Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8LzcJJpFJ6qTzUSMihftkk5LdtfH7EuFHUkbpQK4cjxG/0/5DEF1069E775D55236467B1751C7F6CE5EF180F2.mft
File:                     5DEF1069E775D55236467B1751C7F6CE5EF180F2.mft (raw, json)
Hash identifier:          xt+hJHa6n++VL01Wl0F8Ch60tSbnnfMLd7NEh+tRJPM=
Subject key identifier:   10:C6:CA:4C:3F:E9:77:E6:25:43:65:79:9A:5B:D1:AE:53:14:9C:A6
Authority key identifier: 5D:EF:10:69:E7:75:D5:52:36:46:7B:17:51:C7:F6:CE:5E:F1:80:F2
Certificate issuer:       /CN=5DEF1069E775D55236467B1751C7F6CE5EF180F2
Certificate serial:       749332AC733CD4B0043A73B451DAF328768BDDC5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DEF1069E775D55236467B1751C7F6CE5EF180F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8LzcJJpFJ6qTzUSMihftkk5LdtfH7EuFHUkbpQK4cjxG/0/5DEF1069E775D55236467B1751C7F6CE5EF180F2.mft
Manifest number:          56
Signing time:             Mon 15 Apr 2024 09:08:00 +0000
Manifest this update:     Mon 15 Apr 2024 09:03:00 +0000
Manifest next update:     Tue 16 Apr 2024 10:27:00 +0000
Files and hashes:         1: 34352e3138322e3230382e302f32322d3234203d3e20323639323338.roa (hash: vbVNRq8Ar1eVFSq1NGBWwvg7RayF513jyuAaBdGgT8g=)
                          2: 323830343a363138303a3a2f33322d3438203d3e20323639323338.roa (hash: 5CGN4Gph9DzTZ0WcO9cwhur0RWQM+xu48fGXhJAipa8=)
                          3: 5DEF1069E775D55236467B1751C7F6CE5EF180F2.crl (hash: WU7/wJnpe9n9X1QP0G8/h9K+ESbtrau6THSM0dcBwDY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:93:32:ac:73:3c:d4:b0:04:3a:73:b4:51:da:f3:28:76:8b:dd:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DEF1069E775D55236467B1751C7F6CE5EF180F2
        Validity
            Not Before: Apr 15 09:03:00 2024 GMT
            Not After : Apr 16 10:27:00 2024 GMT
        Subject: CN=10C6CA4C3FE977E6254365799A5BD1AE53149CA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:78:0b:a6:48:a3:34:ff:0a:05:9e:d8:b0:ad:
                    43:55:ad:49:37:e6:46:53:30:b5:1e:54:bb:49:15:
                    7b:eb:f7:db:8b:58:cc:76:cf:66:83:49:12:87:68:
                    e7:d8:67:64:23:e6:bc:5c:fe:55:32:11:a4:25:a4:
                    73:ce:6a:81:84:38:6c:91:0b:6e:d8:62:52:7c:41:
                    db:52:21:53:47:ac:7f:5d:ef:70:3d:d9:4a:9e:c8:
                    9a:51:13:8f:f3:6c:9a:12:57:5a:d2:bb:a9:59:d9:
                    9d:13:67:3f:72:57:a7:bd:93:8f:d1:78:42:2e:14:
                    8e:e0:da:2f:59:a3:67:f7:64:de:d0:a3:6a:44:d1:
                    ee:07:ee:3f:f2:4d:24:c0:ad:88:29:9f:b9:ec:15:
                    b4:9a:fe:9f:03:e7:fe:47:0b:47:b1:60:76:b1:45:
                    46:78:98:e2:36:25:2f:f4:c3:84:09:7c:a7:a4:1d:
                    71:c1:77:58:3d:52:52:3e:ca:a9:64:4e:ea:40:b1:
                    36:02:51:0f:12:26:05:78:a0:02:7a:7e:d7:e1:9d:
                    88:04:c3:b5:9b:4d:5b:10:b5:93:13:73:ca:87:dd:
                    70:86:08:1c:e8:e6:8e:87:da:54:0b:15:e3:7d:78:
                    2a:2e:0f:af:e4:4b:d5:8a:d6:2e:92:31:58:c0:98:
                    e0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C6:CA:4C:3F:E9:77:E6:25:43:65:79:9A:5B:D1:AE:53:14:9C:A6
            X509v3 Authority Key Identifier:
                keyid:5D:EF:10:69:E7:75:D5:52:36:46:7B:17:51:C7:F6:CE:5E:F1:80:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8LzcJJpFJ6qTzUSMihftkk5LdtfH7EuFHUkbpQK4cjxG/0/5DEF1069E775D55236467B1751C7F6CE5EF180F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DEF1069E775D55236467B1751C7F6CE5EF180F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8LzcJJpFJ6qTzUSMihftkk5LdtfH7EuFHUkbpQK4cjxG/0/5DEF1069E775D55236467B1751C7F6CE5EF180F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:3c:5d:07:64:1f:72:57:3f:31:cd:51:8d:e6:89:b8:4c:d1:
         ad:33:b3:5e:5d:9c:e9:00:9e:f9:87:3e:be:fc:d9:4a:8c:c8:
         a0:7f:65:05:16:2b:49:9c:5b:dc:5f:00:7b:4c:23:ab:94:62:
         64:09:17:92:ef:04:f8:6a:8f:b1:82:8b:36:20:d1:bb:c8:0d:
         d2:6c:a5:81:42:86:a1:4e:4b:35:cf:1d:94:59:54:fe:50:82:
         bd:39:b0:ac:9f:82:4b:81:9a:8e:b9:bb:a5:15:47:21:a5:11:
         31:7e:0e:5d:78:cd:b7:59:c4:b1:74:b2:1e:b3:f7:8f:ec:f2:
         8f:35:92:20:e4:46:ca:7d:ba:62:8a:b8:3f:99:b2:f3:e5:cc:
         70:3f:d2:1f:dc:c7:fc:91:62:ff:82:42:0f:36:51:aa:cd:38:
         c5:a4:3d:75:ce:61:13:d2:be:45:45:97:97:fd:1c:4c:37:50:
         de:1b:6f:26:44:ea:eb:cf:5f:9f:5d:67:19:aa:a8:1f:13:cd:
         96:7d:2c:c9:d3:ef:50:3e:71:f8:dc:4c:09:a0:af:2b:b4:df:
         ec:76:94:fd:19:cb:d6:18:08:d9:09:9f:62:16:53:ce:a4:d9:
         ef:4e:5e:a3:93:5b:ae:90:e1:6e:4c:60:95:d4:88:4c:a3:7a:
         65:d7:0c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----