Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ASDkacDPRHw9AzPTZGMChp5Vw3mdGPYrZZHcGmsHSJqx/0/05E1A2D79D2A358A01C11C5721C5DE004E509A3D.mft
File:                     05E1A2D79D2A358A01C11C5721C5DE004E509A3D.mft (raw, json)
Hash identifier:          YKqRy4+hPgpE0pfW67OPiJ7zqn8Q5DPv+nA0MXuDbBc=
Subject key identifier:   9D:FE:EF:9E:22:52:A5:57:46:01:81:EB:95:B5:B8:23:E9:71:08:CB
Authority key identifier: 05:E1:A2:D7:9D:2A:35:8A:01:C1:1C:57:21:C5:DE:00:4E:50:9A:3D
Certificate issuer:       /CN=05E1A2D79D2A358A01C11C5721C5DE004E509A3D
Certificate serial:       147BAA6303E6965BB4954447A43E70C87E7998FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/05E1A2D79D2A358A01C11C5721C5DE004E509A3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ASDkacDPRHw9AzPTZGMChp5Vw3mdGPYrZZHcGmsHSJqx/0/05E1A2D79D2A358A01C11C5721C5DE004E509A3D.mft
Manifest number:          3A
Signing time:             Mon 15 Apr 2024 11:02:10 +0000
Manifest this update:     Mon 15 Apr 2024 10:57:10 +0000
Manifest next update:     Tue 16 Apr 2024 12:37:10 +0000
Files and hashes:         1: 05E1A2D79D2A358A01C11C5721C5DE004E509A3D.crl (hash: J0u51uHwbypZQglc1QDoHPbfV1Yi4jrZwnHYILICCmA=)
                          2: 323830343a353337383a3a2f33322d313238203d3e20323638353836.roa (hash: 8RPF4ESxFmnDU9BB9mJknFcclFaAlb0LtPL+Whk7T58=)
                          3: 34352e3136332e3232302e302f32322d3332203d3e20323638353836.roa (hash: iEFzt8vr5sqlgBKIOGEhGYT0H2oK7yk2GgSZAr9XuTw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:7b:aa:63:03:e6:96:5b:b4:95:44:47:a4:3e:70:c8:7e:79:98:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05E1A2D79D2A358A01C11C5721C5DE004E509A3D
        Validity
            Not Before: Apr 15 10:57:10 2024 GMT
            Not After : Apr 16 12:37:10 2024 GMT
        Subject: CN=9DFEEF9E2252A557460181EB95B5B823E97108CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c3:7f:c5:54:1f:e9:35:a6:99:1c:27:12:9a:
                    55:25:8e:75:63:44:6c:e4:1e:25:aa:64:b9:50:a7:
                    fd:25:27:a2:a6:22:0e:28:6f:55:31:d5:98:1d:c6:
                    a0:d4:98:8d:05:e0:0e:f7:0c:d3:b4:59:f4:ba:1c:
                    04:cc:43:aa:0e:ee:1a:45:e2:eb:e5:80:5f:3f:15:
                    4f:69:e7:cd:23:b4:9c:01:12:f9:75:a8:f1:03:85:
                    63:81:7f:4a:6c:b0:37:f4:9a:9f:dc:00:58:3e:fe:
                    31:a8:b9:9e:1a:06:c0:fb:02:41:76:b6:5e:62:36:
                    1e:dc:e4:88:29:3b:30:3a:6a:82:f8:28:3d:8a:62:
                    67:a7:c1:a8:a5:5e:29:47:9a:c1:05:b2:51:9b:a2:
                    de:71:ab:c9:85:6f:78:2a:93:d6:38:2b:06:fc:f1:
                    ec:84:a9:59:5b:e1:26:39:65:7d:48:d9:77:ea:b1:
                    32:bb:e1:2b:45:9f:71:bc:2a:43:1a:96:76:38:7c:
                    9f:6a:9e:8f:4a:40:27:90:9c:a2:a7:6e:cf:df:e5:
                    76:81:0a:ac:94:5a:8e:f3:45:42:e1:60:f3:d8:70:
                    89:8d:5e:bb:cf:d1:77:65:0e:47:79:67:c0:ba:34:
                    08:04:c6:3e:36:c7:d0:3e:0e:b7:b9:a6:ee:df:7b:
                    39:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:FE:EF:9E:22:52:A5:57:46:01:81:EB:95:B5:B8:23:E9:71:08:CB
            X509v3 Authority Key Identifier:
                keyid:05:E1:A2:D7:9D:2A:35:8A:01:C1:1C:57:21:C5:DE:00:4E:50:9A:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ASDkacDPRHw9AzPTZGMChp5Vw3mdGPYrZZHcGmsHSJqx/0/05E1A2D79D2A358A01C11C5721C5DE004E509A3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/05E1A2D79D2A358A01C11C5721C5DE004E509A3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ASDkacDPRHw9AzPTZGMChp5Vw3mdGPYrZZHcGmsHSJqx/0/05E1A2D79D2A358A01C11C5721C5DE004E509A3D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:7f:93:19:53:ff:43:fc:c5:c3:70:59:1d:06:46:89:a9:58:
         05:f4:67:80:81:7a:56:12:05:59:d1:11:45:5a:51:bb:90:d9:
         48:4e:f0:ab:6c:01:51:4a:81:ba:92:33:8a:4c:f0:7d:67:49:
         b7:7f:35:a4:55:8f:36:64:c4:82:52:16:09:fe:ff:83:d8:f6:
         73:e9:b3:a6:fd:ce:f8:5c:c9:65:6e:58:a7:78:c7:fd:d7:78:
         0c:7f:6a:aa:ae:e6:7d:72:d7:8d:7b:78:c2:b9:8d:e2:8b:01:
         9d:3f:a2:f7:6d:7e:6c:68:3d:71:77:97:ea:a6:cf:f2:da:c6:
         f1:cd:53:3d:ce:ac:de:5e:f0:32:34:94:3c:b7:92:38:f7:3d:
         65:5a:d8:cb:08:2b:18:bd:29:cb:17:0b:91:86:54:82:20:0c:
         e7:06:1f:87:b5:90:9b:c2:a1:25:f5:9a:07:8a:8c:84:8f:06:
         fb:5d:40:dc:f2:c1:a9:8b:6d:f4:3f:85:25:22:51:5f:2b:3d:
         96:23:b4:2d:3f:75:f2:04:b1:4e:f6:54:08:30:53:fb:97:37:
         e6:d4:a9:fb:3b:a3:b8:73:54:be:94:24:6c:9d:59:2f:b4:08:
         d3:88:17:96:60:ae:c7:7f:63:da:92:c9:4b:ee:a8:ed:70:10:
         af:fb:b5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----