Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/0/50AE3D02A7293A2D0313DEB91609AA01A577A388.mft
File:                     50AE3D02A7293A2D0313DEB91609AA01A577A388.mft (raw, json)
Hash identifier:          so2NY9NAWAYCjE2DcciA63Bx6yOYlV22MTvcY08Pgyk=
Subject key identifier:   65:04:E8:F3:70:6E:70:B0:64:94:8A:CD:FC:F0:59:81:D8:02:DC:8E
Authority key identifier: 50:AE:3D:02:A7:29:3A:2D:03:13:DE:B9:16:09:AA:01:A5:77:A3:88
Certificate issuer:       /CN=50AE3D02A7293A2D0313DEB91609AA01A577A388
Certificate serial:       4A00E8906BCF3429A3FEAF2501C0B536C24C9658
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/50AE3D02A7293A2D0313DEB91609AA01A577A388.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/0/50AE3D02A7293A2D0313DEB91609AA01A577A388.mft
Manifest number:          50
Signing time:             Sun 14 Apr 2024 18:54:04 +0000
Manifest this update:     Sun 14 Apr 2024 18:49:04 +0000
Manifest next update:     Mon 15 Apr 2024 21:34:04 +0000
Files and hashes:         1: 50AE3D02A7293A2D0313DEB91609AA01A577A388.crl (hash: eB2vo2QHME0A06yt5RypkktD7ybab/VSKOrXrbtosHU=)
                          2: 323830343a386365343a3a2f33322d313238203d3e20323733333231.roa (hash: zvodi9R3nHkxqT5PmnqTGJ9/rdLF/H87d6p7YRzwo/c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:00:e8:90:6b:cf:34:29:a3:fe:af:25:01:c0:b5:36:c2:4c:96:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50AE3D02A7293A2D0313DEB91609AA01A577A388
        Validity
            Not Before: Apr 14 18:49:04 2024 GMT
            Not After : Apr 15 21:34:04 2024 GMT
        Subject: CN=6504E8F3706E70B064948ACDFCF05981D802DC8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:28:5d:ef:d3:6f:3a:61:aa:c8:44:03:22:35:
                    25:8b:cc:24:94:c9:b1:a8:7e:89:1d:f6:29:62:d7:
                    2c:8c:a0:f7:c8:6c:f1:73:9e:52:4e:04:ed:63:03:
                    cf:f2:e3:f5:ca:67:91:61:86:c5:18:8b:93:f5:54:
                    53:5b:46:51:8a:82:ea:ab:da:2b:70:56:aa:c6:8a:
                    a9:1c:47:77:a7:2c:70:b1:5f:dd:4c:fd:73:21:40:
                    0d:69:5f:35:b7:af:54:74:b5:8f:ac:04:53:3d:01:
                    eb:ef:b2:f4:00:7a:61:c4:72:20:ba:e9:c6:9b:c1:
                    b7:56:58:d0:5c:d3:49:b4:e7:e8:2c:00:21:db:ac:
                    36:ca:e0:a6:7f:a9:4f:cb:41:f1:e9:df:65:81:fa:
                    f9:e8:13:c8:8a:a3:30:3f:d9:d8:cd:e7:04:4b:b9:
                    e1:e4:79:c8:23:3a:e5:2d:94:03:53:39:ae:eb:69:
                    75:4a:12:67:03:55:0e:66:d8:43:ee:d8:5b:3a:1e:
                    f5:b6:92:76:3a:4c:e8:e0:25:af:3c:d2:12:5d:27:
                    bd:f8:d4:74:5f:43:fc:28:34:d3:ba:7b:8b:52:0a:
                    5e:f8:7e:1d:a9:72:d7:69:71:3d:cb:6d:06:13:6d:
                    58:c1:1b:23:75:a8:87:df:4b:78:76:cb:93:0f:aa:
                    5f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:04:E8:F3:70:6E:70:B0:64:94:8A:CD:FC:F0:59:81:D8:02:DC:8E
            X509v3 Authority Key Identifier:
                keyid:50:AE:3D:02:A7:29:3A:2D:03:13:DE:B9:16:09:AA:01:A5:77:A3:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/0/50AE3D02A7293A2D0313DEB91609AA01A577A388.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/50AE3D02A7293A2D0313DEB91609AA01A577A388.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/0/50AE3D02A7293A2D0313DEB91609AA01A577A388.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:8a:62:b5:98:53:73:d6:59:fe:3d:56:e5:b5:fe:09:e0:d0:
         0c:d2:7c:53:e1:47:d1:ba:f3:91:57:44:e4:82:da:32:d4:6c:
         a5:87:9d:8b:b8:c7:ce:c7:10:e8:7e:37:f4:3d:f3:30:6f:61:
         97:2d:87:e0:5d:b2:b1:29:05:d5:05:58:2b:ee:ab:7f:bc:39:
         af:e0:3e:c3:81:e7:02:0f:20:f8:8e:a4:1c:ad:a7:2b:de:c2:
         c4:4a:db:8e:95:79:71:e4:29:8a:60:1a:20:67:df:46:49:76:
         ef:03:4e:d5:e6:4d:8b:3e:89:1d:56:4d:ad:ab:45:35:ce:1c:
         24:0d:7a:34:04:67:d8:5d:e9:b3:f1:b1:e5:34:2d:8b:be:00:
         89:82:ac:54:cb:a8:18:08:21:58:d9:2d:d3:05:26:42:21:85:
         c0:7e:63:21:b0:3b:b6:e9:1d:14:ff:54:2c:ce:f8:23:d4:f7:
         69:a4:eb:12:bd:3e:ad:3a:dd:59:16:0e:bc:9f:6c:81:29:2e:
         e7:d9:25:f6:bb:53:65:b8:a6:85:2d:2e:dc:f5:7f:59:34:e6:
         c0:bc:cd:61:cc:35:df:42:ba:59:b6:35:b7:8a:c9:7c:af:ec:
         14:64:1f:b6:33:55:ca:e7:aa:d5:cd:30:3f:4e:f0:f7:a8:78:
         83:92:be:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----