Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BkaYuxeEtUyVuCwae13Pa5UcY3AToAKUaMzuywVptLLc/0/53FC1B105548B7D210AC403F9E9CDE8AEDB774E5.mft
File:                     53FC1B105548B7D210AC403F9E9CDE8AEDB774E5.mft (raw, json)
Hash identifier:          544qSLCajk03Q2nTcRIkC3rqUv1wIoXLZX/6FzPOqbc=
Subject key identifier:   35:D9:27:F0:9F:79:50:AB:24:7A:3D:BD:AC:FD:CD:30:32:C4:08:40
Authority key identifier: 53:FC:1B:10:55:48:B7:D2:10:AC:40:3F:9E:9C:DE:8A:ED:B7:74:E5
Certificate issuer:       /CN=53FC1B105548B7D210AC403F9E9CDE8AEDB774E5
Certificate serial:       76007A2FCEC5BF537DB1BB6A46EE5F938F8F3710
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53FC1B105548B7D210AC403F9E9CDE8AEDB774E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BkaYuxeEtUyVuCwae13Pa5UcY3AToAKUaMzuywVptLLc/0/53FC1B105548B7D210AC403F9E9CDE8AEDB774E5.mft
Manifest number:          28
Signing time:             Mon 15 Apr 2024 04:40:45 +0000
Manifest this update:     Mon 15 Apr 2024 04:35:45 +0000
Manifest next update:     Tue 16 Apr 2024 04:53:45 +0000
Files and hashes:         1: 3138362e3233332e3132382e302f32312d3234203d3e20323632373839.roa (hash: wesZE/D4aEVw0PzVo/7nIn7Xg9zOdemWQdafkb/h6Pc=)
                          2: 3137372e3232312e3132302e302f32312d3234203d3e20323632373839.roa (hash: dl+EWTXMtR2NJ2Kp7jGuyz1UgXtsdpOZnog7VYF327g=)
                          3: 53FC1B105548B7D210AC403F9E9CDE8AEDB774E5.crl (hash: s3yZenQnaL6wTpM+GPPa87kR7iWa4ty0ms2a4JpuCsc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:00:7a:2f:ce:c5:bf:53:7d:b1:bb:6a:46:ee:5f:93:8f:8f:37:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53FC1B105548B7D210AC403F9E9CDE8AEDB774E5
        Validity
            Not Before: Apr 15 04:35:45 2024 GMT
            Not After : Apr 16 04:53:45 2024 GMT
        Subject: CN=35D927F09F7950AB247A3DBDACFDCD3032C40840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:74:f0:26:5b:f3:65:92:d8:37:28:d4:2a:57:
                    8d:71:a2:a4:c6:3a:bc:1e:ea:ee:bb:cf:11:55:d9:
                    7a:02:66:1a:68:ea:14:64:87:ea:d0:ad:eb:4b:cc:
                    53:2f:99:06:32:3b:23:58:e9:79:c9:2b:d8:44:3a:
                    17:92:2d:dd:7a:e1:7f:53:40:41:eb:04:5f:b6:e8:
                    ea:77:cc:50:4b:a1:85:b5:0d:f6:11:05:83:d2:0a:
                    59:d5:92:41:65:5d:44:b5:80:3f:a5:ec:a7:e2:3a:
                    1b:0d:7d:c0:80:4d:fa:0a:7b:7f:ea:2b:72:21:e6:
                    4f:71:c1:c5:de:37:23:5e:f8:7a:22:bb:50:d3:a3:
                    8a:ba:0c:09:b3:bc:f9:00:4a:c6:67:8d:e2:2a:11:
                    94:d7:3d:73:92:9f:08:f9:4e:4e:67:4a:8c:c0:56:
                    c5:a9:b8:05:65:ff:69:52:7e:6c:7a:bf:85:5b:aa:
                    2d:c0:fd:e8:32:89:ab:fa:b3:bb:bb:75:16:01:ce:
                    dc:95:bb:60:d0:36:81:2e:4f:64:bb:db:44:70:6c:
                    5b:5a:58:bf:df:74:a6:6a:3f:df:db:a5:0e:d0:12:
                    05:cb:0c:b6:31:12:c2:5c:6a:a8:3b:26:e5:f4:2e:
                    f1:11:40:18:cc:e7:9e:ea:c2:66:13:e7:9f:80:17:
                    f2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D9:27:F0:9F:79:50:AB:24:7A:3D:BD:AC:FD:CD:30:32:C4:08:40
            X509v3 Authority Key Identifier:
                keyid:53:FC:1B:10:55:48:B7:D2:10:AC:40:3F:9E:9C:DE:8A:ED:B7:74:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BkaYuxeEtUyVuCwae13Pa5UcY3AToAKUaMzuywVptLLc/0/53FC1B105548B7D210AC403F9E9CDE8AEDB774E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53FC1B105548B7D210AC403F9E9CDE8AEDB774E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BkaYuxeEtUyVuCwae13Pa5UcY3AToAKUaMzuywVptLLc/0/53FC1B105548B7D210AC403F9E9CDE8AEDB774E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:24:9d:f2:28:a5:e1:3a:8e:8a:e1:57:86:f2:21:cc:c3:ee:
         65:38:a5:9d:58:c9:0a:e0:79:09:a8:2f:a4:d1:34:13:69:a4:
         86:c4:2f:b8:d4:b7:93:59:19:7b:41:64:df:86:c1:2a:81:9a:
         e7:d7:b7:4c:c7:41:3d:36:e8:77:69:78:42:a7:15:7b:94:36:
         6f:5b:2a:9a:14:f8:4f:1c:8c:a1:13:5b:75:16:be:4c:d3:2d:
         2f:51:47:b0:f0:d3:eb:36:46:2d:f8:59:85:50:a0:fb:f4:0c:
         4c:24:fc:c0:71:19:ef:9d:d6:c8:ad:47:1c:af:2f:77:8c:ab:
         f1:e3:eb:32:b2:ff:09:15:c2:dc:14:2e:c5:e0:65:6e:e5:06:
         7a:f6:08:0c:10:5e:1d:60:f3:5e:be:da:92:88:b4:c0:ae:ea:
         ea:d9:9b:4a:68:43:c0:4c:6f:7f:a4:cf:28:38:e9:11:4b:56:
         f3:35:6a:e7:b9:db:e7:be:30:f2:cb:ef:7d:ee:89:5f:de:0d:
         d6:ec:e9:26:dd:69:99:6e:f2:d9:91:0d:fd:e7:17:c8:23:96:
         59:72:7d:8e:6a:6a:b8:de:30:9a:b9:ce:72:c8:eb:0c:ad:c5:
         37:47:02:19:3b:89:29:1c:48:0c:8d:7c:8f:b9:08:25:34:06:
         23:2b:9a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----