Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/8545ED852E6BA88695268C3F3DB0FF2B57345AAD.mft
File:                     8545ED852E6BA88695268C3F3DB0FF2B57345AAD.mft (raw, json)
Hash identifier:          W73kkUsLiKwTxRk61dQ7URnyLy+vIB8RgcF7bU7S9z8=
Subject key identifier:   22:42:90:00:AC:52:B8:03:1A:1F:3F:5D:10:BB:DF:57:3B:15:95:01
Authority key identifier: 85:45:ED:85:2E:6B:A8:86:95:26:8C:3F:3D:B0:FF:2B:57:34:5A:AD
Certificate issuer:       /CN=8545ED852E6BA88695268C3F3DB0FF2B57345AAD
Certificate serial:       5EA1A483A65FC2D33657C5A72FD8957181F093B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8545ED852E6BA88695268C3F3DB0FF2B57345AAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/8545ED852E6BA88695268C3F3DB0FF2B57345AAD.mft
Manifest number:          24
Signing time:             Mon 15 Apr 2024 11:51:40 +0000
Manifest this update:     Mon 15 Apr 2024 11:46:40 +0000
Manifest next update:     Tue 16 Apr 2024 13:49:40 +0000
Files and hashes:         1: 323830343a333136343a383030303a3a2f33332d3333203d3e20323635303131.roa (hash: i2mnhnxTWIQUp5oCwhl2g+9J5TAABHEb1YnmQp6uOsY=)
                          2: 3137302e38342e3134382e302f32322d3232203d3e20323635303131.roa (hash: yE94eDrIPwU5YJ7rE2kbGwcEwNf8A49okFTX/CpUFFY=)
                          3: 8545ED852E6BA88695268C3F3DB0FF2B57345AAD.crl (hash: dkxpQyV6cc8Uqu85Y+V0gYr9FpZ9fszLXSDqMYU8b/I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:a1:a4:83:a6:5f:c2:d3:36:57:c5:a7:2f:d8:95:71:81:f0:93:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8545ED852E6BA88695268C3F3DB0FF2B57345AAD
        Validity
            Not Before: Apr 15 11:46:40 2024 GMT
            Not After : Apr 16 13:49:40 2024 GMT
        Subject: CN=22429000AC52B8031A1F3F5D10BBDF573B159501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5a:4f:db:c9:a4:07:d3:dd:ae:50:0b:6d:11:
                    41:7e:25:86:36:f6:3f:e6:b8:12:49:f3:a2:1d:66:
                    83:73:19:f1:18:05:16:71:8b:34:4f:e0:dc:61:6e:
                    cd:ff:85:e4:d2:66:65:79:37:b6:4e:d4:e0:d8:83:
                    bf:5c:0d:33:fb:01:8b:88:5e:36:9b:0f:ea:df:73:
                    5e:33:04:71:95:05:5e:f7:b0:37:2c:64:55:6b:08:
                    8b:cd:9f:73:b9:01:24:53:a9:06:d2:56:43:1c:dc:
                    d6:8c:74:6e:63:ab:b4:6b:7f:f8:e7:b9:12:d9:8b:
                    7a:15:2a:79:a4:64:87:a6:11:63:cf:53:6f:b1:80:
                    f6:ef:a3:49:97:56:c0:c7:82:7e:ed:f5:eb:3f:57:
                    74:ab:d2:4b:b0:25:48:de:36:44:05:34:60:2c:1d:
                    d2:82:47:3c:b9:9d:ef:fd:88:a7:ef:fb:7b:ee:94:
                    d2:ec:9a:4a:26:e3:7e:85:e0:20:37:50:97:89:06:
                    d9:26:3f:29:46:44:0a:43:10:a8:3c:2f:6f:03:31:
                    1c:a4:9f:1b:8c:ef:fc:4d:52:59:15:e9:ea:99:0b:
                    e9:dc:39:ae:96:2a:74:27:0f:3f:d1:7c:5c:25:2c:
                    d6:40:15:88:af:f1:9a:b4:a2:23:62:6c:e9:04:15:
                    f9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:42:90:00:AC:52:B8:03:1A:1F:3F:5D:10:BB:DF:57:3B:15:95:01
            X509v3 Authority Key Identifier:
                keyid:85:45:ED:85:2E:6B:A8:86:95:26:8C:3F:3D:B0:FF:2B:57:34:5A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/8545ED852E6BA88695268C3F3DB0FF2B57345AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8545ED852E6BA88695268C3F3DB0FF2B57345AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/8545ED852E6BA88695268C3F3DB0FF2B57345AAD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:52:8c:3d:55:97:63:63:8f:2c:9a:91:7c:50:97:44:96:f7:
         85:7a:f0:4d:9a:9a:f0:c7:5e:6f:ea:11:2e:e3:80:c2:37:02:
         ab:36:2d:9a:86:05:e6:18:f3:97:63:71:2e:cf:13:1c:98:bb:
         76:a3:d0:6a:be:a5:a0:a9:c2:99:48:8d:d0:f1:a7:38:f0:78:
         18:4f:78:33:0f:0a:d8:e9:06:9d:8f:e1:11:6c:50:38:63:48:
         ee:f9:64:5a:e0:d1:65:d5:fe:87:ad:4b:30:15:35:66:6c:df:
         00:d1:77:48:0a:5e:97:29:77:ce:64:a3:4c:7f:03:9e:51:b0:
         88:7b:bb:c7:de:a8:94:a1:a4:65:90:20:d0:a4:66:aa:83:d2:
         3b:7a:c4:e5:2a:42:22:f8:f3:f1:5a:1b:99:96:d9:4f:01:12:
         c5:f0:84:0d:92:68:8b:15:20:f3:bf:56:05:f4:30:cf:a6:d7:
         fd:5d:2a:db:1c:d1:f5:bf:b8:21:32:93:cb:65:d1:92:67:bb:
         a6:d4:0f:78:f3:fd:15:d4:f6:52:98:2a:96:5e:8b:a7:cd:e5:
         7a:9a:cd:2e:a0:dc:d5:a9:62:17:1a:65:fd:f6:84:f1:7f:ce:
         76:9d:c5:bc:71:6d:4a:7a:e6:fb:d5:a4:cf:c0:8f:6e:d1:8a:
         ca:75:d9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----