Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/5D1C01661F76337C537B616528DEE8BDB3C55925.mft
File:                     5D1C01661F76337C537B616528DEE8BDB3C55925.mft (raw, json)
Hash identifier:          9oZgkRUJoUh0R53ki9y793+2/8ZyT5NJMPsPfAg8PFs=
Subject key identifier:   CA:04:CF:56:CE:AE:6D:3E:38:A6:50:F3:AE:73:52:8C:91:67:C0:61
Authority key identifier: 5D:1C:01:66:1F:76:33:7C:53:7B:61:65:28:DE:E8:BD:B3:C5:59:25
Certificate issuer:       /CN=5D1C01661F76337C537B616528DEE8BDB3C55925
Certificate serial:       6CB0C4AE4D3EB7EA844E61C5278F0F8CC8C033DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D1C01661F76337C537B616528DEE8BDB3C55925.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/5D1C01661F76337C537B616528DEE8BDB3C55925.mft
Manifest number:          1A
Signing time:             Mon 15 Apr 2024 01:23:49 +0000
Manifest this update:     Mon 15 Apr 2024 01:18:49 +0000
Manifest next update:     Tue 16 Apr 2024 01:34:49 +0000
Files and hashes:         1: 3138362e3139342e302e302f32322d3332203d3e20323730383738.roa (hash: xnt6XYtOGLCXBOfr3iEX3sb+gU58Dbt6vkb8ZLpKro8=)
                          2: 323830343a373264343a3a2f33322d313238203d3e20323730383738.roa (hash: +Qm4gsb3a0ZYmO+8iHeIggyKA4sglzYDvTfyzCB8x0M=)
                          3: 5D1C01661F76337C537B616528DEE8BDB3C55925.crl (hash: n7R9PPMdrSULQJDiiYTfk9KcK9VdXsf1ewyZOOL+ECg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:b0:c4:ae:4d:3e:b7:ea:84:4e:61:c5:27:8f:0f:8c:c8:c0:33:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1C01661F76337C537B616528DEE8BDB3C55925
        Validity
            Not Before: Apr 15 01:18:49 2024 GMT
            Not After : Apr 16 01:34:49 2024 GMT
        Subject: CN=CA04CF56CEAE6D3E38A650F3AE73528C9167C061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:58:5e:ce:a4:99:1c:eb:13:b5:20:42:08:7e:
                    73:7c:e1:4a:5c:89:01:b3:60:82:46:dc:ac:05:23:
                    c8:5f:83:ff:2f:79:44:c6:f1:2b:f5:09:21:db:86:
                    08:bc:4e:48:90:5b:52:9e:af:9f:74:79:e8:62:d1:
                    d2:76:f2:91:69:ad:a0:a4:de:91:b4:8b:f9:07:f3:
                    d6:c0:f5:fa:a5:e0:05:5c:e5:53:3d:2b:ff:b2:c6:
                    7c:0a:e4:00:23:4f:35:72:5a:79:95:ea:d9:a4:e9:
                    03:f6:df:ff:a7:77:d8:d5:43:ac:9a:e4:bf:83:b3:
                    7c:91:a1:59:8f:e6:95:94:4f:43:22:ce:cc:9b:db:
                    d5:89:94:c2:6f:fb:74:4c:a6:40:6b:9e:31:d8:3b:
                    ff:c4:79:44:00:ae:d6:2d:0f:95:92:5c:31:47:80:
                    7b:ab:49:33:22:5a:c9:78:2a:d5:89:d3:63:50:52:
                    d3:de:60:a0:67:55:68:9d:a1:ba:48:f0:32:02:19:
                    8d:1e:90:ed:60:59:d9:44:89:4a:33:d1:38:e6:e5:
                    c7:fb:92:4b:88:02:f4:0f:a5:08:3d:98:75:5d:11:
                    4f:35:25:fa:ab:c5:7a:7b:54:41:01:5d:e6:af:d0:
                    49:78:52:2b:6a:75:83:dc:4b:09:da:ff:84:bf:6a:
                    51:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:04:CF:56:CE:AE:6D:3E:38:A6:50:F3:AE:73:52:8C:91:67:C0:61
            X509v3 Authority Key Identifier:
                keyid:5D:1C:01:66:1F:76:33:7C:53:7B:61:65:28:DE:E8:BD:B3:C5:59:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/5D1C01661F76337C537B616528DEE8BDB3C55925.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D1C01661F76337C537B616528DEE8BDB3C55925.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/5D1C01661F76337C537B616528DEE8BDB3C55925.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:25:c1:20:33:84:9e:7e:cc:d6:d8:77:f2:98:3f:27:a1:29:
         73:10:88:29:14:35:a0:09:43:62:2c:f5:51:f2:cd:4c:87:d7:
         7a:f4:97:f5:68:03:42:18:46:39:89:ed:f6:25:ce:67:1a:5d:
         a7:4c:b8:2c:a7:5c:29:b4:a0:1f:e7:d5:a7:23:f5:b8:86:91:
         c7:75:98:2c:36:f5:19:43:bb:f9:c3:fa:de:ea:88:73:da:70:
         cd:5e:0b:84:8f:67:90:4c:01:d0:83:8f:20:92:7c:b3:c8:e8:
         ca:cc:2c:96:c1:ae:54:6b:d0:00:c6:3e:2e:eb:6e:22:50:df:
         dc:41:ec:81:47:ee:5a:89:de:45:f2:d6:20:03:9f:9c:b3:c4:
         85:7d:08:e9:4c:05:7e:ed:a5:bb:83:8f:4d:ce:f4:37:c3:b3:
         fb:d0:54:30:bf:e8:ae:46:37:b2:0a:5d:2c:8b:04:2c:97:da:
         e0:da:5c:7f:a4:e5:52:1e:6c:af:6c:0f:4a:e5:e2:51:0b:d7:
         b6:db:4d:6d:2c:bd:40:f1:b4:52:0a:8b:31:ea:d7:70:5f:58:
         95:42:71:93:09:17:ea:4a:ea:20:86:a1:3e:f1:c4:c6:2d:db:
         53:ec:5a:59:8f:4c:df:7a:3f:f0:38:bd:cc:db:6a:b9:ba:d4:
         25:b7:91:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----