Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/1/A5AD03985B5804EFACADF9D490164F54BBE0D71C.mft
File:                     A5AD03985B5804EFACADF9D490164F54BBE0D71C.mft (raw, json)
Hash identifier:          YuVX9bR6obTdL2CtSIi4QZqLoL/4zklJEjSv6st+ufo=
Subject key identifier:   7D:FE:CB:6D:AA:E2:78:54:85:71:B8:89:24:83:8B:6D:DC:FE:DC:94
Authority key identifier: A5:AD:03:98:5B:58:04:EF:AC:AD:F9:D4:90:16:4F:54:BB:E0:D7:1C
Certificate issuer:       /CN=A5AD03985B5804EFACADF9D490164F54BBE0D71C
Certificate serial:       247E016DA202484F0C7C18BCF515A3643B6F637B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5AD03985B5804EFACADF9D490164F54BBE0D71C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/1/A5AD03985B5804EFACADF9D490164F54BBE0D71C.mft
Manifest number:          DE
Signing time:             Tue 17 Sep 2024 17:48:53 +0000
Manifest this update:     Tue 17 Sep 2024 17:43:53 +0000
Manifest next update:     Wed 18 Sep 2024 21:23:53 +0000
Files and hashes:         1: 323830343a343436303a3a2f33322d313238203d3e20323637363239.roa (hash: 5FV+lZrkZipo3AQsC84mEcZoHKmVR3ZII1MsV0y4cvk=)
                          2: 34352e37312e3231362e302f32322d3332203d3e20323637363239.roa (hash: pHmb4+FSB21Sqf+rabMjqBlgMzEjH0LAbeb8S8JU01s=)
                          3: A5AD03985B5804EFACADF9D490164F54BBE0D71C.crl (hash: 8tGUv7VKceYHmAVlfScbVnGxsQdJVZXSZd56g+UQ0dc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:7e:01:6d:a2:02:48:4f:0c:7c:18:bc:f5:15:a3:64:3b:6f:63:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5AD03985B5804EFACADF9D490164F54BBE0D71C
        Validity
            Not Before: Sep 17 17:43:53 2024 GMT
            Not After : Sep 18 21:23:53 2024 GMT
        Subject: CN=7DFECB6DAAE278548571B88924838B6DDCFEDC94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:9e:e7:e1:d5:51:f6:a9:1e:0a:4c:e0:c5:2f:
                    4a:71:7c:c4:41:7d:34:26:7f:ce:8a:c8:99:5b:38:
                    e1:09:64:3d:54:89:0b:f1:ac:db:20:41:27:29:ae:
                    f3:f9:63:cf:95:16:9a:85:7a:12:68:ef:2c:af:08:
                    be:23:26:c1:e1:d6:28:8d:56:2c:5c:c5:c3:3a:63:
                    5e:76:94:03:3a:9e:a1:7f:45:94:bd:79:7e:97:e1:
                    3b:8d:a9:e2:ac:a0:e7:05:2a:e5:70:f7:24:e3:43:
                    50:f2:00:0d:b1:c8:d4:47:21:53:f5:e1:4f:1f:a0:
                    b3:a0:81:3c:aa:a5:19:f8:b1:16:ca:68:e5:43:8b:
                    0f:95:f6:b9:80:62:e3:ec:70:b3:cd:9f:24:bc:bd:
                    b6:f2:fd:33:07:38:4b:f7:a1:8b:75:5d:01:f0:39:
                    d2:43:17:27:24:0f:f2:27:df:93:81:24:8d:c3:1b:
                    1b:8f:e6:bd:bc:03:f8:cb:5a:c0:1a:63:00:92:9d:
                    0b:3a:a3:fd:42:54:b9:08:12:36:bd:df:3e:e1:13:
                    36:fd:b5:a9:e4:eb:be:e3:b6:3b:bc:13:11:70:bc:
                    24:16:d6:96:11:58:6a:e7:ee:83:9c:79:b4:e0:4b:
                    6b:e1:36:4f:fd:d9:83:ba:79:2b:2e:fc:87:85:c4:
                    49:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:FE:CB:6D:AA:E2:78:54:85:71:B8:89:24:83:8B:6D:DC:FE:DC:94
            X509v3 Authority Key Identifier:
                keyid:A5:AD:03:98:5B:58:04:EF:AC:AD:F9:D4:90:16:4F:54:BB:E0:D7:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/1/A5AD03985B5804EFACADF9D490164F54BBE0D71C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5AD03985B5804EFACADF9D490164F54BBE0D71C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/1/A5AD03985B5804EFACADF9D490164F54BBE0D71C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:83:d2:b3:50:0d:73:5e:4c:45:dd:83:7d:97:ed:89:2e:a2:
         f8:c7:89:c0:24:bc:16:41:11:98:b5:a5:2d:29:85:b2:58:b0:
         25:22:c0:c6:be:14:3a:b5:32:5c:71:0f:74:a2:94:22:a4:06:
         b0:df:6a:44:94:4e:0e:ba:ad:56:e9:a0:d1:aa:1b:49:24:22:
         38:02:b0:4c:d8:f9:47:15:df:6b:8f:a1:07:a3:93:c9:6a:43:
         49:fa:22:6a:38:75:77:26:9a:a7:8a:9a:b5:ca:98:b5:a4:bf:
         86:ca:b2:62:bb:3a:6d:f1:0f:e0:cf:53:80:d3:5c:f4:9d:07:
         8e:8f:37:77:78:33:54:99:a6:01:f0:b0:79:7d:63:a4:e7:da:
         d6:24:3d:97:00:78:bc:35:e9:b9:a5:2c:3b:43:26:88:3d:ed:
         d6:23:64:97:97:6e:47:b0:04:55:b3:36:43:74:08:0c:a0:08:
         69:17:e8:39:1e:9b:2b:d2:ff:a2:06:7a:cf:a1:a5:08:b9:ff:
         6a:64:08:5f:04:89:9e:34:8f:99:f5:62:c0:da:3b:a7:97:04:
         3a:94:54:75:56:77:5a:df:61:33:08:a9:de:16:c1:f6:2c:fe:
         4f:c4:11:f1:2e:f9:76:ae:2b:21:52:80:27:2c:8f:47:70:14:
         a0:1c:1e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----