Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5cBrkPiEgDz2ebwCR1AmBGN7NzyN7G2v4SgnJbmoU7Pj/1/48323F4EC06250B666CEA3AD182055DC4D6CBFE6.mft
File:                     48323F4EC06250B666CEA3AD182055DC4D6CBFE6.mft (raw, json)
Hash identifier:          /aHUIjM+CRB/I4ZmJk2nwUTXUs+9GBMkkHXbthqlT0Y=
Subject key identifier:   D4:55:F7:23:1D:B9:22:5F:19:47:9B:AF:B2:8A:E5:BB:11:6F:BA:C0
Authority key identifier: 48:32:3F:4E:C0:62:50:B6:66:CE:A3:AD:18:20:55:DC:4D:6C:BF:E6
Certificate issuer:       /CN=48323F4EC06250B666CEA3AD182055DC4D6CBFE6
Certificate serial:       13B1B95F0C0A72D60C06D231576636EF58D2B296
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/48323F4EC06250B666CEA3AD182055DC4D6CBFE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5cBrkPiEgDz2ebwCR1AmBGN7NzyN7G2v4SgnJbmoU7Pj/1/48323F4EC06250B666CEA3AD182055DC4D6CBFE6.mft
Manifest number:          10
Signing time:             Sun 14 Apr 2024 20:22:34 +0000
Manifest this update:     Sun 14 Apr 2024 20:17:34 +0000
Manifest next update:     Mon 15 Apr 2024 21:44:34 +0000
Files and hashes:         1: 323830343a363934633a3a2f33322d313238203d3e20323730323631.roa (hash: C4odB8PNiv7rQie2GzGDuIt4M5v1TvAAZsh5OajCDJY=)
                          2: 3230302e3131302e3230302e302f32322d3332203d3e20323730323631.roa (hash: pmJ7csY7dLjoFSVcRu4dB9f0TN39xCTzw8qf0ba8wjo=)
                          3: 48323F4EC06250B666CEA3AD182055DC4D6CBFE6.crl (hash: ZPAeGTsshl4yF3QTuIs4CBJRevYn9sONHz1vpIHTYtQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:b1:b9:5f:0c:0a:72:d6:0c:06:d2:31:57:66:36:ef:58:d2:b2:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48323F4EC06250B666CEA3AD182055DC4D6CBFE6
        Validity
            Not Before: Apr 14 20:17:34 2024 GMT
            Not After : Apr 15 21:44:34 2024 GMT
        Subject: CN=D455F7231DB9225F19479BAFB28AE5BB116FBAC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f2:f1:92:b9:c7:68:d7:5c:4e:81:6b:ec:b0:
                    f4:ad:33:2b:29:24:3d:77:1b:53:30:f5:35:04:c3:
                    00:76:f1:42:10:cb:ad:33:77:dd:fa:c1:9a:a9:dc:
                    0c:3a:e8:c2:72:03:21:bd:4b:92:4e:98:ef:a1:78:
                    59:47:39:da:c4:a5:6d:b7:bf:26:3b:4f:a8:53:1c:
                    77:a3:4a:cf:6f:46:3b:b2:d1:1d:56:0a:76:75:55:
                    f7:70:c0:2e:3a:61:03:33:06:ab:2a:ff:b2:be:ef:
                    cf:f2:0e:cf:4f:94:50:d9:a7:db:88:55:19:6c:c7:
                    62:33:0d:69:73:b4:57:d0:59:c6:8e:e7:43:3a:b0:
                    34:aa:e8:3a:cb:dd:a9:41:df:2e:5e:39:7f:ac:4a:
                    98:98:75:1c:5d:58:9a:37:4e:bd:61:2a:42:e7:76:
                    4b:a4:2d:e4:d8:41:33:f1:60:1d:7c:55:fa:36:3b:
                    30:90:59:17:d9:8d:ec:dd:12:04:f6:ff:de:6a:bd:
                    69:a0:e9:2b:79:50:cc:28:df:3c:dc:6f:57:a8:93:
                    eb:ae:a0:15:b1:c2:c0:65:73:b9:6d:23:e1:a8:08:
                    0b:2b:4a:97:07:7f:58:a7:0e:9a:ff:b8:45:fc:1d:
                    90:2a:09:c4:d4:64:c1:73:39:76:1e:82:b6:56:ff:
                    14:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:55:F7:23:1D:B9:22:5F:19:47:9B:AF:B2:8A:E5:BB:11:6F:BA:C0
            X509v3 Authority Key Identifier:
                keyid:48:32:3F:4E:C0:62:50:B6:66:CE:A3:AD:18:20:55:DC:4D:6C:BF:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5cBrkPiEgDz2ebwCR1AmBGN7NzyN7G2v4SgnJbmoU7Pj/1/48323F4EC06250B666CEA3AD182055DC4D6CBFE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/48323F4EC06250B666CEA3AD182055DC4D6CBFE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cBrkPiEgDz2ebwCR1AmBGN7NzyN7G2v4SgnJbmoU7Pj/1/48323F4EC06250B666CEA3AD182055DC4D6CBFE6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:e3:31:5c:b1:7a:23:0c:13:7a:f4:90:7d:6e:08:62:13:3c:
         a3:b7:51:8a:0f:52:ff:50:d1:70:1b:75:d6:c5:b2:3c:95:1e:
         f4:29:e0:a9:bb:6c:3f:3a:0c:54:96:43:9d:ba:21:00:18:6d:
         f4:6f:36:cd:91:0d:a5:20:0b:75:1e:6c:9d:d1:7a:4c:be:6d:
         91:bd:90:29:10:2f:ff:22:c6:24:17:04:65:63:33:4d:00:7c:
         83:4d:85:b1:47:7c:98:4b:e1:01:2f:6b:60:6c:06:5b:b4:82:
         6e:06:2f:0b:4a:85:a6:cb:72:5d:8a:15:ee:1f:c6:b1:01:55:
         e8:63:ab:f7:99:7b:c5:44:ff:74:3f:fb:4d:cf:f8:d3:16:6a:
         d9:c6:d4:e6:87:bb:61:e4:33:7f:28:0f:4e:dc:7c:c3:52:92:
         0e:e1:b1:f8:d6:a9:c3:98:3f:f9:7c:05:09:00:3c:9b:83:f3:
         9d:2c:8c:d2:29:c3:90:65:1c:a6:bb:01:8f:94:bf:08:3d:17:
         ea:da:6b:f5:1c:91:04:df:06:0a:38:37:97:a6:ec:9d:0c:e0:
         83:78:f7:ce:41:64:27:27:a2:de:25:45:ae:f5:d4:0e:52:a1:
         5a:5b:35:f0:b6:9e:dd:78:38:26:27:7c:a5:a8:f9:0f:1f:de:
         f9:22:24:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----