Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/0/5EF905514C2003F3ABA78D4AA9AFFB95F8BCE857.mft
File:                     5EF905514C2003F3ABA78D4AA9AFFB95F8BCE857.mft (raw, json)
Hash identifier:          3TSKW4n9qyzDRtR8AmjJJ2urHJYF3dk15erO7cgHB2M=
Subject key identifier:   E9:FB:81:15:52:B6:43:62:B0:C0:A5:82:3E:E3:92:69:53:CB:C8:FB
Authority key identifier: 5E:F9:05:51:4C:20:03:F3:AB:A7:8D:4A:A9:AF:FB:95:F8:BC:E8:57
Certificate issuer:       /CN=5EF905514C2003F3ABA78D4AA9AFFB95F8BCE857
Certificate serial:       4E20D843071441A656826C173584B6453E47A32E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5EF905514C2003F3ABA78D4AA9AFFB95F8BCE857.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/0/5EF905514C2003F3ABA78D4AA9AFFB95F8BCE857.mft
Manifest number:          38
Signing time:             Sun 14 Apr 2024 22:54:51 +0000
Manifest this update:     Sun 14 Apr 2024 22:49:51 +0000
Manifest next update:     Tue 16 Apr 2024 00:00:51 +0000
Files and hashes:         1: 3137372e35322e3136382e302f32322d3232203d3e20323632343439.roa (hash: 9j3A4FjsqQkVhBLrT94dtujWWrZgKGg1COJSs+dQehk=)
                          2: 5EF905514C2003F3ABA78D4AA9AFFB95F8BCE857.crl (hash: xjA+Rj6V2YKj214KygmRLOJ1ZxXlpNH4/x3kVdmL9hc=)
                          3: 3137372e35322e3137302e302f32342d3234203d3e20323632343439.roa (hash: Y2sl/q4OfkzCqYLhuDO2tFamIE/bOYpGo+tcllrIcYI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:20:d8:43:07:14:41:a6:56:82:6c:17:35:84:b6:45:3e:47:a3:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EF905514C2003F3ABA78D4AA9AFFB95F8BCE857
        Validity
            Not Before: Apr 14 22:49:51 2024 GMT
            Not After : Apr 16 00:00:51 2024 GMT
        Subject: CN=E9FB811552B64362B0C0A5823EE3926953CBC8FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e6:7b:2b:1d:a7:b8:96:07:ec:8c:25:f9:b9:
                    4c:c5:98:b3:5e:d5:dc:17:62:da:32:54:4e:a4:3e:
                    67:30:b4:8c:4f:f3:5c:de:b3:f8:b9:d7:1c:25:25:
                    e7:17:26:55:d5:95:9a:4e:04:6d:5a:b8:4e:20:b3:
                    dd:bc:aa:ef:ab:6d:e5:7f:1a:6d:88:3d:3e:b1:af:
                    20:07:a3:33:ce:fd:2e:77:3b:80:de:0b:a1:c1:e8:
                    21:29:e5:b5:a6:78:4f:51:0c:f9:17:d8:26:a9:35:
                    2d:14:83:d0:99:b4:c3:a0:8b:f4:75:1a:49:39:e1:
                    74:c7:25:b6:b4:93:6b:1c:4e:db:85:38:f8:99:74:
                    bc:0b:2c:79:6a:1b:0d:0a:1e:ef:55:d3:85:1c:e2:
                    20:98:f5:cf:9e:60:69:5b:ec:55:a3:6b:bd:14:4a:
                    86:08:0b:69:77:ce:65:ef:30:cb:e6:8b:db:05:17:
                    bb:62:a6:39:eb:cc:76:0a:5a:ba:f2:28:89:d5:a8:
                    c4:e4:7c:fc:e8:cb:bd:97:7c:d7:f9:d0:7d:29:aa:
                    48:2d:2e:be:c3:34:63:1a:95:94:95:a6:46:27:6c:
                    1a:c5:90:bc:c1:9f:5b:ed:84:aa:19:b9:e6:29:42:
                    0e:03:54:6a:7a:ce:d2:09:0f:c2:96:3d:38:c4:7d:
                    ee:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FB:81:15:52:B6:43:62:B0:C0:A5:82:3E:E3:92:69:53:CB:C8:FB
            X509v3 Authority Key Identifier:
                keyid:5E:F9:05:51:4C:20:03:F3:AB:A7:8D:4A:A9:AF:FB:95:F8:BC:E8:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/0/5EF905514C2003F3ABA78D4AA9AFFB95F8BCE857.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5EF905514C2003F3ABA78D4AA9AFFB95F8BCE857.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/0/5EF905514C2003F3ABA78D4AA9AFFB95F8BCE857.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:44:fb:31:67:19:0f:fa:21:a6:46:cd:d5:93:b4:05:2d:e1:
         29:26:91:7f:ab:24:c5:8d:77:d7:e4:b5:c3:64:b9:af:c8:ad:
         70:53:81:6e:05:02:ef:b1:8e:a2:b9:42:90:11:2d:f5:74:52:
         71:b2:55:35:7a:20:18:a2:13:54:4a:bd:4c:00:72:fb:d5:b8:
         9d:fd:4b:bd:8c:7a:e9:db:9f:b0:cb:88:bb:71:48:64:d7:37:
         f4:c1:fd:a2:ce:79:2a:cd:78:4f:33:e4:c3:e7:f1:f9:b0:1e:
         ee:2e:c4:16:63:9a:10:05:1a:62:cd:08:c0:18:7c:47:cd:a9:
         3f:b0:3e:86:9a:92:fc:ea:7c:10:3d:ee:15:79:76:15:7c:74:
         8b:ca:27:a9:6d:62:0b:a3:2f:a2:28:77:ee:73:07:a7:ab:bd:
         9b:e7:cd:03:65:e2:e2:36:01:d3:fd:ff:cf:fb:4e:35:7d:01:
         13:0a:c8:9e:da:db:86:67:03:92:80:d7:1f:0c:b0:a7:94:fb:
         62:f7:90:f5:bd:53:34:b1:29:ae:4b:96:ec:43:fa:c8:f5:fd:
         db:05:e7:5c:bf:e6:5a:bc:ef:50:60:d3:1b:d0:fc:62:7e:35:
         84:2c:87:33:75:e2:71:fc:0d:0f:45:69:4a:67:4b:8e:87:0c:
         3b:87:cd:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----