Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/527D0DC56ADA4BC51876CABDB13F64C8DABDEE5B.mft
File:                     527D0DC56ADA4BC51876CABDB13F64C8DABDEE5B.mft (raw, json)
Hash identifier:          mPPvLw3h5xspj0iTyaxGk/kQvcA6ZshoYDgoaEuQTF8=
Subject key identifier:   D4:C6:64:38:A3:7A:48:FD:12:52:0C:BD:97:8F:5A:D1:91:6F:62:94
Authority key identifier: 52:7D:0D:C5:6A:DA:4B:C5:18:76:CA:BD:B1:3F:64:C8:DA:BD:EE:5B
Certificate issuer:       /CN=527D0DC56ADA4BC51876CABDB13F64C8DABDEE5B
Certificate serial:       2E12719B9335A4CF1BC5F90932F10BC35E7A0B6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/527D0DC56ADA4BC51876CABDB13F64C8DABDEE5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/527D0DC56ADA4BC51876CABDB13F64C8DABDEE5B.mft
Manifest number:          94
Signing time:             Tue 13 Feb 2024 19:50:59 +0000
Manifest this update:     Tue 13 Feb 2024 19:45:59 +0000
Manifest next update:     Wed 14 Feb 2024 19:55:59 +0000
Files and hashes:         1: 323830343a333136343a3a2f33322d3334203d3e20323635303131.roa (hash: opEUzC68ZLrR92SeVSd2BRLPmSEKm9lXIC+BYiWQBLE=)
                          2: 3137302e38342e3134382e302f32322d3234203d3e20323635303131.roa (hash: HZilxr+sOJ1rujTs1fw37lPktT6vgZhnkG2PF3oM1Lc=)
                          3: 527D0DC56ADA4BC51876CABDB13F64C8DABDEE5B.crl (hash: KiyAl0axEJTFNcg+xaplVuwOK1f1MSfaP6YQluE5ALw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:12:71:9b:93:35:a4:cf:1b:c5:f9:09:32:f1:0b:c3:5e:7a:0b:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=527D0DC56ADA4BC51876CABDB13F64C8DABDEE5B
        Validity
            Not Before: Feb 13 19:45:59 2024 GMT
            Not After : Feb 14 19:55:59 2024 GMT
        Subject: CN=D4C66438A37A48FD12520CBD978F5AD1916F6294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:16:56:c5:b3:ca:b5:a6:5c:eb:fd:b7:e1:58:
                    ec:9f:2b:1c:0f:a0:cc:67:b0:ec:8a:f6:39:b4:e2:
                    fe:db:64:50:e2:46:42:38:b0:04:95:20:35:e0:f5:
                    4c:40:b3:a0:c7:5c:3e:0a:73:79:1e:b8:b0:9a:8c:
                    71:ae:72:95:25:a6:7d:60:24:8c:30:f3:fb:6f:1f:
                    23:71:26:1d:9f:f5:da:15:7f:83:a7:1b:d0:a1:07:
                    38:e4:44:d3:6f:fb:62:5d:b6:0e:a5:c4:20:a4:dd:
                    2a:b7:cb:40:60:de:50:73:89:a3:50:5a:41:62:ba:
                    5e:5b:c0:a4:67:3c:ab:78:53:3b:71:b7:b2:2a:ee:
                    cd:7f:b1:8c:23:46:8e:e6:e2:c5:81:7b:63:7b:f0:
                    f9:99:fe:57:67:b6:36:10:f7:2c:c3:65:dd:1d:30:
                    0c:00:a9:22:83:07:7b:28:98:7c:38:f8:49:39:0d:
                    36:86:6c:28:d4:ba:fb:b4:72:88:fb:ab:51:68:c6:
                    4f:47:ba:e5:f4:d8:c2:f1:d9:d1:91:a2:53:a2:b2:
                    bf:29:dc:5b:a9:e8:44:58:b3:c3:37:a1:9c:73:67:
                    fb:17:3d:2f:84:ce:78:e2:0f:13:ba:9e:9c:26:30:
                    ec:78:13:07:78:b7:54:9b:8d:00:70:29:93:95:4f:
                    2e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C6:64:38:A3:7A:48:FD:12:52:0C:BD:97:8F:5A:D1:91:6F:62:94
            X509v3 Authority Key Identifier:
                keyid:52:7D:0D:C5:6A:DA:4B:C5:18:76:CA:BD:B1:3F:64:C8:DA:BD:EE:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/527D0DC56ADA4BC51876CABDB13F64C8DABDEE5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/527D0DC56ADA4BC51876CABDB13F64C8DABDEE5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/527D0DC56ADA4BC51876CABDB13F64C8DABDEE5B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:d7:0a:fd:23:a6:41:8c:96:a7:d2:5b:3a:13:c6:6c:7f:8e:
         ac:01:b8:81:aa:ae:ac:c2:15:cb:b5:af:67:61:7d:4d:cc:4c:
         c5:31:2d:f4:79:fc:ab:e1:03:be:4e:a5:34:fd:e1:f8:88:c3:
         32:cf:e1:d1:c0:f8:e9:de:1b:e7:77:a1:25:30:e0:d5:88:3c:
         f7:55:00:8b:fb:81:6e:21:1d:21:ef:e0:96:de:56:b4:5a:8b:
         b4:ae:81:20:0e:d7:f9:ca:12:37:4d:aa:a3:bc:7a:4d:83:a1:
         16:a9:5d:31:ec:95:1a:a0:06:5c:a6:3d:af:89:91:27:a8:f7:
         2b:6b:1e:13:9a:4f:b3:ac:f5:4f:d5:0c:25:4f:41:bc:4a:f9:
         0c:c6:ed:c9:a3:d7:09:f6:4b:00:dc:25:a7:4b:d6:a9:e8:f4:
         23:4e:d2:1a:22:46:07:1a:7f:72:ef:97:69:69:17:9f:f2:ec:
         b3:fa:d0:64:61:37:9d:de:b9:8f:b1:4d:74:7e:c6:fe:4e:24:
         68:f3:01:f3:7c:91:c4:c0:32:29:83:3f:52:8a:66:39:bc:e8:
         24:34:be:6e:40:ac:ec:8a:93:75:e0:38:0a:df:9d:51:1a:71:
         72:a1:86:5c:c5:64:90:e9:80:c7:03:77:55:45:45:4d:0b:ef:
         28:df:f6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----