Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/0/C315074D1111C870AB23650B003D0F2F0CA577E0.mft
File:                     C315074D1111C870AB23650B003D0F2F0CA577E0.mft (raw, json)
Hash identifier:          EKyEYUSMPyYTtNUq06ZDY0/HZ3KPzd+Xn3/A4EPGhEY=
Subject key identifier:   C6:A6:8C:1F:85:7E:AB:BB:63:06:B8:98:D6:90:5B:16:A8:57:6F:BC
Authority key identifier: C3:15:07:4D:11:11:C8:70:AB:23:65:0B:00:3D:0F:2F:0C:A5:77:E0
Certificate issuer:       /CN=C315074D1111C870AB23650B003D0F2F0CA577E0
Certificate serial:       1E53EF2BD57D41AEE25BA0822E4E8FDE1419AC63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C315074D1111C870AB23650B003D0F2F0CA577E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/0/C315074D1111C870AB23650B003D0F2F0CA577E0.mft
Manifest number:          05
Signing time:             Sun 14 Jan 2024 01:00:39 +0000
Manifest this update:     Sun 14 Jan 2024 00:55:39 +0000
Manifest next update:     Mon 15 Jan 2024 03:05:39 +0000
Files and hashes:         1: C315074D1111C870AB23650B003D0F2F0CA577E0.crl (hash: fc6g31SHZnB/EoYyyzjeutPFjBW2RRMYJXG9k6TR7G4=)
                          2: 323830343a346532383a3a2f33322d313238203d3e20323638323433.roa (hash: fwIDB2BHz/xwX7aOjZmXYMHhwEpjugI3BI/jgGr/UfI=)
                          3: 34352e3233362e3230302e302f32322d3332203d3e20323638323433.roa (hash: UgAxCQ9/DufV8NSgzTae2dMN4MEg64/IP928z2TlMco=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:53:ef:2b:d5:7d:41:ae:e2:5b:a0:82:2e:4e:8f:de:14:19:ac:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C315074D1111C870AB23650B003D0F2F0CA577E0
        Validity
            Not Before: Jan 14 00:55:39 2024 GMT
            Not After : Jan 15 03:05:39 2024 GMT
        Subject: CN=C6A68C1F857EABBB6306B898D6905B16A8576FBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fd:3b:c9:d1:56:25:70:13:ab:9a:52:90:b8:
                    6c:d1:9b:ed:c6:85:ef:21:03:81:b7:9e:d8:05:77:
                    08:3d:b4:0d:e5:ff:fd:c3:4c:37:8f:a2:14:f9:e4:
                    bb:0d:f6:66:64:d7:9f:ca:60:ee:cc:55:f2:7f:48:
                    ce:05:a4:62:c1:eb:80:25:f1:e9:f8:42:86:f3:fa:
                    29:df:09:ae:27:f0:3c:04:06:c0:7b:34:6e:ff:e9:
                    99:5f:87:f6:ce:2e:8e:98:0e:69:0c:7b:3a:02:34:
                    71:d9:52:65:45:b6:09:ec:8f:af:68:9f:9d:40:1b:
                    35:57:27:c9:8b:af:be:00:58:e0:8b:98:83:b0:15:
                    ab:b7:73:a1:0f:77:88:7a:5c:d1:b4:fc:07:94:67:
                    7b:4a:3e:37:73:f7:e1:f1:15:30:d3:aa:b5:5b:22:
                    cf:1f:26:e4:f4:4a:16:ff:f4:d1:03:08:1f:8a:54:
                    2f:da:5d:0a:f9:2b:c6:b3:b8:4e:44:b6:ff:6e:65:
                    c1:f4:32:7c:d5:66:24:22:8d:d4:56:6d:2a:e5:1c:
                    17:c5:5e:08:16:22:b0:c9:c5:af:13:40:ec:24:5a:
                    97:37:4d:e6:46:ff:f2:64:46:08:81:75:22:77:f1:
                    bc:8c:0f:b3:2c:9d:80:b6:d2:f6:56:74:e0:a5:e9:
                    fb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A6:8C:1F:85:7E:AB:BB:63:06:B8:98:D6:90:5B:16:A8:57:6F:BC
            X509v3 Authority Key Identifier:
                keyid:C3:15:07:4D:11:11:C8:70:AB:23:65:0B:00:3D:0F:2F:0C:A5:77:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/0/C315074D1111C870AB23650B003D0F2F0CA577E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C315074D1111C870AB23650B003D0F2F0CA577E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/0/C315074D1111C870AB23650B003D0F2F0CA577E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:be:10:1d:43:c5:cd:59:52:70:cd:65:3e:f9:77:a5:72:c2:
         ec:56:78:be:2a:5c:94:27:2f:a8:25:f8:19:78:c2:40:17:36:
         ad:e5:81:f2:e1:4a:9d:1c:49:fd:50:18:d4:65:13:d5:e3:88:
         10:c0:8f:26:14:7b:21:40:f8:4d:6e:5b:aa:b0:49:58:e1:f0:
         fe:e6:e1:eb:01:89:64:82:48:b9:61:4d:59:bb:e5:c5:74:ca:
         b5:8c:90:5f:40:16:3a:fb:6e:ca:02:2d:5d:19:1c:cb:e4:e5:
         51:81:53:b8:21:47:4d:f3:38:61:cc:be:fe:8a:16:0b:e9:0e:
         54:3e:6f:6b:58:7d:81:3a:e2:90:6f:be:51:2e:7b:e6:55:47:
         75:65:f6:55:3d:9a:6a:e5:31:44:7e:54:fa:3c:ab:a8:05:94:
         3e:4d:6b:0a:73:52:da:02:99:38:c2:e2:2f:61:a0:73:7f:f7:
         9d:1c:b8:61:03:33:5d:c1:10:79:ec:6a:94:e5:12:bf:04:68:
         9c:e3:dc:c8:23:6c:8f:10:c4:5a:78:ae:04:69:e9:eb:20:17:
         ed:bc:72:40:d5:cc:c3:b5:1d:f6:b7:1f:d8:57:0a:e6:af:d0:
         8d:f0:ad:91:3c:c7:57:49:7c:5a:a2:e0:40:76:85:59:8d:45:
         f7:f9:c4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----