Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/BAD9CC7CBF44E5172A5D41F85B5447D327D88E12.mft
File:                     BAD9CC7CBF44E5172A5D41F85B5447D327D88E12.mft (raw, json)
Hash identifier:          dojDs3Y0wljrPewpMZwwBf2Gey43jQdDhhZSskSomsw=
Subject key identifier:   45:19:62:72:6D:F4:44:AB:91:15:84:DD:56:FE:E0:9F:5F:13:10:99
Authority key identifier: BA:D9:CC:7C:BF:44:E5:17:2A:5D:41:F8:5B:54:47:D3:27:D8:8E:12
Certificate issuer:       /CN=BAD9CC7CBF44E5172A5D41F85B5447D327D88E12
Certificate serial:       53E6CF4A2F03963F795420D8589E04099510808D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BAD9CC7CBF44E5172A5D41F85B5447D327D88E12.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/BAD9CC7CBF44E5172A5D41F85B5447D327D88E12.mft
Manifest number:          5F
Signing time:             Wed 22 Nov 2023 11:51:53 +0000
Manifest this update:     Wed 22 Nov 2023 11:46:53 +0000
Manifest next update:     Thu 23 Nov 2023 14:04:53 +0000
Files and hashes:         1: BAD9CC7CBF44E5172A5D41F85B5447D327D88E12.crl (hash: 01wcVoHOXSI+H4fTo0CgcDtN0uxobTQR85ekiS+palA=)
                          2: 3230312e3134302e3235322e302f32322d3234203d3e203631383331.roa (hash: IYj9b4/dCiNKoKQ6T3hTL09/MXfLgy4mdRvhxPuM7Hs=)
                          3: 323830343a316130303a3a2f33322d3335203d3e203631383331.roa (hash: yO0dG+PGnQMekmI2+4IpUl4qm817aqYdJM3L+c3B9Xw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:e6:cf:4a:2f:03:96:3f:79:54:20:d8:58:9e:04:09:95:10:80:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAD9CC7CBF44E5172A5D41F85B5447D327D88E12
        Validity
            Not Before: Nov 22 11:46:53 2023 GMT
            Not After : Nov 23 14:04:53 2023 GMT
        Subject: CN=451962726DF444AB911584DD56FEE09F5F131099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fe:ff:91:5d:fe:66:f5:4c:73:0c:42:ec:c2:
                    7d:06:46:5d:6e:1a:19:47:e7:ff:40:86:8c:5e:8c:
                    62:97:6a:c3:f9:29:c7:3c:2f:f1:5a:1a:f9:c8:9d:
                    ca:0a:da:8c:e0:d1:b0:44:b0:c9:de:45:9f:5e:0d:
                    51:3b:b1:85:40:30:f9:a9:42:5d:77:dd:11:66:4b:
                    f8:50:63:9c:ab:ca:0d:19:18:8b:6d:7a:b6:2d:be:
                    30:68:16:3d:14:ab:03:81:0c:80:28:9d:bf:88:3f:
                    23:6e:19:5e:7e:06:0e:cb:1e:25:f0:44:51:af:28:
                    75:9a:bd:60:4e:ad:3b:9e:6b:f4:59:d3:9a:0e:9e:
                    6b:df:cc:ed:62:e8:a5:9a:2c:31:9b:50:33:10:46:
                    6e:a2:e1:9c:9a:bb:2b:32:93:a8:65:69:a5:14:bc:
                    e1:f5:b0:47:24:cb:2f:b3:5f:e1:44:d5:90:b6:0a:
                    1f:2d:52:5d:b6:36:63:80:82:f7:f6:78:15:e6:48:
                    a0:64:a1:39:a0:cf:25:c0:ad:af:24:0a:1c:a0:ea:
                    0e:16:4e:36:37:4a:ab:40:8d:28:33:0c:fe:1e:2e:
                    c5:ad:03:56:d6:a9:d3:ad:c8:5b:57:16:fe:ca:b0:
                    46:6f:74:a6:f7:2f:da:13:3a:07:60:56:71:91:2a:
                    62:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:19:62:72:6D:F4:44:AB:91:15:84:DD:56:FE:E0:9F:5F:13:10:99
            X509v3 Authority Key Identifier:
                keyid:BA:D9:CC:7C:BF:44:E5:17:2A:5D:41:F8:5B:54:47:D3:27:D8:8E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/BAD9CC7CBF44E5172A5D41F85B5447D327D88E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BAD9CC7CBF44E5172A5D41F85B5447D327D88E12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/BAD9CC7CBF44E5172A5D41F85B5447D327D88E12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:d7:a7:8f:fe:f7:5d:34:c1:48:cc:52:95:d7:e5:53:0c:89:
         f4:39:65:e6:c1:a5:8e:ee:e7:e5:89:b2:f6:c6:6e:d3:7d:54:
         01:3e:db:85:81:b4:33:8d:92:21:c5:0b:d6:ba:41:0d:29:87:
         21:3b:63:08:7d:ae:f9:82:ae:46:04:17:3e:67:61:8b:72:73:
         13:3b:b9:8a:84:7b:5c:e0:a1:61:5a:be:cf:20:4f:8b:20:a5:
         5d:ff:b3:af:9a:0d:62:88:66:59:b7:cc:69:8b:e7:64:53:64:
         fe:a3:85:82:80:d7:36:f0:40:e3:c5:47:ce:3a:a3:4d:24:a5:
         6e:d1:a7:19:86:bc:c5:18:61:e2:ee:41:6f:96:95:0c:86:07:
         32:ec:65:2a:40:42:5c:58:69:2d:cd:1f:a1:92:23:70:c0:c7:
         2b:48:4e:dc:9d:9a:e6:43:a2:68:2a:a0:e3:7e:c4:99:5b:c9:
         d7:02:a7:22:75:1d:49:fa:a0:b5:42:4d:0f:ec:31:18:68:47:
         b4:8a:53:3c:e2:90:11:e0:a2:d1:00:bc:d5:38:ee:3b:2a:fa:
         c0:a1:31:f8:0a:15:94:a6:a1:d5:1f:b6:28:57:1c:f1:cc:7b:
         5e:de:a6:48:1b:59:eb:0a:29:05:8f:28:5e:b6:05:24:70:42:
         17:77:84:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----