Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BhseAFMmvuoB4enLn7cBVvLbsJiUxyt2rvyGh4Bbr2Um/1/E5BB761C09F52ED9794633C2A5CE74C6280FE5B1.mft
File:                     E5BB761C09F52ED9794633C2A5CE74C6280FE5B1.mft (raw, json)
Hash identifier:          8vDG54VK1h00UmgeVP91pcWPh8TRy55CjmOzfJIh4qc=
Subject key identifier:   91:CF:4D:3A:6A:AE:79:C5:BA:35:06:7B:DC:B7:CC:74:60:0E:4E:2D
Authority key identifier: E5:BB:76:1C:09:F5:2E:D9:79:46:33:C2:A5:CE:74:C6:28:0F:E5:B1
Certificate issuer:       /CN=E5BB761C09F52ED9794633C2A5CE74C6280FE5B1
Certificate serial:       1D08C518501CE48EBE2C90FC6D6DC13BED714AE4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5BB761C09F52ED9794633C2A5CE74C6280FE5B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhseAFMmvuoB4enLn7cBVvLbsJiUxyt2rvyGh4Bbr2Um/1/E5BB761C09F52ED9794633C2A5CE74C6280FE5B1.mft
Manifest number:          15
Signing time:             Thu 18 Apr 2024 01:43:51 +0000
Manifest this update:     Thu 18 Apr 2024 01:38:51 +0000
Manifest next update:     Fri 19 Apr 2024 03:41:51 +0000
Files and hashes:         1: E5BB761C09F52ED9794633C2A5CE74C6280FE5B1.crl (hash: 3TmQCXyFmcVfBPjykVzGOt8Hf2eb+wzIqJnzOHn/ZlE=)
                          2: 323830343a333366343a3a2f33322d3438203d3e20323635343237.roa (hash: kAnqUhA83ryRf5EWcPRFt5vousJ9XWJJjJIHTaaR72I=)
                          3: 3136382e3139352e3139322e302f32322d3234203d3e20323635343237.roa (hash: wc51dNYqSR5xQ64gf818qqgq6wy4wFdWLK9CEH4dFgw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:08:c5:18:50:1c:e4:8e:be:2c:90:fc:6d:6d:c1:3b:ed:71:4a:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5BB761C09F52ED9794633C2A5CE74C6280FE5B1
        Validity
            Not Before: Apr 18 01:38:51 2024 GMT
            Not After : Apr 19 03:41:51 2024 GMT
        Subject: CN=91CF4D3A6AAE79C5BA35067BDCB7CC74600E4E2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9b:a1:82:88:c2:f4:46:32:3a:ad:15:65:61:
                    1a:99:55:4d:a7:9c:48:9a:b8:eb:46:c8:62:78:a8:
                    62:ae:29:17:43:78:55:b6:75:12:52:62:91:dc:90:
                    29:08:29:a3:18:31:6d:f4:72:48:e5:14:0b:18:2a:
                    3d:15:07:b6:bb:02:bf:0c:19:1b:89:7b:79:ea:34:
                    3e:e0:8a:73:28:c9:80:58:e5:df:c0:56:74:00:af:
                    17:81:73:52:ce:ea:c6:b6:86:45:b6:be:39:76:d7:
                    35:69:94:68:68:49:8f:73:67:7e:00:f8:93:b9:67:
                    22:39:13:c0:3e:94:e4:7b:e5:4d:fa:52:5f:cf:33:
                    71:f7:45:59:d0:5f:15:17:e5:19:f1:d1:06:30:ac:
                    75:e5:5b:59:ad:8e:13:21:33:97:b3:37:93:41:f7:
                    4d:2c:de:c9:ac:03:41:3e:fe:e6:ec:ec:27:45:b6:
                    69:bb:8a:8c:b6:29:d6:a5:aa:1f:03:f5:9f:dd:7e:
                    4c:e1:60:cf:f3:04:34:64:da:af:85:77:c0:cd:f7:
                    92:48:91:14:bb:28:18:b4:d3:87:bc:5c:ed:a0:32:
                    23:97:6b:fb:30:fc:ca:24:4c:d8:fb:50:fc:54:3b:
                    ba:da:af:e2:c0:f6:b7:e5:e3:16:93:6f:d6:66:71:
                    3b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:CF:4D:3A:6A:AE:79:C5:BA:35:06:7B:DC:B7:CC:74:60:0E:4E:2D
            X509v3 Authority Key Identifier:
                keyid:E5:BB:76:1C:09:F5:2E:D9:79:46:33:C2:A5:CE:74:C6:28:0F:E5:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhseAFMmvuoB4enLn7cBVvLbsJiUxyt2rvyGh4Bbr2Um/1/E5BB761C09F52ED9794633C2A5CE74C6280FE5B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5BB761C09F52ED9794633C2A5CE74C6280FE5B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhseAFMmvuoB4enLn7cBVvLbsJiUxyt2rvyGh4Bbr2Um/1/E5BB761C09F52ED9794633C2A5CE74C6280FE5B1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:c5:98:50:0e:c4:a9:a7:b8:68:ae:1a:ea:1d:19:f3:38:87:
         a6:18:c3:3d:55:6d:bf:37:8c:cb:0f:d6:dd:b8:13:dd:f3:ab:
         35:2d:16:cf:8f:3b:b4:93:2e:a2:46:44:80:4e:1a:62:70:60:
         45:05:a0:42:a4:79:54:2e:eb:9e:61:72:ea:cc:aa:2e:f2:b0:
         33:50:f5:9e:a2:5f:e0:c2:31:9c:6e:ba:ab:26:6b:d6:bc:56:
         82:c4:b7:b6:b7:4f:3e:d6:c1:37:93:21:ab:9f:2d:21:13:83:
         f6:4e:69:19:92:99:37:6f:df:c0:45:45:4f:a8:31:1f:d5:45:
         29:dd:b5:9c:fa:fa:42:b9:6c:4c:3f:76:27:33:cf:96:e4:85:
         c8:f7:5d:20:9f:69:a9:6d:82:69:fc:6d:5b:35:80:c2:c8:0f:
         d6:08:1d:ac:c6:1e:e2:93:14:10:50:c3:1b:9b:15:b7:47:2c:
         3c:36:78:6e:a0:c7:c3:a7:18:05:2e:01:8d:5c:95:a3:92:a7:
         39:f9:fd:b3:78:bb:f9:34:03:4f:e3:49:95:cc:b1:62:c5:cd:
         3a:0c:da:26:bf:83:c4:20:26:1c:5c:0e:a5:f4:3f:ff:ca:5f:
         9e:98:c9:30:55:72:1d:84:b0:76:95:89:dd:68:38:01:37:5d:
         27:e8:3e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----