Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/752kCJkQ66LxfheZ7mwidMGKfSgWuRmJLJGhHK9Ae5JL/0/A5E37A56499A8DD703E5C3737C4BF1A3B4C515A9.mft
File:                     A5E37A56499A8DD703E5C3737C4BF1A3B4C515A9.mft (raw, json)
Hash identifier:          J/q04BtNx/dWby8SwALkAZt5XdbaEyNTlnJwmU0yApQ=
Subject key identifier:   98:35:0C:C2:DA:61:DF:AD:70:A9:7B:C4:A4:6D:EE:DE:40:5F:2E:B7
Authority key identifier: A5:E3:7A:56:49:9A:8D:D7:03:E5:C3:73:7C:4B:F1:A3:B4:C5:15:A9
Certificate issuer:       /CN=A5E37A56499A8DD703E5C3737C4BF1A3B4C515A9
Certificate serial:       29B3D431CDAA0B881F9DC2C7ABB2917AA927B036
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5E37A56499A8DD703E5C3737C4BF1A3B4C515A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/752kCJkQ66LxfheZ7mwidMGKfSgWuRmJLJGhHK9Ae5JL/0/A5E37A56499A8DD703E5C3737C4BF1A3B4C515A9.mft
Manifest number:          01B9
Signing time:             Mon 15 Apr 2024 05:33:40 +0000
Manifest this update:     Mon 15 Apr 2024 05:28:40 +0000
Manifest next update:     Tue 16 Apr 2024 08:14:40 +0000
Files and hashes:         1: 323830343a336135343a3a2f33322d3438203d3e20323636303833.roa (hash: UHeTZ/3L5auLNKbUhYAJCamiMK7akLjAVvLPC8b9Apo=)
                          2: A5E37A56499A8DD703E5C3737C4BF1A3B4C515A9.crl (hash: WGp7ib6XiexINmse9ZtqOJZCTB5wcZdyD0AUcfFdf4Y=)
                          3: 34352e352e31362e302f32322d3234203d3e20323636303833.roa (hash: QelYQ6F954Z5ZcuWndyQCMj9Fge4VTDRXrxeZhs0kEw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:b3:d4:31:cd:aa:0b:88:1f:9d:c2:c7:ab:b2:91:7a:a9:27:b0:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5E37A56499A8DD703E5C3737C4BF1A3B4C515A9
        Validity
            Not Before: Apr 15 05:28:40 2024 GMT
            Not After : Apr 16 08:14:40 2024 GMT
        Subject: CN=98350CC2DA61DFAD70A97BC4A46DEEDE405F2EB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:17:f2:1a:d2:6a:31:fe:24:97:b6:88:5f:da:
                    23:7e:74:62:b2:ee:d4:f0:d8:b0:87:fe:90:f0:15:
                    99:89:f0:30:a2:f0:de:18:88:75:cf:96:16:a7:31:
                    c1:e0:54:13:ba:13:4c:75:1e:95:c8:3a:ca:8b:a8:
                    80:f7:11:da:f4:a0:87:ba:3c:21:c1:a6:f0:f9:19:
                    04:95:80:2d:61:cb:88:6b:d4:1f:d6:9f:ee:e2:6e:
                    b3:0f:2a:d8:75:72:05:d3:7f:fd:94:3d:ec:06:93:
                    cf:13:98:64:8d:d5:25:b8:6f:f3:c9:a5:16:15:bd:
                    06:59:35:9f:12:4a:a0:b7:9c:ec:5c:c8:e8:95:48:
                    41:9d:c5:88:64:6e:0e:6a:e2:cf:68:a8:2e:f8:c3:
                    aa:3e:25:97:96:bc:0a:84:a0:45:af:59:53:6f:7d:
                    01:0a:6b:dd:dd:65:fc:a1:25:3b:0c:ef:42:e6:d6:
                    bc:cf:c8:fa:19:7b:e2:93:ad:2f:b8:79:07:f6:aa:
                    78:12:35:ae:ec:72:59:38:3e:ad:a8:d2:62:af:7d:
                    2d:46:c8:0e:71:c0:79:c3:b3:04:b1:6f:5b:1e:e6:
                    8e:f7:f0:91:07:44:62:5a:2e:06:48:72:de:0f:e3:
                    5e:a9:2b:53:c1:ff:95:96:ec:ac:03:fd:69:11:21:
                    81:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:35:0C:C2:DA:61:DF:AD:70:A9:7B:C4:A4:6D:EE:DE:40:5F:2E:B7
            X509v3 Authority Key Identifier:
                keyid:A5:E3:7A:56:49:9A:8D:D7:03:E5:C3:73:7C:4B:F1:A3:B4:C5:15:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/752kCJkQ66LxfheZ7mwidMGKfSgWuRmJLJGhHK9Ae5JL/0/A5E37A56499A8DD703E5C3737C4BF1A3B4C515A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5E37A56499A8DD703E5C3737C4BF1A3B4C515A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/752kCJkQ66LxfheZ7mwidMGKfSgWuRmJLJGhHK9Ae5JL/0/A5E37A56499A8DD703E5C3737C4BF1A3B4C515A9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:e7:fd:ce:a3:d5:44:b7:d5:13:bd:f8:20:cf:12:70:09:31:
         f3:9a:db:84:66:f6:4c:fe:84:60:83:65:ab:83:f7:fe:3e:2d:
         b9:a5:18:11:5e:86:7d:e8:34:c2:ca:8a:95:ba:a9:6f:69:81:
         d6:37:f4:cd:d9:77:a3:ba:88:d7:ab:86:e1:e4:95:e1:d8:bf:
         a2:f2:49:5c:52:61:5e:a8:dd:6d:26:8b:b4:f1:5a:bd:62:62:
         22:d3:6b:89:6f:23:07:d9:83:42:fe:68:48:a1:3c:46:a5:24:
         b6:0b:5a:c9:2e:f6:3c:ec:83:cb:47:1f:8f:68:4e:e2:41:cb:
         ec:55:1b:7a:94:ca:be:bd:d6:03:88:d7:0f:42:76:3e:eb:b0:
         b9:cb:a4:31:90:26:a4:b7:a1:e7:a6:0f:ef:1c:48:7b:9e:99:
         8b:ba:36:f3:12:af:74:5b:0d:f5:b8:18:f6:04:93:cb:60:00:
         b2:0e:7c:5a:1f:17:d6:d8:29:9c:5b:ac:c7:22:df:c7:1c:fe:
         d9:c6:16:b3:3a:71:fa:ca:e7:7a:9d:e7:9d:61:60:a3:cc:37:
         67:3a:c3:a3:0f:51:2b:69:41:bc:c0:09:77:aa:3c:f5:1b:6f:
         d9:65:4f:7b:71:e7:72:e4:23:5f:dc:09:2b:bf:c6:c6:69:78:
         d0:b7:ff:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----