Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/97dbTNWMyFNzAUN69quS1M7uH1KBae1NjHERiuHy3uX1/1/CC0E245A65A53FD4D3F92E761E1A49BF1200285C.mft
File:                     CC0E245A65A53FD4D3F92E761E1A49BF1200285C.mft (raw, json)
Hash identifier:          1h1lo+Jcq+A/sAH+/SKy2rdwa+ixUfBBco3KJbJYmrM=
Subject key identifier:   68:1D:59:A7:52:17:A8:86:E9:83:F4:4B:DC:0D:19:BD:00:4C:C0:2C
Authority key identifier: CC:0E:24:5A:65:A5:3F:D4:D3:F9:2E:76:1E:1A:49:BF:12:00:28:5C
Certificate issuer:       /CN=CC0E245A65A53FD4D3F92E761E1A49BF1200285C
Certificate serial:       5FCCCF33A4B15737CC4931D1AE4F91BAF9FFCC67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC0E245A65A53FD4D3F92E761E1A49BF1200285C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97dbTNWMyFNzAUN69quS1M7uH1KBae1NjHERiuHy3uX1/1/CC0E245A65A53FD4D3F92E761E1A49BF1200285C.mft
Manifest number:          5C
Signing time:             Mon 10 Jun 2024 02:50:00 +0000
Manifest this update:     Mon 10 Jun 2024 02:45:00 +0000
Manifest next update:     Tue 11 Jun 2024 04:42:00 +0000
Files and hashes:         1: 34352e3136302e32302e302f32342d3234203d3e20323638343337.roa (hash: haAO71YyJfiK0BJbdHBTh3fm6ywiNODfr1wtPPq3S2k=)
                          2: CC0E245A65A53FD4D3F92E761E1A49BF1200285C.crl (hash: 7fSn+DXfSan8nSf/DdS9zv7ZhuRERRUC49RrRRMaASI=)
                          3: 34352e3136302e32302e302f32322d3232203d3e20323638343337.roa (hash: Fkby0Ap8lMUTnFJf4Ky9Xe5ES+VdJHrkhew3WU/sY68=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:cc:cf:33:a4:b1:57:37:cc:49:31:d1:ae:4f:91:ba:f9:ff:cc:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC0E245A65A53FD4D3F92E761E1A49BF1200285C
        Validity
            Not Before: Jun 10 02:45:00 2024 GMT
            Not After : Jun 11 04:42:00 2024 GMT
        Subject: CN=681D59A75217A886E983F44BDC0D19BD004CC02C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:dc:9e:4f:e6:ee:bb:51:51:33:67:bc:3a:e1:
                    14:fa:58:e3:48:87:b5:64:cc:ba:0c:3d:e9:f1:3d:
                    f9:c7:a1:b9:d2:4f:fa:54:b5:fe:e6:76:bc:b8:37:
                    76:8a:89:51:56:f3:ab:a0:1a:c1:f1:4c:98:54:d1:
                    54:ce:c9:f0:bc:87:6b:d8:f5:31:a0:84:67:d9:6b:
                    41:8f:86:f2:97:9c:bf:1e:2f:8b:85:70:cb:cb:96:
                    3b:68:7f:b5:f5:0a:47:3b:36:fc:f4:e7:26:53:24:
                    0d:1d:d0:fb:4c:26:ab:f3:2c:9d:55:78:77:42:77:
                    ae:cc:d2:b9:f2:b7:bb:f8:e8:09:12:21:b6:25:8d:
                    7c:e8:0d:01:33:82:a8:a8:53:2b:e2:82:b7:fb:e7:
                    7d:e4:45:7b:e5:f6:2f:d1:ef:7f:95:55:58:c3:97:
                    13:34:9b:55:59:5b:79:3c:3a:f7:eb:32:ea:b3:a6:
                    1a:8d:4e:5a:e6:cb:1a:32:79:5d:ac:16:24:28:75:
                    e0:5d:c8:a5:a2:76:e5:c1:55:e7:7a:99:a7:a3:67:
                    4b:a7:74:00:be:3a:b9:fb:ac:d4:47:b0:1a:21:6f:
                    82:86:ef:43:54:8a:ed:6a:de:ba:dc:f0:dd:0a:62:
                    0b:c9:45:a7:1d:a1:cc:fe:57:53:cc:56:d0:c8:4b:
                    5c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:1D:59:A7:52:17:A8:86:E9:83:F4:4B:DC:0D:19:BD:00:4C:C0:2C
            X509v3 Authority Key Identifier:
                keyid:CC:0E:24:5A:65:A5:3F:D4:D3:F9:2E:76:1E:1A:49:BF:12:00:28:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97dbTNWMyFNzAUN69quS1M7uH1KBae1NjHERiuHy3uX1/1/CC0E245A65A53FD4D3F92E761E1A49BF1200285C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC0E245A65A53FD4D3F92E761E1A49BF1200285C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97dbTNWMyFNzAUN69quS1M7uH1KBae1NjHERiuHy3uX1/1/CC0E245A65A53FD4D3F92E761E1A49BF1200285C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:72:f3:3a:47:da:44:4f:7d:8a:fd:f7:02:f5:c6:6a:c5:55:
         8d:ed:46:eb:46:9b:51:0f:9e:36:23:eb:86:94:33:9d:99:1e:
         76:1c:f8:d7:41:74:92:af:8b:a5:e3:52:43:9b:b8:66:80:2a:
         c8:36:03:24:19:88:cb:54:4c:3e:9a:32:7b:3b:9a:09:71:30:
         76:97:e2:82:21:9f:15:0f:79:00:d2:2f:95:97:a8:f1:0d:c4:
         6b:37:7d:cf:3c:83:9c:30:91:0d:09:07:a1:86:b5:a0:69:cc:
         74:2f:1d:99:c7:7e:c9:65:6b:38:bf:5e:96:9b:3c:0f:42:30:
         5c:b8:02:2d:e9:0b:9e:92:b1:1c:a0:c7:30:79:e0:76:49:72:
         77:1a:11:e7:de:44:29:f2:c5:9e:8d:09:3f:be:77:b6:2e:49:
         ec:e5:c0:f4:72:fa:10:a3:47:f7:48:91:19:51:4f:64:a4:36:
         70:dd:8e:13:a1:9d:0f:ea:71:ca:41:bd:9d:86:0b:5c:66:98:
         7b:c6:f2:00:f7:39:4e:bd:cd:bd:f5:0d:75:71:1d:bc:53:2c:
         2f:e0:9b:3a:f0:8a:18:da:13:5e:7d:62:4e:d6:48:c2:bd:f6:
         5c:df:93:44:95:46:0a:24:38:73:ca:fe:a7:3b:48:ad:03:de:
         ed:e4:72:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----