Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/0/52A6D195524E5D77063F4811A6C89136CC740F16.mft
File:                     52A6D195524E5D77063F4811A6C89136CC740F16.mft (raw, json)
Hash identifier:          ioPbnGOpwXcbfGBcKRj1jt1RtKALd6mJqhlLnC3PtXc=
Subject key identifier:   79:49:62:AA:6C:7C:69:DF:D3:ED:78:AE:5D:16:07:FE:E2:FD:B2:47
Authority key identifier: 52:A6:D1:95:52:4E:5D:77:06:3F:48:11:A6:C8:91:36:CC:74:0F:16
Certificate issuer:       /CN=52A6D195524E5D77063F4811A6C89136CC740F16
Certificate serial:       604B0B3E31339D678DD83A71B451ED5F5E0CC37D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52A6D195524E5D77063F4811A6C89136CC740F16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/0/52A6D195524E5D77063F4811A6C89136CC740F16.mft
Manifest number:          0133
Signing time:             Sun 14 Apr 2024 22:28:23 +0000
Manifest this update:     Sun 14 Apr 2024 22:23:23 +0000
Manifest next update:     Mon 15 Apr 2024 23:52:23 +0000
Files and hashes:         1: 323830343a356463303a3a2f33322d3438203d3e203532393533.roa (hash: gAahMz5qo3ZkIxrWL0aR1vERG60OckXmHm/tb1pEL/Y=)
                          2: 3137372e32322e34382e302f32302d3234203d3e203532393533.roa (hash: HLTF+XbDKX6P9rlC2KMypYYFtW/wnqtSOaJuMHRiA44=)
                          3: 52A6D195524E5D77063F4811A6C89136CC740F16.crl (hash: OOiY2PlfOC7/GMq98+LlXaeb2+yQOzXyBnJc0mNWOMM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:4b:0b:3e:31:33:9d:67:8d:d8:3a:71:b4:51:ed:5f:5e:0c:c3:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52A6D195524E5D77063F4811A6C89136CC740F16
        Validity
            Not Before: Apr 14 22:23:23 2024 GMT
            Not After : Apr 15 23:52:23 2024 GMT
        Subject: CN=794962AA6C7C69DFD3ED78AE5D1607FEE2FDB247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:45:c3:dc:7b:52:4b:65:52:a0:a0:36:9c:8a:
                    0f:55:ba:58:01:fb:a1:6c:b3:68:97:5b:58:5a:fb:
                    1d:23:4d:dd:16:65:87:f5:73:17:fc:3c:09:a7:84:
                    33:3e:60:7a:e3:3d:ea:b1:1f:d7:65:0e:1c:0d:36:
                    40:22:dd:0d:63:7a:98:3d:6f:3d:29:5e:95:36:c7:
                    0a:ef:d9:a0:68:34:bd:9d:6e:a0:0b:cb:1d:25:da:
                    0d:85:73:46:00:38:0d:41:f5:64:9a:0e:c3:90:e8:
                    d2:67:8a:d8:74:2d:41:da:ff:e5:ce:af:d0:9e:2c:
                    0a:23:df:86:92:3e:d1:c6:13:db:9f:ea:5d:22:10:
                    5c:ef:54:b4:96:44:b8:4c:a3:53:8e:c5:fc:4e:cd:
                    dc:e2:37:99:53:17:23:f9:c1:77:5b:0b:64:ec:e9:
                    60:34:54:eb:08:13:96:49:6d:fa:6a:a6:0a:1d:f7:
                    58:68:6f:1f:ca:51:5f:46:5e:b6:90:dc:c8:3e:f5:
                    09:be:4b:43:2c:3a:6b:92:5a:e3:70:43:a2:ac:63:
                    e9:a5:ea:cd:42:1f:1c:8e:73:4e:2f:34:c6:20:5b:
                    1f:73:5d:0b:40:9a:93:df:ef:e1:93:ce:83:e4:1d:
                    e9:6e:9a:7c:ee:65:c6:da:c0:92:59:be:88:9b:ec:
                    72:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:49:62:AA:6C:7C:69:DF:D3:ED:78:AE:5D:16:07:FE:E2:FD:B2:47
            X509v3 Authority Key Identifier:
                keyid:52:A6:D1:95:52:4E:5D:77:06:3F:48:11:A6:C8:91:36:CC:74:0F:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/0/52A6D195524E5D77063F4811A6C89136CC740F16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52A6D195524E5D77063F4811A6C89136CC740F16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvTGrX7PkggaGUboFPsZEVNwGaFuooJB2UhktgNUWvNW/0/52A6D195524E5D77063F4811A6C89136CC740F16.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:0a:c7:db:6b:d8:fc:17:d8:44:c8:29:9e:a3:3e:0e:ca:ec:
         63:a6:4c:a2:1c:7f:b5:54:e7:82:6c:e9:8a:d5:ae:7e:c4:77:
         de:4f:fe:f9:a7:bd:d2:87:74:7d:ef:76:d2:94:f6:e4:86:cb:
         1d:ed:e7:d5:06:9e:12:1e:23:ce:52:fa:ac:3e:1c:e8:da:b1:
         5a:1c:3b:8d:32:ab:20:7f:4d:b8:fb:af:8a:e7:c5:61:2e:47:
         96:23:26:1b:c7:1b:fb:47:50:7d:0d:ab:de:36:87:2c:af:66:
         5c:d9:d5:07:3a:ec:99:2d:cd:3d:5a:c5:22:96:aa:7f:40:ee:
         54:b9:75:2e:49:b9:dd:f3:bb:9e:1e:ff:83:7f:b8:2b:da:c3:
         d8:cc:bd:dc:b3:35:25:72:15:a8:17:5b:67:30:4b:d9:ff:0c:
         0b:a0:77:77:37:0f:e0:71:78:ea:ba:19:27:f3:9c:1e:2e:63:
         9c:90:08:7f:61:ea:ec:ae:36:01:f3:2a:42:c0:38:50:e3:62:
         29:70:5f:ad:66:69:74:9b:32:4a:e7:b1:e8:d0:ea:ba:24:3a:
         48:46:c6:76:77:a7:ab:de:b6:c0:13:44:ff:1c:3e:4e:c4:87:
         99:7f:6b:43:df:03:53:51:38:ad:a3:54:7d:8a:c3:ad:7c:bc:
         05:7e:c9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----