Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/5C8113C09C8560C4BAAF63460080DCCBC5FC9A0A.mft
File:                     5C8113C09C8560C4BAAF63460080DCCBC5FC9A0A.mft (raw, json)
Hash identifier:          dx5ZxPgGWwY5LbQB5C/KgI4OAP8AW+w4qLv+HTy1tK0=
Subject key identifier:   F6:DD:03:25:F9:79:0A:34:4A:6E:CC:CC:B5:89:45:B7:AD:42:D3:CB
Authority key identifier: 5C:81:13:C0:9C:85:60:C4:BA:AF:63:46:00:80:DC:CB:C5:FC:9A:0A
Certificate issuer:       /CN=5C8113C09C8560C4BAAF63460080DCCBC5FC9A0A
Certificate serial:       6D6EB85D38B9AC1427482077A70780D36AC1D8B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C8113C09C8560C4BAAF63460080DCCBC5FC9A0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/5C8113C09C8560C4BAAF63460080DCCBC5FC9A0A.mft
Manifest number:          0226
Signing time:             Sun 14 Apr 2024 19:27:03 +0000
Manifest this update:     Sun 14 Apr 2024 19:22:03 +0000
Manifest next update:     Mon 15 Apr 2024 19:57:03 +0000
Files and hashes:         1: 323830343a316564633a3a2f33322d3334203d3e20323634343530.roa (hash: LIM2YfeWGD4adwa0IYqbYKHgtyhJxtvMLx3H1cKrQKM=)
                          2: 3133312e3235352e33362e302f32322d3234203d3e20323634343530.roa (hash: eOxxMcWZlnQD5Ac8HOEf643osrlPaNQrkXeGZWpEX50=)
                          3: 5C8113C09C8560C4BAAF63460080DCCBC5FC9A0A.crl (hash: A4IoIqBd36gyHGqRvo5moioxx/7A6rsLXkojKSwmSv4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:6e:b8:5d:38:b9:ac:14:27:48:20:77:a7:07:80:d3:6a:c1:d8:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C8113C09C8560C4BAAF63460080DCCBC5FC9A0A
        Validity
            Not Before: Apr 14 19:22:03 2024 GMT
            Not After : Apr 15 19:57:03 2024 GMT
        Subject: CN=F6DD0325F9790A344A6ECCCCB58945B7AD42D3CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8a:b6:3f:3e:a2:18:17:db:25:22:29:58:5d:
                    45:fd:40:3d:80:70:3a:dc:19:67:f6:86:c9:d0:ea:
                    fa:f0:5c:3f:9a:b8:f2:bb:86:b6:f1:b9:1e:b1:a8:
                    c7:e8:35:6c:27:ba:63:3f:9e:52:d9:8a:1a:9a:cd:
                    57:92:c6:46:0c:7b:1e:9a:8d:38:52:5a:84:ab:58:
                    70:cb:22:d2:5e:ef:f8:04:03:81:53:e9:0d:af:58:
                    74:81:df:c2:a3:6b:32:2c:55:15:94:3d:49:8b:42:
                    a0:75:01:06:aa:98:2e:f7:ce:81:6b:47:48:c9:b9:
                    a7:82:60:cd:e3:dd:2f:d4:db:dc:12:51:c6:1b:da:
                    b2:fb:5f:59:7f:dc:be:02:43:cc:42:1b:d5:ee:92:
                    4b:6b:6c:b0:e6:fc:66:46:75:ad:b3:fa:65:93:45:
                    96:ff:f0:90:71:b2:60:ec:fa:06:03:6f:cb:16:60:
                    1e:2c:90:4b:c7:6f:aa:3d:c8:3d:ac:af:80:ad:31:
                    87:27:6c:9d:c7:99:fb:42:2a:78:c2:14:66:04:41:
                    19:b9:9d:af:29:c9:38:fe:ab:76:2b:8a:01:f0:69:
                    8e:95:c3:f8:25:84:e5:df:59:6c:fd:5b:ef:40:fe:
                    03:bf:18:ba:ea:21:19:d3:51:4c:2c:20:f7:c9:b4:
                    bb:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:DD:03:25:F9:79:0A:34:4A:6E:CC:CC:B5:89:45:B7:AD:42:D3:CB
            X509v3 Authority Key Identifier:
                keyid:5C:81:13:C0:9C:85:60:C4:BA:AF:63:46:00:80:DC:CB:C5:FC:9A:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/5C8113C09C8560C4BAAF63460080DCCBC5FC9A0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C8113C09C8560C4BAAF63460080DCCBC5FC9A0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/5C8113C09C8560C4BAAF63460080DCCBC5FC9A0A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:37:d4:08:c9:e8:15:c1:8c:7d:dd:13:de:05:d1:62:96:15:
         1f:8a:d4:a6:1c:06:37:19:3b:03:75:10:b3:6f:27:81:88:d5:
         03:57:68:bc:11:78:44:19:8d:d9:8d:16:cb:f5:db:2c:d9:03:
         a9:51:1a:7c:d4:b5:5d:ed:6a:3c:94:f2:9f:da:f7:16:18:4d:
         f1:11:cd:a6:02:8c:1c:b5:22:38:50:a7:b2:2e:b8:37:e6:1a:
         aa:ab:6b:6a:0f:67:2a:cb:c4:e4:6b:68:9a:75:f0:b3:1d:ed:
         7b:c0:37:be:57:4f:3c:06:07:8c:38:b5:1d:f5:92:68:df:b0:
         4d:4d:01:cb:1a:68:dd:be:5d:70:48:ce:ff:74:b8:a1:84:36:
         73:12:37:17:7e:95:93:34:da:84:45:75:76:a5:bb:f4:04:0f:
         31:38:18:be:45:f7:7d:a6:31:6d:2a:97:2d:65:2d:32:71:f4:
         e1:e0:cf:21:b3:5a:5c:e4:12:7e:93:a5:2e:1a:a3:45:f0:07:
         bb:42:e6:ae:e3:b5:ab:db:60:5b:70:1f:05:af:93:aa:3f:14:
         3c:b5:92:0c:1b:32:b3:d2:ca:63:1e:11:3f:0c:e5:2c:76:cd:
         27:3f:17:9d:55:e7:ab:c8:41:71:e6:5f:ad:63:95:05:6d:3a:
         e5:89:cf:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----