Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/1/5364A207C44E0DC6A76C29697E268F4E5D5DF34E.mft
File:                     5364A207C44E0DC6A76C29697E268F4E5D5DF34E.mft (raw, json)
Hash identifier:          PQQyqwCna44IPhwSwUHjyellGGoHPXijvR8JtXGQTKY=
Subject key identifier:   CD:9C:35:84:BF:E2:5E:94:B0:7E:EB:6D:F0:C4:7E:C2:0D:3D:32:55
Authority key identifier: 53:64:A2:07:C4:4E:0D:C6:A7:6C:29:69:7E:26:8F:4E:5D:5D:F3:4E
Certificate issuer:       /CN=5364A207C44E0DC6A76C29697E268F4E5D5DF34E
Certificate serial:       7B9BF34BD4BA5FB96282765328C1B648EED85B93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5364A207C44E0DC6A76C29697E268F4E5D5DF34E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/1/5364A207C44E0DC6A76C29697E268F4E5D5DF34E.mft
Manifest number:          1B
Signing time:             Sat 20 Apr 2024 22:09:44 +0000
Manifest this update:     Sat 20 Apr 2024 22:04:44 +0000
Manifest next update:     Mon 22 Apr 2024 00:27:44 +0000
Files and hashes:         1: 323830343a373634633a3a2f33322d3438203d3e20323731313032.roa (hash: R5i0C5gFDyNQnoMbrz3iaaPxj/cu4EEpgznJn/P3yHk=)
                          2: 3137392e34382e3232302e302f32322d3234203d3e20323731313032.roa (hash: ZJmQnNq0jSIAprvCZA2ReGJ0r17x4/0qwOAHseOgFj0=)
                          3: 5364A207C44E0DC6A76C29697E268F4E5D5DF34E.crl (hash: UvcFoSa2qhwsdRc2HIbpHvNRW4jT/roYPcaOGIu+2UY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:9b:f3:4b:d4:ba:5f:b9:62:82:76:53:28:c1:b6:48:ee:d8:5b:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5364A207C44E0DC6A76C29697E268F4E5D5DF34E
        Validity
            Not Before: Apr 20 22:04:44 2024 GMT
            Not After : Apr 22 00:27:44 2024 GMT
        Subject: CN=CD9C3584BFE25E94B07EEB6DF0C47EC20D3D3255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0c:68:cc:96:3c:fb:5a:00:4d:fe:79:d0:8a:
                    1e:2b:08:1c:1b:aa:80:c6:a6:8a:48:95:41:e3:4f:
                    fe:2c:03:4f:eb:71:33:a6:6c:a5:3c:4a:f1:d4:57:
                    cd:7a:02:d4:fa:e9:8d:72:d6:21:cb:03:f3:bd:a0:
                    2c:3a:ab:54:3e:c3:fd:57:fb:86:05:28:a5:59:3e:
                    55:d1:e1:53:c9:4e:34:e1:66:19:ac:bc:df:c3:01:
                    c1:22:cb:e9:d5:61:56:c4:9c:0f:73:01:85:ec:38:
                    0f:89:62:83:44:45:62:67:85:a2:92:25:85:22:da:
                    fd:d3:ed:ab:ce:7e:f6:f7:49:7a:f7:54:0c:97:8e:
                    18:b0:3a:35:92:43:0a:1c:4f:f1:4e:be:03:a4:df:
                    d8:d4:39:22:a2:1b:68:c0:6c:65:14:44:f9:26:ac:
                    5f:14:b3:bd:19:ba:8c:a9:43:4d:26:64:9e:5f:cd:
                    d7:3e:0c:44:59:bf:f6:4f:cc:53:c9:9d:e7:9c:2c:
                    1c:28:00:bc:0f:3f:1c:be:2c:b4:6c:e9:6c:a6:75:
                    7a:b6:6c:96:e4:77:59:34:bd:2e:2a:3c:03:4b:86:
                    ed:52:a6:18:d5:40:9b:32:29:d2:ac:9a:6b:d1:77:
                    a4:58:71:e6:3c:dc:d4:ca:aa:27:37:cd:2e:42:1f:
                    ab:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:9C:35:84:BF:E2:5E:94:B0:7E:EB:6D:F0:C4:7E:C2:0D:3D:32:55
            X509v3 Authority Key Identifier:
                keyid:53:64:A2:07:C4:4E:0D:C6:A7:6C:29:69:7E:26:8F:4E:5D:5D:F3:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/1/5364A207C44E0DC6A76C29697E268F4E5D5DF34E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5364A207C44E0DC6A76C29697E268F4E5D5DF34E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/1/5364A207C44E0DC6A76C29697E268F4E5D5DF34E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:63:c9:1c:eb:88:70:d9:12:ea:95:f1:7d:93:39:c4:e6:57:
         c0:99:cc:a5:25:9e:52:56:d7:fc:78:5d:5f:51:88:95:17:4f:
         dd:77:72:c4:c6:f5:d0:32:60:f6:32:00:ae:bb:8d:bd:a1:c8:
         60:72:f7:21:52:9c:84:cc:d3:c8:1c:5b:0e:da:2d:0f:14:59:
         e1:ce:dd:56:20:74:14:56:a5:6f:ba:cb:7b:ad:bd:7c:7c:de:
         e8:d5:bf:81:98:2b:4f:34:e5:b2:14:2f:08:e0:91:13:9d:85:
         2a:d9:cb:9c:87:74:7c:31:31:0e:8a:0d:7f:a6:17:37:d8:f5:
         e0:69:09:5c:d9:5e:14:e1:59:89:f3:45:62:81:9b:1a:68:69:
         a4:1a:d2:8a:e9:51:55:81:0f:63:b5:f0:a8:8d:42:1d:18:5a:
         86:a3:c1:02:68:06:26:b0:e8:23:9b:35:90:dc:3f:c8:19:00:
         5c:f4:f6:c1:47:70:e8:6e:a0:b9:19:d5:1a:7e:f4:10:61:54:
         da:34:b4:7c:1b:af:b2:32:f3:ae:8f:a9:e8:dc:e2:64:c2:11:
         4d:cf:4e:30:e2:ae:b1:9e:ab:ca:d5:5f:8a:a5:0c:0b:a2:a4:
         18:8e:6a:29:b3:de:c7:f8:70:f5:d6:b1:3d:47:7d:92:0c:17:
         ce:a8:e0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----