Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D4xhzCjtGqfyJ4TPu2f6FAMXi5VUJoKdLn4RrkoV23Ey/0/D58EF563C3E71EBBE6485409B01C01B51887A2CF.mft
File:                     D58EF563C3E71EBBE6485409B01C01B51887A2CF.mft (raw, json)
Hash identifier:          ZKUy/2GX5Shkl25Javwa76EqBlio8rQRkNr+YYMzA4k=
Subject key identifier:   4E:6B:38:0E:51:38:29:CE:76:87:6A:52:9E:1F:CA:F1:3B:A5:5F:72
Authority key identifier: D5:8E:F5:63:C3:E7:1E:BB:E6:48:54:09:B0:1C:01:B5:18:87:A2:CF
Certificate issuer:       /CN=D58EF563C3E71EBBE6485409B01C01B51887A2CF
Certificate serial:       5F5A31EC793BDB444CB3D777344703C28A6BD673
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D58EF563C3E71EBBE6485409B01C01B51887A2CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4xhzCjtGqfyJ4TPu2f6FAMXi5VUJoKdLn4RrkoV23Ey/0/D58EF563C3E71EBBE6485409B01C01B51887A2CF.mft
Manifest number:          01B9
Signing time:             Mon 15 Apr 2024 07:41:10 +0000
Manifest this update:     Mon 15 Apr 2024 07:36:10 +0000
Manifest next update:     Tue 16 Apr 2024 10:11:10 +0000
Files and hashes:         1: D58EF563C3E71EBBE6485409B01C01B51887A2CF.crl (hash: hMyGo4TcjX/p9NQx2WMcpe12sVqla/x5/GmeFi+z23c=)
                          2: 323830343a383636303a3a2f33322d3332203d3e20323732363339.roa (hash: rkOZgERpWii3JsixQoDer+3Tj7AU1/plz/KFfXOTxSM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:5a:31:ec:79:3b:db:44:4c:b3:d7:77:34:47:03:c2:8a:6b:d6:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D58EF563C3E71EBBE6485409B01C01B51887A2CF
        Validity
            Not Before: Apr 15 07:36:10 2024 GMT
            Not After : Apr 16 10:11:10 2024 GMT
        Subject: CN=4E6B380E513829CE76876A529E1FCAF13BA55F72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fc:78:a7:22:bf:35:f9:28:0c:83:04:30:b6:
                    ee:ed:67:3d:8b:2f:a9:f9:a0:c7:1e:49:15:2f:6c:
                    60:36:f6:0a:44:14:d8:4c:3b:87:db:42:44:02:c2:
                    a7:92:07:8c:60:87:67:fc:c8:63:6f:a2:97:9f:5d:
                    00:c3:c9:82:3a:ed:01:c2:06:9b:36:0f:da:bf:13:
                    af:14:ef:8c:9c:57:19:c9:ff:a4:3b:bb:98:41:ab:
                    7a:66:3e:81:42:65:87:f3:e5:25:d5:37:12:50:0e:
                    9a:53:12:f3:1b:53:d3:84:45:5f:3d:76:00:60:6d:
                    a7:a3:13:95:7d:ff:2b:75:d2:67:7a:b0:a8:30:07:
                    a7:1e:01:74:78:02:4f:37:25:ef:ac:f6:76:50:8f:
                    1e:c4:d4:11:cf:95:8b:7f:56:eb:e0:7f:23:33:7c:
                    db:7b:9f:5b:49:64:f1:5e:b0:8b:14:f6:3e:e1:cd:
                    8f:df:35:ad:d1:4f:3e:71:6b:aa:1f:6b:24:f1:7c:
                    88:43:70:bc:c7:de:d3:07:d6:86:c2:ac:c0:1b:73:
                    84:7c:22:75:f5:b0:7b:d4:20:32:64:91:66:c8:f8:
                    bf:90:b2:7b:23:ff:fb:c9:29:99:04:3e:04:6d:1f:
                    a3:f5:90:5e:e8:1d:3d:80:d3:60:9e:19:18:69:f3:
                    f9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:6B:38:0E:51:38:29:CE:76:87:6A:52:9E:1F:CA:F1:3B:A5:5F:72
            X509v3 Authority Key Identifier:
                keyid:D5:8E:F5:63:C3:E7:1E:BB:E6:48:54:09:B0:1C:01:B5:18:87:A2:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4xhzCjtGqfyJ4TPu2f6FAMXi5VUJoKdLn4RrkoV23Ey/0/D58EF563C3E71EBBE6485409B01C01B51887A2CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D58EF563C3E71EBBE6485409B01C01B51887A2CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4xhzCjtGqfyJ4TPu2f6FAMXi5VUJoKdLn4RrkoV23Ey/0/D58EF563C3E71EBBE6485409B01C01B51887A2CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:2e:14:db:eb:aa:1a:1a:f0:e6:55:39:80:f3:9e:e3:61:a1:
         1d:ff:58:c4:30:88:bb:02:7d:2e:7a:81:cc:d4:e7:3f:90:19:
         7b:16:7f:3b:42:d9:0f:16:de:bd:f9:c3:52:1d:a2:9c:f1:d0:
         44:67:be:83:32:19:a0:b8:f1:3d:0f:5d:c1:bf:c7:2a:31:ed:
         18:98:99:db:e8:28:bf:f7:1e:15:81:01:e9:c1:86:85:dc:57:
         6a:72:81:c6:05:14:d6:53:a8:55:0b:74:d6:e1:a6:32:c6:e1:
         01:63:a1:2d:db:3a:6a:23:1f:6d:e6:0f:34:e5:5a:e2:8a:fa:
         34:90:5b:5c:8e:f7:bb:f9:46:68:4c:e2:91:29:cc:29:28:a3:
         9e:86:af:80:53:8b:11:59:1a:59:52:5f:f5:9d:73:7f:d3:3d:
         61:3a:0f:42:7d:1a:93:df:be:8a:f9:1c:b6:63:95:c0:5c:cc:
         ee:61:d9:5f:f1:06:cf:ae:75:97:75:20:7e:55:37:56:fa:55:
         6e:41:b1:11:54:45:58:91:f0:cd:97:9c:b9:75:8d:ef:85:d8:
         7e:e5:ac:9d:0e:c3:be:00:f5:6a:27:a3:e7:91:ff:f2:3d:0c:
         92:5d:59:e9:28:b0:87:a9:f0:31:48:27:48:56:20:62:7b:f3:
         0b:98:ff:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----