Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/4A0CF634A638CADFFABAC397E0D1615D2CA89C53.mft
File:                     4A0CF634A638CADFFABAC397E0D1615D2CA89C53.mft (raw, json)
Hash identifier:          uqfd9/6fkPf7ZboU3Ik3KRwtOgkj9LFhFDUOG78YNME=
Subject key identifier:   B5:C5:B7:37:67:AD:17:6B:FB:AF:9D:56:42:BF:6E:03:DB:10:D8:4F
Authority key identifier: 4A:0C:F6:34:A6:38:CA:DF:FA:BA:C3:97:E0:D1:61:5D:2C:A8:9C:53
Certificate issuer:       /CN=4A0CF634A638CADFFABAC397E0D1615D2CA89C53
Certificate serial:       5CE4572CECCE786FCC7902E458FCECA91827F707
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A0CF634A638CADFFABAC397E0D1615D2CA89C53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/4A0CF634A638CADFFABAC397E0D1615D2CA89C53.mft
Manifest number:          2C
Signing time:             Wed 17 Jan 2024 20:00:24 +0000
Manifest this update:     Wed 17 Jan 2024 19:55:24 +0000
Manifest next update:     Thu 18 Jan 2024 23:30:24 +0000
Files and hashes:         1: 34352e3232392e35322e302f32322d3234203d3e20323637313234.roa (hash: K2QbC89xqNG1LsuQDst4M3EmgZSOyWccTKm3VdjgHDU=)
                          2: 323830343a343837633a3a2f33322d3438203d3e20323637313234.roa (hash: 6/Ks5BB1bWf6oIm9fDFojyQql0BcUh/DteNpoonbWDs=)
                          3: 4A0CF634A638CADFFABAC397E0D1615D2CA89C53.crl (hash: xCx8WXrIHNHt9QoXD7MHJ6g/Nw3EJw7Vh2fbLPrQkKc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:e4:57:2c:ec:ce:78:6f:cc:79:02:e4:58:fc:ec:a9:18:27:f7:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A0CF634A638CADFFABAC397E0D1615D2CA89C53
        Validity
            Not Before: Jan 17 19:55:24 2024 GMT
            Not After : Jan 18 23:30:24 2024 GMT
        Subject: CN=B5C5B73767AD176BFBAF9D5642BF6E03DB10D84F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1c:8d:d3:5e:55:32:56:94:dc:54:0e:66:5d:
                    6b:ad:31:bd:d3:0e:56:50:4a:13:b1:67:3f:1f:78:
                    2a:b1:2c:18:c3:54:b5:a3:9a:40:63:f0:e3:26:e3:
                    da:9f:ca:93:67:ac:8b:33:31:85:21:74:72:5d:b5:
                    f2:1b:41:24:6e:af:cd:4a:29:1a:19:d6:13:c9:70:
                    e0:74:25:ee:3e:5d:f9:14:5d:33:17:73:f5:e1:d7:
                    f5:79:89:3b:32:6f:61:e8:a9:70:b0:a7:38:bc:b8:
                    bf:2b:44:e4:a3:08:a7:19:44:57:6a:b6:d6:9b:d5:
                    14:01:4d:68:19:b9:5c:72:4e:28:62:56:3c:65:bf:
                    0f:43:47:32:35:35:98:f1:74:21:3b:0e:03:28:7e:
                    78:ee:a6:b5:e0:ba:9f:89:ec:24:09:e2:8d:eb:05:
                    5d:99:a4:8a:90:11:55:ad:42:20:e0:86:4c:a3:82:
                    b7:b0:da:a2:04:2e:2d:4a:1a:cf:21:c0:56:5b:e1:
                    ed:c9:9e:31:da:2e:ab:2a:c9:89:43:b9:d5:da:02:
                    7b:2f:c1:0b:c6:f3:1d:28:8d:53:a7:44:1c:8e:e4:
                    08:64:d4:4e:30:fc:8a:09:de:68:23:08:bd:e5:09:
                    45:01:d6:23:29:24:d1:a1:d4:5e:ba:5e:00:67:87:
                    36:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C5:B7:37:67:AD:17:6B:FB:AF:9D:56:42:BF:6E:03:DB:10:D8:4F
            X509v3 Authority Key Identifier:
                keyid:4A:0C:F6:34:A6:38:CA:DF:FA:BA:C3:97:E0:D1:61:5D:2C:A8:9C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/4A0CF634A638CADFFABAC397E0D1615D2CA89C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A0CF634A638CADFFABAC397E0D1615D2CA89C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/4A0CF634A638CADFFABAC397E0D1615D2CA89C53.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:73:19:ec:c4:01:60:fd:ea:c9:2f:fd:1c:a3:35:0d:cf:34:
         39:9c:ee:2f:6f:ad:1c:be:56:f0:e3:3d:68:c2:fe:24:e8:bb:
         e2:6f:b6:b2:c8:65:af:da:6d:94:24:e0:c2:e9:68:d6:d7:a1:
         38:50:b1:c3:12:20:a6:c6:7d:6d:e1:d1:ea:91:01:5d:96:ac:
         dd:81:65:11:46:f5:5f:69:49:35:52:7d:cb:4d:4d:67:0c:eb:
         b7:55:37:79:43:af:f7:c4:5a:04:37:36:d2:f5:19:61:17:d8:
         c1:65:15:10:c1:65:0f:de:40:46:ca:c7:39:f0:a7:4e:a8:ff:
         7a:02:15:68:41:07:aa:a8:f3:78:12:3f:77:77:99:a8:f3:cf:
         dc:ba:5c:19:7d:f9:61:8b:73:d5:61:25:77:de:6f:11:be:8a:
         e9:b8:02:fd:f9:5f:0d:58:d0:04:e5:5c:75:ac:f6:ca:48:5d:
         d7:a5:aa:52:0d:a6:ff:f7:71:a2:0f:86:93:b6:1b:71:0f:84:
         ec:a4:55:e2:53:40:22:9f:25:e0:ff:4f:d3:54:9a:48:ec:f7:
         9e:05:66:5f:f5:a5:35:9a:45:6e:47:d1:9d:70:04:88:62:32:
         61:07:28:59:28:89:4b:7d:a0:14:68:88:6e:f2:75:c6:90:2c:
         f8:b6:06:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----