Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Bu7gL29tZj8GwX8KDWYb3cmuuSm3TkJCAs4ojfbaQcBE/0/5004E61A4C37B6E4B16A7FF42AC504376068BC6A.mft
File:                     5004E61A4C37B6E4B16A7FF42AC504376068BC6A.mft (raw, json)
Hash identifier:          gW4auKD6KbIuIbd+KsaZrpGmLvHbUuUqR0gG7vtFozQ=
Subject key identifier:   BE:3A:27:11:84:4F:F6:8E:F5:31:F7:E3:37:01:E5:7F:6E:54:EC:44
Authority key identifier: 50:04:E6:1A:4C:37:B6:E4:B1:6A:7F:F4:2A:C5:04:37:60:68:BC:6A
Certificate issuer:       /CN=5004E61A4C37B6E4B16A7FF42AC504376068BC6A
Certificate serial:       46433C5F2C55610CF26202DFF0B09BD20EF44B01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5004E61A4C37B6E4B16A7FF42AC504376068BC6A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bu7gL29tZj8GwX8KDWYb3cmuuSm3TkJCAs4ojfbaQcBE/0/5004E61A4C37B6E4B16A7FF42AC504376068BC6A.mft
Manifest number:          32
Signing time:             Mon 15 Apr 2024 02:39:22 +0000
Manifest this update:     Mon 15 Apr 2024 02:34:22 +0000
Manifest next update:     Tue 16 Apr 2024 03:23:22 +0000
Files and hashes:         1: 323830343a353165633a3a2f33322d3336203d3e20323638343835.roa (hash: F+QwfQCflL/UpiQfnReRVcFmDfbpiY3xURfsfOVHJtc=)
                          2: 5004E61A4C37B6E4B16A7FF42AC504376068BC6A.crl (hash: M/SI/5aZKqBZsfUNqm5YoMQo4F/n/HfF2YQoUC/TiOM=)
                          3: 34352e3136322e382e302f32322d3234203d3e20323638343835.roa (hash: QqWp64PEpL1ngHyAp8fF/XbhsSL2DYxyz7N3uV6ZF0A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:43:3c:5f:2c:55:61:0c:f2:62:02:df:f0:b0:9b:d2:0e:f4:4b:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5004E61A4C37B6E4B16A7FF42AC504376068BC6A
        Validity
            Not Before: Apr 15 02:34:22 2024 GMT
            Not After : Apr 16 03:23:22 2024 GMT
        Subject: CN=BE3A2711844FF68EF531F7E33701E57F6E54EC44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:99:f3:43:6b:4e:7f:7a:d1:7d:24:cc:c8:fb:
                    a1:87:20:ad:8d:23:d1:16:f9:68:aa:09:77:8f:42:
                    43:bb:3f:f9:ea:57:56:1b:e6:d4:0e:e3:47:d6:42:
                    a0:7a:15:94:2a:f2:b9:30:cc:5a:4d:e0:7c:2d:cb:
                    28:48:20:d3:a4:65:25:72:11:96:9d:3c:de:71:de:
                    2d:83:db:48:5e:af:12:b9:f0:46:44:92:13:d2:6f:
                    08:75:f4:ae:59:5f:ec:14:8d:87:da:82:b5:35:31:
                    e3:25:ad:bc:2d:02:e3:f5:40:09:24:15:39:80:2f:
                    00:31:49:a6:d3:e8:72:5a:d8:13:b9:11:77:95:80:
                    31:27:72:a9:70:22:f5:6e:0c:4a:8e:dd:92:7a:7c:
                    d3:3d:4c:2f:6d:2f:16:95:94:41:1a:de:1f:6b:13:
                    4f:fe:2e:23:d8:38:bd:13:ca:6a:ef:66:3a:bf:5d:
                    e2:c5:d1:53:b7:26:2e:6d:9a:96:fc:e0:36:37:44:
                    6d:fc:ba:41:02:af:5d:73:cc:94:76:23:27:46:ac:
                    bd:bd:0c:1d:45:f7:23:3f:05:e0:e0:bf:cc:cb:6a:
                    30:71:0f:c0:68:91:a0:33:c7:10:39:1f:b7:4f:c4:
                    1e:e7:08:07:b1:51:80:09:7d:85:65:35:32:fd:c7:
                    b4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:3A:27:11:84:4F:F6:8E:F5:31:F7:E3:37:01:E5:7F:6E:54:EC:44
            X509v3 Authority Key Identifier:
                keyid:50:04:E6:1A:4C:37:B6:E4:B1:6A:7F:F4:2A:C5:04:37:60:68:BC:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bu7gL29tZj8GwX8KDWYb3cmuuSm3TkJCAs4ojfbaQcBE/0/5004E61A4C37B6E4B16A7FF42AC504376068BC6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5004E61A4C37B6E4B16A7FF42AC504376068BC6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bu7gL29tZj8GwX8KDWYb3cmuuSm3TkJCAs4ojfbaQcBE/0/5004E61A4C37B6E4B16A7FF42AC504376068BC6A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:5d:36:9f:bb:eb:05:b9:5a:6f:64:3a:63:a5:ee:ba:56:51:
         dc:70:76:23:10:f5:be:cf:5e:31:b2:0b:ec:14:fd:7d:6e:6e:
         6b:18:85:ea:71:ba:da:85:ad:df:c3:61:18:1a:4e:ec:f6:1e:
         54:c8:46:f4:72:70:98:2b:2d:8b:0b:27:f7:5c:d8:d1:13:73:
         34:ea:63:e9:5f:64:19:a6:70:10:9f:6b:a2:f3:67:c5:0b:88:
         9f:77:f7:3a:39:73:e4:b4:3f:ea:7e:9e:db:a0:d3:30:3c:4f:
         0f:69:5a:76:d2:4c:bd:99:c1:76:51:54:97:cd:5b:27:01:78:
         67:da:56:4e:c6:a0:c9:74:33:b0:21:c3:39:a2:c9:92:97:8b:
         69:d6:bd:ef:2f:d4:1b:32:78:26:e8:cf:4c:b4:4a:6d:35:20:
         71:ff:f2:33:08:a9:98:3c:e0:f7:fb:c5:49:8f:37:7b:67:69:
         7f:fd:39:f1:70:1f:26:14:b2:4a:ba:35:ae:36:fe:68:d2:ef:
         45:86:8c:3e:63:42:d8:45:ed:eb:08:35:a4:5a:8c:18:a0:c2:
         1b:b3:80:a8:80:55:41:e7:9d:08:68:55:c8:6d:fd:af:65:d8:
         4d:1f:14:2e:32:57:a8:ad:bf:8a:c7:03:1e:fb:03:d3:2d:db:
         f9:73:da:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----