Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/5BC2AD12495129E0C2AB5EBD9F33BAD7A9DE59EC.mft
File:                     5BC2AD12495129E0C2AB5EBD9F33BAD7A9DE59EC.mft (raw, json)
Hash identifier:          qe4e08fw++MQON0DKhP6fgwSbroj7GWHtizXw8DBZoU=
Subject key identifier:   11:AA:31:D7:59:C6:08:72:4B:9A:B9:0E:9B:AA:A5:1F:1F:A1:D5:0A
Authority key identifier: 5B:C2:AD:12:49:51:29:E0:C2:AB:5E:BD:9F:33:BA:D7:A9:DE:59:EC
Certificate issuer:       /CN=5BC2AD12495129E0C2AB5EBD9F33BAD7A9DE59EC
Certificate serial:       21C7DB4B88364EF41A183F94E9872E4FDDC2E22D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BC2AD12495129E0C2AB5EBD9F33BAD7A9DE59EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/5BC2AD12495129E0C2AB5EBD9F33BAD7A9DE59EC.mft
Manifest number:          1D
Signing time:             Fri 15 Mar 2024 11:14:09 +0000
Manifest this update:     Fri 15 Mar 2024 11:09:09 +0000
Manifest next update:     Sat 16 Mar 2024 11:33:09 +0000
Files and hashes:         1: 34352e3139312e3132342e302f32322d3332203d3e20323639363731.roa (hash: XNclpS128p7neTXaywcNYG/O9MFgqsVgjGLMY7B6sTA=)
                          2: 5BC2AD12495129E0C2AB5EBD9F33BAD7A9DE59EC.crl (hash: tg5hBnQzn/ZQojyXy20qtVsoaNkVDd0IhVL1lG+VYGA=)
                          3: 323830343a363832343a3a2f33322d313238203d3e20323639363731.roa (hash: zclLi9ICrr9HzNzVqJSnK7nPR8jRsUy4FgtqaK4Ndmo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:c7:db:4b:88:36:4e:f4:1a:18:3f:94:e9:87:2e:4f:dd:c2:e2:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BC2AD12495129E0C2AB5EBD9F33BAD7A9DE59EC
        Validity
            Not Before: Mar 15 11:09:09 2024 GMT
            Not After : Mar 16 11:33:09 2024 GMT
        Subject: CN=11AA31D759C608724B9AB90E9BAAA51F1FA1D50A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2a:70:33:71:fe:bf:4e:6d:68:bd:94:2b:8b:
                    28:47:96:4f:b1:07:2d:12:fd:e8:d5:7d:81:28:96:
                    1e:5a:dc:3c:b1:25:1a:1a:a5:cf:90:f0:e0:61:a5:
                    88:62:ab:46:95:e1:39:c8:9e:0c:47:38:c1:9e:c9:
                    3b:f0:76:94:5f:3e:65:fd:38:5c:b7:b5:a5:04:ce:
                    76:6a:a1:f9:3b:7f:70:4e:a5:b6:3c:4b:4b:2d:02:
                    9f:12:14:f0:ef:5e:58:88:1b:24:2b:5b:ca:a9:8d:
                    c3:a7:34:ad:2c:f2:eb:33:f0:cc:52:af:b8:40:44:
                    2e:cd:82:b9:f5:cc:ed:ea:44:c4:b6:bd:19:47:1b:
                    d4:db:66:96:d5:68:73:a0:22:e9:58:d7:78:b0:f7:
                    0c:e7:50:11:42:dd:40:b6:79:cd:d4:ae:ab:6b:7b:
                    76:25:66:33:42:2f:d5:ce:3f:06:47:1e:d2:4b:aa:
                    4d:94:02:34:c5:04:d9:39:68:d7:88:f8:76:cb:b6:
                    f1:23:12:b4:77:f3:cb:82:bd:56:2f:e4:0a:81:5d:
                    30:75:ae:89:74:ca:c0:3b:e5:8b:2e:49:4a:87:08:
                    e9:78:70:2e:8e:04:ae:3b:3e:df:4c:fa:87:c4:b8:
                    50:d9:d9:63:5c:0f:bf:39:98:29:1f:5a:48:be:7a:
                    73:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AA:31:D7:59:C6:08:72:4B:9A:B9:0E:9B:AA:A5:1F:1F:A1:D5:0A
            X509v3 Authority Key Identifier:
                keyid:5B:C2:AD:12:49:51:29:E0:C2:AB:5E:BD:9F:33:BA:D7:A9:DE:59:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/5BC2AD12495129E0C2AB5EBD9F33BAD7A9DE59EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BC2AD12495129E0C2AB5EBD9F33BAD7A9DE59EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/5BC2AD12495129E0C2AB5EBD9F33BAD7A9DE59EC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:a6:5d:c4:79:4f:68:51:96:8e:75:6e:7c:16:fd:e1:03:c0:
         38:4d:2d:94:ac:8a:fd:e6:a5:66:6f:84:f2:c5:88:b6:e8:70:
         45:c3:17:66:6b:a2:f9:09:03:23:6c:bb:b9:1c:d4:9c:29:7a:
         e7:3e:37:27:36:b1:33:39:2d:52:b5:35:d5:43:8d:81:d3:33:
         14:32:26:79:6d:6f:37:cc:0f:c5:a7:b2:1c:9b:32:de:64:31:
         c6:47:f8:2e:77:7a:82:6b:07:af:43:72:c4:bf:4c:fd:30:87:
         57:6b:f0:f4:c8:b1:42:3b:c8:ef:f0:39:bd:ed:d9:32:5c:5e:
         c0:73:b3:aa:b8:44:b2:0a:0e:dd:90:3d:bc:5d:a6:2a:7c:61:
         e3:f1:c6:ef:ae:2f:b9:cc:c7:43:e3:aa:b4:15:33:3a:7b:66:
         c7:b8:9d:59:6e:23:3d:a5:2b:53:6a:62:ff:2c:b4:d4:e2:55:
         15:ce:3e:4d:10:31:d3:72:17:5d:8a:d4:55:ab:f2:73:96:c7:
         7f:b8:fa:c5:0c:39:7e:6f:01:31:6b:d6:e3:e2:95:bf:81:40:
         80:5f:9a:ce:c1:55:18:f2:ac:4c:44:b4:7f:5d:c6:71:d9:6f:
         a6:e1:93:04:00:49:a1:15:19:65:bb:52:60:8f:45:e3:c0:c2:
         f5:0c:8b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----