Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/861431B4FBAA21381E37B3A294DF68C5F828ED6F.mft
File:                     861431B4FBAA21381E37B3A294DF68C5F828ED6F.mft (raw, json)
Hash identifier:          aDbuvhbAY65x8zwirkPdVvf4F11Dm6VnJ0x7sWxBagM=
Subject key identifier:   6D:31:7E:EA:70:BF:B7:27:31:69:C9:9B:80:53:F1:C8:F8:E0:3E:F4
Authority key identifier: 86:14:31:B4:FB:AA:21:38:1E:37:B3:A2:94:DF:68:C5:F8:28:ED:6F
Certificate issuer:       /CN=861431B4FBAA21381E37B3A294DF68C5F828ED6F
Certificate serial:       5DFFA3BA80E9735FAFC79D63552FC3E31175F6D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/861431B4FBAA21381E37B3A294DF68C5F828ED6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/861431B4FBAA21381E37B3A294DF68C5F828ED6F.mft
Manifest number:          5C
Signing time:             Mon 15 Apr 2024 07:01:34 +0000
Manifest this update:     Mon 15 Apr 2024 06:56:34 +0000
Manifest next update:     Tue 16 Apr 2024 10:25:34 +0000
Files and hashes:         1: 323830343a376133633a3a2f33322d313238203d3e20323731333537.roa (hash: bI3BGW1sdkWftvmqn+4y3XD5Mb72YhGq9PsIKc0DXYw=)
                          2: 861431B4FBAA21381E37B3A294DF68C5F828ED6F.crl (hash: fYsVBkPHHpVr47equtS0ZWg78GzbCfQV/8UyR5dHgZY=)
                          3: 3137372e3132342e3130382e302f32332d3332203d3e20323731333537.roa (hash: WpCUC4eUBkRcTe8nHNPnaruh8iafppIh2OMRcW4OD9A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ff:a3:ba:80:e9:73:5f:af:c7:9d:63:55:2f:c3:e3:11:75:f6:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=861431B4FBAA21381E37B3A294DF68C5F828ED6F
        Validity
            Not Before: Apr 15 06:56:34 2024 GMT
            Not After : Apr 16 10:25:34 2024 GMT
        Subject: CN=6D317EEA70BFB7273169C99B8053F1C8F8E03EF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2e:a2:b0:6d:05:3b:f7:0d:39:40:19:73:c9:
                    7e:81:06:47:27:a9:6d:a3:d1:c0:59:81:f2:65:c1:
                    ab:4c:7f:6e:7a:91:af:a8:05:3f:0c:85:8b:5c:e1:
                    2b:9a:32:32:6f:3a:a1:75:d3:ce:00:37:94:8a:42:
                    3f:d0:6e:2b:0e:38:86:6c:b1:90:62:30:c3:26:8d:
                    13:e1:19:6b:d3:55:18:4c:89:a2:ad:de:c1:f6:ca:
                    36:98:7f:80:97:11:78:b8:05:f8:ca:02:ab:c6:1e:
                    43:92:ba:61:d2:1d:d0:a9:56:98:1b:3e:19:a4:75:
                    ea:f5:51:71:ed:1d:8d:c3:05:81:70:36:24:ff:47:
                    c5:ef:f0:15:5f:c9:75:ac:24:d0:6a:97:2b:46:37:
                    62:0b:a8:2e:33:b1:30:dc:6e:e5:23:10:1a:1b:5d:
                    bc:7a:60:d5:41:fd:43:ec:b8:39:a5:b8:39:a1:11:
                    57:e7:91:9d:d4:42:20:8a:94:b5:a1:0f:15:4e:ad:
                    dd:c2:6c:2f:46:5d:14:71:42:2d:a7:eb:ac:2d:4b:
                    52:d2:65:e6:d2:59:f9:04:a8:60:b9:81:dc:ce:e4:
                    94:7e:14:62:6e:ef:ab:83:62:23:1b:1a:11:b6:2e:
                    c2:cd:d8:ff:b0:42:7c:20:9c:76:b4:c9:bf:a7:c7:
                    8b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:31:7E:EA:70:BF:B7:27:31:69:C9:9B:80:53:F1:C8:F8:E0:3E:F4
            X509v3 Authority Key Identifier:
                keyid:86:14:31:B4:FB:AA:21:38:1E:37:B3:A2:94:DF:68:C5:F8:28:ED:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/861431B4FBAA21381E37B3A294DF68C5F828ED6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/861431B4FBAA21381E37B3A294DF68C5F828ED6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/861431B4FBAA21381E37B3A294DF68C5F828ED6F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:88:2d:eb:65:75:1c:33:1f:7e:60:19:cc:ac:53:32:34:0f:
         f1:72:b0:e0:66:4f:48:0c:8e:c0:45:1b:95:27:8e:bd:c8:55:
         3e:5d:22:6f:20:40:37:57:46:d0:16:6f:43:0b:7d:9f:a3:18:
         3c:87:1e:e5:56:0c:f0:33:eb:68:1e:d5:2d:eb:e8:3f:93:52:
         7e:77:be:94:f0:55:18:75:a7:cb:cf:d4:4e:38:27:39:9b:03:
         d7:6f:53:48:dd:9f:a9:82:b9:a4:11:76:0d:b1:12:7c:46:47:
         3b:34:0d:01:b5:8b:ff:8d:f9:96:36:70:19:ce:99:69:cd:dc:
         91:77:0f:ac:37:58:9b:88:b2:fc:19:56:88:37:18:d6:b6:4e:
         90:4f:5c:01:c6:bf:de:7d:07:76:e2:c4:2c:f2:86:8a:29:a3:
         d7:62:71:00:22:c4:82:3b:f1:10:f9:6c:71:bb:d3:f0:95:62:
         f2:67:a3:ec:c6:0d:be:da:6c:27:20:0c:77:5d:25:47:f2:ad:
         49:31:3f:35:b1:30:f8:dd:ff:54:c4:a1:e9:76:fd:4c:15:06:
         a5:5f:aa:c6:e6:73:b0:f4:58:97:4a:dd:92:95:fa:7f:12:7d:
         59:1b:97:07:d0:dd:71:d1:86:04:7b:6e:cb:2d:e2:2d:4c:09:
         4e:6d:9f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----