Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/1/5350C3F0DEB1EC513832C678B649B9E213241AEB.mft
File:                     5350C3F0DEB1EC513832C678B649B9E213241AEB.mft (raw, json)
Hash identifier:          urVg866JQg01jHhXCJtiMeZSiaNDs+GayyC5CHzW33s=
Subject key identifier:   95:CB:03:09:0F:30:01:48:1A:D2:D0:A4:1E:6D:81:E9:06:12:4D:F7
Authority key identifier: 53:50:C3:F0:DE:B1:EC:51:38:32:C6:78:B6:49:B9:E2:13:24:1A:EB
Certificate issuer:       /CN=5350C3F0DEB1EC513832C678B649B9E213241AEB
Certificate serial:       79AF5A692F69B404A791450F1B38571817428F0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5350C3F0DEB1EC513832C678B649B9E213241AEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/1/5350C3F0DEB1EC513832C678B649B9E213241AEB.mft
Manifest number:          01F1
Signing time:             Mon 15 Apr 2024 04:26:22 +0000
Manifest this update:     Mon 15 Apr 2024 04:21:22 +0000
Manifest next update:     Tue 16 Apr 2024 07:29:22 +0000
Files and hashes:         1: 5350C3F0DEB1EC513832C678B649B9E213241AEB.crl (hash: X9cAAVU2FHwWyYP2lf8sVDGcMFUbVdR8Mg37rV5AjxA=)
                          2: 323830343a333734383a3a2f33322d3332203d3e20323636343031.roa (hash: nbCNuEhat9M9mY13WzwrgoBFnLYWQIgVq02B2W3sEl8=)
                          3: 3137302e38312e36302e302f32322d3234203d3e20323636343031.roa (hash: xVKWWg3dy4tzZ3dSEX5VATrBs3N7X4Wq29AFUIXl0Jc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:af:5a:69:2f:69:b4:04:a7:91:45:0f:1b:38:57:18:17:42:8f:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5350C3F0DEB1EC513832C678B649B9E213241AEB
        Validity
            Not Before: Apr 15 04:21:22 2024 GMT
            Not After : Apr 16 07:29:22 2024 GMT
        Subject: CN=95CB03090F3001481AD2D0A41E6D81E906124DF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a6:ea:8a:21:a2:0a:70:05:d5:58:1a:8a:da:
                    f6:c8:cb:23:b8:77:89:85:91:5b:41:7b:9d:29:fd:
                    71:0e:98:8e:c4:31:c9:94:4c:4e:fc:c2:fe:b7:ef:
                    76:f9:bd:08:58:3e:19:af:aa:9c:1a:6f:d7:67:0a:
                    c6:51:0b:8b:42:0b:9d:f1:38:3b:18:8d:04:95:4a:
                    06:b5:32:75:a3:26:97:77:57:27:85:bb:fa:ac:b2:
                    7e:9e:25:09:51:98:a9:80:7f:f9:f5:2d:d5:51:da:
                    80:7c:2b:72:f6:e3:02:62:d4:41:01:c8:9e:e7:63:
                    10:98:04:77:dd:6e:e3:2f:ad:5e:93:91:b3:e8:d4:
                    c4:26:ec:43:4e:91:25:df:6f:de:fe:6d:4f:61:f1:
                    03:5a:db:66:76:6f:3d:bc:fc:b3:03:8a:3f:16:64:
                    e7:e8:50:3a:b3:0c:06:55:cd:a3:d1:36:61:c6:c2:
                    ca:05:97:39:ef:65:f9:0e:00:53:a6:57:8d:97:7e:
                    2b:38:30:d8:8c:11:b2:77:d8:ac:ee:3a:2f:2d:e0:
                    46:0b:e8:4e:ee:6f:2e:9b:45:d3:b0:b2:54:80:b0:
                    be:4f:45:ce:bf:52:4f:e3:03:3d:26:e2:f6:36:4d:
                    89:a0:54:18:f5:0f:a1:e1:8e:1c:b7:59:4f:30:84:
                    42:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CB:03:09:0F:30:01:48:1A:D2:D0:A4:1E:6D:81:E9:06:12:4D:F7
            X509v3 Authority Key Identifier:
                keyid:53:50:C3:F0:DE:B1:EC:51:38:32:C6:78:B6:49:B9:E2:13:24:1A:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/1/5350C3F0DEB1EC513832C678B649B9E213241AEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5350C3F0DEB1EC513832C678B649B9E213241AEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/1/5350C3F0DEB1EC513832C678B649B9E213241AEB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:60:a3:49:0f:e9:58:84:ce:9d:9a:6d:21:87:57:bc:52:13:
         cb:a4:c8:e4:ce:a2:68:0b:9e:7a:00:3f:85:7c:e9:14:39:0b:
         1a:82:5a:9a:02:c7:b0:ef:85:ad:d8:97:11:41:1c:75:ae:d0:
         e9:24:fd:9a:a9:66:ea:fb:83:a3:07:ee:64:01:4e:5e:7c:13:
         6b:9e:0f:37:cd:cb:03:14:4f:d3:ef:c2:12:7a:9c:77:e1:51:
         29:a7:1e:f9:f4:b1:d3:f3:3c:41:63:2a:8e:c2:e3:42:a1:e9:
         80:26:50:04:64:07:c4:f1:28:d6:a1:e6:cb:66:9a:6c:aa:98:
         61:fe:3f:84:c4:13:d1:d7:8c:b6:f2:d4:60:c3:04:b8:70:bf:
         4d:f6:03:b5:21:cd:08:9a:4e:db:12:ea:86:b0:3c:c3:c4:c2:
         96:9e:a4:f0:ae:cc:8e:da:ef:56:7b:e6:e2:09:d2:4e:d3:42:
         91:a5:c9:f5:7a:d1:85:84:a8:4a:30:63:a2:a5:d1:12:d3:de:
         ff:11:29:ff:2e:79:85:84:1d:6c:60:ac:0f:45:e8:85:ad:15:
         fe:ca:b2:4b:50:c0:44:e8:7f:dc:67:94:74:f4:49:69:37:f4:
         78:88:71:a5:5f:e5:f3:5c:28:6f:da:63:54:05:36:4b:9c:df:
         32:8a:9c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----