Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/AD5387D9495868D8BE3A9449C0A4182442615CAA.mft
File:                     AD5387D9495868D8BE3A9449C0A4182442615CAA.mft (raw, json)
Hash identifier:          +3qYPsV1gniKWN1aZM8OeQxe3h5DMI0SG5Irk5mrPLI=
Subject key identifier:   A6:A7:23:C4:B8:B1:82:2D:9C:5E:80:E6:AC:7A:2A:43:80:C6:F6:EE
Authority key identifier: AD:53:87:D9:49:58:68:D8:BE:3A:94:49:C0:A4:18:24:42:61:5C:AA
Certificate issuer:       /CN=AD5387D9495868D8BE3A9449C0A4182442615CAA
Certificate serial:       7779904C7A27FEC7A9EDC216D74FF741A5CCB28D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD5387D9495868D8BE3A9449C0A4182442615CAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/AD5387D9495868D8BE3A9449C0A4182442615CAA.mft
Manifest number:          49
Signing time:             Mon 15 Apr 2024 01:06:09 +0000
Manifest this update:     Mon 15 Apr 2024 01:01:09 +0000
Manifest next update:     Tue 16 Apr 2024 03:17:09 +0000
Files and hashes:         1: 3138312e3138392e38302e302f32322d3332203d3e20323731363236.roa (hash: j8kivuVNu9hKCzX2ltx6u+VuDfb25PXvZnCMkT7gnE4=)
                          2: AD5387D9495868D8BE3A9449C0A4182442615CAA.crl (hash: 9X6Vx1kTIVU/o+vWUf2yiu4R47wPWoh1xVLH3RZLV2o=)
                          3: 323830343a376537383a3a2f33322d313238203d3e20323731363236.roa (hash: q1nojoG60utUp2toXkFUEnWcRIYwF6LBDWY2Fm44VbU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:79:90:4c:7a:27:fe:c7:a9:ed:c2:16:d7:4f:f7:41:a5:cc:b2:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD5387D9495868D8BE3A9449C0A4182442615CAA
        Validity
            Not Before: Apr 15 01:01:09 2024 GMT
            Not After : Apr 16 03:17:09 2024 GMT
        Subject: CN=A6A723C4B8B1822D9C5E80E6AC7A2A4380C6F6EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:83:84:dc:55:8e:80:27:ac:52:01:36:2d:09:
                    3b:f9:c6:8e:2b:39:0d:48:28:b4:7c:d2:ba:83:7a:
                    55:f3:d7:8e:93:21:f6:b2:c7:31:bb:40:53:7a:cb:
                    ac:ce:99:df:56:3f:46:58:ad:4e:4e:25:a4:4a:20:
                    c0:45:0d:82:69:8d:66:8b:84:17:6b:3d:19:3d:af:
                    a4:74:1b:3a:8c:47:38:e2:4e:6b:33:d7:3a:05:4c:
                    74:2d:7b:af:6e:77:16:55:c1:4f:69:e5:1e:40:b2:
                    d2:21:b8:40:e9:cc:16:84:b6:37:b8:43:6c:67:bc:
                    b1:b4:b0:91:c2:c4:5f:b6:2c:8d:b4:01:f1:d7:d2:
                    44:53:3a:cc:8a:5a:7b:ae:fc:27:50:9c:96:19:47:
                    d4:38:5c:5f:30:47:ef:56:4d:5e:e6:ef:c0:b8:eb:
                    29:ca:0f:46:1d:e4:59:06:9d:8c:37:b6:5a:79:1e:
                    b4:18:9f:b3:7b:24:aa:e6:b1:e3:4b:27:3d:03:c4:
                    1a:52:a4:81:32:f4:ac:70:75:76:19:13:7f:35:97:
                    3a:cc:66:ce:bd:84:72:a6:d7:d1:0e:20:89:a2:cc:
                    c7:35:4d:87:05:fe:6b:b5:35:55:7d:f9:76:53:b4:
                    a7:6b:b5:f2:b1:e0:ce:ec:17:c5:3b:3f:b8:14:95:
                    e9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A7:23:C4:B8:B1:82:2D:9C:5E:80:E6:AC:7A:2A:43:80:C6:F6:EE
            X509v3 Authority Key Identifier:
                keyid:AD:53:87:D9:49:58:68:D8:BE:3A:94:49:C0:A4:18:24:42:61:5C:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/AD5387D9495868D8BE3A9449C0A4182442615CAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD5387D9495868D8BE3A9449C0A4182442615CAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/AD5387D9495868D8BE3A9449C0A4182442615CAA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:41:89:50:51:74:16:1f:85:ea:3e:1d:f1:05:2f:54:a3:d7:
         3e:0e:35:3e:9a:c9:52:7f:07:d3:31:81:b3:a3:69:bd:22:e6:
         20:99:d2:99:dc:72:2b:2e:20:f6:6b:17:d2:b2:b8:cc:6f:2f:
         56:9b:d1:57:f5:ce:6e:b9:12:3a:60:4c:6f:c1:63:4c:c6:48:
         e2:7f:02:34:c2:cd:ff:b9:68:9f:c1:d7:70:1a:2a:51:4e:ab:
         6d:96:92:6b:c3:36:d7:ed:63:40:56:e5:15:51:20:e7:9c:34:
         43:12:c4:40:70:2b:47:b7:7d:25:d7:eb:a8:e9:d4:74:a5:a6:
         ea:28:87:e7:d3:7d:8a:69:48:81:d1:74:fd:3a:b3:05:7d:8b:
         1c:be:ad:b9:10:15:a9:9b:e5:63:14:d4:34:6b:e4:23:39:5e:
         e0:7e:fc:7a:c8:84:20:c3:09:cc:1e:3d:ed:50:1f:6f:30:b2:
         e2:be:b4:f0:03:6f:6f:d0:fd:62:f8:19:77:66:d2:c4:3c:07:
         9c:fa:23:7d:34:a9:1c:eb:55:8c:75:63:33:72:b2:64:ff:0e:
         6c:a4:7d:68:43:03:32:7b:b8:10:64:c8:f7:dc:ca:93:cf:d5:
         b6:66:0e:18:9c:12:3e:8f:6d:f5:ce:19:60:cf:b5:aa:a8:d9:
         d1:ee:a1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----