Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/70E16C82EF433C8672E0C20D7962F17FA03BD3A1.mft
File:                     70E16C82EF433C8672E0C20D7962F17FA03BD3A1.mft (raw, json)
Hash identifier:          Fijk7B65fvXvz066ImHr2vjDPTXmXILxesUqP/l8SUs=
Subject key identifier:   50:BC:20:2F:86:55:67:53:FA:F2:DA:42:54:D5:57:2A:E2:C1:13:0F
Authority key identifier: 70:E1:6C:82:EF:43:3C:86:72:E0:C2:0D:79:62:F1:7F:A0:3B:D3:A1
Certificate issuer:       /CN=70E16C82EF433C8672E0C20D7962F17FA03BD3A1
Certificate serial:       0E6E7E59F5C30EE50C6FC7A267911BC4DF4876FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70E16C82EF433C8672E0C20D7962F17FA03BD3A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/70E16C82EF433C8672E0C20D7962F17FA03BD3A1.mft
Manifest number:          023A
Signing time:             Sat 13 Jan 2024 17:06:48 +0000
Manifest this update:     Sat 13 Jan 2024 17:01:48 +0000
Manifest next update:     Sun 14 Jan 2024 20:24:48 +0000
Files and hashes:         1: 323830343a383162303a3a2f33322d3438203d3e20323732343730.roa (hash: kfl/hysEEXGb8+vFL+z3X2Xo6Nzns4MT1bo4knh+zEo=)
                          2: 70E16C82EF433C8672E0C20D7962F17FA03BD3A1.crl (hash: D6TU5TnuQ/CSAjnhMoOWYVTJwTReiSrteNOvj93c2nY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:6e:7e:59:f5:c3:0e:e5:0c:6f:c7:a2:67:91:1b:c4:df:48:76:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70E16C82EF433C8672E0C20D7962F17FA03BD3A1
        Validity
            Not Before: Jan 13 17:01:48 2024 GMT
            Not After : Jan 14 20:24:48 2024 GMT
        Subject: CN=50BC202F86556753FAF2DA4254D5572AE2C1130F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d6:e1:0c:b1:5f:3d:9b:5c:f8:e5:62:e1:d1:
                    27:5d:cb:6a:5b:9e:2e:1a:7b:20:31:b7:91:08:e1:
                    8b:b1:27:71:09:83:5f:b7:62:79:00:04:9d:3c:18:
                    69:f2:f3:24:63:3c:13:1f:f4:b7:22:ff:09:74:05:
                    b5:16:67:cf:e6:27:fc:12:73:94:1b:29:b5:ae:56:
                    49:ec:db:30:97:10:6c:96:02:53:58:f9:47:84:b2:
                    56:16:c4:28:1e:dc:c3:0d:b8:35:06:d4:2e:0b:56:
                    a3:23:9c:9d:e2:9f:0e:1a:94:f8:45:52:a5:a6:ff:
                    54:b5:22:1b:e5:45:be:61:3c:90:f2:5e:aa:c6:a4:
                    ea:fd:58:04:5a:8e:1e:ef:a0:74:83:93:23:2e:99:
                    9d:8e:0d:bc:b7:99:91:43:61:fe:da:80:22:64:48:
                    26:38:d3:7f:16:f9:70:bc:62:fa:e6:db:ae:d8:14:
                    0e:e4:fc:d7:72:27:01:de:e9:b7:46:f6:59:c7:f4:
                    17:50:7a:4e:91:aa:87:43:84:db:81:d5:f6:6e:a7:
                    80:c1:35:df:e4:ad:7c:49:98:4f:16:cf:b3:01:6e:
                    7c:33:7b:96:70:ca:c2:9b:0a:16:eb:0c:05:bb:90:
                    1f:c2:af:e7:29:7a:01:de:07:ac:9b:bd:76:ad:bd:
                    a1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BC:20:2F:86:55:67:53:FA:F2:DA:42:54:D5:57:2A:E2:C1:13:0F
            X509v3 Authority Key Identifier:
                keyid:70:E1:6C:82:EF:43:3C:86:72:E0:C2:0D:79:62:F1:7F:A0:3B:D3:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/70E16C82EF433C8672E0C20D7962F17FA03BD3A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70E16C82EF433C8672E0C20D7962F17FA03BD3A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/70E16C82EF433C8672E0C20D7962F17FA03BD3A1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:a7:98:2d:65:8c:e0:97:d0:1d:21:fc:4d:1e:22:ff:6b:ad:
         bf:d0:f9:e7:ab:ff:0a:c1:3c:d4:d4:c3:7a:ed:bf:78:a1:38:
         88:f8:e2:17:6f:e9:db:44:ad:c3:69:e2:9c:e6:e4:4c:8b:cd:
         4c:b7:2c:89:09:9e:98:91:91:37:d1:e2:4d:4a:c9:56:63:ce:
         1e:ce:3d:a6:67:4c:79:3c:c8:04:40:c3:8c:fb:f9:a2:ee:00:
         58:e2:44:13:fb:88:80:4e:71:90:50:d5:55:00:5b:30:7c:1f:
         fe:fa:42:04:3b:d0:99:e1:d3:b9:66:25:cb:10:3b:aa:c7:77:
         94:ba:59:67:da:26:b7:e1:05:ee:47:fc:0a:1b:7c:51:84:56:
         0b:b5:b6:19:94:92:50:0c:8a:00:7a:e8:12:2b:f0:82:8c:b2:
         39:17:51:b0:31:14:ea:74:96:7f:bb:76:3f:87:2e:c8:6c:e4:
         b0:77:16:33:9e:90:3f:df:26:3e:bf:77:86:c0:18:d3:dc:f4:
         fa:7e:f9:89:b8:07:ca:e6:2f:b3:44:b7:24:9a:27:dd:19:57:
         b1:93:8b:9c:72:c2:31:d9:e6:8d:a5:51:83:18:3d:d6:6a:11:
         c6:8b:cb:9a:f7:b7:5f:29:5e:0f:d0:16:66:46:59:02:a5:86:
         ff:7d:7c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----