Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DGbbvoNiDiYwbyFGEwxoTiUd74GFF7sbnqrsFaDi8WY9/0/BE542B5EE79842C85A7A83A7784B0112BD961474.mft
File:                     BE542B5EE79842C85A7A83A7784B0112BD961474.mft (raw, json)
Hash identifier:          0137V6e4nsDAmAYTwZLTD0le5/FmLQoTA8q8e6ZYF1k=
Subject key identifier:   13:30:94:A0:64:F3:46:CE:C8:3B:DE:93:EA:B4:95:08:09:29:B9:73
Authority key identifier: BE:54:2B:5E:E7:98:42:C8:5A:7A:83:A7:78:4B:01:12:BD:96:14:74
Certificate issuer:       /CN=BE542B5EE79842C85A7A83A7784B0112BD961474
Certificate serial:       326E33EB47A44FCD3910B2118CA36FD69716E8C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE542B5EE79842C85A7A83A7784B0112BD961474.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DGbbvoNiDiYwbyFGEwxoTiUd74GFF7sbnqrsFaDi8WY9/0/BE542B5EE79842C85A7A83A7784B0112BD961474.mft
Manifest number:          021F
Signing time:             Sun 14 Apr 2024 19:23:14 +0000
Manifest this update:     Sun 14 Apr 2024 19:18:14 +0000
Manifest next update:     Tue 16 Apr 2024 10:18:14 +0000
Files and hashes:         1: BE542B5EE79842C85A7A83A7784B0112BD961474.crl (hash: 0b67CkFAxPpzvdAdFJ2E8dlfskqc5Sh2W6RZBWVQpeY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:6e:33:eb:47:a4:4f:cd:39:10:b2:11:8c:a3:6f:d6:97:16:e8:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE542B5EE79842C85A7A83A7784B0112BD961474
        Validity
            Not Before: Apr 14 19:18:14 2024 GMT
            Not After : Apr 16 10:18:14 2024 GMT
        Subject: CN=133094A064F346CEC83BDE93EAB495080929B973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:96:10:72:e5:8b:73:1e:72:8c:ca:23:29:74:
                    06:7e:97:1c:27:56:36:e9:e5:0c:48:24:70:54:92:
                    17:b0:2f:28:ac:20:66:48:f0:3f:85:c6:d8:80:7c:
                    2f:dc:df:26:4a:d9:cd:e0:ba:15:70:8e:3e:e5:e3:
                    60:cc:c3:2b:d8:b9:8d:48:2e:e3:7a:b0:5e:85:89:
                    6b:8c:cd:d1:1a:da:c6:1c:41:c3:fb:86:71:7b:81:
                    d1:eb:64:6e:1a:5a:66:ad:ae:34:fa:eb:a0:4f:2e:
                    f4:7e:28:0a:c7:2f:bd:0b:f1:4e:63:86:6c:59:bc:
                    59:4e:41:0e:34:d2:bb:f1:94:10:96:02:dc:d4:5e:
                    80:a7:e5:1b:49:52:f5:1d:af:b9:39:17:5a:1d:ad:
                    aa:e9:00:9b:b4:68:b0:26:c2:7d:1e:24:06:0b:0e:
                    2d:bc:31:b1:4c:4d:41:c0:4f:e2:24:d9:7f:e8:6b:
                    db:b9:7e:ed:43:38:71:78:f5:8f:7c:ab:fb:21:5b:
                    f7:10:43:b3:01:fb:b8:b4:e4:e8:01:27:65:9a:b7:
                    c4:e0:08:8a:5e:cf:89:90:63:f8:06:47:be:ad:7c:
                    ff:49:28:84:fe:d7:9a:3f:1e:1f:8b:9e:ef:37:8b:
                    42:2e:74:44:fb:0a:32:c3:f9:d9:d1:6a:09:fa:1a:
                    83:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:30:94:A0:64:F3:46:CE:C8:3B:DE:93:EA:B4:95:08:09:29:B9:73
            X509v3 Authority Key Identifier:
                keyid:BE:54:2B:5E:E7:98:42:C8:5A:7A:83:A7:78:4B:01:12:BD:96:14:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DGbbvoNiDiYwbyFGEwxoTiUd74GFF7sbnqrsFaDi8WY9/0/BE542B5EE79842C85A7A83A7784B0112BD961474.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE542B5EE79842C85A7A83A7784B0112BD961474.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGbbvoNiDiYwbyFGEwxoTiUd74GFF7sbnqrsFaDi8WY9/0/BE542B5EE79842C85A7A83A7784B0112BD961474.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:e4:bf:71:01:59:66:92:28:4b:92:31:2c:65:db:62:da:b2:
         11:12:8d:9f:5b:5e:80:f3:9b:fb:ee:0c:81:fb:c7:4b:60:02:
         4c:34:35:9d:b2:9f:8e:f4:dc:9d:7a:7c:2e:dd:1d:70:93:f9:
         de:ec:67:d7:89:33:9f:8c:a2:f8:0d:1a:1f:e4:01:91:18:96:
         b9:a5:a4:2a:2f:9f:32:cc:10:f6:ff:0b:87:13:71:bc:8f:e3:
         a0:9d:ea:49:ef:0a:5b:1d:15:14:9b:82:73:22:4f:20:ba:2f:
         a9:b6:db:6c:86:ec:70:dc:8b:40:d8:90:5d:b4:4c:3f:c5:bd:
         f6:92:84:1f:f2:dd:30:ce:61:d5:a6:8c:a7:19:25:6a:cb:48:
         6c:52:c4:61:e4:78:64:b4:13:9f:a3:87:a9:44:44:3d:c8:ed:
         6e:d2:90:7f:7c:92:5d:ce:df:25:4e:c8:6e:84:ea:2d:cb:8d:
         91:f8:3d:48:1a:2a:d4:e1:c5:5d:f4:cf:80:13:e0:3c:9a:4c:
         c3:a3:37:7a:e7:2e:92:4c:3f:02:87:82:71:42:52:a4:72:5d:
         99:d6:14:03:79:a8:5e:5e:2c:ab:73:75:c6:c9:3b:3b:b6:4c:
         cc:c0:86:ce:03:30:6f:d6:b4:d2:f0:da:b5:0e:bf:57:4b:aa:
         1f:3a:53:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----