Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/DDB2DA452C22543D612ECF3051FADB7B717B7886.mft
File:                     DDB2DA452C22543D612ECF3051FADB7B717B7886.mft (raw, json)
Hash identifier:          SsGEu0I/N/k2lwjWzWdY8Qhss+Tat8hT35hb8lQrAUw=
Subject key identifier:   C5:3A:DC:90:AD:EC:A0:9A:D6:26:70:82:60:57:86:59:BA:6A:4B:49
Authority key identifier: DD:B2:DA:45:2C:22:54:3D:61:2E:CF:30:51:FA:DB:7B:71:7B:78:86
Certificate issuer:       /CN=DDB2DA452C22543D612ECF3051FADB7B717B7886
Certificate serial:       3A774BDCE270A342F5AED6808B72EC01BBDE8DA2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDB2DA452C22543D612ECF3051FADB7B717B7886.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/DDB2DA452C22543D612ECF3051FADB7B717B7886.mft
Manifest number:          17
Signing time:             Sun 14 Apr 2024 20:57:34 +0000
Manifest this update:     Sun 14 Apr 2024 20:52:34 +0000
Manifest next update:     Tue 16 Apr 2024 00:35:34 +0000
Files and hashes:         1: DDB2DA452C22543D612ECF3051FADB7B717B7886.crl (hash: 5onI3CcS8r4suysjwxGVZ+2vunwGVcK4E5EHPNsNVBo=)
                          2: 3230312e35342e3136302e302f32302d3332203d3e203238363234.roa (hash: tIWwkZhQ29pJE9k5bX4V5S91qqFhGHUQKOIyod57fzM=)
                          3: 3138372e3131302e39362e302f31392d3332203d3e203238363234.roa (hash: 0K/WRPgeuRykDZnBZAyrBLlAHVcX6qJaTFHyD6l45Qo=)
                          4: 323830343a3362633a3a2f33322d313238203d3e203238363234.roa (hash: ORt0o4dQZEZ8IhWCGQ+wGuG2hR+tXnyx+uOWStmpoVI=)
                          5: 3230312e33332e33322e302f31392d3332203d3e203238363234.roa (hash: +P4jkN/Viu/pOOVHVMgiKa/xoEX2nz7TWFwLs73tskU=)
                          6: 3230302e3233372e3132382e302f31392d3332203d3e203238363234.roa (hash: gnnoYxpMl9HmIgUmjRrmc/MXm4scOSpp1MzCKbk+AlY=)
                          7: 3138372e3131302e36342e302f31392d3332203d3e203238363234.roa (hash: KMcXEGCy+jZ4IHjwg/bSVdV93r34fxCzrTNHzJ8EAJ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:77:4b:dc:e2:70:a3:42:f5:ae:d6:80:8b:72:ec:01:bb:de:8d:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDB2DA452C22543D612ECF3051FADB7B717B7886
        Validity
            Not Before: Apr 14 20:52:34 2024 GMT
            Not After : Apr 16 00:35:34 2024 GMT
        Subject: CN=C53ADC90ADECA09AD626708260578659BA6A4B49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d2:a3:ff:45:55:af:99:b3:0f:91:91:b0:b8:
                    95:c5:d2:4c:0d:1b:ea:17:0b:e7:93:59:22:e9:27:
                    26:c3:5e:66:4e:5c:0e:f4:a4:97:65:58:aa:00:1c:
                    13:5a:5b:10:39:f8:5f:9c:a6:e4:b7:04:8e:8d:97:
                    45:0a:73:98:a5:af:6d:0b:b9:e5:9f:2e:68:97:03:
                    26:28:d1:0a:17:42:3d:f3:ca:13:ba:ff:39:67:9f:
                    3c:f6:54:00:b6:9b:b6:38:63:b4:3b:9e:fc:88:25:
                    0a:50:93:a9:45:7f:dd:1e:f7:fe:1d:98:06:18:35:
                    a1:78:8c:33:3f:f2:4d:1a:4b:df:74:99:00:7b:a8:
                    f0:50:3c:8e:6d:f1:3c:9c:d4:a4:77:6a:db:8c:93:
                    76:13:0e:37:68:9d:08:64:3a:6b:8b:67:80:46:4d:
                    79:b5:de:bb:f9:c6:95:3f:e6:f2:cb:c0:34:e3:a9:
                    c4:b0:8e:19:0c:c4:50:19:00:9d:a1:9e:38:ea:5a:
                    d7:1b:6a:f2:97:40:57:b3:a5:af:9e:b5:9c:c3:1d:
                    1b:db:ce:1d:5d:12:78:ec:de:b5:e3:28:0a:dd:00:
                    84:ad:ac:84:d8:0d:6d:46:f2:d3:ff:55:47:db:08:
                    bf:a9:5f:a1:4a:6b:cd:ea:da:97:18:18:a6:af:31:
                    31:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:3A:DC:90:AD:EC:A0:9A:D6:26:70:82:60:57:86:59:BA:6A:4B:49
            X509v3 Authority Key Identifier:
                keyid:DD:B2:DA:45:2C:22:54:3D:61:2E:CF:30:51:FA:DB:7B:71:7B:78:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/DDB2DA452C22543D612ECF3051FADB7B717B7886.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDB2DA452C22543D612ECF3051FADB7B717B7886.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/DDB2DA452C22543D612ECF3051FADB7B717B7886.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:8f:0b:fc:94:01:69:a0:52:40:f2:26:79:05:06:b5:c2:03:
         12:7b:87:36:b9:42:f5:00:ad:1c:56:41:9c:5a:ab:2d:d7:ef:
         26:7b:a2:a1:77:8f:b3:9b:e5:e3:36:3d:73:f7:88:a3:ad:4d:
         7b:65:74:f8:34:cd:ea:36:fe:d4:50:9d:ca:21:ac:6a:27:db:
         63:c3:82:2e:9b:29:64:b0:bc:32:ff:4e:f4:4e:75:ec:eb:dd:
         e4:cb:09:6d:40:1f:6e:18:e2:ef:5d:81:69:3a:11:c6:56:5e:
         2f:d4:52:f5:12:3e:2a:0f:37:bb:8c:91:a9:29:d5:4c:f9:b5:
         ac:17:7d:73:04:0d:15:40:6b:7e:41:74:0e:25:90:10:8e:21:
         ac:8a:ae:e8:57:d5:24:d8:1c:38:4c:6f:d4:c7:30:1a:bc:76:
         8d:e7:a3:3f:ee:85:3d:3e:7c:c0:ea:c4:b1:a4:2f:3d:5d:c5:
         af:65:56:0e:ca:fc:02:e9:91:d2:62:48:a7:69:24:f1:0b:2d:
         0e:d1:33:5c:38:32:ba:69:c1:cd:d8:9d:aa:e5:4e:7d:49:d4:
         34:1a:34:f0:90:bb:73:ae:03:86:2d:01:1e:e0:4e:4d:c7:e7:
         f3:3c:72:13:b1:72:3d:d6:2c:74:05:e5:1f:87:9b:b6:27:bb:
         32:48:b6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----