Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/DA5C24D0298EC89DD148F96CACE58FA36FAAF2B6.mft
File:                     DA5C24D0298EC89DD148F96CACE58FA36FAAF2B6.mft (raw, json)
Hash identifier:          W9Yr5GGb//pCDRfbeA+DNfBgWF5VMf+FRcXYSjCEvZo=
Subject key identifier:   D2:C1:7D:EE:6C:BA:9A:EC:8D:2F:D4:D9:76:DD:68:46:D8:15:3E:2C
Authority key identifier: DA:5C:24:D0:29:8E:C8:9D:D1:48:F9:6C:AC:E5:8F:A3:6F:AA:F2:B6
Certificate issuer:       /CN=DA5C24D0298EC89DD148F96CACE58FA36FAAF2B6
Certificate serial:       0AFA7B1F9CE41F870EAF01C1DB8656F64453FE00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA5C24D0298EC89DD148F96CACE58FA36FAAF2B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/DA5C24D0298EC89DD148F96CACE58FA36FAAF2B6.mft
Manifest number:          2E
Signing time:             Thu 21 Mar 2024 07:53:56 +0000
Manifest this update:     Thu 21 Mar 2024 07:48:56 +0000
Manifest next update:     Fri 22 Mar 2024 08:18:56 +0000
Files and hashes:         1: 34352e3138382e36382e302f32322d3234203d3e20323639353233.roa (hash: 131N5LkySjmLD9SFqh56rdIp9PTjFB8uZwaEfBBreAI=)
                          2: DA5C24D0298EC89DD148F96CACE58FA36FAAF2B6.crl (hash: of4ptCRtZhGO3UebTMm0bTafZ7VmlkcQD7ECSeiNqMo=)
                          3: 323830343a363565633a3a2f33322d3438203d3e20323639353233.roa (hash: l5uTYkLc1vGCLZXdOaF6qaXJqaxIFliixwWfodkHAd8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:fa:7b:1f:9c:e4:1f:87:0e:af:01:c1:db:86:56:f6:44:53:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5C24D0298EC89DD148F96CACE58FA36FAAF2B6
        Validity
            Not Before: Mar 21 07:48:56 2024 GMT
            Not After : Mar 22 08:18:56 2024 GMT
        Subject: CN=D2C17DEE6CBA9AEC8D2FD4D976DD6846D8153E2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5a:0d:f7:50:98:4d:24:d6:24:89:ee:05:cd:
                    97:6b:c6:d8:13:10:42:69:ac:d2:0f:37:d3:eb:8a:
                    fc:dd:6b:0b:2c:56:e3:35:cc:12:84:c6:00:70:06:
                    c3:7e:1a:cc:d2:c8:4e:d7:21:94:f2:8e:b3:c4:0c:
                    61:1f:56:f1:26:97:b2:4b:d4:f2:c5:55:8e:35:ab:
                    7e:5d:a6:a4:74:14:66:61:f2:c0:46:22:ab:f2:3f:
                    7a:e5:0c:04:c9:9c:29:bc:5a:d0:b5:a8:35:b6:70:
                    37:9d:64:90:e9:8b:c8:dd:f5:4f:f6:37:5d:fb:f9:
                    47:af:3b:69:4d:9e:40:76:56:3d:a5:db:91:4b:c6:
                    32:7a:00:84:35:c8:2a:38:2a:d2:ed:4d:75:cc:49:
                    55:26:75:79:88:b9:7b:4c:67:6a:24:20:ef:44:f9:
                    1a:4a:51:36:da:b1:49:e4:dc:07:14:3d:ce:1c:75:
                    f8:ef:28:a6:43:b1:a1:ab:1c:92:c4:52:44:0d:ba:
                    74:30:2c:22:01:fb:64:4c:5b:08:ab:3a:72:5a:0d:
                    37:49:91:a6:4a:5d:66:13:bc:04:8f:12:66:34:ce:
                    90:5b:b4:46:9b:d0:8b:9c:9d:90:c8:8a:42:f6:67:
                    52:16:58:b4:c7:38:16:42:3e:bf:1a:02:0d:f7:e8:
                    10:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C1:7D:EE:6C:BA:9A:EC:8D:2F:D4:D9:76:DD:68:46:D8:15:3E:2C
            X509v3 Authority Key Identifier:
                keyid:DA:5C:24:D0:29:8E:C8:9D:D1:48:F9:6C:AC:E5:8F:A3:6F:AA:F2:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/DA5C24D0298EC89DD148F96CACE58FA36FAAF2B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA5C24D0298EC89DD148F96CACE58FA36FAAF2B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/DA5C24D0298EC89DD148F96CACE58FA36FAAF2B6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:54:64:36:18:38:1a:df:48:87:80:36:3c:9d:79:44:6a:82:
         2c:81:de:99:2a:cf:56:6b:9b:a8:ac:7f:13:c9:eb:7f:9b:67:
         b1:fd:ff:b2:0f:a8:68:6f:64:16:6a:ad:25:4b:20:15:bd:2e:
         d6:68:7b:c7:65:13:26:7a:43:42:61:ec:18:41:52:22:39:63:
         5c:02:f2:0b:55:55:3c:42:23:d3:cb:a4:0c:1d:b2:e0:00:0f:
         5c:c0:b6:d5:c4:5c:8a:2e:6d:67:99:c9:32:f6:b3:7f:f9:43:
         e5:0c:f3:e0:18:bd:55:30:16:36:3b:bd:ec:76:b2:09:97:d9:
         a9:0d:3b:ce:00:c6:5a:96:f8:a3:d1:db:8a:3a:e5:95:97:70:
         71:e7:22:e9:24:09:cf:27:ee:15:79:2c:f6:f1:a0:f5:16:4f:
         3e:6b:ec:6f:70:7f:b0:7c:42:3d:e9:38:eb:64:ef:c0:99:4b:
         62:a5:a6:3b:cf:d9:b8:f0:c5:ea:af:5d:71:d6:d4:7b:46:d5:
         e3:2a:a9:f2:0c:61:d0:3e:1f:4b:d4:36:b3:4d:b2:16:2e:4f:
         68:63:b0:01:19:d4:19:e5:ec:54:0d:83:5a:de:a8:89:1e:dc:
         de:7b:7d:45:d0:e1:8b:e1:e2:82:cd:49:ff:6f:9c:9f:af:47:
         06:95:4f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----