Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/02C5820CBF468581E6A98EFA0E6A0BAE60536F0C.mft
File:                     02C5820CBF468581E6A98EFA0E6A0BAE60536F0C.mft (raw, json)
Hash identifier:          L3KUpbO+uiMFnyX0+TrmrA+KxBaABHbHzUPIsjBVFR8=
Subject key identifier:   FD:22:48:01:89:12:76:4D:C7:6A:8F:81:C9:3B:50:D5:0F:F1:B7:CD
Authority key identifier: 02:C5:82:0C:BF:46:85:81:E6:A9:8E:FA:0E:6A:0B:AE:60:53:6F:0C
Certificate issuer:       /CN=02C5820CBF468581E6A98EFA0E6A0BAE60536F0C
Certificate serial:       277837466923D038489A7EAA97D6D9836557C562
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/02C5820CBF468581E6A98EFA0E6A0BAE60536F0C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/02C5820CBF468581E6A98EFA0E6A0BAE60536F0C.mft
Manifest number:          4E
Signing time:             Sat 24 Feb 2024 11:40:49 +0000
Manifest this update:     Sat 24 Feb 2024 11:35:49 +0000
Manifest next update:     Sun 25 Feb 2024 15:35:49 +0000
Files and hashes:         1: 02C5820CBF468581E6A98EFA0E6A0BAE60536F0C.crl (hash: hU1xUdKiUJdWNXQuY4uaSalDUg3+mu6oy8P6KHgjJwc=)
                          2: 34352e3139312e34302e302f32322d3332203d3e20323730323534.roa (hash: kU9lCdVEQ/L2zyanmErOjJigl54E/7Bw6K3P4Xv4C0Q=)
                          3: 323830343a363933303a3a2f33322d313238203d3e20323730323534.roa (hash: CLA8IjJOlAIf7xUZClkWxJDyS5o1IH3elTTHdcyDG+o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:78:37:46:69:23:d0:38:48:9a:7e:aa:97:d6:d9:83:65:57:c5:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02C5820CBF468581E6A98EFA0E6A0BAE60536F0C
        Validity
            Not Before: Feb 24 11:35:49 2024 GMT
            Not After : Feb 25 15:35:49 2024 GMT
        Subject: CN=FD2248018912764DC76A8F81C93B50D50FF1B7CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:66:f4:ef:30:6c:5c:48:8c:37:01:7a:cf:ba:
                    78:0a:2b:11:4c:3f:e5:b6:36:fe:d3:37:31:86:5f:
                    c8:c6:aa:d8:a5:00:4a:7b:a6:ba:cb:a7:49:0d:4d:
                    da:6a:47:c5:93:04:b9:73:87:39:cd:57:2f:b3:1e:
                    8f:fa:77:44:eb:d0:6b:73:59:8d:bf:54:88:3b:bb:
                    76:82:4c:6b:00:99:18:4b:2d:39:85:3e:05:e8:c9:
                    a1:03:c3:81:2a:63:c7:9b:f0:88:ea:c2:4d:a8:29:
                    7f:4b:7d:63:26:92:a1:e7:05:15:92:9c:25:d6:16:
                    fb:ff:3b:29:3f:15:e2:31:d7:ba:7a:09:24:d0:87:
                    f4:c8:eb:7d:c5:a4:e4:2f:35:ae:63:47:31:e1:e6:
                    dd:bc:01:73:a9:34:96:c4:e1:12:85:f0:7e:41:b5:
                    f4:45:11:6a:16:31:91:30:e0:83:aa:7c:0e:6c:c4:
                    e4:2d:1a:4b:d6:47:9a:58:61:c7:f7:60:ed:83:c8:
                    a1:e9:6b:12:fd:66:34:4f:a2:78:62:08:51:ac:5e:
                    9b:9b:c0:2d:63:70:c9:d5:8c:c3:de:59:f8:ee:39:
                    4c:61:f3:a3:eb:19:fa:ff:a1:d4:53:3a:cd:36:f8:
                    18:a2:d0:19:b6:9a:03:20:26:80:8e:ab:ef:f6:43:
                    17:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:22:48:01:89:12:76:4D:C7:6A:8F:81:C9:3B:50:D5:0F:F1:B7:CD
            X509v3 Authority Key Identifier:
                keyid:02:C5:82:0C:BF:46:85:81:E6:A9:8E:FA:0E:6A:0B:AE:60:53:6F:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/02C5820CBF468581E6A98EFA0E6A0BAE60536F0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/02C5820CBF468581E6A98EFA0E6A0BAE60536F0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/02C5820CBF468581E6A98EFA0E6A0BAE60536F0C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:5c:e3:23:e0:c9:87:05:6e:d2:62:07:f5:ef:7d:7a:14:d4:
         64:59:31:14:f3:f7:3e:ee:37:82:59:35:21:fb:6f:39:c2:93:
         d3:f3:c2:9a:53:b3:ea:e6:ae:4e:33:06:1a:c2:89:0a:cf:bf:
         6f:b0:4c:b3:cb:61:c4:c7:5a:73:d8:0a:42:3c:02:7d:ce:2a:
         c7:0b:42:b0:1c:52:8d:04:86:52:48:22:bd:6f:98:67:9d:51:
         da:db:37:10:68:b6:f5:33:8c:2f:65:07:3b:80:3d:2b:d7:a5:
         65:8c:7f:4c:d5:a7:e8:3f:54:e8:f1:6b:d8:28:33:2f:dd:9e:
         53:eb:92:8e:e6:da:e9:22:0a:62:6b:3a:49:8f:60:05:a0:e8:
         0b:a7:51:7a:de:62:df:e6:c2:73:3d:f6:54:67:58:0a:e6:b1:
         f5:32:9a:08:82:a0:ac:7f:5b:a2:c4:f5:8c:2c:f4:24:12:ff:
         35:07:2d:22:ec:db:09:93:26:0f:f7:fc:19:52:cc:23:db:73:
         04:b7:1a:99:d0:88:da:ee:68:b6:13:19:90:29:a5:14:96:0f:
         ab:06:10:65:11:5c:0a:44:24:02:2b:a0:6c:13:53:33:04:33:
         40:c4:0e:0b:6b:20:e6:3c:c6:24:8c:f9:2b:f7:aa:86:56:35:
         c9:54:d7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----