Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/992w3k6QGLtMxbXHBCXVSxq4MjyRjcnJugP2SrCSKHVL/0/52BAB277EABEAC0C8226FA6A4BB2C41191CD5464.mft
File:                     52BAB277EABEAC0C8226FA6A4BB2C41191CD5464.mft (raw, json)
Hash identifier:          GEUtakgvxyim+fZvEGq+d0Sgx57BEfGzZoO2Lw8MIWc=
Subject key identifier:   38:9C:E4:BF:E4:E8:05:4E:EA:9B:8C:8C:5A:5A:1E:BE:8C:B5:59:E8
Authority key identifier: 52:BA:B2:77:EA:BE:AC:0C:82:26:FA:6A:4B:B2:C4:11:91:CD:54:64
Certificate issuer:       /CN=52BAB277EABEAC0C8226FA6A4BB2C41191CD5464
Certificate serial:       70D625707FBD526F5CC1E6CAEEBC2C138D320BB3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52BAB277EABEAC0C8226FA6A4BB2C41191CD5464.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/992w3k6QGLtMxbXHBCXVSxq4MjyRjcnJugP2SrCSKHVL/0/52BAB277EABEAC0C8226FA6A4BB2C41191CD5464.mft
Manifest number:          4F
Signing time:             Sun 14 Apr 2024 17:19:50 +0000
Manifest this update:     Sun 14 Apr 2024 17:14:50 +0000
Manifest next update:     Mon 15 Apr 2024 19:52:50 +0000
Files and hashes:         1: 323830343a363161383a3a2f33322d313238203d3e20323639323438.roa (hash: 3u9p5aCPL/k6O46fFi2SjXLrw+9LC2XHgUSH2FvMzV8=)
                          2: 34352e3138322e3235322e302f32322d3332203d3e20323639323438.roa (hash: HHD0vdEWx2i1FrDIl3HVSOW9XSzZkWexHVZAh6lpOEs=)
                          3: 52BAB277EABEAC0C8226FA6A4BB2C41191CD5464.crl (hash: J19/mBFOxMBuBoDKd/8ez+eefDw5++YoS/vKOe6t378=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d6:25:70:7f:bd:52:6f:5c:c1:e6:ca:ee:bc:2c:13:8d:32:0b:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52BAB277EABEAC0C8226FA6A4BB2C41191CD5464
        Validity
            Not Before: Apr 14 17:14:50 2024 GMT
            Not After : Apr 15 19:52:50 2024 GMT
        Subject: CN=389CE4BFE4E8054EEA9B8C8C5A5A1EBE8CB559E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a7:0e:1b:b2:cd:1e:09:ee:3b:f5:4f:f8:af:
                    84:18:6c:b2:1e:91:df:3b:85:ea:0d:ff:d8:92:2e:
                    4a:99:e5:02:e2:65:f0:56:bc:1f:ab:e6:f2:45:a5:
                    9d:cf:e0:86:17:30:53:c7:da:a1:5f:db:70:a3:59:
                    85:86:dd:fc:76:34:f0:77:f6:d0:b0:ed:01:c8:4f:
                    02:a8:96:cc:e2:61:d5:f5:ae:2e:06:07:ea:15:fd:
                    2f:fe:d6:10:f0:7e:fa:31:89:ad:b6:4a:a5:55:4b:
                    b8:93:0a:d4:c0:35:ce:10:3b:58:c1:93:9b:9c:1b:
                    3e:67:56:26:ac:1d:0e:00:dd:ab:68:32:d2:e6:94:
                    c5:59:f3:a3:fa:56:8f:0e:42:22:3d:88:c0:8d:16:
                    fb:2d:e7:75:44:4e:62:51:ef:ac:0d:d1:9e:de:5f:
                    10:08:2f:47:a8:85:5b:bc:49:b8:21:dd:17:a7:c1:
                    e9:c7:1d:ce:51:33:d2:ce:3e:61:e6:1e:ba:1d:6a:
                    ba:71:3f:ff:aa:49:37:43:a6:5b:49:65:be:ae:65:
                    69:eb:80:f5:14:e9:a2:3d:f9:28:1c:13:50:17:c6:
                    99:c3:82:18:66:2a:76:90:be:bc:79:b4:f5:02:c6:
                    d4:22:2f:4c:16:04:ca:ad:cf:83:cd:32:99:09:32:
                    b3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9C:E4:BF:E4:E8:05:4E:EA:9B:8C:8C:5A:5A:1E:BE:8C:B5:59:E8
            X509v3 Authority Key Identifier:
                keyid:52:BA:B2:77:EA:BE:AC:0C:82:26:FA:6A:4B:B2:C4:11:91:CD:54:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/992w3k6QGLtMxbXHBCXVSxq4MjyRjcnJugP2SrCSKHVL/0/52BAB277EABEAC0C8226FA6A4BB2C41191CD5464.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52BAB277EABEAC0C8226FA6A4BB2C41191CD5464.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/992w3k6QGLtMxbXHBCXVSxq4MjyRjcnJugP2SrCSKHVL/0/52BAB277EABEAC0C8226FA6A4BB2C41191CD5464.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:ce:94:0a:b2:2b:42:72:88:13:72:cf:ef:62:f1:90:78:8b:
         b7:4c:2e:c1:c9:6b:18:74:4c:86:cf:58:9d:ad:ab:c8:9c:51:
         c1:c5:bf:a1:2f:19:26:0e:24:2a:68:23:a0:de:e6:ce:d8:9a:
         23:7d:0b:da:bd:b1:bb:f2:a3:5e:82:9a:05:ba:b6:83:70:19:
         d5:5f:5e:b1:a2:d7:d6:23:4f:1e:53:53:b9:7d:3a:46:35:9e:
         19:9a:38:34:a4:bd:16:09:dc:87:cf:6f:68:bd:b3:ba:4c:19:
         5c:52:a5:55:ff:35:56:db:56:93:c6:96:80:3c:09:41:2d:a6:
         13:70:1b:d7:d0:5e:87:68:00:21:41:a5:8d:c1:00:63:0e:6a:
         8b:b2:f0:2d:e2:9a:45:a5:e9:d8:ad:c6:49:30:1b:ba:80:c0:
         18:28:44:4a:8c:48:6f:c0:2a:d5:05:ba:38:53:bd:55:5e:7d:
         9f:5d:ab:b1:03:49:5f:19:04:23:5f:14:18:67:50:92:cc:fc:
         e6:1e:2b:e4:ef:a1:a9:4e:43:6d:09:a3:9d:b1:2e:a0:96:64:
         11:64:19:8a:2c:60:07:1b:ab:56:48:77:cb:b0:ec:dc:32:a3:
         93:46:75:25:e8:4d:ce:5e:0c:e1:73:be:df:e8:3e:9b:2f:64:
         34:8f:60:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----