Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/0/5B174042CE0C2CE37E40D4A2AAAEAF5F95236822.mft
File:                     5B174042CE0C2CE37E40D4A2AAAEAF5F95236822.mft (raw, json)
Hash identifier:          MJWKf99pXnXq9Zf1nzUFUhWVvI8ezBv6H6qq++nsxT8=
Subject key identifier:   28:19:EA:02:55:6A:8E:1F:13:4C:9B:53:F9:46:86:D9:19:D0:C5:1D
Authority key identifier: 5B:17:40:42:CE:0C:2C:E3:7E:40:D4:A2:AA:AE:AF:5F:95:23:68:22
Certificate issuer:       /CN=5B174042CE0C2CE37E40D4A2AAAEAF5F95236822
Certificate serial:       1B266C020FF8684BF329E50ABF045CCC2E5DDE84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B174042CE0C2CE37E40D4A2AAAEAF5F95236822.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/0/5B174042CE0C2CE37E40D4A2AAAEAF5F95236822.mft
Manifest number:          021D
Signing time:             Wed 17 Jan 2024 18:24:59 +0000
Manifest this update:     Wed 17 Jan 2024 18:19:59 +0000
Manifest next update:     Thu 18 Jan 2024 18:30:59 +0000
Files and hashes:         1: 5B174042CE0C2CE37E40D4A2AAAEAF5F95236822.crl (hash: O5wsbvENA3CDNQGWEUg1pcl3ixN+E1j68pqsaklJ6B8=)
                          2: 3137372e38342e32302e302f32322d3234203d3e203532373135.roa (hash: nXQYEcL/pf1/LYBdESEteUa+6Nz0wiZ7mCiINNuMAmk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:26:6c:02:0f:f8:68:4b:f3:29:e5:0a:bf:04:5c:cc:2e:5d:de:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B174042CE0C2CE37E40D4A2AAAEAF5F95236822
        Validity
            Not Before: Jan 17 18:19:59 2024 GMT
            Not After : Jan 18 18:30:59 2024 GMT
        Subject: CN=2819EA02556A8E1F134C9B53F94686D919D0C51D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d4:c5:f4:4d:15:d5:cc:2c:33:92:79:dc:c1:
                    e6:35:35:bb:f9:df:6f:24:dd:73:bf:80:e5:13:2a:
                    73:56:d4:04:d1:e4:a6:af:4e:c2:e8:15:e3:a5:f5:
                    ff:f0:91:33:22:7b:50:e5:81:33:32:63:87:8d:10:
                    50:5f:af:9d:69:47:4f:99:25:5b:c7:ad:26:e7:c1:
                    3b:0f:50:b4:e4:23:18:ba:cf:75:d0:37:25:80:a9:
                    b4:23:a4:ed:69:b0:f3:e3:2f:01:dd:12:b6:96:20:
                    3c:b6:57:22:93:81:5c:1c:c9:a2:28:d2:5e:fb:f7:
                    ac:3b:0f:32:82:e2:77:5a:5e:98:84:4b:aa:05:41:
                    f5:c3:bb:f4:7e:4f:97:15:56:ab:a9:df:46:37:62:
                    f8:65:e9:38:1e:ab:21:c5:2f:e6:67:d7:c6:96:d5:
                    69:33:59:63:6f:26:09:c5:07:f9:d1:9c:48:d1:c3:
                    8b:26:8e:c0:06:a4:5e:cd:5a:e9:bd:e0:40:eb:89:
                    2a:c6:31:a9:63:60:f3:da:b0:90:b6:aa:1a:81:ff:
                    3e:72:35:88:77:7b:da:8f:b3:5a:76:4f:18:79:c0:
                    a9:a5:7d:8e:f3:cf:53:d6:d0:b3:66:e6:83:38:cc:
                    1b:8c:bc:7e:fa:05:4c:fd:7b:de:f6:f4:c1:e7:29:
                    09:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:19:EA:02:55:6A:8E:1F:13:4C:9B:53:F9:46:86:D9:19:D0:C5:1D
            X509v3 Authority Key Identifier:
                keyid:5B:17:40:42:CE:0C:2C:E3:7E:40:D4:A2:AA:AE:AF:5F:95:23:68:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/0/5B174042CE0C2CE37E40D4A2AAAEAF5F95236822.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B174042CE0C2CE37E40D4A2AAAEAF5F95236822.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/0/5B174042CE0C2CE37E40D4A2AAAEAF5F95236822.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:82:02:ec:12:ac:9b:bb:b9:be:ea:8a:17:51:fe:d9:69:f2:
         a1:9e:ae:49:b8:a9:08:c0:6d:c1:e3:c7:c2:78:87:f5:95:6e:
         fd:5b:6d:99:f1:29:ff:12:fd:64:b0:e7:0f:41:35:0d:3e:10:
         d1:42:58:c9:1f:90:2f:14:3b:50:e2:f0:91:a1:d4:36:09:52:
         e8:be:d8:60:dc:75:6d:18:21:4b:54:47:55:92:7a:01:a6:50:
         ac:be:6f:ab:b3:5f:bb:38:7a:0d:98:f0:e2:b8:e5:14:6d:7e:
         05:75:06:c8:f2:8e:19:4b:2e:82:a0:6a:c2:56:d1:6f:5c:d9:
         ec:81:28:c7:ff:56:53:f1:7a:fe:7f:a7:20:b4:c5:db:2e:28:
         2c:59:6d:e7:ab:24:4d:4c:c4:2b:37:12:8a:66:bd:95:32:57:
         d3:82:0a:dc:e5:43:e9:eb:50:d3:2e:2b:54:54:c6:7e:3b:d7:
         e4:d9:9d:8f:9f:72:37:2e:b3:ca:83:00:50:fe:ef:cc:5c:c5:
         ab:61:e4:83:f1:d5:b2:cf:01:25:9b:93:99:ee:9e:10:2a:64:
         b7:32:0f:e5:08:b2:d1:fd:5e:a8:2c:54:20:a3:ad:db:bb:87:
         16:07:aa:d0:38:69:d7:4e:79:69:b2:01:a8:6b:01:c1:1c:a3:
         75:77:1a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----