Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/0/4735A88EEFB535E0AA8F960135D5345E83E1C78E.mft
File:                     4735A88EEFB535E0AA8F960135D5345E83E1C78E.mft (raw, json)
Hash identifier:          ZQERfDK78RnJHfGVOtcTKCJJUKFMHEnTZBaJC+BNufs=
Subject key identifier:   E5:C5:13:DD:66:FF:6A:B8:D2:D2:01:EE:D0:35:7C:61:41:7F:C4:9D
Authority key identifier: 47:35:A8:8E:EF:B5:35:E0:AA:8F:96:01:35:D5:34:5E:83:E1:C7:8E
Certificate issuer:       /CN=4735A88EEFB535E0AA8F960135D5345E83E1C78E
Certificate serial:       64F76CAD52717B0DE5C704AAB4BEC78F5A195885
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4735A88EEFB535E0AA8F960135D5345E83E1C78E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/0/4735A88EEFB535E0AA8F960135D5345E83E1C78E.mft
Manifest number:          01FA
Signing time:             Sun 14 Apr 2024 19:18:40 +0000
Manifest this update:     Sun 14 Apr 2024 19:13:40 +0000
Manifest next update:     Mon 15 Apr 2024 22:32:40 +0000
Files and hashes:         1: 323830343a363434343a313030303a3a2f33362d3336203d3e20323639343137.roa (hash: NGpCrKP/nLCyctYHDtrRFsbYiab+AnUTPUeGKr6NJnw=)
                          2: 4735A88EEFB535E0AA8F960135D5345E83E1C78E.crl (hash: l6c6/KqeRco6eGanOsyCXotzliJq7v7Wg2onkfEmfOs=)
                          3: 323830343a363434343a3a2f33362d3430203d3e20323639343137.roa (hash: CzPISikxKRvwhmjIKXAP2DciH+NAJDMAYgIRT3rn9lY=)
                          4: 323830343a363434343a313130303a3a2f34302d3430203d3e20323639343137.roa (hash: 0QZI8X3nVf9RFGPl8PQ4orwqkXTs8L3Rodo7xKA6Ge4=)
                          5: 34352e3138362e38382e302f32322d3234203d3e20323639343137.roa (hash: 2Ze9L6LbuK6Xp7Uc1ImQ9uz+qI2Ev7MllhacMP71HbQ=)
                          6: 323830343a363434343a313030303a3a2f34302d3430203d3e20323639343137.roa (hash: EECae5ZOr2YBAm81pen0pKaSeeGCsdpb+ZZhBBohMs8=)
                          7: 323830343a363434343a3a2f33322d3335203d3e20323639343137.roa (hash: uui81vJkcXCIuH2SOxjAU1fXK/HI/3IVih5Ja48rhq8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:f7:6c:ad:52:71:7b:0d:e5:c7:04:aa:b4:be:c7:8f:5a:19:58:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4735A88EEFB535E0AA8F960135D5345E83E1C78E
        Validity
            Not Before: Apr 14 19:13:40 2024 GMT
            Not After : Apr 15 22:32:40 2024 GMT
        Subject: CN=E5C513DD66FF6AB8D2D201EED0357C61417FC49D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ec:9d:72:e8:ec:36:40:e7:d3:85:f1:b6:e4:
                    6d:c2:d4:06:cd:e2:36:2a:a1:03:4c:df:bf:49:a6:
                    36:35:7c:dc:2b:b3:46:48:c0:c6:1a:b2:43:60:86:
                    ca:dc:82:11:f7:82:f0:1e:d1:cc:77:85:4e:bb:69:
                    3b:bc:cc:d2:96:90:4b:1b:b5:59:f8:f8:a4:0f:e1:
                    ea:aa:f2:3f:d1:21:ea:24:04:e1:1d:d5:64:30:04:
                    02:91:3d:03:a7:ae:b7:72:12:e4:59:46:a3:91:73:
                    b5:7d:3b:9b:33:4f:fd:29:a4:33:26:87:0c:cc:e7:
                    0a:10:8b:df:26:a8:cd:75:2a:99:13:b4:ad:04:41:
                    f6:29:a9:b0:26:4f:90:4f:d7:7f:af:cc:15:58:50:
                    c6:4c:d0:99:f1:4d:41:ef:88:1a:90:aa:94:a9:64:
                    2f:54:e1:20:45:8e:85:76:e1:6a:80:ae:c4:9b:68:
                    cb:48:89:23:f5:28:8d:b9:92:d3:0f:35:ad:9c:20:
                    10:dd:03:18:d3:8e:61:c3:d9:02:b5:6e:1c:8f:9c:
                    48:bf:bd:e4:5b:b4:97:0b:f4:1c:dc:7f:3d:a9:35:
                    51:9d:63:3c:aa:f2:52:e2:0c:eb:11:c2:4b:4c:c3:
                    e9:49:6f:87:61:d2:57:63:b6:25:c8:da:12:e7:8d:
                    ea:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C5:13:DD:66:FF:6A:B8:D2:D2:01:EE:D0:35:7C:61:41:7F:C4:9D
            X509v3 Authority Key Identifier:
                keyid:47:35:A8:8E:EF:B5:35:E0:AA:8F:96:01:35:D5:34:5E:83:E1:C7:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/0/4735A88EEFB535E0AA8F960135D5345E83E1C78E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4735A88EEFB535E0AA8F960135D5345E83E1C78E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/0/4735A88EEFB535E0AA8F960135D5345E83E1C78E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:52:0a:6b:65:9f:bc:95:75:1f:c2:56:49:84:ba:6c:9f:0c:
         6b:c0:0a:4c:13:0f:e8:65:83:c3:8a:83:71:6e:93:6d:9f:36:
         85:88:71:dd:cc:6d:8a:36:25:c7:67:1e:4f:1f:a7:25:84:9a:
         49:a8:26:29:88:6d:e1:1e:e0:64:2f:c4:20:f5:e4:5f:5e:18:
         54:3b:83:57:87:76:fc:11:d0:5a:6a:c8:f5:bd:0f:ee:cd:b9:
         0a:a3:c3:27:7f:79:c5:6e:18:09:69:d8:a5:a8:a5:e9:91:57:
         fc:db:12:f2:9b:de:c0:6f:aa:80:fc:e3:10:55:82:4c:d3:e7:
         04:27:31:63:b2:c3:b6:8f:79:4b:d7:29:22:f9:55:b8:c5:95:
         1c:5d:6d:3e:43:89:2c:c9:fe:99:b8:6d:27:0a:5a:e6:b5:54:
         1f:75:9d:3b:02:df:50:fa:b6:20:cb:ef:71:6a:91:e6:db:ea:
         32:2e:43:13:ea:4e:89:71:fd:b8:0d:d9:35:d9:0a:30:86:e1:
         40:79:3b:25:1f:ef:4a:09:81:c1:f7:81:26:97:79:6e:ec:0b:
         c1:29:3e:22:3b:2b:12:24:10:46:4f:c4:5a:f8:52:85:aa:d8:
         fd:11:6e:85:48:44:0c:2f:62:55:90:dd:e1:a6:f5:5d:c3:ea:
         d7:1b:bf:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----