Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6pHVdiTXxFxtTaxbPTr74ArtFrbxUDB9oKQKmBcnb14Q/0/5A85BCAE6B3613021A13B7CC3E6F5F17CA22CA59.mft
File:                     5A85BCAE6B3613021A13B7CC3E6F5F17CA22CA59.mft (raw, json)
Hash identifier:          JLZ59qUNtbZ63AJxLeZq/AK00D1GQvyFXZMBu9b5/90=
Subject key identifier:   4D:D2:92:B1:EC:71:B4:88:47:21:48:86:D1:C2:9C:1B:68:19:11:D1
Authority key identifier: 5A:85:BC:AE:6B:36:13:02:1A:13:B7:CC:3E:6F:5F:17:CA:22:CA:59
Certificate issuer:       /CN=5A85BCAE6B3613021A13B7CC3E6F5F17CA22CA59
Certificate serial:       6756E8D55594F568D40EA460D935C43A9BA3B2FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A85BCAE6B3613021A13B7CC3E6F5F17CA22CA59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6pHVdiTXxFxtTaxbPTr74ArtFrbxUDB9oKQKmBcnb14Q/0/5A85BCAE6B3613021A13B7CC3E6F5F17CA22CA59.mft
Manifest number:          025E
Signing time:             Mon 15 Apr 2024 04:28:06 +0000
Manifest this update:     Mon 15 Apr 2024 04:23:06 +0000
Manifest next update:     Tue 16 Apr 2024 06:43:06 +0000
Files and hashes:         1: 3133382e39372e36382e302f32322d3234203d3e20323634313437.roa (hash: ugO0mfbJ+m1RdIV3esFk68he63mgZCLkAS3rsHzn+qA=)
                          2: 5A85BCAE6B3613021A13B7CC3E6F5F17CA22CA59.crl (hash: 1nN8FLry3q3LL3ee0O/OPWVupt+zDeh63OqJEJEKfQQ=)
                          3: 323830343a323333303a3a2f33322d3332203d3e20323634313437.roa (hash: MaR724vYl6IjtsVElO5wgskrf4LSYyPALJBJU/KdbX4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:56:e8:d5:55:94:f5:68:d4:0e:a4:60:d9:35:c4:3a:9b:a3:b2:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A85BCAE6B3613021A13B7CC3E6F5F17CA22CA59
        Validity
            Not Before: Apr 15 04:23:06 2024 GMT
            Not After : Apr 16 06:43:06 2024 GMT
        Subject: CN=4DD292B1EC71B48847214886D1C29C1B681911D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5b:e0:5d:ea:e5:b0:c6:e9:3f:be:14:b2:d2:
                    40:8c:34:38:cc:9c:21:1b:94:40:4e:d8:d4:21:e9:
                    c2:ed:f9:4d:69:41:b7:c6:89:8e:03:c3:b5:a4:55:
                    2e:32:b4:a6:56:8e:8d:a7:a7:dc:9e:37:f9:ce:46:
                    f4:22:3a:ca:d2:17:a4:dc:83:e7:07:91:d2:73:a2:
                    42:e6:ad:a2:a7:89:29:5c:76:ae:5d:95:8b:c9:a4:
                    c2:9b:a2:4c:1a:0b:91:9d:41:cd:c9:ed:96:a6:fe:
                    94:54:16:46:bf:f2:63:1b:70:03:80:6f:5b:76:bf:
                    3b:e4:a0:09:93:22:5b:1e:c0:25:d1:81:54:4b:fe:
                    57:8a:2c:29:cf:f8:91:9a:00:5c:0a:5b:23:a4:10:
                    2e:d5:4e:5c:6e:f9:48:cb:b9:3f:bc:a0:93:41:a0:
                    81:2c:a3:29:27:c4:70:36:eb:6a:18:00:c3:9a:e3:
                    f5:20:24:72:1d:4e:4d:92:b1:3b:84:61:1d:11:c9:
                    25:6b:e1:95:4e:44:3f:b9:da:79:2a:36:47:11:61:
                    e5:0e:d5:c8:0d:39:61:4e:c0:bf:48:b9:1c:b1:b0:
                    db:09:34:f1:67:c8:17:fc:1d:bf:c3:d2:63:e4:f7:
                    42:45:6c:a9:9d:a5:42:02:47:52:9a:6f:b1:51:f6:
                    28:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D2:92:B1:EC:71:B4:88:47:21:48:86:D1:C2:9C:1B:68:19:11:D1
            X509v3 Authority Key Identifier:
                keyid:5A:85:BC:AE:6B:36:13:02:1A:13:B7:CC:3E:6F:5F:17:CA:22:CA:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6pHVdiTXxFxtTaxbPTr74ArtFrbxUDB9oKQKmBcnb14Q/0/5A85BCAE6B3613021A13B7CC3E6F5F17CA22CA59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A85BCAE6B3613021A13B7CC3E6F5F17CA22CA59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6pHVdiTXxFxtTaxbPTr74ArtFrbxUDB9oKQKmBcnb14Q/0/5A85BCAE6B3613021A13B7CC3E6F5F17CA22CA59.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:08:e0:76:58:2d:15:3b:92:69:cd:a2:84:a1:cb:7b:19:58:
         3d:bd:ba:07:e8:d9:ad:c9:98:76:e2:a6:8f:47:2d:21:47:b8:
         9f:7e:e4:e6:37:05:d5:19:22:77:e6:49:43:9e:76:46:24:2e:
         ea:e4:a9:b3:a0:8b:7f:a7:7f:3f:df:2b:7c:72:26:da:0a:9f:
         d5:bd:03:e0:d0:56:4a:f5:57:49:c9:e1:81:fb:2a:47:78:a7:
         00:88:2a:87:51:f3:66:d1:81:52:34:fa:e4:81:14:ef:15:fd:
         3b:52:cc:1a:7a:16:39:10:e2:8f:3a:37:85:bd:a8:b7:70:8d:
         7d:1c:57:5b:79:6f:35:cf:69:ff:3b:d3:fa:ce:76:1e:c1:ed:
         65:3a:d1:48:36:5a:9a:fd:25:9e:e9:16:55:fe:45:af:17:15:
         66:51:cc:f9:5e:13:6f:af:8a:b9:c4:4f:90:01:41:1a:55:86:
         bd:dd:9e:ee:a9:68:54:41:e6:50:e6:57:8d:d9:5a:bc:9f:79:
         60:1c:46:94:04:31:4b:05:8d:44:8b:ec:0b:61:5d:df:16:5a:
         59:fa:ab:57:b8:34:76:1a:08:d6:34:b8:98:30:f7:84:0b:da:
         44:6d:d0:da:a5:b1:bb:17:b8:38:06:38:5a:9b:52:44:99:93:
         3d:80:08:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----