Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/1/52B7E63BBE7861E4DB242A3939B52DFCB25EAC25.mft
File:                     52B7E63BBE7861E4DB242A3939B52DFCB25EAC25.mft (raw, json)
Hash identifier:          ktXsjB3yQ22ugzJJecDRQpVO2zy7sbCy1wp7VgZKvY0=
Subject key identifier:   4A:85:BD:77:38:E7:F1:A2:04:90:F9:81:EA:5A:D5:FC:DB:DB:41:34
Authority key identifier: 52:B7:E6:3B:BE:78:61:E4:DB:24:2A:39:39:B5:2D:FC:B2:5E:AC:25
Certificate issuer:       /CN=52B7E63BBE7861E4DB242A3939B52DFCB25EAC25
Certificate serial:       206DBF153EF4EB2F22C4437131A5919A9879CC72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52B7E63BBE7861E4DB242A3939B52DFCB25EAC25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/1/52B7E63BBE7861E4DB242A3939B52DFCB25EAC25.mft
Manifest number:          1D
Signing time:             Wed 24 Apr 2024 19:36:18 +0000
Manifest this update:     Wed 24 Apr 2024 19:31:18 +0000
Manifest next update:     Thu 25 Apr 2024 21:17:18 +0000
Files and hashes:         1: 52B7E63BBE7861E4DB242A3939B52DFCB25EAC25.crl (hash: /f80YvWWUV2M38ZtZe5HWN584L2yEtmj+fETnknABZw=)
                          2: 323830343a316134383a3a2f33322d3438203d3e203631383530.roa (hash: srD37QtKTHMuUao1SLNNLuVmEvM9U/nkz8F/xaSEwdg=)
                          3: 3230312e3134392e3131322e302f32322d3234203d3e203631383530.roa (hash: MHoVlP5nJOzkED6D//vj/7xhGuTMnCf0dXZRjdFP9C4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:6d:bf:15:3e:f4:eb:2f:22:c4:43:71:31:a5:91:9a:98:79:cc:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52B7E63BBE7861E4DB242A3939B52DFCB25EAC25
        Validity
            Not Before: Apr 24 19:31:18 2024 GMT
            Not After : Apr 25 21:17:18 2024 GMT
        Subject: CN=4A85BD7738E7F1A20490F981EA5AD5FCDBDB4134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4a:d9:7a:c2:38:bb:0e:b3:b0:1d:28:55:03:
                    e6:11:c0:3b:79:af:9f:25:27:4e:0a:fa:84:60:14:
                    c9:12:43:eb:8d:cf:01:36:8c:eb:f1:17:4c:9a:d7:
                    98:dc:e5:85:16:e7:3c:17:68:ac:40:d6:dc:31:c5:
                    af:c8:c0:51:36:a6:bb:5c:e8:56:ae:50:51:cb:63:
                    1f:9d:6c:c3:d8:b2:5a:24:32:18:e4:0b:26:f3:22:
                    aa:a4:2d:d1:6d:44:77:7c:23:0a:37:07:5e:ec:0e:
                    d4:bd:df:38:de:a7:0d:c8:2e:90:a5:f1:0f:c9:76:
                    aa:30:38:df:1a:41:43:bc:3f:44:ed:bd:b6:eb:96:
                    f5:bf:15:0d:d5:d1:23:35:a6:4c:53:d4:20:97:90:
                    0f:07:53:5c:f3:d7:db:0a:2d:c1:57:f6:46:41:12:
                    e0:8d:43:c6:c5:b9:52:b0:d4:8e:a8:21:61:08:df:
                    20:e7:b1:d0:06:22:b9:b4:be:1c:28:96:17:8d:da:
                    52:97:38:5d:04:2b:48:f4:75:f7:a2:6c:f8:18:e9:
                    79:91:1e:a6:3e:bd:94:2d:be:88:99:ed:3b:c2:65:
                    89:21:5b:7b:f1:1a:0f:58:67:75:d6:b6:b2:f5:e0:
                    82:f4:82:5f:eb:75:e1:2a:3e:dd:50:e5:82:39:b4:
                    fa:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:85:BD:77:38:E7:F1:A2:04:90:F9:81:EA:5A:D5:FC:DB:DB:41:34
            X509v3 Authority Key Identifier:
                keyid:52:B7:E6:3B:BE:78:61:E4:DB:24:2A:39:39:B5:2D:FC:B2:5E:AC:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/1/52B7E63BBE7861E4DB242A3939B52DFCB25EAC25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52B7E63BBE7861E4DB242A3939B52DFCB25EAC25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/1/52B7E63BBE7861E4DB242A3939B52DFCB25EAC25.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:b3:0f:94:39:b6:f1:57:bc:2c:9c:9a:77:ae:c3:d7:95:05:
         de:40:52:fa:60:94:f9:01:42:8e:e6:21:b4:7b:0e:2d:09:90:
         aa:86:b9:fa:b2:2b:a2:5b:05:07:ea:b3:13:52:3e:8f:38:63:
         87:2c:89:33:44:fb:06:61:9d:d7:93:69:02:9c:27:a4:4b:82:
         c4:ea:f0:b8:a1:a6:f7:15:4c:9d:a2:36:63:93:4e:5b:cb:55:
         64:41:d5:58:7a:21:c5:c4:a7:0d:4c:ff:1f:ec:2f:6a:e7:63:
         db:de:c6:30:4f:37:bb:48:d1:30:2f:e3:6e:57:b7:5b:e0:19:
         1f:81:9f:fc:fe:7f:56:fc:d9:de:5b:5c:f8:03:61:90:71:71:
         cd:76:1b:ff:7e:a6:d5:e8:fa:db:80:97:78:f9:e4:b1:f5:d0:
         e1:cb:54:a1:c7:4a:cc:1e:9c:72:53:b3:8d:19:1b:04:ca:ab:
         38:0d:8e:02:62:ce:53:64:bf:56:e4:27:2f:a0:e4:25:c3:56:
         d9:34:e4:be:3c:1f:c7:a6:9a:d8:5c:a1:71:4b:bf:81:39:f3:
         af:aa:53:c1:f8:54:7a:51:26:ab:91:2d:87:3e:60:e0:0b:1a:
         b5:08:24:ee:86:4d:f1:2f:8a:8f:2f:1c:c0:ff:26:3d:af:09:
         25:3e:42:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----