Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/52E1AA5528EEC08F20FBCD1690FCE7FB06DF5A52.mft
File:                     52E1AA5528EEC08F20FBCD1690FCE7FB06DF5A52.mft (raw, json)
Hash identifier:          FDNEx2nNq3qjFB5qBgnb1PdM3FKWP6ru0U9ByzZgL44=
Subject key identifier:   CE:C2:DA:D2:C0:56:4F:32:1D:AE:B3:1D:CE:E9:06:03:F1:48:A6:B8
Authority key identifier: 52:E1:AA:55:28:EE:C0:8F:20:FB:CD:16:90:FC:E7:FB:06:DF:5A:52
Certificate issuer:       /CN=52E1AA5528EEC08F20FBCD1690FCE7FB06DF5A52
Certificate serial:       034E74147B014C9ACB1856E7ACA09720C705870F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52E1AA5528EEC08F20FBCD1690FCE7FB06DF5A52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/52E1AA5528EEC08F20FBCD1690FCE7FB06DF5A52.mft
Manifest number:          5A
Signing time:             Mon 15 Apr 2024 07:08:22 +0000
Manifest this update:     Mon 15 Apr 2024 07:03:22 +0000
Manifest next update:     Tue 16 Apr 2024 08:15:22 +0000
Files and hashes:         1: 52E1AA5528EEC08F20FBCD1690FCE7FB06DF5A52.crl (hash: 1dzM3c+KL9+cFSVvcfAzOIrVXZUeyosxkV36sPkKvU8=)
                          2: 3138392e33392e3138302e302f32322d3234203d3e20323730383338.roa (hash: jxlTGfwV3UBMTnZ4ig0l8mC+1ZpcBvzfJXdhqdHY44I=)
                          3: 323830343a373233303a3a2f33322d3438203d3e20323730383338.roa (hash: aTGYGWZngcdzmqB5k0smtiZrDg0Vn8bg9RaL45IJyqI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:4e:74:14:7b:01:4c:9a:cb:18:56:e7:ac:a0:97:20:c7:05:87:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52E1AA5528EEC08F20FBCD1690FCE7FB06DF5A52
        Validity
            Not Before: Apr 15 07:03:22 2024 GMT
            Not After : Apr 16 08:15:22 2024 GMT
        Subject: CN=CEC2DAD2C0564F321DAEB31DCEE90603F148A6B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:12:0d:ed:e4:d6:e8:cd:72:33:d4:5d:24:95:
                    de:31:1b:72:5c:9d:e8:1f:07:95:de:91:f2:ac:4a:
                    22:6e:b5:46:bf:b1:76:37:fa:73:e8:8b:7c:e4:0d:
                    b9:e7:68:7a:d8:d2:7f:2b:fb:5d:5c:08:f4:18:ed:
                    f4:93:8b:e9:d9:5a:78:3f:2f:4d:ca:e7:87:99:ef:
                    f4:1b:e4:08:22:c8:dd:c5:14:fd:34:f9:6e:81:5b:
                    42:05:6b:7c:dd:40:67:d9:9d:b1:cd:97:fa:13:02:
                    4d:29:2c:7d:f5:f0:3c:a6:b4:00:f0:0e:da:07:74:
                    1b:1a:85:ab:61:8b:96:e5:fd:70:c7:ce:7c:72:58:
                    53:92:78:94:8d:5d:f6:1d:2b:7c:11:d9:1c:ef:58:
                    ef:eb:70:21:26:fd:29:85:c4:84:39:6c:e5:15:39:
                    39:3a:a2:a1:da:76:eb:42:6f:43:02:51:4f:c8:54:
                    0b:f6:55:77:a9:9d:2a:52:59:22:12:53:18:99:b5:
                    99:d4:f3:8f:b5:79:fc:02:06:58:cb:97:dd:ba:83:
                    9b:d1:0f:28:d8:d3:1a:b4:9b:48:18:6d:eb:39:95:
                    16:d0:e2:b5:82:d2:f3:49:c0:f0:15:11:a0:c4:29:
                    4f:ff:1b:2e:8b:73:61:05:2c:fd:aa:05:c0:30:5f:
                    7e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C2:DA:D2:C0:56:4F:32:1D:AE:B3:1D:CE:E9:06:03:F1:48:A6:B8
            X509v3 Authority Key Identifier:
                keyid:52:E1:AA:55:28:EE:C0:8F:20:FB:CD:16:90:FC:E7:FB:06:DF:5A:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/52E1AA5528EEC08F20FBCD1690FCE7FB06DF5A52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52E1AA5528EEC08F20FBCD1690FCE7FB06DF5A52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/52E1AA5528EEC08F20FBCD1690FCE7FB06DF5A52.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:85:e8:e4:ce:6a:d1:f7:22:8b:7e:85:97:0f:06:cf:7f:dd:
         d5:6e:e8:53:a4:ef:5f:9e:db:44:04:2a:ea:95:76:e8:44:ca:
         06:d3:52:f2:cd:93:cf:c9:d9:fa:39:bc:2a:7e:65:61:23:04:
         46:ac:d1:2f:61:0a:0d:08:b7:64:f2:19:23:ca:eb:e4:8f:99:
         04:56:0f:84:8d:86:ef:71:92:29:d5:32:e5:5e:76:60:ea:ad:
         54:94:f0:f7:45:6b:bc:42:ac:37:cd:a2:8f:ba:73:5c:8a:bc:
         06:89:66:ef:50:fa:b9:e3:b8:0e:3c:d7:53:19:44:3d:0c:9b:
         db:3b:6c:c3:ca:1a:85:e9:c8:eb:61:e4:45:e1:89:63:e1:34:
         f6:cf:45:94:dd:2f:15:af:80:65:8a:69:5e:91:6c:28:2c:b0:
         8a:9a:41:03:59:77:0a:37:b0:5c:a2:d1:0b:93:1e:05:02:b6:
         c2:64:ca:db:ac:04:43:5a:ab:b3:07:59:2f:0b:54:31:27:d3:
         11:fd:89:e0:a2:e6:10:d9:a0:3a:35:35:96:ab:80:ba:e3:c8:
         e7:22:81:7d:8d:ee:99:54:5e:1c:62:1e:6e:70:fe:37:9a:c4:
         ae:92:63:36:3b:81:7e:de:c3:23:24:fe:1d:24:0d:d5:a3:41:
         4d:3e:92:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----