Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/1/5AAF0BC4A9FBF3363CDD06A1C60C313152450B6F.mft
File:                     5AAF0BC4A9FBF3363CDD06A1C60C313152450B6F.mft (raw, json)
Hash identifier:          m9syZjNgouToc0IBfCDzFJkgYAaHHjibxqKNPAML9po=
Subject key identifier:   3C:C7:87:EC:EA:0A:1D:77:B4:99:5E:0C:1B:96:92:17:58:8F:05:7D
Authority key identifier: 5A:AF:0B:C4:A9:FB:F3:36:3C:DD:06:A1:C6:0C:31:31:52:45:0B:6F
Certificate issuer:       /CN=5AAF0BC4A9FBF3363CDD06A1C60C313152450B6F
Certificate serial:       6670DED49B76A2044AD513C378029E6035E99FEC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AAF0BC4A9FBF3363CDD06A1C60C313152450B6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/1/5AAF0BC4A9FBF3363CDD06A1C60C313152450B6F.mft
Manifest number:          48
Signing time:             Mon 15 Apr 2024 03:24:12 +0000
Manifest this update:     Mon 15 Apr 2024 03:19:12 +0000
Manifest next update:     Tue 16 Apr 2024 07:22:12 +0000
Files and hashes:         1: 5AAF0BC4A9FBF3363CDD06A1C60C313152450B6F.crl (hash: TTWYeb1YiHrVDbzOQtN3myzfYMZZJ1uiUCdcTvZaz9A=)
                          2: 323830343a356534343a3a2f33322d3336203d3e20323639303232.roa (hash: TcJS3tw08ESMcXxFii247+3HrfrgkzBl1mO0Y4YSlXk=)
                          3: 34352e3137382e3134342e302f32322d3234203d3e20323639303232.roa (hash: vtUrcght6KjbLwa1dguet/sV3s6wVhTDzaSYdTyjAew=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:70:de:d4:9b:76:a2:04:4a:d5:13:c3:78:02:9e:60:35:e9:9f:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AAF0BC4A9FBF3363CDD06A1C60C313152450B6F
        Validity
            Not Before: Apr 15 03:19:12 2024 GMT
            Not After : Apr 16 07:22:12 2024 GMT
        Subject: CN=3CC787ECEA0A1D77B4995E0C1B969217588F057D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:67:6b:61:ad:86:ec:63:c6:38:f3:b7:1e:aa:
                    6a:79:16:80:6c:c7:98:f0:bd:99:47:98:0f:33:01:
                    9d:96:10:eb:f1:1b:f6:a2:cd:d0:be:df:77:49:21:
                    2e:10:2c:b0:c1:c6:dd:06:df:bc:9d:37:bd:09:cd:
                    3b:a7:33:97:08:8c:40:16:dc:4b:19:4b:b8:b6:10:
                    cd:c0:a1:c2:94:7a:bf:dd:dc:09:98:bc:56:07:8b:
                    d1:56:33:5b:c0:c1:65:a0:d7:74:d4:5f:46:8f:de:
                    f0:71:43:1a:a0:3d:5f:17:33:73:34:1a:1e:22:f7:
                    11:8c:8b:fe:e7:cf:74:9a:1a:58:6b:3c:2c:f8:e6:
                    94:67:fb:ac:7b:7a:8c:c9:52:08:8a:5e:e2:b9:eb:
                    65:c2:0d:b5:6f:60:0f:80:cc:92:e0:10:df:fc:58:
                    3e:a0:20:4b:2e:3a:70:fe:0e:92:e3:1c:2e:7d:08:
                    b3:40:2c:fd:67:2f:ae:ff:20:7c:21:9f:26:48:99:
                    38:8a:ed:f5:09:78:70:c4:4d:da:a1:e9:83:8d:d5:
                    16:6e:de:d5:8f:fa:e4:c9:86:c9:43:74:93:77:23:
                    dd:8d:89:01:7a:46:1c:03:62:74:a1:c5:cf:96:98:
                    06:82:2c:68:62:66:c8:a6:5d:71:1a:0f:40:4c:c6:
                    08:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C7:87:EC:EA:0A:1D:77:B4:99:5E:0C:1B:96:92:17:58:8F:05:7D
            X509v3 Authority Key Identifier:
                keyid:5A:AF:0B:C4:A9:FB:F3:36:3C:DD:06:A1:C6:0C:31:31:52:45:0B:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/1/5AAF0BC4A9FBF3363CDD06A1C60C313152450B6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AAF0BC4A9FBF3363CDD06A1C60C313152450B6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/1/5AAF0BC4A9FBF3363CDD06A1C60C313152450B6F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:e0:b6:c8:d2:90:9c:a4:58:ba:d9:08:b2:5e:ef:8a:1f:01:
         ee:12:ce:7f:c2:fb:86:f0:cb:6e:13:4c:9f:cd:5a:d7:e6:3e:
         80:8f:61:ce:25:a1:f2:eb:ed:0c:bf:b1:70:cb:a6:22:b2:c7:
         16:1e:89:97:aa:eb:8e:98:1f:1e:e9:c3:76:2c:ff:6e:51:ff:
         9e:a9:36:e6:d4:96:40:d6:46:ed:1c:37:41:48:8c:79:a4:84:
         fe:8c:ef:3a:e7:93:17:57:8d:a1:47:28:97:d3:0a:72:c1:24:
         eb:9a:44:09:a6:24:ff:ed:b3:5d:41:2f:df:96:98:09:74:ac:
         97:88:96:9a:9d:a4:aa:ca:f5:17:0f:7b:c0:88:52:3d:21:86:
         42:af:96:44:99:3f:37:20:de:27:ed:2e:94:71:5f:5f:a9:22:
         8f:e9:32:3d:dc:e1:d7:6c:6c:97:bd:6c:8f:b5:d0:86:35:5a:
         cd:6c:43:78:fc:87:f4:16:fc:9b:34:40:91:0d:b7:e5:b0:26:
         cb:fe:a1:69:5f:b1:8e:c7:a4:45:7f:e1:b1:00:df:09:88:c5:
         7c:3b:cd:ca:a8:ef:f0:ee:f0:a0:47:4b:18:60:24:71:07:f5:
         e5:ab:6e:90:81:5d:d6:a4:f4:f3:e0:5e:c7:b2:90:49:6a:1f:
         28:25:2d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----