Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/B53C2F7E0FA97A0294139083D40BC8F909329807.mft
File:                     B53C2F7E0FA97A0294139083D40BC8F909329807.mft (raw, json)
Hash identifier:          hUuc823/u+LkcIYaph+KCCYj0mKuBEzALvSXSlQSyL8=
Subject key identifier:   AD:CE:7E:16:7E:B6:AD:36:15:81:24:F4:05:8B:0B:C7:51:9E:A6:7F
Authority key identifier: B5:3C:2F:7E:0F:A9:7A:02:94:13:90:83:D4:0B:C8:F9:09:32:98:07
Certificate issuer:       /CN=B53C2F7E0FA97A0294139083D40BC8F909329807
Certificate serial:       3A15C62611E8E01D1111FBFD509CBEFFF3A36135
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B53C2F7E0FA97A0294139083D40BC8F909329807.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/B53C2F7E0FA97A0294139083D40BC8F909329807.mft
Manifest number:          0383
Signing time:             Tue 27 Feb 2024 01:20:27 +0000
Manifest this update:     Tue 27 Feb 2024 01:15:27 +0000
Manifest next update:     Wed 28 Feb 2024 03:12:27 +0000
Files and hashes:         1: B53C2F7E0FA97A0294139083D40BC8F909329807.crl (hash: sM7uBgY463X7TDeVwJYpPeA6THLedoNqfNth12oblWQ=)
                          2: 323830343a373664343a3a2f33332d3333203d3e20323731313337.roa (hash: Mx8oGwlZDch4hF+QZrdfNU3S3SKmSFifwPhwP4jZXzE=)
                          3: 3230312e35342e3138382e302f32342d3234203d3e20323731313337.roa (hash: YqCuxvvJ3VRtpqEaoBTV1q+lHIl3kPaw5M5Ol9S/Pd8=)
                          4: 3230312e35342e3138382e302f32332d3233203d3e20323731313337.roa (hash: fDmVAjoWaeswJ88ZlcN7ATS5Ailg7zgn9GXE/N+Hb6w=)
                          5: 323830343a373664343a383030303a3a2f33332d3333203d3e20323731313337.roa (hash: tYaWOYzGvvf2mbY03ggozwdbHsqzhhn+jki0IL1R2Yo=)
                          6: 3230312e35342e3138392e302f32342d3234203d3e20323731313337.roa (hash: F/uyCmH9YlPJu+i2GBLShMXWosHR6rhT9uv4GmncXEs=)
                          7: 3230312e35342e3139302e302f32332d3233203d3e20323731313337.roa (hash: TnB9GkRy9pTLoLj/qMLgjnVaSWyFt5d/NLrCtDc4/HA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:15:c6:26:11:e8:e0:1d:11:11:fb:fd:50:9c:be:ff:f3:a3:61:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B53C2F7E0FA97A0294139083D40BC8F909329807
        Validity
            Not Before: Feb 27 01:15:27 2024 GMT
            Not After : Feb 28 03:12:27 2024 GMT
        Subject: CN=ADCE7E167EB6AD36158124F4058B0BC7519EA67F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0b:f1:d2:10:b1:4a:ea:5f:5c:de:55:48:4a:
                    3e:bf:7d:a5:3f:cc:c7:eb:0e:f6:a8:15:95:87:8a:
                    ec:66:17:9a:58:0a:8e:63:eb:fe:ab:ae:0a:63:75:
                    89:00:e7:32:b4:23:03:cc:4f:cf:ce:d2:f5:39:fb:
                    0a:be:ba:af:65:a5:ba:43:fa:9a:66:53:a0:5f:2a:
                    29:80:8e:ae:4e:d2:0c:ae:d7:7e:e9:f9:d9:78:42:
                    f0:36:e7:07:88:84:0b:fc:29:77:dd:a9:a5:94:01:
                    c5:4d:aa:4d:56:16:93:22:54:b3:9e:3d:a5:fc:3c:
                    63:1a:4e:b8:f1:d0:b3:22:aa:ea:d1:de:4d:da:33:
                    f6:cc:0e:37:85:62:ef:f7:f9:c3:e0:b5:48:95:87:
                    0f:d7:2e:1f:65:57:ae:ff:f2:d3:75:5f:3e:6f:7a:
                    bd:fa:7a:33:26:9c:89:e3:57:0d:f0:d3:80:d4:a3:
                    bf:be:a2:00:33:15:ee:8e:ba:6e:8c:f7:37:7d:fb:
                    61:b3:91:fa:9c:ab:37:7f:ac:be:6f:b6:a5:f0:f9:
                    11:00:14:cf:df:1f:fc:9e:c6:91:35:aa:ab:41:70:
                    d8:61:61:ba:7c:2b:f8:a7:bf:66:cd:04:ae:80:60:
                    ae:64:f2:29:d9:f1:64:f4:98:34:b6:27:85:c3:8e:
                    e3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:CE:7E:16:7E:B6:AD:36:15:81:24:F4:05:8B:0B:C7:51:9E:A6:7F
            X509v3 Authority Key Identifier:
                keyid:B5:3C:2F:7E:0F:A9:7A:02:94:13:90:83:D4:0B:C8:F9:09:32:98:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/B53C2F7E0FA97A0294139083D40BC8F909329807.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B53C2F7E0FA97A0294139083D40BC8F909329807.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/B53C2F7E0FA97A0294139083D40BC8F909329807.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:dd:a2:22:e3:c4:9b:37:ad:4c:2b:1f:02:ce:a4:4f:08:50:
         d7:b4:97:aa:ed:03:1f:8d:10:bd:8d:24:ac:26:b0:72:7b:73:
         cc:5d:a0:78:4a:0c:5e:08:4a:2f:6b:f5:03:27:ae:e2:83:3f:
         0c:fe:b7:da:8b:6f:2b:0d:f2:a6:75:5b:32:c8:73:dc:68:e0:
         e0:67:d5:ff:49:d6:d7:b9:8b:70:a0:3e:fb:23:ab:91:10:0e:
         49:b6:52:40:a0:a7:51:0f:c9:34:dd:3a:b0:ec:1d:d6:20:b7:
         b5:19:99:2d:04:dc:c1:2d:b6:d2:16:22:5f:b8:0f:07:72:33:
         89:dc:62:64:ac:4d:0d:bc:0a:b8:c0:e3:ab:7a:4f:fe:7e:f2:
         69:f9:d1:87:10:57:0d:0b:a1:d6:84:f4:8c:43:25:cb:d2:2f:
         5a:d2:a9:69:e4:67:96:ba:19:a7:8c:e2:13:6f:1e:1b:af:f4:
         38:17:1c:22:c6:92:89:a8:53:23:06:7a:3a:38:07:f0:30:27:
         bb:2f:70:2f:5c:23:ec:8e:df:19:89:0f:35:46:67:e9:47:6d:
         21:ef:3a:d5:c8:6b:9a:32:7a:1b:6a:33:5f:b8:9e:4e:6a:a6:
         81:08:10:2b:82:c9:e0:9c:dd:42:d5:f4:50:0d:6a:e5:84:6f:
         02:6f:89:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----