8b:e3:1a:c5:da:36:3f:d1:53:e9:98:d4:b9:
         e2:4b:3b:d0:70:da:49:1a:29:8d:53:42:86:11:64:3d:d8:48:
         0d:4c:11:85:48:28:8d:fd:d9:29:9c:c2:d1:87:b9:8a:ab:6d:
         5b:8a:2c:59:42:51:78:26:a6:77:8a:27:ae:7c:4f:30:48:de:
         91:8e:6a:60:b5:c5:99:77:4f:70:95:94:57:e4:9b:cf:e0:25:
         29:0f:5a:b0:57:c7:ad:56:8d:a7:fc:e0:7b:e9:97:f2:1c:8d:
         c9:cd:ce:4a:0d:ad:b9:b1:6e:49:48:29:a3:43:ac:c9:69:e2:
         bd:48:fb:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----