Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9nn4qunSioixwZNj7WvF1ujM9pzqh93EnrGfHnhuHMZJ/1/A5C4CDFEE1CC6FA7C763F3813EF72451A9624E3E.mft
File:                     A5C4CDFEE1CC6FA7C763F3813EF72451A9624E3E.mft (raw, json)
Hash identifier:          DnblGMUfmiwSJTYvu0IjBrbKoviuaKGT+uwaOKrT1Vk=
Subject key identifier:   5A:3D:3D:EE:50:8B:5D:5C:34:DA:D1:9D:1D:2C:20:76:27:19:31:58
Authority key identifier: A5:C4:CD:FE:E1:CC:6F:A7:C7:63:F3:81:3E:F7:24:51:A9:62:4E:3E
Certificate issuer:       /CN=A5C4CDFEE1CC6FA7C763F3813EF72451A9624E3E
Certificate serial:       3FECC057FD3C6ED43B97DF5E4A2756D085C0C225
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5C4CDFEE1CC6FA7C763F3813EF72451A9624E3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9nn4qunSioixwZNj7WvF1ujM9pzqh93EnrGfHnhuHMZJ/1/A5C4CDFEE1CC6FA7C763F3813EF72451A9624E3E.mft
Manifest number:          01A6
Signing time:             Sun 14 Apr 2024 17:47:43 +0000
Manifest this update:     Sun 14 Apr 2024 17:42:43 +0000
Manifest next update:     Mon 15 Apr 2024 20:24:43 +0000
Files and hashes:         1: 323830343a343835303a3a2f33322d3438203d3e20323637313133.roa (hash: LcvhL9HWMX5ZOxdVlnI6ea6LfErUBMV9aXBSRksU9F0=)
                          2: A5C4CDFEE1CC6FA7C763F3813EF72451A9624E3E.crl (hash: /nH0TgMofdFxZ1VSIrViMb/eeYcgWIGmZ3Uq4pkHN8k=)
                          3: 34352e3232372e3134302e302f32322d3234203d3e20323637313133.roa (hash: cF7KEyAeTbPeC/cXjmOmxc7ShFt7QtoJh45uNdxBhmY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ec:c0:57:fd:3c:6e:d4:3b:97:df:5e:4a:27:56:d0:85:c0:c2:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C4CDFEE1CC6FA7C763F3813EF72451A9624E3E
        Validity
            Not Before: Apr 14 17:42:43 2024 GMT
            Not After : Apr 15 20:24:43 2024 GMT
        Subject: CN=5A3D3DEE508B5D5C34DAD19D1D2C207627193158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:73:56:c3:33:29:cf:ba:83:ac:7a:79:b8:19:
                    15:19:12:fb:39:aa:72:97:97:0c:32:ff:af:c8:2d:
                    85:33:42:ca:59:c1:d5:42:fb:c1:7d:cf:94:80:25:
                    f2:c6:31:80:19:5f:84:65:fb:4e:e1:50:2e:67:21:
                    45:69:b7:0f:98:63:99:2d:1f:7e:2c:20:ec:29:75:
                    5c:13:c2:25:f4:72:a9:3c:0a:b8:c2:68:d6:f2:9c:
                    e5:af:30:ef:50:b1:f9:92:2c:df:e2:d9:27:67:00:
                    08:70:3f:de:c8:9a:e8:1b:22:5e:9b:b4:cc:5c:5c:
                    bd:ae:4c:24:f6:c6:c6:e6:dc:a6:dc:4b:3e:da:50:
                    73:00:ae:52:0a:b6:49:d2:8b:a5:e2:f5:07:ea:64:
                    97:2e:4c:0a:ee:69:11:27:d8:56:f4:b1:9a:23:e3:
                    29:d0:f0:ea:07:53:f1:b1:82:66:74:d9:98:44:a6:
                    bf:54:c4:e4:9e:34:13:6c:81:24:be:a8:c3:ec:7d:
                    7a:95:c8:66:58:9e:76:65:f8:be:39:54:60:28:d6:
                    37:7d:89:65:d8:47:f9:95:c1:9b:ad:ec:67:d2:a6:
                    ca:79:f9:fd:d9:25:ba:bd:31:fc:0b:a3:41:0a:73:
                    63:39:33:b9:2a:f3:44:2d:69:36:ce:75:cf:d5:c6:
                    51:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:3D:3D:EE:50:8B:5D:5C:34:DA:D1:9D:1D:2C:20:76:27:19:31:58
            X509v3 Authority Key Identifier:
                keyid:A5:C4:CD:FE:E1:CC:6F:A7:C7:63:F3:81:3E:F7:24:51:A9:62:4E:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9nn4qunSioixwZNj7WvF1ujM9pzqh93EnrGfHnhuHMZJ/1/A5C4CDFEE1CC6FA7C763F3813EF72451A9624E3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5C4CDFEE1CC6FA7C763F3813EF72451A9624E3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nn4qunSioixwZNj7WvF1ujM9pzqh93EnrGfHnhuHMZJ/1/A5C4CDFEE1CC6FA7C763F3813EF72451A9624E3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:18:35:d3:30:82:d0:bf:24:d6:ce:d9:6f:58:2a:a3:60:ed:
         51:d7:a5:90:8a:f6:e5:a5:fc:7e:28:1f:ff:87:55:27:ae:92:
         ab:99:d4:b7:7c:43:b2:b2:41:aa:11:23:8b:7b:1a:6f:ef:e2:
         4c:db:ef:85:fe:bf:93:97:32:a9:16:ba:d2:d5:f6:2a:55:7d:
         41:52:33:f1:04:2b:41:89:06:38:d7:d3:cc:41:3d:62:b5:35:
         2d:e0:dd:3a:b0:3c:57:26:c5:02:65:ef:3c:2d:bd:33:f6:64:
         ae:4f:b3:6a:a1:a0:ba:2f:05:45:5d:5b:cf:be:25:51:03:ba:
         73:4e:45:60:d8:b3:e8:a6:f0:a7:87:0f:1f:a7:15:53:84:e0:
         1b:a8:29:b0:9a:ce:4e:71:e3:a6:04:de:49:23:3c:41:d6:81:
         37:f9:e6:ca:13:f1:ec:b1:c0:ba:8c:06:51:a5:73:73:90:9b:
         82:b3:28:dd:a7:6e:45:ba:be:89:1e:a1:22:5b:c6:97:25:f1:
         db:6f:34:f1:73:20:a3:c4:d1:5e:61:e3:33:68:7d:60:57:67:
         cd:e3:62:e6:e4:f5:ec:3e:80:cd:e6:ac:97:9a:76:1e:62:c4:
         63:4a:8f:44:bd:cd:68:6a:13:57:4a:64:cd:6f:ac:7f:89:83:
         a0:35:bf:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----