Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/CDE7AD619ADE061F54FC38424291FA04B034E709.mft
File:                     CDE7AD619ADE061F54FC38424291FA04B034E709.mft (raw, json)
Hash identifier:          2GVgeEhxCbrOuWI8M7sqfwRzWdu/5eT7uRCOwjeXnUE=
Subject key identifier:   DF:04:40:8D:09:D9:C5:BF:3C:9C:03:52:FD:14:0A:84:AD:58:EA:DD
Authority key identifier: CD:E7:AD:61:9A:DE:06:1F:54:FC:38:42:42:91:FA:04:B0:34:E7:09
Certificate issuer:       /CN=CDE7AD619ADE061F54FC38424291FA04B034E709
Certificate serial:       7124550818E76A8BEE26BA0233C588C2BF8377C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDE7AD619ADE061F54FC38424291FA04B034E709.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/CDE7AD619ADE061F54FC38424291FA04B034E709.mft
Manifest number:          5F
Signing time:             Mon 15 Apr 2024 03:58:33 +0000
Manifest this update:     Mon 15 Apr 2024 03:53:33 +0000
Manifest next update:     Tue 16 Apr 2024 07:47:33 +0000
Files and hashes:         1: CDE7AD619ADE061F54FC38424291FA04B034E709.crl (hash: Usz5tz/ysTjcxryLFnelmBKCrOMg3CG7hvfiY1zNO00=)
                          2: 323830343a316330343a3a2f33322d3438203d3e203631363333.roa (hash: +YE0bpZyVGG0gN1dQcSWiKy4BT7+0mxY50IwiwLgBjk=)
                          3: 3133312e3130302e3134382e302f32322d3234203d3e203631363333.roa (hash: Hs4RNUmFfBmJytJ8tQ0eHt6Bnx2GyYx2GI7l6kQAiJc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:24:55:08:18:e7:6a:8b:ee:26:ba:02:33:c5:88:c2:bf:83:77:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDE7AD619ADE061F54FC38424291FA04B034E709
        Validity
            Not Before: Apr 15 03:53:33 2024 GMT
            Not After : Apr 16 07:47:33 2024 GMT
        Subject: CN=DF04408D09D9C5BF3C9C0352FD140A84AD58EADD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:37:6f:5a:ec:06:be:63:3d:3b:6a:ed:c2:bc:
                    3f:9e:98:d5:d4:2d:2a:e5:1b:40:d5:89:5a:36:4e:
                    bc:28:2b:94:02:fc:c1:ab:97:f9:2c:6f:ba:4b:3f:
                    1b:02:25:13:ab:31:c1:b0:90:f6:ff:c1:3a:9e:aa:
                    00:0c:78:93:2b:db:73:94:c2:e7:3f:b9:b2:62:7c:
                    2d:58:a5:55:68:44:f6:07:9a:75:bc:0b:67:b1:66:
                    6c:59:b9:42:21:44:c7:ce:e1:f5:05:73:97:03:a4:
                    c1:7c:77:29:0c:a8:4d:d4:66:26:cc:d9:8c:8d:c3:
                    7c:6b:92:45:a2:fa:f4:30:0b:2d:ae:40:6e:d9:95:
                    70:36:75:bf:f9:5f:91:97:76:9b:59:ec:5c:69:33:
                    6f:30:4c:7d:34:95:19:12:81:7f:d9:47:86:3f:37:
                    dc:7c:df:f6:95:2f:c5:5d:66:9b:fa:6e:92:13:d1:
                    bd:a3:66:7b:58:93:60:84:6e:35:37:c2:51:6e:c6:
                    67:ee:7e:c6:19:9e:de:64:b9:5f:7b:f0:a1:81:44:
                    5e:fa:e9:a1:ce:f2:46:bf:59:f5:19:67:4f:51:56:
                    10:9a:bd:73:e3:ea:1a:e5:d7:f5:ac:42:e6:d1:a3:
                    42:0a:80:50:d4:81:c6:b3:54:b1:88:04:d7:41:73:
                    f7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:04:40:8D:09:D9:C5:BF:3C:9C:03:52:FD:14:0A:84:AD:58:EA:DD
            X509v3 Authority Key Identifier:
                keyid:CD:E7:AD:61:9A:DE:06:1F:54:FC:38:42:42:91:FA:04:B0:34:E7:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/CDE7AD619ADE061F54FC38424291FA04B034E709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDE7AD619ADE061F54FC38424291FA04B034E709.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/CDE7AD619ADE061F54FC38424291FA04B034E709.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:0f:40:bb:da:ed:82:dd:24:c1:e5:3b:52:3b:45:38:57:d0:
         28:88:d8:57:d5:2c:73:bf:97:d8:5c:07:fb:c8:19:33:9b:8b:
         12:f8:25:d7:ac:66:77:3e:25:37:cb:7e:04:87:72:76:3b:53:
         d1:6a:12:bd:c6:c8:78:e0:db:ba:6b:e7:30:9b:a7:53:51:cd:
         63:48:70:ec:6f:ae:fd:88:19:9a:bb:68:b1:a3:a4:99:51:72:
         60:70:5e:65:13:ba:03:cf:9c:12:78:13:ea:46:72:28:f2:e5:
         6b:73:5c:14:02:69:84:36:cf:65:35:cd:de:da:2f:19:27:a5:
         0d:a3:64:5c:b3:e8:4e:6c:79:f5:83:e3:54:d1:06:3a:fd:fc:
         27:67:63:65:0a:a6:29:a2:56:9d:96:9f:4b:e1:5a:6a:fe:f7:
         cd:94:7d:72:36:11:a5:4d:30:42:26:99:a5:ac:a5:80:f9:8e:
         f8:f7:12:d9:85:25:92:09:92:3c:a4:ff:e5:23:fd:f4:cc:8c:
         3b:ea:4b:64:1e:8e:4f:71:25:ca:20:f0:91:68:66:f9:df:7f:
         2b:0d:d5:cc:15:bf:ca:0f:4a:48:8c:ec:7b:86:aa:99:aa:d2:
         52:74:0c:44:de:92:50:16:39:a5:27:8b:fb:1b:c3:53:37:88:
         f9:27:4b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----