Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/0/A5A26ED2218EB0EB577553778D5CD61470558FF3.mft
File:                     A5A26ED2218EB0EB577553778D5CD61470558FF3.mft (raw, json)
Hash identifier:          otQW4Uaq5znngfqYl3s79d+VHuHcbhKZKtFMP1/KK40=
Subject key identifier:   9A:88:4E:F6:04:54:50:90:11:2C:A8:D7:02:F8:3B:F1:F4:FD:94:96
Authority key identifier: A5:A2:6E:D2:21:8E:B0:EB:57:75:53:77:8D:5C:D6:14:70:55:8F:F3
Certificate issuer:       /CN=A5A26ED2218EB0EB577553778D5CD61470558FF3
Certificate serial:       7786FA2418CC89D1ED45E5608C861FEDC555F266
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5A26ED2218EB0EB577553778D5CD61470558FF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/0/A5A26ED2218EB0EB577553778D5CD61470558FF3.mft
Manifest number:          0209
Signing time:             Mon 15 Apr 2024 06:37:10 +0000
Manifest this update:     Mon 15 Apr 2024 06:32:10 +0000
Manifest next update:     Tue 16 Apr 2024 10:23:10 +0000
Files and hashes:         1: 323830343a366133343a383030303a3a2f33332d3333203d3e20323730333139.roa (hash: vAP2qY8OufGvAnGppaTmLlS73ZB+kP1k+w76hOqIEBA=)
                          2: A5A26ED2218EB0EB577553778D5CD61470558FF3.crl (hash: msZ4z+siHj7zcTW8AOrkv56NFob6CfKJW1YS84i8KtI=)
                          3: 3139302e38332e302e302f32342d3234203d3e20323730333139.roa (hash: oFNzsa+Sgp9IcpbzDUZwAlrzUz9Mgv/MlUtG1GhbmkY=)
                          4: 323830343a366133343a3a2f33322d3332203d3e20323730333139.roa (hash: oOonXCJZ9CtWtsDhhtorjdB9a1fS3oVi0O30r7wZjnM=)
                          5: 3139302e38332e312e302f32342d3234203d3e20323730333139.roa (hash: JSZUxV1TsujUJdwFvJ1kZJIPeCBllyTca4Dby6xyxR4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:86:fa:24:18:cc:89:d1:ed:45:e5:60:8c:86:1f:ed:c5:55:f2:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5A26ED2218EB0EB577553778D5CD61470558FF3
        Validity
            Not Before: Apr 15 06:32:10 2024 GMT
            Not After : Apr 16 10:23:10 2024 GMT
        Subject: CN=9A884EF604545090112CA8D702F83BF1F4FD9496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0f:95:ef:ad:43:ea:72:40:e9:09:d2:cf:8d:
                    42:57:ca:15:07:95:ea:71:ae:a3:b2:4e:57:d2:66:
                    f4:a8:bd:48:48:3c:da:69:8a:33:a4:5d:17:9d:dd:
                    eb:2f:8b:b0:68:5e:45:aa:ca:7f:3c:6f:39:b1:78:
                    df:d6:0c:5e:96:ab:41:14:fc:22:9c:c1:00:01:a8:
                    2b:e3:8d:1c:6e:6f:0c:96:4a:69:5d:69:bc:19:64:
                    b7:87:9d:c5:e2:42:43:bd:7c:0e:78:92:22:28:8d:
                    f6:be:bd:eb:0d:97:06:c9:8e:19:70:7b:11:80:b8:
                    9d:eb:9a:6a:11:f6:fe:dc:62:4d:97:10:ac:38:e8:
                    e8:07:1f:17:35:fb:11:f2:e8:62:1c:7b:82:d7:ca:
                    2e:88:2d:6d:19:64:52:13:b5:f9:9b:53:03:b6:23:
                    f4:0b:9a:1f:a6:a9:37:84:f3:52:ca:29:7b:0f:69:
                    75:95:c6:80:66:22:bb:03:88:58:57:bd:78:44:db:
                    18:bb:56:6e:df:23:ba:e6:1b:91:22:3d:9a:35:b1:
                    67:8d:53:5c:d3:3c:a5:44:2a:a6:da:09:ea:26:f0:
                    17:57:53:74:bb:21:c7:a8:39:1d:18:f0:93:60:3a:
                    20:ed:ba:1f:fa:03:bd:f8:3f:d1:50:19:76:6f:9c:
                    bc:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:88:4E:F6:04:54:50:90:11:2C:A8:D7:02:F8:3B:F1:F4:FD:94:96
            X509v3 Authority Key Identifier:
                keyid:A5:A2:6E:D2:21:8E:B0:EB:57:75:53:77:8D:5C:D6:14:70:55:8F:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/0/A5A26ED2218EB0EB577553778D5CD61470558FF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5A26ED2218EB0EB577553778D5CD61470558FF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/0/A5A26ED2218EB0EB577553778D5CD61470558FF3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:a1:f4:18:40:45:a2:0a:fe:a8:ba:64:f1:4c:2c:7f:5a:18:
         c9:fd:8a:70:2c:d7:a6:3c:4c:88:43:31:51:ee:be:04:9f:f5:
         b2:94:bd:2e:8e:41:8f:3e:c7:0c:f9:58:39:dd:5d:26:6d:fa:
         87:2a:de:03:c6:f0:23:46:64:9c:89:7f:e2:36:9b:26:bc:87:
         a3:4b:5c:d2:cb:9d:5b:c0:d8:03:0a:25:b1:fe:2d:63:86:9e:
         2b:b9:41:10:42:e6:0e:09:c8:11:9f:e8:81:97:2c:a8:65:b9:
         bb:ed:24:31:eb:85:83:e3:a6:61:5e:8e:20:a6:1d:7d:55:f8:
         41:f4:f3:27:b5:7b:ac:b0:fb:9b:2d:1d:90:1c:76:54:fa:f7:
         6d:01:24:94:f6:d2:02:8c:4e:44:7c:8f:bd:c1:d2:0d:8f:89:
         a7:68:b0:14:c7:68:09:63:1c:2a:c8:6e:16:d8:3c:e3:5b:23:
         03:89:f6:6d:e8:92:7a:0d:16:88:0c:b9:43:29:a6:38:85:52:
         14:48:5a:e0:17:3e:c0:a9:4a:67:4f:3c:fb:ac:96:71:72:eb:
         3e:80:ac:36:23:8a:e2:55:0f:0a:9c:50:9c:ac:6f:7e:d5:44:
         01:fc:83:50:34:ca:f2:68:59:96:b5:c1:4d:53:14:18:f2:5f:
         02:cf:76:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----