Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/C31F93F1F81C9519AD8D88CAF331D474F401D115.mft
File:                     C31F93F1F81C9519AD8D88CAF331D474F401D115.mft (raw, json)
Hash identifier:          WdBBljB2eY2ioUe+hUkukO0oBmIhRC48BBK3S3coj2k=
Subject key identifier:   9E:CB:52:90:30:1B:3E:47:81:1B:CD:03:62:6D:79:26:9F:50:79:B3
Authority key identifier: C3:1F:93:F1:F8:1C:95:19:AD:8D:88:CA:F3:31:D4:74:F4:01:D1:15
Certificate issuer:       /CN=C31F93F1F81C9519AD8D88CAF331D474F401D115
Certificate serial:       534BD92A96B74F4BE828C5B32596D4077EC613B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C31F93F1F81C9519AD8D88CAF331D474F401D115.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/C31F93F1F81C9519AD8D88CAF331D474F401D115.mft
Manifest number:          5C
Signing time:             Mon 15 Apr 2024 11:02:07 +0000
Manifest this update:     Mon 15 Apr 2024 10:57:07 +0000
Manifest next update:     Tue 16 Apr 2024 12:26:07 +0000
Files and hashes:         1: C31F93F1F81C9519AD8D88CAF331D474F401D115.crl (hash: G6BcIJ+Rj2+a6LtUh3bKPS1LX9/lcbI/03HE3UQmBcg=)
                          2: 323830343a326565633a3a2f33322d3336203d3e20323634383631.roa (hash: dflazA0qnNmraNVPgUslhOj1811zyLonW8ztC76H7Ew=)
                          3: 3136382e3230352e35322e302f32322d3234203d3e20323634383631.roa (hash: Xdxb5DLil68Edp/iSDVbQX6snS5ETD0KafQXhhjm7vw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:4b:d9:2a:96:b7:4f:4b:e8:28:c5:b3:25:96:d4:07:7e:c6:13:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C31F93F1F81C9519AD8D88CAF331D474F401D115
        Validity
            Not Before: Apr 15 10:57:07 2024 GMT
            Not After : Apr 16 12:26:07 2024 GMT
        Subject: CN=9ECB5290301B3E47811BCD03626D79269F5079B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:32:21:25:cf:04:27:ca:bd:b3:82:ed:31:00:
                    71:b4:fc:ae:f7:a9:00:d8:58:da:53:c6:35:c2:33:
                    3f:27:12:f0:27:f2:07:f4:1e:23:d4:de:f7:27:9e:
                    04:2d:86:98:82:9c:ed:d8:51:be:30:11:61:1b:f1:
                    71:c1:84:fa:51:6a:ff:f9:57:38:db:05:1d:59:79:
                    c7:a4:9d:13:b3:12:60:27:d1:03:3f:3b:c6:88:c0:
                    50:ea:3a:02:db:02:b7:80:24:2a:bc:b9:1a:19:36:
                    32:4c:ca:f6:70:5d:d6:af:0b:09:e2:74:2e:bd:9b:
                    69:19:f0:ad:bf:0c:60:b9:e3:77:e2:03:9a:2e:11:
                    d2:e9:eb:77:86:8d:c6:a8:b6:8c:ef:fd:65:c7:a0:
                    9b:23:e8:e3:95:e3:53:36:7a:03:8a:b7:2f:e7:eb:
                    66:53:16:13:fa:72:a5:c7:e4:21:31:8f:0e:76:41:
                    52:f1:7c:02:74:1e:ea:b2:31:a9:f9:01:ab:49:5f:
                    cb:a5:00:80:13:1a:ba:97:95:91:af:78:7f:6d:0d:
                    d0:0a:9a:52:73:cb:6f:6b:db:2b:2f:7d:7a:bb:9d:
                    bd:f4:ba:39:a9:d1:11:43:3c:90:4c:7f:ff:ec:31:
                    79:8e:fa:de:c0:fd:82:39:bf:12:3d:3b:b1:74:8b:
                    e1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:CB:52:90:30:1B:3E:47:81:1B:CD:03:62:6D:79:26:9F:50:79:B3
            X509v3 Authority Key Identifier:
                keyid:C3:1F:93:F1:F8:1C:95:19:AD:8D:88:CA:F3:31:D4:74:F4:01:D1:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/C31F93F1F81C9519AD8D88CAF331D474F401D115.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C31F93F1F81C9519AD8D88CAF331D474F401D115.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/C31F93F1F81C9519AD8D88CAF331D474F401D115.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:8f:9c:bf:4b:06:94:18:d9:d2:36:83:3b:bc:ca:0d:60:0a:
         28:ac:79:46:79:82:8c:4d:be:2a:40:f1:32:34:74:11:b4:54:
         2d:23:54:c5:a6:40:04:de:08:73:a8:b7:39:fa:21:4a:4e:6d:
         b1:35:7c:68:b0:b7:69:b9:b0:2a:a4:90:92:78:81:bb:1d:da:
         4e:dd:c5:36:f6:f8:78:0c:46:a2:7e:ee:d6:c7:9e:3e:6a:89:
         fe:6c:c1:c5:49:f8:11:bf:41:f2:bf:13:14:64:60:92:3f:3c:
         13:79:f2:d0:88:aa:57:d3:b8:58:a6:b5:87:f7:ec:2d:51:44:
         c6:10:42:d8:61:1a:33:e0:9d:b6:ee:44:df:44:2e:03:4c:fa:
         8f:cb:0f:e5:06:38:5a:e8:01:ce:43:0b:0a:84:33:30:6f:6e:
         6f:96:44:a7:9e:99:77:c9:74:d0:99:2c:0f:94:03:15:c4:e9:
         bf:91:91:d1:3f:e2:44:70:23:bb:88:62:d4:62:6b:d4:63:de:
         bd:d5:63:b9:97:c1:c1:fa:10:98:7e:7e:4c:8d:4e:28:ca:60:
         8d:8f:7f:7c:1b:ed:72:77:6d:84:07:d6:49:81:8c:91:ee:8f:
         d3:74:26:c1:0c:de:b5:69:de:58:e0:1b:31:f9:94:96:93:60:
         5b:65:d9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----