Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/C5B9910C7B4E71FD2BF9FC1A66967A2B7D758786.mft
File:                     C5B9910C7B4E71FD2BF9FC1A66967A2B7D758786.mft (raw, json)
Hash identifier:          5FmkpF55Y9f3UEUoJzdQ1H8PKk3Pm5oUUeUKiNuf/to=
Subject key identifier:   FD:43:1B:2A:16:DF:A6:53:E7:A0:BE:1A:CF:62:8D:01:A4:7E:CD:79
Authority key identifier: C5:B9:91:0C:7B:4E:71:FD:2B:F9:FC:1A:66:96:7A:2B:7D:75:87:86
Certificate issuer:       /CN=C5B9910C7B4E71FD2BF9FC1A66967A2B7D758786
Certificate serial:       4CE0F070D1582001BDD2044F995D43A4B4FE734A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C5B9910C7B4E71FD2BF9FC1A66967A2B7D758786.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/C5B9910C7B4E71FD2BF9FC1A66967A2B7D758786.mft
Manifest number:          29
Signing time:             Mon 15 Apr 2024 09:18:28 +0000
Manifest this update:     Mon 15 Apr 2024 09:13:28 +0000
Manifest next update:     Tue 16 Apr 2024 09:50:28 +0000
Files and hashes:         1: C5B9910C7B4E71FD2BF9FC1A66967A2B7D758786.crl (hash: 0bcIl92VfJqPn9z24VaV54TFjOxKidLG9VWLgX5fJiQ=)
                          2: 34352e3137312e3132322e302f32332d3332203d3e20323638383736.roa (hash: k7HttQg7XBumu48LeT+l1rG8MIQLuh/pO9m32KacZlg=)
                          3: 323830343a356265383a3a2f33322d313238203d3e20323638383736.roa (hash: 9Z0f3JTAXs2YcXC48hhKXpqaK8BLu438jyQgmPt+Kl0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e0:f0:70:d1:58:20:01:bd:d2:04:4f:99:5d:43:a4:b4:fe:73:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5B9910C7B4E71FD2BF9FC1A66967A2B7D758786
        Validity
            Not Before: Apr 15 09:13:28 2024 GMT
            Not After : Apr 16 09:50:28 2024 GMT
        Subject: CN=FD431B2A16DFA653E7A0BE1ACF628D01A47ECD79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:89:00:0c:d5:cb:b7:0c:78:c4:0d:d0:b3:3f:
                    27:a3:d7:ea:6a:85:91:7c:c1:56:ce:cb:95:11:93:
                    8a:ce:e2:09:13:78:ef:c5:f0:69:f5:06:3a:4d:96:
                    3b:6e:9c:a2:ad:c5:5d:05:b8:dc:94:1c:64:2f:59:
                    f4:b7:96:f3:d1:bf:07:46:fc:39:b1:50:ae:d3:39:
                    86:43:bb:de:71:c1:89:5e:e6:d9:73:55:55:0b:3f:
                    c1:33:3f:0e:a4:5e:cd:75:71:8a:19:f1:99:fe:17:
                    9c:2e:97:c1:65:09:a9:80:07:85:41:6f:4d:8b:58:
                    30:cc:3c:d1:f4:1c:d6:5b:24:dc:d1:f5:64:70:44:
                    ff:6e:fa:02:7f:84:e6:f2:d3:35:65:c2:24:6e:1b:
                    e5:d0:a0:e8:56:c3:93:0b:f5:f4:10:b2:bc:9a:31:
                    32:00:45:b0:19:a7:05:7d:96:30:b0:e1:f0:1e:0b:
                    00:7a:8f:32:d3:e2:75:53:0c:1e:20:61:83:db:1e:
                    ec:34:84:82:e0:87:66:2c:bb:ee:11:30:da:3e:2e:
                    79:85:54:2d:7d:27:06:a6:4c:ad:a4:9c:be:de:d0:
                    02:47:1e:63:8c:17:5a:c5:ad:ce:30:bc:d4:76:de:
                    b7:55:d7:b2:31:d0:a3:af:ac:8f:80:44:b2:8c:65:
                    c1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:43:1B:2A:16:DF:A6:53:E7:A0:BE:1A:CF:62:8D:01:A4:7E:CD:79
            X509v3 Authority Key Identifier:
                keyid:C5:B9:91:0C:7B:4E:71:FD:2B:F9:FC:1A:66:96:7A:2B:7D:75:87:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/C5B9910C7B4E71FD2BF9FC1A66967A2B7D758786.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C5B9910C7B4E71FD2BF9FC1A66967A2B7D758786.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/C5B9910C7B4E71FD2BF9FC1A66967A2B7D758786.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:af:14:3a:14:c2:0d:2d:0c:ee:5d:f2:17:9c:4a:22:4d:f9:
         ab:aa:78:0a:6f:58:d4:db:77:9f:35:95:00:1e:ec:b6:30:88:
         ee:f7:d9:8e:f3:31:ef:cb:15:29:2a:1f:04:19:35:29:73:5b:
         db:66:da:dc:1c:8d:23:52:23:0a:bd:d7:58:5e:56:13:24:7e:
         92:8d:e0:28:81:bf:ba:3c:67:1e:a9:3e:e1:b9:b8:60:cd:e4:
         55:61:eb:13:89:72:ca:bc:b2:e9:bb:09:eb:ae:99:e2:f3:82:
         64:53:02:30:79:e2:5f:6c:95:7c:03:45:b3:c5:37:bd:dc:7a:
         38:6b:c0:82:c6:43:49:7e:f0:45:89:62:07:3e:e5:fa:2c:67:
         4c:6c:0d:77:8f:59:64:fa:2f:15:b3:2d:b8:00:68:a6:69:77:
         0e:b6:96:82:72:59:5a:6c:5b:b3:c6:a6:13:1d:08:1e:7b:b6:
         8e:58:6b:61:97:10:4d:44:77:01:6a:f4:72:64:d1:97:0d:08:
         78:66:db:d3:67:ad:be:83:14:f7:2b:e5:64:6d:b4:23:9a:22:
         5d:ee:20:7e:30:5b:da:1a:43:06:95:54:dc:79:77:9e:04:41:
         24:73:2a:8f:54:7f:30:ae:b0:b6:1f:7f:cf:9a:02:ef:8b:bc:
         60:67:a1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----