Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/5C8113C09C8560C4BAAF63460080DCCBC5FC9A0A.mft
File:                     5C8113C09C8560C4BAAF63460080DCCBC5FC9A0A.mft (raw, json)
Hash identifier:          yYTYerw5PatZgwycgpMdL28eLSgEteG9t/uTIzQsWqg=
Subject key identifier:   B0:B6:2C:7B:DA:64:F1:FF:C3:0A:A7:73:A7:64:1F:AA:7E:A8:CA:B9
Authority key identifier: 5C:81:13:C0:9C:85:60:C4:BA:AF:63:46:00:80:DC:CB:C5:FC:9A:0A
Certificate issuer:       /CN=5C8113C09C8560C4BAAF63460080DCCBC5FC9A0A
Certificate serial:       3D27B7E832FB9CFA7CFE0A404BFB1864AA08FA8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C8113C09C8560C4BAAF63460080DCCBC5FC9A0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/5C8113C09C8560C4BAAF63460080DCCBC5FC9A0A.mft
Manifest number:          0227
Signing time:             Mon 15 Apr 2024 12:00:32 +0000
Manifest this update:     Mon 15 Apr 2024 11:55:32 +0000
Manifest next update:     Tue 16 Apr 2024 15:25:32 +0000
Files and hashes:         1: 323830343a316564633a3a2f33322d3334203d3e20323634343530.roa (hash: LIM2YfeWGD4adwa0IYqbYKHgtyhJxtvMLx3H1cKrQKM=)
                          2: 5C8113C09C8560C4BAAF63460080DCCBC5FC9A0A.crl (hash: AG8X/gKh2L0stfir1qHmzEtjqmQ5i0YfYdsnksoP1Vg=)
                          3: 3133312e3235352e33362e302f32322d3234203d3e20323634343530.roa (hash: eOxxMcWZlnQD5Ac8HOEf643osrlPaNQrkXeGZWpEX50=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:27:b7:e8:32:fb:9c:fa:7c:fe:0a:40:4b:fb:18:64:aa:08:fa:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C8113C09C8560C4BAAF63460080DCCBC5FC9A0A
        Validity
            Not Before: Apr 15 11:55:32 2024 GMT
            Not After : Apr 16 15:25:32 2024 GMT
        Subject: CN=B0B62C7BDA64F1FFC30AA773A7641FAA7EA8CAB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8d:1e:6a:28:50:e6:b8:00:e0:22:ec:62:85:
                    b8:40:a2:85:93:61:d0:b6:bb:6e:bd:63:ac:82:7e:
                    78:61:b4:9e:4f:ae:40:ac:8d:51:6e:05:e6:0c:2d:
                    df:e2:1f:fb:62:0e:9b:9d:c5:3a:e0:8d:b1:64:64:
                    63:51:96:b3:75:a0:b7:16:29:81:25:53:b3:c4:e4:
                    2a:09:9a:08:ec:82:35:c4:bb:36:ec:d1:af:12:4b:
                    c3:04:fc:c9:6e:d8:49:92:da:cb:b0:bc:06:0c:8d:
                    62:97:b8:c7:1d:aa:dd:b8:39:a9:d5:ba:05:ae:cf:
                    27:4a:cb:55:da:d9:f9:37:fc:03:0d:12:25:39:bc:
                    6c:9b:0f:e1:3c:99:5b:f1:e6:44:c5:bf:fa:3d:d2:
                    60:4d:de:06:1d:a6:fa:68:80:fa:a0:53:62:1e:34:
                    25:60:93:66:be:cd:31:e3:b1:f1:8f:23:ed:8d:e3:
                    7e:af:46:9d:d0:5c:51:99:92:de:40:6c:11:8d:f2:
                    76:65:9a:50:35:19:54:22:27:55:33:ba:e3:92:5c:
                    19:9b:5d:6f:38:2a:64:68:5c:1f:45:3c:36:e5:07:
                    c0:1e:b4:bd:52:85:6e:4b:8b:ee:0a:3b:b7:3c:a1:
                    e9:d3:68:98:c0:be:74:d2:b6:ee:70:56:94:35:4f:
                    b1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B6:2C:7B:DA:64:F1:FF:C3:0A:A7:73:A7:64:1F:AA:7E:A8:CA:B9
            X509v3 Authority Key Identifier:
                keyid:5C:81:13:C0:9C:85:60:C4:BA:AF:63:46:00:80:DC:CB:C5:FC:9A:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/5C8113C09C8560C4BAAF63460080DCCBC5FC9A0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C8113C09C8560C4BAAF63460080DCCBC5FC9A0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/5C8113C09C8560C4BAAF63460080DCCBC5FC9A0A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:4e:1c:9c:8c:4a:9f:34:e7:04:8c:3f:d0:21:91:98:d0:ca:
         18:f2:14:93:f6:3c:b7:28:d7:56:63:24:4d:fe:be:94:56:88:
         54:e2:5c:92:dd:52:51:64:42:9a:26:af:39:8b:f9:48:c4:f4:
         d7:2b:e2:99:23:d9:8a:5d:47:f7:02:71:a7:cb:8f:f5:a5:ab:
         ce:a3:31:4a:b0:eb:5f:aa:de:ed:b6:b5:69:62:07:26:10:03:
         d2:81:9c:2e:ef:c4:09:43:e0:09:f1:da:e9:2f:76:d7:53:50:
         2f:4d:c3:da:2c:d7:22:31:2c:a4:e3:ce:c4:30:f3:75:4b:70:
         31:8c:d8:47:63:fe:2d:3d:1e:5b:e0:ca:a9:7a:27:e0:05:37:
         83:18:bb:d8:6d:ff:f1:ab:e7:2f:40:70:8e:29:4e:71:6f:40:
         a6:a8:57:8a:27:7f:df:5b:b1:05:db:7e:29:13:67:c4:7b:f0:
         8b:e9:af:ab:f4:f3:89:dc:01:c6:76:28:78:86:77:e3:89:a5:
         f4:c4:89:df:ef:00:6c:67:91:c1:79:92:6f:9a:06:b3:24:1a:
         38:57:e3:c3:44:84:59:f1:28:27:77:d7:d7:ba:28:69:d6:0b:
         41:77:68:2e:f1:4b:14:ed:f7:fe:8b:a8:6a:f9:9b:74:55:13:
         50:9f:e1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----