Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ELoHNMKJLiPaz6tr74T1JMBJ1WX96cd58MNQduwscVmZ/0/5CB244510FFBA95999265DA22D6A8E7F9D0A8EC9.mft
File:                     5CB244510FFBA95999265DA22D6A8E7F9D0A8EC9.mft (raw, json)
Hash identifier:          qHiJdj+HpKH1T+plTVVN7NHh90CBVZjUB8xiDURdbY0=
Subject key identifier:   FD:F0:E6:28:B2:BE:60:1E:5B:36:51:7C:8B:ED:E1:CB:26:C9:C1:C1
Authority key identifier: 5C:B2:44:51:0F:FB:A9:59:99:26:5D:A2:2D:6A:8E:7F:9D:0A:8E:C9
Certificate issuer:       /CN=5CB244510FFBA95999265DA22D6A8E7F9D0A8EC9
Certificate serial:       5E3F28C30B80DF0BFE53EFDD9025B777B1CDC7EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CB244510FFBA95999265DA22D6A8E7F9D0A8EC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELoHNMKJLiPaz6tr74T1JMBJ1WX96cd58MNQduwscVmZ/0/5CB244510FFBA95999265DA22D6A8E7F9D0A8EC9.mft
Manifest number:          0312
Signing time:             Wed 22 Feb 2023 06:07:58 +0000
Manifest this update:     Wed 22 Feb 2023 06:02:58 +0000
Manifest next update:     Thu 23 Feb 2023 06:57:58 +0000
Files and hashes:         1: 34352e3232352e31322e302f32322d3234203d3e20323636393135.roa (hash: vPeB6ifJYX8kjoUjwcLAwFNdUTJyrb44mEafh8Vko7k=)
                          2: 5CB244510FFBA95999265DA22D6A8E7F9D0A8EC9.crl (hash: FY0pzEp7v3WHGGX5DuKuOQS07GXbyOfUf4KpLao+vpA=)
                          3: 323830343a343534343a3a2f33322d3438203d3e20323636393135.roa (hash: aLViho0jMSzLcjGhD2SA4YRD8I/5jCB6SFBimmZKvhk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:3f:28:c3:0b:80:df:0b:fe:53:ef:dd:90:25:b7:77:b1:cd:c7:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CB244510FFBA95999265DA22D6A8E7F9D0A8EC9
        Validity
            Not Before: Feb 22 06:02:58 2023 GMT
            Not After : Feb 23 06:57:58 2023 GMT
        Subject: CN=FDF0E628B2BE601E5B36517C8BEDE1CB26C9C1C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:89:1c:b0:f9:b7:29:f4:a2:bc:86:72:54:54:
                    07:a1:7e:3d:66:c0:f2:bf:97:80:db:13:4d:af:5e:
                    67:f3:84:6a:61:b8:72:b8:73:e5:be:0c:6b:00:0c:
                    ba:56:f6:4e:bd:1a:d2:a0:0a:0d:5b:82:d4:92:10:
                    43:ef:50:53:f9:72:e3:4a:91:44:1f:e8:cb:92:36:
                    70:b6:c1:56:90:6b:5d:57:12:cf:f1:48:b8:cf:f5:
                    56:eb:78:80:e3:4f:e7:dc:9f:4d:3a:cd:8b:ef:a7:
                    f7:ff:ed:93:85:44:14:42:fa:60:d3:51:32:ed:a5:
                    6c:52:4d:cb:99:58:28:7e:17:ad:31:e7:7b:4a:33:
                    e7:09:e2:65:80:d5:ee:5d:2f:07:e5:b5:64:da:d7:
                    55:f7:6f:18:7e:de:b1:5d:ee:75:a7:88:4d:83:a8:
                    3a:42:9f:df:54:51:2e:ad:93:7e:66:29:cc:0d:6f:
                    d1:d7:4f:3d:13:ed:4d:c9:8b:80:9b:b2:a9:41:18:
                    8f:0a:84:8e:f5:5d:82:ee:67:db:8b:c7:7e:e5:bf:
                    82:05:7c:0e:f8:19:e3:bf:0d:3a:c1:87:2b:d8:70:
                    45:e9:01:92:01:47:a7:4e:db:3c:03:01:08:3c:8a:
                    7d:21:53:db:96:f6:bb:de:06:88:5d:d7:8c:58:3e:
                    63:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F0:E6:28:B2:BE:60:1E:5B:36:51:7C:8B:ED:E1:CB:26:C9:C1:C1
            X509v3 Authority Key Identifier:
                keyid:5C:B2:44:51:0F:FB:A9:59:99:26:5D:A2:2D:6A:8E:7F:9D:0A:8E:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELoHNMKJLiPaz6tr74T1JMBJ1WX96cd58MNQduwscVmZ/0/5CB244510FFBA95999265DA22D6A8E7F9D0A8EC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CB244510FFBA95999265DA22D6A8E7F9D0A8EC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELoHNMKJLiPaz6tr74T1JMBJ1WX96cd58MNQduwscVmZ/0/5CB244510FFBA95999265DA22D6A8E7F9D0A8EC9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:59:6e:b1:55:0a:1e:80:31:ca:59:71:fb:7f:dc:34:74:90:
         67:f6:69:3d:f3:9c:43:99:b4:1c:6b:86:e6:f8:fb:48:85:9e:
         28:cd:1f:ac:97:02:c1:11:69:c0:c8:e5:01:c2:da:b4:18:06:
         02:06:ba:48:e4:4c:49:69:eb:23:4b:9f:9b:93:61:ba:69:db:
         1e:3b:f8:89:f4:a0:e5:36:05:54:3a:cf:27:aa:d0:39:e1:f2:
         90:51:ed:37:18:f4:b0:dd:33:bd:93:0d:d2:d9:ff:ab:f9:7a:
         3b:d8:9d:3a:67:74:a2:2b:b8:80:19:75:6c:84:61:0a:4e:e6:
         a4:61:06:53:ed:c6:01:2a:d0:e5:8b:2c:d8:a8:a6:69:74:76:
         d8:94:64:77:5d:53:75:b7:c5:20:96:8d:bd:f8:30:9a:7b:94:
         3d:3a:2a:fd:0c:da:31:df:1d:50:05:24:45:29:a1:ee:61:03:
         03:fd:c9:05:53:99:57:24:b7:dc:0d:90:d0:2e:a2:b5:bf:e9:
         cc:34:5a:78:93:aa:a5:fd:2f:e3:f0:a1:f9:e8:41:9e:35:9b:
         57:64:54:ff:66:55:e7:61:e8:4b:6c:b0:04:d3:3f:54:db:51:
         c3:b4:38:bb:a7:fd:66:d7:c3:3e:33:26:a5:db:83:6d:f3:fa:
         54:87:1d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----