Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/0/5D18FA4A88E7A19A02E06CD348D6BDF263B88E3B.mft
File:                     5D18FA4A88E7A19A02E06CD348D6BDF263B88E3B.mft (raw, json)
Hash identifier:          zkYddNkgqAghguL5y/U7spiMTsOR6aDx95cEsTAMmh8=
Subject key identifier:   C1:EB:2F:B6:65:32:16:4E:13:26:12:7F:F8:EB:5F:F5:37:FA:47:FC
Authority key identifier: 5D:18:FA:4A:88:E7:A1:9A:02:E0:6C:D3:48:D6:BD:F2:63:B8:8E:3B
Certificate issuer:       /CN=5D18FA4A88E7A19A02E06CD348D6BDF263B88E3B
Certificate serial:       0C71FBDC0A9EE78EB0B28DE451493D4EAC73096C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D18FA4A88E7A19A02E06CD348D6BDF263B88E3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/0/5D18FA4A88E7A19A02E06CD348D6BDF263B88E3B.mft
Manifest number:          BA
Signing time:             Thu 14 Dec 2023 08:02:26 +0000
Manifest this update:     Thu 14 Dec 2023 07:57:26 +0000
Manifest next update:     Fri 15 Dec 2023 09:47:26 +0000
Files and hashes:         1: 3133382e3230342e3134382e302f32322d3332203d3e20323633393030.roa (hash: ec24oUWCQzQg0NKkOPfjqplfHDHYTkeb1TjRn/Q++JM=)
                          2: 323830343a323736633a3a2f33322d313238203d3e20323633393030.roa (hash: jttrt433XdAHkNpdD4VTdpfY4OBBRS4Ntr81T+IhOLQ=)
                          3: 5D18FA4A88E7A19A02E06CD348D6BDF263B88E3B.crl (hash: 6btcEiapgUgJ2rsFISbUdS/X2Zzf1annD5fSLVmcY/c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:71:fb:dc:0a:9e:e7:8e:b0:b2:8d:e4:51:49:3d:4e:ac:73:09:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D18FA4A88E7A19A02E06CD348D6BDF263B88E3B
        Validity
            Not Before: Dec 14 07:57:26 2023 GMT
            Not After : Dec 15 09:47:26 2023 GMT
        Subject: CN=C1EB2FB66532164E1326127FF8EB5FF537FA47FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:72:74:f7:b7:ef:6b:48:15:55:64:8b:19:24:
                    9a:8a:f1:8a:a7:be:e7:d2:5f:77:1f:d3:1b:7c:ad:
                    43:39:74:23:38:9a:2e:ff:7b:8a:59:17:5d:8c:4b:
                    62:fc:2f:94:6d:02:02:d2:77:3a:81:60:b9:81:98:
                    69:b8:78:b9:25:4b:30:52:e4:17:50:ec:36:58:84:
                    a9:df:28:8f:2c:9f:83:45:b4:02:8f:86:15:27:30:
                    d9:59:23:63:03:9b:ae:58:b4:67:26:0b:35:4c:db:
                    b5:9c:46:b1:89:54:1f:48:19:08:85:2e:82:9f:0b:
                    df:5d:8a:7e:66:d7:a3:95:17:19:90:a5:37:7d:0b:
                    1c:c5:da:96:9e:24:40:4c:48:91:f4:3c:f6:43:1c:
                    ef:44:b3:c0:3a:49:1b:a7:77:18:50:ef:bb:9e:b1:
                    4f:f5:78:7f:d3:f1:84:a8:6c:2b:15:f2:0f:d9:b7:
                    20:41:62:07:ea:19:76:b3:af:a3:bc:ea:96:df:1c:
                    0e:9d:6d:f2:f2:83:58:b0:04:db:21:eb:bf:cf:9a:
                    a4:5d:9c:ab:91:8d:a2:3f:35:7f:e4:1f:2c:60:d6:
                    20:38:7c:59:f5:0c:1b:72:c2:fe:ab:e1:e0:e7:c4:
                    5a:e0:22:17:0c:e2:e6:1d:b6:e9:7d:0f:62:82:a4:
                    73:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:EB:2F:B6:65:32:16:4E:13:26:12:7F:F8:EB:5F:F5:37:FA:47:FC
            X509v3 Authority Key Identifier:
                keyid:5D:18:FA:4A:88:E7:A1:9A:02:E0:6C:D3:48:D6:BD:F2:63:B8:8E:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/0/5D18FA4A88E7A19A02E06CD348D6BDF263B88E3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D18FA4A88E7A19A02E06CD348D6BDF263B88E3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/0/5D18FA4A88E7A19A02E06CD348D6BDF263B88E3B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:c5:d0:54:e4:60:74:2f:81:3a:fe:1f:8d:69:5d:54:fb:bb:
         5b:01:0f:7c:5b:e0:cd:77:a8:6c:1a:ec:40:4b:d1:d9:8f:84:
         2d:9a:95:53:4c:a7:58:7e:a8:80:0a:82:9b:28:22:2f:6f:bc:
         f8:c4:6c:1e:66:73:61:98:2f:24:69:ab:9c:4e:b6:48:fe:af:
         d9:cf:be:33:f8:99:18:f6:39:0c:dd:17:e3:7a:dc:13:bb:bc:
         61:61:91:c9:da:65:de:bf:e6:4b:66:da:fc:55:e3:c8:a4:4a:
         0c:26:af:11:b0:2b:9c:4f:d3:49:b1:b1:67:9a:0e:4f:5e:c1:
         98:3f:bf:95:0e:79:94:32:b2:6e:d6:a7:3d:c7:00:3e:dc:46:
         8a:d4:96:34:a2:75:38:01:29:f9:60:ae:ea:18:99:84:ba:17:
         d1:e3:5a:69:71:38:7f:11:58:42:af:bb:11:00:f3:df:4b:05:
         fe:f8:e3:aa:2f:39:c2:d6:32:e4:f8:11:03:54:57:24:62:d6:
         44:d4:55:9d:d0:b0:ce:a2:a0:5d:05:d8:fa:ef:29:78:fd:ba:
         cc:ee:25:a3:73:3f:54:9f:93:19:b7:36:2c:5f:83:2c:29:45:
         1d:39:05:fb:a4:20:0a:83:bc:0d:aa:79:59:dc:1d:c2:1c:f1:
         31:45:a1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----