Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/552EC31E2BF77D7E45084CB7BF9D6C345612ECB6.mft
File:                     552EC31E2BF77D7E45084CB7BF9D6C345612ECB6.mft (raw, json)
Hash identifier:          3SBKrRrXDyC+UL+9rTitbC5pem7DniBC/iQs1mzgSUc=
Subject key identifier:   E0:81:DA:11:C5:B9:EE:FF:B7:F9:DD:E0:F4:8A:E4:10:87:8F:EB:3C
Authority key identifier: 55:2E:C3:1E:2B:F7:7D:7E:45:08:4C:B7:BF:9D:6C:34:56:12:EC:B6
Certificate issuer:       /CN=552EC31E2BF77D7E45084CB7BF9D6C345612ECB6
Certificate serial:       489BCE6B396757FA8BB3557B43316D6381DAA375
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/552EC31E2BF77D7E45084CB7BF9D6C345612ECB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/552EC31E2BF77D7E45084CB7BF9D6C345612ECB6.mft
Manifest number:          06
Signing time:             Sun 26 Feb 2023 16:26:39 +0000
Manifest this update:     Sun 26 Feb 2023 16:21:39 +0000
Manifest next update:     Mon 27 Feb 2023 16:57:39 +0000
Files and hashes:         1: 34352e3138322e31362e302f32322d3232203d3e20323639323631.roa (hash: Zl5iRZka7fRZEP3Naz/pKfOQwx25R39xasTMB5ZDkUE=)
                          2: 323830343a363164633a3a2f33322d3336203d3e20323639323631.roa (hash: iWsZOmbXg8pDFlYu3jPMQELui2PjsFmvbB/LoUMB6EU=)
                          3: 552EC31E2BF77D7E45084CB7BF9D6C345612ECB6.crl (hash: sp5Cj2VXlFRYaNmrTzwpeRVqvxisneVMVxwK7CmA99w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:9b:ce:6b:39:67:57:fa:8b:b3:55:7b:43:31:6d:63:81:da:a3:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552EC31E2BF77D7E45084CB7BF9D6C345612ECB6
        Validity
            Not Before: Feb 26 16:21:39 2023 GMT
            Not After : Feb 27 16:57:39 2023 GMT
        Subject: CN=E081DA11C5B9EEFFB7F9DDE0F48AE410878FEB3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cd:1b:c2:32:5a:96:fb:5e:b5:c9:26:16:b2:
                    65:52:9f:33:3e:73:de:7a:11:22:be:e4:4c:ac:88:
                    7b:f3:34:cd:0b:2b:0a:aa:19:43:2f:c9:5f:95:17:
                    d6:f2:c4:02:6f:0d:e8:36:3f:5b:a9:12:9c:4c:44:
                    12:92:c5:04:11:95:2a:79:e3:3e:e7:21:f0:64:07:
                    a0:27:10:8a:4f:57:fd:56:55:a2:19:73:d4:f9:cd:
                    55:ab:18:7c:85:ff:a3:38:38:8e:5f:4a:34:0f:aa:
                    a7:ad:b2:45:f3:3a:8a:98:b4:7a:4a:bf:1f:17:84:
                    1f:b1:85:47:35:04:7c:23:75:d2:0a:76:81:fd:ec:
                    93:2d:b2:d1:3e:33:eb:46:d8:fb:ae:ff:50:e6:a8:
                    d9:23:76:08:59:fb:24:83:32:c9:da:65:a6:7b:12:
                    a8:02:61:5c:df:0e:98:8a:57:b5:fc:53:b8:91:18:
                    dc:28:03:70:db:8c:27:6c:7f:df:a6:f7:26:3c:b4:
                    58:6a:2b:7d:89:59:ba:6a:07:99:86:9d:44:86:0b:
                    9f:2f:22:40:c0:cc:2f:3c:5a:6e:15:c3:ff:c4:e6:
                    29:ef:8e:45:6b:6f:21:e7:43:9f:0d:4c:14:8b:c0:
                    f2:37:91:7e:52:d2:ad:39:c9:b5:04:2d:92:f7:d6:
                    30:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:81:DA:11:C5:B9:EE:FF:B7:F9:DD:E0:F4:8A:E4:10:87:8F:EB:3C
            X509v3 Authority Key Identifier:
                keyid:55:2E:C3:1E:2B:F7:7D:7E:45:08:4C:B7:BF:9D:6C:34:56:12:EC:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/552EC31E2BF77D7E45084CB7BF9D6C345612ECB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/552EC31E2BF77D7E45084CB7BF9D6C345612ECB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/552EC31E2BF77D7E45084CB7BF9D6C345612ECB6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:53:98:c0:8c:c1:59:bf:09:1d:29:74:dd:e6:63:63:bf:42:
         6b:f7:ba:63:f3:bc:f5:fe:35:d0:b9:8e:05:4a:f3:96:99:36:
         61:4e:a3:92:d9:e2:bc:5a:7b:78:48:00:de:b6:77:19:7e:d1:
         fa:ea:2f:8e:53:c3:b5:72:ed:0b:ea:57:ef:5f:42:b1:d1:4d:
         6c:f4:f4:f4:9d:7b:87:89:a9:c0:fe:26:17:6d:d4:a4:10:ea:
         68:c1:e0:aa:0c:df:b1:4c:9b:27:68:0c:7b:ca:e9:4b:53:4e:
         ba:17:05:ff:a9:dd:ac:7c:9b:42:8c:e9:08:8d:11:3f:2f:a9:
         b1:31:d9:b5:a8:63:c5:57:b8:c5:8c:fd:dd:99:8f:59:07:dd:
         05:42:2f:da:40:43:1a:87:27:f7:01:ea:69:1b:19:31:ec:ba:
         b7:6e:26:82:d0:b0:14:a2:c9:c8:7a:8b:5e:89:3e:5e:18:ba:
         17:45:09:97:e2:f8:24:4a:a8:18:49:ca:77:03:8d:2b:69:8b:
         88:6e:9b:e3:ed:1a:4a:a2:9e:75:95:a5:7c:7b:66:3b:94:59:
         8a:5a:c2:d9:f9:95:e8:93:39:fe:13:18:df:ee:44:f2:96:b8:
         5e:db:6c:f6:d6:15:fe:16:60:bd:f1:c6:db:12:42:f6:6b:46:
         7b:91:b9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----