Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/0/E5254B5B54A18C6FE2479968F3E3B34DE54ABD57.mft
File:                     E5254B5B54A18C6FE2479968F3E3B34DE54ABD57.mft (raw, json)
Hash identifier:          ModbeLqUG1YFoclmkjqQfKJjSDRmHozz4cXxL+3RgPI=
Subject key identifier:   3E:00:1C:97:98:82:5C:AE:69:C3:EF:BB:1D:51:0F:6B:D7:C1:A7:5A
Authority key identifier: E5:25:4B:5B:54:A1:8C:6F:E2:47:99:68:F3:E3:B3:4D:E5:4A:BD:57
Certificate issuer:       /CN=E5254B5B54A18C6FE2479968F3E3B34DE54ABD57
Certificate serial:       085476D052B3F5C7F397047A205E1B976EF4B28B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5254B5B54A18C6FE2479968F3E3B34DE54ABD57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/0/E5254B5B54A18C6FE2479968F3E3B34DE54ABD57.mft
Manifest number:          83
Signing time:             Mon 15 Apr 2024 02:56:43 +0000
Manifest this update:     Mon 15 Apr 2024 02:51:43 +0000
Manifest next update:     Tue 16 Apr 2024 03:07:43 +0000
Files and hashes:         1: E5254B5B54A18C6FE2479968F3E3B34DE54ABD57.crl (hash: tx41crf6kxJkaITRm4gsqcrz66doQRFvPNva/HoL7KE=)
                          2: 34352e3138322e302e302f32322d3234203d3e20323639323139.roa (hash: v3Ml2Vo36KXJoRG6Fwff6nWKdyxb1NDy9u7kd/QTiyk=)
                          3: 323830343a363133303a3a2f33322d3332203d3e20323639323139.roa (hash: T5K2J+hc9vMry6VWZARqHe7apcous1VSe0y7JN31vZk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:54:76:d0:52:b3:f5:c7:f3:97:04:7a:20:5e:1b:97:6e:f4:b2:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5254B5B54A18C6FE2479968F3E3B34DE54ABD57
        Validity
            Not Before: Apr 15 02:51:43 2024 GMT
            Not After : Apr 16 03:07:43 2024 GMT
        Subject: CN=3E001C9798825CAE69C3EFBB1D510F6BD7C1A75A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a8:d3:d1:38:e8:a6:b6:48:98:e1:06:b1:f1:
                    2f:00:9e:d9:26:46:e4:02:32:05:29:c0:14:4a:21:
                    80:9f:56:3a:13:af:6f:da:29:44:e1:1d:ea:4d:7d:
                    a8:2a:78:d8:82:de:bc:3e:75:24:35:24:10:aa:37:
                    d4:1c:b7:ab:0c:39:72:8d:3f:a6:f1:e9:6c:a7:aa:
                    58:a8:24:df:1b:a6:5f:a5:fa:e8:27:9d:7b:d8:99:
                    44:65:2a:0b:d6:38:b8:55:8d:93:c6:46:85:ff:b9:
                    b4:e7:15:39:3d:68:2a:06:57:b0:5a:06:ba:c5:b2:
                    55:1c:b6:0f:92:bd:da:91:f7:23:40:33:5a:be:65:
                    76:df:9d:9f:75:a2:a4:b2:fa:2a:cd:59:65:18:2a:
                    2d:b0:e6:40:f2:16:df:84:ab:ba:fe:dd:da:3c:56:
                    bf:3f:cb:f4:51:a9:47:66:99:e3:dd:dd:6c:d5:73:
                    5e:6a:83:e7:d3:b9:a6:4c:9c:48:79:96:28:b8:9b:
                    c5:6e:a9:1c:b6:42:51:86:42:30:68:23:d8:19:9c:
                    5a:a3:c5:17:cd:2b:4f:58:6a:c7:d8:6d:1f:dd:18:
                    ae:90:f3:3e:05:b7:5b:00:82:4b:75:06:d3:97:34:
                    51:97:1d:58:07:49:5b:dd:40:34:47:ea:f3:5b:a4:
                    1f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:00:1C:97:98:82:5C:AE:69:C3:EF:BB:1D:51:0F:6B:D7:C1:A7:5A
            X509v3 Authority Key Identifier:
                keyid:E5:25:4B:5B:54:A1:8C:6F:E2:47:99:68:F3:E3:B3:4D:E5:4A:BD:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/0/E5254B5B54A18C6FE2479968F3E3B34DE54ABD57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5254B5B54A18C6FE2479968F3E3B34DE54ABD57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/0/E5254B5B54A18C6FE2479968F3E3B34DE54ABD57.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:c1:10:41:d7:c5:fb:7b:02:4a:02:7e:60:6c:59:c5:53:74:
         8d:b2:58:e6:ea:a1:75:66:ee:08:3e:08:fb:a9:8b:e0:fd:9b:
         aa:92:74:f4:8e:61:d1:2a:db:5e:d1:a0:e9:be:48:98:3e:1b:
         1d:d6:c5:b7:51:43:0b:7c:5d:4f:99:b8:9f:71:b2:8b:53:18:
         e6:b7:b8:09:2b:d2:bb:8e:cd:e3:09:c5:60:80:6b:7c:88:be:
         b6:40:3c:94:0d:ec:d8:0b:c9:b1:27:96:35:44:3e:e0:fb:86:
         56:c5:32:c8:c3:dd:3b:49:74:15:03:8c:d4:c0:36:18:61:c9:
         8b:46:3f:f5:a1:e8:3b:cd:fe:de:61:5b:af:d1:7c:99:70:de:
         0c:8c:ea:76:0e:5c:f1:9f:23:f4:5d:e8:98:5c:fc:60:57:eb:
         9a:a4:9a:6d:b0:37:68:7f:9e:28:65:9f:ba:9d:fd:fe:26:7a:
         b1:1e:0f:65:b3:cd:6e:96:8c:a7:fa:cd:dc:57:da:90:48:e6:
         d8:18:31:61:67:65:8c:4f:42:41:9f:8a:2f:e6:ab:25:b8:bd:
         94:09:80:4e:b1:f1:80:3a:18:9f:9c:3e:4c:eb:95:84:fd:56:
         46:16:09:15:9c:52:88:62:60:59:4f:c6:a6:3f:17:57:fe:aa:
         b3:be:f2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----