Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9nUa6hVWLvnd3YyXxW6YMePALB7Tumbg43BePFJmadd5/1/A5CF735C37CC45932C60F6CBA09E1588F0F51FF4.mft
File:                     A5CF735C37CC45932C60F6CBA09E1588F0F51FF4.mft (raw, json)
Hash identifier:          Z7pB8duD2qjU9nurahdcNNiU4OVl6Pz8Jz/uJT/5dWs=
Subject key identifier:   63:D9:A8:F1:DA:B0:C2:2F:B0:A8:70:66:3C:F2:CD:80:02:AB:E5:9E
Authority key identifier: A5:CF:73:5C:37:CC:45:93:2C:60:F6:CB:A0:9E:15:88:F0:F5:1F:F4
Certificate issuer:       /CN=A5CF735C37CC45932C60F6CBA09E1588F0F51FF4
Certificate serial:       17DBB8847C5C673B9A778842DA14A6AB6C6953CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5CF735C37CC45932C60F6CBA09E1588F0F51FF4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9nUa6hVWLvnd3YyXxW6YMePALB7Tumbg43BePFJmadd5/1/A5CF735C37CC45932C60F6CBA09E1588F0F51FF4.mft
Manifest number:          22
Signing time:             Tue 28 May 2024 19:32:27 +0000
Manifest this update:     Tue 28 May 2024 19:27:27 +0000
Manifest next update:     Wed 29 May 2024 20:56:27 +0000
Files and hashes:         1: 3137302e3233332e3133362e302f32322d3234203d3e20323635303739.roa (hash: 6YKahkBxE5AipFzqv8ugoZDyatBveux9YDdNCIJczEU=)
                          2: 323830343a333237343a3a2f33322d3438203d3e20323635303739.roa (hash: 83diTJ3APl8/HceiTDZpzEmhoq5a2D4Jur58uPYnXD4=)
                          3: A5CF735C37CC45932C60F6CBA09E1588F0F51FF4.crl (hash: RARXJq7LmkvkEeCwwFPHC4IcsEaY0BS6Lu5GZuXpO5U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:db:b8:84:7c:5c:67:3b:9a:77:88:42:da:14:a6:ab:6c:69:53:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5CF735C37CC45932C60F6CBA09E1588F0F51FF4
        Validity
            Not Before: May 28 19:27:27 2024 GMT
            Not After : May 29 20:56:27 2024 GMT
        Subject: CN=63D9A8F1DAB0C22FB0A870663CF2CD8002ABE59E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7c:e5:e4:34:85:cd:a1:d2:7a:1e:74:0c:b0:
                    e2:86:13:23:9d:f7:47:01:8c:21:e4:7f:6d:a4:ca:
                    9f:49:b7:83:c2:f2:ac:5d:7b:0d:ef:32:62:37:29:
                    6d:4c:2d:f7:99:2e:a3:67:ee:6a:0f:f3:66:ba:d1:
                    97:86:d1:22:13:90:5a:dd:76:ec:45:79:23:07:c4:
                    f9:8f:7c:d8:00:8d:65:58:a7:f0:41:70:e0:7e:3d:
                    ed:9f:cd:78:3a:dd:8e:b5:a3:69:86:cd:a8:d6:0a:
                    4c:e4:a9:df:cb:35:2b:4a:b2:9d:03:f4:ea:55:49:
                    b5:bb:bf:42:66:3a:86:25:40:bf:6a:62:67:31:a2:
                    42:07:07:ff:85:d5:5d:e7:b2:5c:45:10:f7:47:3c:
                    a5:93:ac:bb:c6:7c:e3:a0:22:73:f1:13:8b:32:fd:
                    5a:20:20:07:15:96:83:80:a3:85:2e:bf:8d:f4:3a:
                    58:93:c0:f4:d1:04:37:39:6f:8d:4f:77:06:03:c0:
                    27:b3:0a:d8:25:a1:46:9b:36:f8:f7:48:55:24:5d:
                    a1:a0:14:60:16:6a:d6:c5:85:de:90:9b:a1:e0:6d:
                    f8:e2:f7:a2:e3:56:ad:86:4b:a8:25:07:03:19:a7:
                    14:37:dd:ca:4a:f2:33:68:d6:01:13:76:22:0b:67:
                    43:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D9:A8:F1:DA:B0:C2:2F:B0:A8:70:66:3C:F2:CD:80:02:AB:E5:9E
            X509v3 Authority Key Identifier:
                keyid:A5:CF:73:5C:37:CC:45:93:2C:60:F6:CB:A0:9E:15:88:F0:F5:1F:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9nUa6hVWLvnd3YyXxW6YMePALB7Tumbg43BePFJmadd5/1/A5CF735C37CC45932C60F6CBA09E1588F0F51FF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5CF735C37CC45932C60F6CBA09E1588F0F51FF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nUa6hVWLvnd3YyXxW6YMePALB7Tumbg43BePFJmadd5/1/A5CF735C37CC45932C60F6CBA09E1588F0F51FF4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:7c:f1:14:0c:38:26:9d:33:57:b0:72:bf:cf:cd:61:de:fa:
         25:4f:a6:44:e8:f0:38:b2:c8:c2:77:37:0c:a7:bf:83:ae:a8:
         63:e7:0d:b0:b8:93:6d:e5:ef:80:40:1f:d1:45:7d:61:d7:fe:
         f5:90:44:c2:7b:f7:51:1c:56:a0:a3:a7:a0:46:4d:9c:9e:35:
         43:16:14:02:00:7f:f4:4d:a7:3f:a8:38:87:38:8a:9c:97:49:
         1f:5f:71:35:b1:00:08:1e:46:82:5f:f0:26:d8:37:70:af:c9:
         47:3c:18:78:f5:56:5d:1f:af:df:50:48:dd:c3:af:fa:cf:ef:
         d2:85:d5:d0:c9:c0:da:55:6e:c9:25:fd:86:fb:40:60:80:08:
         cd:ba:ae:68:22:ea:c1:10:4e:4b:02:56:18:1b:ac:3e:33:95:
         a9:91:fe:9f:73:40:87:13:e6:85:b4:d6:67:4a:f1:78:d2:7e:
         64:7c:1a:75:b5:58:d9:99:da:9e:7b:28:0a:15:71:a5:8b:27:
         2b:3a:5a:45:b8:56:4d:4b:c3:1d:29:8c:d9:65:39:0d:94:65:
         ca:a0:96:92:b4:34:ca:c7:e7:cb:7f:98:5c:1b:1a:80:12:7e:
         ee:dc:38:73:5f:4a:9d:45:4c:13:02:7d:ca:4d:77:e0:7f:b4:
         f0:74:1b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----