Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/0/5D1544514BDB8648BB33246FCF0EAA3DFC2E97E7.mft
File:                     5D1544514BDB8648BB33246FCF0EAA3DFC2E97E7.mft (raw, json)
Hash identifier:          3Zgsa1/pBRD03Q/tTerlPsg8yTQBzVWLGr7maL1kh0g=
Subject key identifier:   A4:39:4F:7A:BD:EA:7F:B3:F8:D4:3E:B1:B3:DC:73:CE:2B:EA:04:37
Authority key identifier: 5D:15:44:51:4B:DB:86:48:BB:33:24:6F:CF:0E:AA:3D:FC:2E:97:E7
Certificate issuer:       /CN=5D1544514BDB8648BB33246FCF0EAA3DFC2E97E7
Certificate serial:       29E89FE83807378BADAB0254E96ECDE0546A42F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D1544514BDB8648BB33246FCF0EAA3DFC2E97E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/0/5D1544514BDB8648BB33246FCF0EAA3DFC2E97E7.mft
Manifest number:          03B5
Signing time:             Mon 15 Apr 2024 03:01:44 +0000
Manifest this update:     Mon 15 Apr 2024 02:56:44 +0000
Manifest next update:     Tue 16 Apr 2024 06:12:44 +0000
Files and hashes:         1: 323830343a356538383a3a2f33322d3438203d3e20323639303339.roa (hash: ti5TwMNRx4HrXnhJKF3yYuM5KZZCbOFE/WLVHH7tVZs=)
                          2: 5D1544514BDB8648BB33246FCF0EAA3DFC2E97E7.crl (hash: lajQ4Jf+4rZ0LQIfnOksqB+vZ3S/viP+3lCySUfBCeE=)
                          3: 34352e3137372e3136302e302f32322d3234203d3e20323639303339.roa (hash: Or9Tv+8pxuUfZN5l/87lKZ571u8GQBlB7IEx7DKZlbo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e8:9f:e8:38:07:37:8b:ad:ab:02:54:e9:6e:cd:e0:54:6a:42:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1544514BDB8648BB33246FCF0EAA3DFC2E97E7
        Validity
            Not Before: Apr 15 02:56:44 2024 GMT
            Not After : Apr 16 06:12:44 2024 GMT
        Subject: CN=A4394F7ABDEA7FB3F8D43EB1B3DC73CE2BEA0437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ba:d0:a8:88:8c:6a:b0:19:5b:d4:66:0c:8c:
                    13:2f:f1:0d:7b:28:d4:bc:60:fb:a5:eb:7c:e0:83:
                    a8:97:75:64:f9:8e:b6:c2:71:08:98:eb:86:d4:e8:
                    1d:a0:07:a7:e9:4e:c3:2c:51:c9:03:ce:1e:6d:7f:
                    43:ba:df:2e:41:7d:4c:fc:a1:34:73:25:2c:b7:be:
                    1f:98:87:8a:f7:71:39:96:76:01:7b:f8:19:3d:b6:
                    18:ab:26:c8:8b:cd:b6:5f:67:63:57:f2:1c:13:16:
                    3b:5b:41:66:34:9f:bc:6c:24:6d:b6:a4:ab:f9:86:
                    03:42:a5:c3:75:72:12:7a:e0:fa:21:77:bc:9b:8c:
                    db:36:87:ad:b2:20:86:5b:cc:d2:0d:cb:83:6f:bd:
                    14:b7:20:76:78:de:8f:4f:35:cc:17:9d:ef:71:99:
                    78:73:f6:99:34:47:5a:c8:87:cf:21:c4:f1:b9:26:
                    7b:b3:ef:da:b6:16:bd:18:8e:a6:0e:29:ca:cc:cf:
                    25:c2:9e:de:59:15:89:fd:64:5a:f5:bc:c7:28:62:
                    cf:90:cb:f5:2d:b9:19:93:16:54:2f:ab:d9:6a:16:
                    19:d7:66:9b:1d:20:bf:b0:44:a5:96:9c:d8:b3:85:
                    98:97:9c:1b:af:3d:11:df:87:86:db:a9:f5:fb:56:
                    44:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:39:4F:7A:BD:EA:7F:B3:F8:D4:3E:B1:B3:DC:73:CE:2B:EA:04:37
            X509v3 Authority Key Identifier:
                keyid:5D:15:44:51:4B:DB:86:48:BB:33:24:6F:CF:0E:AA:3D:FC:2E:97:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/0/5D1544514BDB8648BB33246FCF0EAA3DFC2E97E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D1544514BDB8648BB33246FCF0EAA3DFC2E97E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/0/5D1544514BDB8648BB33246FCF0EAA3DFC2E97E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:23:1b:99:40:d8:ae:4f:f8:27:68:24:d8:28:f7:69:ae:96:
         28:79:d5:6c:b8:ee:69:c3:0e:2e:41:a4:28:3d:6f:6d:f5:be:
         1f:e4:18:5b:eb:d8:d4:76:b6:e7:8d:7d:5c:79:6f:85:90:a3:
         43:f3:e6:6e:a0:2f:c6:ea:8d:8a:8b:7c:4e:cb:81:91:ca:5b:
         e3:fc:c1:41:e0:02:15:8b:58:6b:46:cc:77:4f:08:e7:b7:a0:
         3e:9a:a1:49:31:b9:39:c8:bc:6b:11:14:c0:66:71:54:18:fa:
         e8:70:6e:21:30:0c:78:d4:a6:ca:c5:11:e0:25:9f:bb:e2:df:
         8c:c4:37:9f:1e:02:37:23:75:69:e4:d1:f6:a5:0c:97:53:02:
         dd:8a:37:ba:f4:ee:9c:e6:a0:d1:44:e1:34:63:13:64:09:a3:
         1a:8d:b4:70:b0:5a:fa:a1:d5:6b:f5:5e:c3:67:92:78:50:2c:
         9b:8d:d7:f9:4c:14:96:3d:8a:98:be:35:03:31:a6:b7:f5:52:
         6e:60:53:58:c9:4a:48:f9:af:fe:0d:86:83:09:3f:77:bb:bd:
         d5:7f:5b:1e:f6:c1:46:c3:c6:d5:3e:c5:e1:a5:c3:39:62:0f:
         7e:b2:da:ad:fa:97:c9:6f:71:6a:b5:5d:21:02:9e:40:95:07:
         b9:de:f5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----