Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/D5E118C26CD1A6C958406265B147D4287D85F5CD.mft
File:                     D5E118C26CD1A6C958406265B147D4287D85F5CD.mft (raw, json)
Hash identifier:          N80lxviWyriYVyjSBkNSr3YWqWAFGrWoXPwGEZS7+JI=
Subject key identifier:   25:A2:88:4F:94:18:D1:58:56:3D:06:29:0C:C7:8F:EE:C9:33:08:B7
Authority key identifier: D5:E1:18:C2:6C:D1:A6:C9:58:40:62:65:B1:47:D4:28:7D:85:F5:CD
Certificate issuer:       /CN=D5E118C26CD1A6C958406265B147D4287D85F5CD
Certificate serial:       35ED14C38489647233EC373FF27D96441D6AA5A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5E118C26CD1A6C958406265B147D4287D85F5CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/D5E118C26CD1A6C958406265B147D4287D85F5CD.mft
Manifest number:          3A
Signing time:             Mon 15 Apr 2024 01:09:44 +0000
Manifest this update:     Mon 15 Apr 2024 01:04:44 +0000
Manifest next update:     Tue 16 Apr 2024 01:47:44 +0000
Files and hashes:         1: 3133382e3235352e3135312e302f32342d3234203d3e20323633363530.roa (hash: Kz/U1P8lvTPvlZn4a4cLuE8lAkbcRqpjHuHxmoYVToY=)
                          2: 3137372e37342e3135322e302f32312d3234203d3e20323633363530.roa (hash: Bv45tXeywbKadA69rkvJPcNu3qt3AhsL9TCfRGEbnwM=)
                          3: 3133382e3235352e3135302e302f32342d3234203d3e20323633363530.roa (hash: XNIN363zXjQdf3MotNNL0fjP9DS6xJ2pqmbRjD3YBqs=)
                          4: D5E118C26CD1A6C958406265B147D4287D85F5CD.crl (hash: egSa4P49vlQYZHvEe5uCD4IbV0OI5ku+B7M0v3BXYIc=)
                          5: 323830343a313063633a3a2f33322d3336203d3e20323633363530.roa (hash: kALkjOCKvKOCTbWq64UqIhryBnqW9HnQaeGCE5lFJ8c=)
                          6: 3133382e3235352e3134382e302f32322d3232203d3e20323633363530.roa (hash: tz88vBMb8/Re6EtZzzldegXk2jwtPk/NO6BO30N0OZk=)
                          7: 3137302e37392e38302e302f32322d3234203d3e20323633363530.roa (hash: tIM4jRYfwUx59IuvjB0eLeOXZBjlOro8n7+t04eEO6Q=)
                          8: 3133382e3235352e3134382e302f32332d3233203d3e20323633363530.roa (hash: +fPgKHHsjaM0+NZzOSf5TadVsMHkpk7DOE4sLi4E9s4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ed:14:c3:84:89:64:72:33:ec:37:3f:f2:7d:96:44:1d:6a:a5:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5E118C26CD1A6C958406265B147D4287D85F5CD
        Validity
            Not Before: Apr 15 01:04:44 2024 GMT
            Not After : Apr 16 01:47:44 2024 GMT
        Subject: CN=25A2884F9418D158563D06290CC78FEEC93308B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:7c:5a:5b:a3:de:9e:01:ed:f5:92:ff:06:58:
                    e7:65:de:00:3a:c8:7f:6b:bc:eb:7e:90:d9:fa:e7:
                    45:37:f3:82:bc:fa:89:7c:dd:fd:8d:1f:81:3d:29:
                    8c:31:a8:a2:ea:c0:00:7d:70:c3:9a:0f:aa:4a:b7:
                    bc:e1:ce:f9:9f:c0:dc:78:88:59:14:74:c5:c1:66:
                    c0:e9:67:37:9e:15:46:b3:36:f7:7d:62:2a:5f:be:
                    df:cb:f6:57:db:08:fa:55:b9:62:66:90:1a:09:9d:
                    39:b0:1e:82:80:df:c1:2c:a6:35:f5:fd:7a:99:6a:
                    33:91:87:11:ed:ae:9e:ad:2c:62:0e:09:0b:bd:47:
                    67:be:a0:06:c8:44:59:6e:78:06:c3:0f:2e:16:96:
                    63:b4:ca:3b:45:a7:01:fe:a7:cb:41:6d:2b:0a:a0:
                    a8:42:25:f1:60:60:49:3b:cf:96:d5:f4:cb:78:22:
                    bf:25:7b:a5:2e:a8:3a:b7:15:43:ac:d3:cc:f5:57:
                    0e:80:d3:6d:ba:8c:41:45:8a:b2:73:65:b2:03:f9:
                    73:e9:09:f0:91:96:d0:f4:fa:e6:62:59:df:ae:bd:
                    ce:03:66:fd:64:10:dc:df:9e:ad:c9:49:2b:a3:82:
                    58:c9:5b:74:f8:b1:fe:04:2e:03:2f:77:7c:cb:b1:
                    c7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A2:88:4F:94:18:D1:58:56:3D:06:29:0C:C7:8F:EE:C9:33:08:B7
            X509v3 Authority Key Identifier:
                keyid:D5:E1:18:C2:6C:D1:A6:C9:58:40:62:65:B1:47:D4:28:7D:85:F5:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/D5E118C26CD1A6C958406265B147D4287D85F5CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5E118C26CD1A6C958406265B147D4287D85F5CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/D5E118C26CD1A6C958406265B147D4287D85F5CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:37:8e:c9:39:56:c6:1e:ab:26:98:f5:7e:1e:23:9d:7e:64:
         06:73:3e:09:5a:11:4c:b7:f9:dc:09:21:f4:16:4c:1a:10:42:
         f5:7b:9a:4e:a4:3a:4f:3d:b9:b0:2f:d7:6d:10:03:70:57:60:
         38:15:98:ba:1e:c0:6e:d2:30:41:02:5e:f3:a1:fa:15:f1:19:
         2d:16:3e:7f:eb:1c:7e:80:48:b0:47:36:94:0b:9d:ea:10:3f:
         e8:63:f0:3f:2f:d0:a9:3d:a8:48:ab:fc:59:68:24:1c:b0:db:
         ed:9b:ca:18:d6:e2:6c:60:8a:81:fb:72:23:44:b7:8a:c3:dd:
         f0:90:99:d0:21:a8:89:b3:4e:12:b6:d4:fe:89:3c:73:48:32:
         d3:4a:48:85:e7:f3:90:91:53:30:fd:0a:c0:cb:57:60:0d:d3:
         02:80:60:05:1f:ed:0c:1e:6e:31:37:04:36:31:89:c8:68:7a:
         d9:30:ad:fc:0c:f7:f3:52:d0:d6:10:de:87:d2:20:e4:d4:49:
         66:c5:03:25:ff:6f:e8:fd:16:47:a0:cd:83:62:c2:6d:ab:d8:
         56:56:4d:d9:7b:c1:c4:00:d7:fd:37:7e:f0:c9:2a:71:46:68:
         a5:69:bc:84:f2:c4:a1:b8:18:70:fc:e5:79:04:c9:94:2f:85:
         19:7e:fa:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----