Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/0/9330665A6CE249CC58A87415B9AEFCCEED2D8804.mft
File:                     9330665A6CE249CC58A87415B9AEFCCEED2D8804.mft (raw, json)
Hash identifier:          kl5mp4QVSiz2K9BjHKIItl6qlWCk6YlYeyJ6PHkMWTQ=
Subject key identifier:   BC:27:EB:ED:52:3F:D1:7A:9C:F3:CD:F4:3C:E7:50:31:0E:31:A8:50
Authority key identifier: 93:30:66:5A:6C:E2:49:CC:58:A8:74:15:B9:AE:FC:CE:ED:2D:88:04
Certificate issuer:       /CN=9330665A6CE249CC58A87415B9AEFCCEED2D8804
Certificate serial:       5C3BB44EFD9E813434CD09AAF7BECB07E662E72F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9330665A6CE249CC58A87415B9AEFCCEED2D8804.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/0/9330665A6CE249CC58A87415B9AEFCCEED2D8804.mft
Manifest number:          02E5
Signing time:             Sun 14 Apr 2024 21:02:48 +0000
Manifest this update:     Sun 14 Apr 2024 20:57:48 +0000
Manifest next update:     Mon 15 Apr 2024 22:09:48 +0000
Files and hashes:         1: 323830343a313735383a3a2f33322d3438203d3e20323633313339.roa (hash: lkM5sScaLlCzyGGzmOa5pImvw/BA1rKHpSy65TS/XT8=)
                          2: 3137372e34342e3232302e302f32322d3234203d3e20323633313339.roa (hash: x1SEY3fH9cSFRYnklk9LriMwg6ncBMUG/evVaJwD4yA=)
                          3: 9330665A6CE249CC58A87415B9AEFCCEED2D8804.crl (hash: QjMjgHbQV0x12TJQx0rhg7YgfAFlR28azz3NNeI4oi0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:3b:b4:4e:fd:9e:81:34:34:cd:09:aa:f7:be:cb:07:e6:62:e7:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9330665A6CE249CC58A87415B9AEFCCEED2D8804
        Validity
            Not Before: Apr 14 20:57:48 2024 GMT
            Not After : Apr 15 22:09:48 2024 GMT
        Subject: CN=BC27EBED523FD17A9CF3CDF43CE750310E31A850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ec:bf:f0:25:ee:e5:36:1f:6f:58:4c:de:99:
                    6d:7b:d3:ce:ee:f1:31:c7:d6:8b:0d:d7:b4:14:17:
                    f8:c9:8d:18:3b:af:c8:03:03:61:32:75:3d:d2:1b:
                    0f:26:93:0f:60:67:30:ca:2f:1e:6d:a2:f9:f2:09:
                    ff:84:8a:ce:96:d6:4d:31:36:e2:93:82:19:64:db:
                    3d:f9:5c:d0:cd:80:b6:9c:57:b0:f4:a8:92:f7:eb:
                    1b:89:99:5e:13:6a:56:24:c1:9b:d0:5e:ab:a0:44:
                    be:a9:cc:e3:1a:0f:0f:38:9e:a0:18:7a:75:e6:58:
                    c5:15:16:90:b3:65:21:f1:25:58:56:e4:16:29:38:
                    06:3a:67:6b:12:9e:91:9c:51:de:cf:02:9d:a7:de:
                    d7:a5:03:2e:cb:76:90:81:57:74:d9:98:53:b0:fc:
                    10:eb:ae:95:94:76:5b:99:84:ec:f9:19:42:33:1c:
                    4d:c8:e3:27:e6:ea:cb:1f:a9:27:c8:e0:32:0d:aa:
                    c5:af:2a:94:4a:e1:ab:a6:bc:e3:e0:ff:60:52:97:
                    86:e4:2a:d8:49:a4:7c:7d:ab:a3:c3:11:dd:b9:5f:
                    61:95:5a:46:92:50:36:3a:96:c8:fc:9a:85:51:e9:
                    d8:15:da:c3:91:52:b9:05:08:31:57:04:ae:64:94:
                    c2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:27:EB:ED:52:3F:D1:7A:9C:F3:CD:F4:3C:E7:50:31:0E:31:A8:50
            X509v3 Authority Key Identifier:
                keyid:93:30:66:5A:6C:E2:49:CC:58:A8:74:15:B9:AE:FC:CE:ED:2D:88:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/0/9330665A6CE249CC58A87415B9AEFCCEED2D8804.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9330665A6CE249CC58A87415B9AEFCCEED2D8804.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/0/9330665A6CE249CC58A87415B9AEFCCEED2D8804.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:65:ff:1d:c9:52:59:7c:e1:85:0a:2a:0f:7d:a2:c6:03:ba:
         c7:30:51:1e:00:c5:32:59:41:59:24:72:7d:43:39:69:fd:98:
         35:9e:3c:55:2d:02:b3:d9:13:9b:2e:e2:f2:aa:12:43:ff:88:
         a0:22:ce:2f:d7:79:0a:22:0e:2b:39:cb:eb:da:33:39:27:89:
         56:d3:01:ec:77:db:84:c6:f1:35:cb:20:12:80:de:6a:bc:0a:
         66:a7:f1:9b:5b:0e:cf:1e:5d:7a:33:14:a3:61:ec:92:c6:89:
         3c:e3:b0:2f:90:ef:a0:fb:af:04:1f:9c:e3:0e:39:fc:97:c4:
         76:b9:dc:24:5b:5f:0d:16:3c:51:c6:84:56:79:e1:f0:c7:1b:
         93:8c:4e:1b:85:37:4f:b1:10:05:7d:c8:7c:46:d6:2f:d7:91:
         af:d5:58:4d:78:49:7b:47:8c:f7:d8:a1:0f:1d:18:c7:00:c8:
         24:4b:11:2f:37:3f:01:d9:ca:d9:52:5b:ca:dd:9d:ce:ef:39:
         1d:1f:ca:3d:3f:3d:fb:d0:6e:e5:83:73:36:6f:b3:92:9d:91:
         b2:8f:80:1a:fd:3f:86:6a:38:e3:ae:ab:d2:fa:f4:e9:9a:c9:
         68:7c:d4:06:9c:3d:a6:dd:1f:51:54:cd:d0:90:dd:dc:a4:ee:
         75:0d:6d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----