Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.mft
File:                     533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.mft (raw, json)
Hash identifier:          N03h80t8DKR6nRaLlWsHiajzCjaNqOjLpPFnbJrFZUg=
Subject key identifier:   3D:1C:8F:67:C9:3F:F9:8C:73:13:FC:D0:60:2C:4A:68:4E:FD:EE:42
Authority key identifier: 53:3B:B6:1C:76:F4:3E:E8:E0:6A:E3:8A:7D:86:8E:45:B5:E9:F3:B0
Certificate issuer:       /CN=533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0
Certificate serial:       5F5960A0FD120C615FECD49AE44437AE39670A70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.mft
Manifest number:          06F5
Signing time:             Sun 14 Apr 2024 23:12:00 +0000
Manifest this update:     Sun 14 Apr 2024 23:07:00 +0000
Manifest next update:     Mon 15 Apr 2024 23:12:00 +0000
Files and hashes:         1: 533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.crl (hash: CFSJClzL+v5KodXMzows37XXs+Vy2YTXxPruaKYBmGE=)
                          2: 3137302e302e3131322e302f32322d3232203d3e20323634393639.roa (hash: /yipQD+ZMwPjphqJnOBTV7rS6umCrZqPa/YE+kgoH44=)
                          3: 3137302e302e3131332e302f32342d3234203d3e20323634393639.roa (hash: FwzVgmTjFphrjRgTwxR+dBPKWhRCLnXiAJJSbW3gxnc=)
                          4: 323830343a333062303a633030303a3a2f33342d3334203d3e20323634393639.roa (hash: T9CJ0qapPf73NUwNkTULaxIMj5bNGBUDmjZfpo0/A8c=)
                          5: 323830343a333062303a3a2f33322d3332203d3e20323634393639.roa (hash: kNmsBcWzc0etYKSpDFbbZBAxT+BmYLkHdgnRwphivlk=)
                          6: 323830343a333062303a343030303a3a2f33342d3334203d3e20323634393639.roa (hash: 6eOi8yFPKeQMVgCBrU4gJMDbMu6iHwz/X9EaHzX02uo=)
                          7: 3137302e302e3131322e302f32332d3233203d3e20323634393639.roa (hash: 5JZi+kS3/DHeDV9OKsc0wct/p6rbJr3o/GsIcFK4FhU=)
                          8: 323830343a333062303a3a2f33342d3334203d3e20323634393639.roa (hash: lSXiifL0WRpvmr56l5kXHzzKru61Yj4Mwfkm/8F10Fo=)
                          9: 3137302e302e3131352e302f32342d3234203d3e20323634393639.roa (hash: RwlzDxiT49cO3Oeh6qY2FtXNRtNTUpfEwh2Rxw2pEnY=)
                          10: 323830343a333062303a383030303a3a2f33342d3334203d3e20323634393639.roa (hash: kY0YEV01fFTn7QRi97Q3wes/5+d2FMQdiz7heGdVGXk=)
                          11: 3137302e302e3131322e302f32342d3234203d3e20323634393639.roa (hash: C6rPEazR/e3u5Mhg4+341oCnhsRKvIZGRro5mpDS8ys=)
                          12: 3137302e302e3131342e302f32342d3234203d3e20323634393639.roa (hash: K5FeJxrNAVKid1ihe/bN3W8b0xLXIbxQYBB1Y4mEIgQ=)
                          13: 3137302e302e3131342e302f32332d3233203d3e20323634393639.roa (hash: 1lOTedGwfEPCDOCTIVX18biBvH8Xe4umiD62A13XF3Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:59:60:a0:fd:12:0c:61:5f:ec:d4:9a:e4:44:37:ae:39:67:0a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0
        Validity
            Not Before: Apr 14 23:07:00 2024 GMT
            Not After : Apr 21 23:12:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bb:55:0d:90:ad:6b:af:92:fc:96:1c:97:54:
                    e8:e0:cd:43:cc:17:41:4a:48:c7:3a:8c:8f:31:94:
                    c5:f3:5a:97:0e:f8:b2:9e:f0:14:28:14:f5:34:a1:
                    71:5a:44:9b:ed:b2:3e:72:7c:80:bc:fe:96:7e:b1:
                    9d:96:81:66:ba:eb:b8:14:a6:4e:a6:14:2d:e5:dd:
                    1f:41:04:67:e3:64:05:52:4c:21:e0:b9:0c:c1:37:
                    b8:db:52:5e:6f:44:85:e5:7c:34:43:af:03:b5:5c:
                    81:e6:bd:b0:27:8f:d4:1b:4f:86:a8:a4:aa:a8:cc:
                    0f:51:98:7c:c1:6f:16:28:fb:cb:a9:e4:80:c6:2d:
                    59:c1:04:9d:3c:0c:15:8d:a6:38:76:5b:5f:e4:e3:
                    20:66:67:92:15:6f:0f:db:16:45:b4:d1:56:c9:76:
                    a1:1c:c6:d6:45:6d:bb:92:cd:02:a6:5f:69:12:9c:
                    6d:e3:fe:cc:b9:a8:b2:e4:7c:86:48:b4:9e:16:73:
                    34:f0:dc:e4:d4:48:9c:42:35:39:a6:1a:ff:c8:d9:
                    f4:dc:74:0f:b1:ae:92:5f:b1:7e:db:4e:b0:8e:f3:
                    27:64:a1:6b:a1:c0:11:ad:73:77:08:cb:31:a3:21:
                    22:4c:33:32:5c:3e:b0:c3:c7:c6:2c:e6:5c:30:95:
                    1e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1C:8F:67:C9:3F:F9:8C:73:13:FC:D0:60:2C:4A:68:4E:FD:EE:42
            X509v3 Authority Key Identifier:
                keyid:53:3B:B6:1C:76:F4:3E:E8:E0:6A:E3:8A:7D:86:8E:45:B5:E9:F3:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:b2:a3:45:7f:d5:20:15:ba:ec:f4:f6:f8:55:a6:fc:37:a9:
         6e:30:16:c1:b6:61:84:c6:af:96:66:16:7c:2c:42:b5:94:f0:
         68:3b:b7:e9:e7:27:95:e8:56:38:2d:1b:ec:29:26:e6:4f:d4:
         bc:95:e2:de:eb:6b:72:a4:45:b2:01:ba:b0:84:fb:f9:c3:1d:
         92:68:af:99:a7:00:64:34:78:6e:97:fb:e8:4f:2a:da:42:83:
         42:9e:ca:a4:29:e7:d2:b3:f9:37:4c:96:ca:36:f9:8d:61:4a:
         7c:3b:27:5e:29:a8:d6:9b:19:06:4b:9b:3e:ca:48:71:a4:6d:
         cb:72:03:2a:9f:e9:a6:0c:02:40:eb:89:61:d5:6c:2e:e7:3b:
         bd:af:1e:75:f6:db:36:b0:e1:c8:a4:35:a4:7b:ba:db:0b:c9:
         0e:75:89:96:1f:06:c2:6a:ba:5e:67:29:7f:15:fb:e8:d1:fa:
         60:1e:22:57:a4:0f:41:bd:7f:19:a3:bf:13:78:63:9b:fc:7e:
         2a:ae:6d:23:c7:59:7c:ea:0b:01:05:bf:21:fa:2b:99:24:72:
         04:f6:16:61:c2:1f:57:48:fb:e2:a7:b3:f2:46:02:8d:1e:8c:
         0b:29:e2:6d:ef:4f:54:de:0b:4d:f2:a6:57:40:2a:22:27:c2:
         ad:9f:2f:23
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----