Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/520B73CFD2D4A90F7BFCBB9994BCEEC50715860B.mft
File:                     520B73CFD2D4A90F7BFCBB9994BCEEC50715860B.mft (raw, json)
Hash identifier:          6lGbapc8AcHDLS3RZ8X6ANJ8jGP2si9vU08M1GcPuOc=
Subject key identifier:   A2:25:0F:26:38:97:2F:70:B6:D3:BF:43:A9:8A:13:55:F0:A4:30:F9
Authority key identifier: 52:0B:73:CF:D2:D4:A9:0F:7B:FC:BB:99:94:BC:EE:C5:07:15:86:0B
Certificate issuer:       /CN=520B73CFD2D4A90F7BFCBB9994BCEEC50715860B
Certificate serial:       09D6BD8009AA07FBFC34F6800F785B0720DDFB1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/520B73CFD2D4A90F7BFCBB9994BCEEC50715860B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/520B73CFD2D4A90F7BFCBB9994BCEEC50715860B.mft
Manifest number:          89
Signing time:             Mon 15 Apr 2024 00:34:13 +0000
Manifest this update:     Mon 15 Apr 2024 00:29:13 +0000
Manifest next update:     Tue 16 Apr 2024 01:10:13 +0000
Files and hashes:         1: 520B73CFD2D4A90F7BFCBB9994BCEEC50715860B.crl (hash: i24wJPz7mqS9+9qbFLhATNlueKAp/kCrlKZmhDmBE68=)
                          2: 323830343a386466343a3a2f33322d3438203d3e20323733333932.roa (hash: Nxjw0X37zdHEQQS5VveuN44AeaEmQ06Tw/Zcn01HGRM=)
                          3: 34352e3136382e39342e302f32342d3234203d3e20323733333932.roa (hash: k/XyT6UR8cup0KfUa6W907h93Tp2QviyXdrmu/fqEU8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:d6:bd:80:09:aa:07:fb:fc:34:f6:80:0f:78:5b:07:20:dd:fb:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=520B73CFD2D4A90F7BFCBB9994BCEEC50715860B
        Validity
            Not Before: Apr 15 00:29:13 2024 GMT
            Not After : Apr 16 01:10:13 2024 GMT
        Subject: CN=A2250F2638972F70B6D3BF43A98A1355F0A430F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6b:2f:a4:54:eb:78:28:e7:55:76:3a:74:e1:
                    9f:ff:f8:e1:c3:66:30:d8:92:81:c0:7f:84:b9:41:
                    60:92:c2:99:54:13:36:97:f7:f0:84:bd:c6:a2:85:
                    c0:37:19:c9:7d:ca:58:e8:48:76:e7:4f:08:ce:f6:
                    90:1c:3d:96:19:fb:28:0d:f6:c2:45:23:5c:bc:a5:
                    6f:96:4e:1f:ed:52:cc:5a:9d:da:55:ce:e0:fd:40:
                    da:b0:53:3e:7c:b3:49:5b:9f:ba:af:79:6b:9b:2b:
                    91:7d:93:0d:e9:93:b1:e5:15:3d:8d:37:b3:40:0b:
                    ac:41:12:af:a4:b5:74:85:9e:ca:96:6a:19:8f:32:
                    37:55:d8:89:93:56:59:1f:31:93:3e:e4:3c:41:6e:
                    84:6b:74:0f:97:e1:00:d7:7f:7a:a5:11:93:c7:5f:
                    86:ee:12:91:72:58:68:c7:90:0f:98:76:83:b5:5b:
                    11:48:1a:f6:d8:e8:26:6a:f9:38:27:dd:50:25:e8:
                    11:8a:7c:52:e3:a9:b6:79:1a:7e:86:54:b8:d3:88:
                    c0:30:85:8a:fd:bd:99:6f:24:1f:99:66:a2:ff:aa:
                    46:71:77:56:d3:71:3f:5e:ff:a1:c3:a9:c8:62:93:
                    bb:c3:69:d6:de:f7:74:0b:c3:c7:ca:15:a0:9d:b2:
                    2b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:25:0F:26:38:97:2F:70:B6:D3:BF:43:A9:8A:13:55:F0:A4:30:F9
            X509v3 Authority Key Identifier:
                keyid:52:0B:73:CF:D2:D4:A9:0F:7B:FC:BB:99:94:BC:EE:C5:07:15:86:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/520B73CFD2D4A90F7BFCBB9994BCEEC50715860B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/520B73CFD2D4A90F7BFCBB9994BCEEC50715860B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/520B73CFD2D4A90F7BFCBB9994BCEEC50715860B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:b8:a8:8f:cd:3b:c9:ef:eb:08:0a:f3:0b:9c:c5:a9:36:30:
         24:84:07:68:a8:62:af:3c:7c:3f:59:ef:72:47:92:08:52:bb:
         ee:5e:31:e0:47:61:9d:80:46:36:59:bc:ed:ee:54:2c:2d:ee:
         81:cd:1d:d7:b4:6b:95:45:cb:f1:ab:32:71:54:54:49:6e:65:
         a9:9d:03:7b:29:9c:07:90:00:8b:48:ef:cf:4a:f4:c9:8f:ca:
         8b:99:e8:72:92:fc:df:78:a7:73:2b:4d:96:98:86:5a:60:a6:
         3e:51:e1:0b:14:d8:20:c1:d7:4a:b9:e0:c2:8f:fc:9a:60:64:
         5a:68:c7:af:9c:ee:94:16:a2:ff:ad:53:7c:7a:8f:3d:d4:a7:
         e5:fb:36:75:da:11:50:27:b6:e1:c7:86:7e:29:47:df:f7:28:
         b7:19:07:a7:4b:ab:18:8d:00:2d:c0:7e:d6:e9:ae:28:6c:e8:
         04:5c:53:b8:34:7e:83:94:3c:a0:11:c3:5a:42:d9:3b:e3:82:
         03:6d:f9:92:8d:2e:37:56:34:c1:0c:c7:38:6c:6c:b8:44:6e:
         8a:06:f8:f8:c9:68:b5:a8:aa:0f:d2:89:53:95:f8:b8:8d:32:
         fc:7b:36:51:94:32:2d:43:6f:21:2e:80:23:ef:ac:83:e3:ae:
         08:f6:37:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----