Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/0/2F6207BEED9A5C774E3034E6317D1A06D13E2ABF.mft
File:                     2F6207BEED9A5C774E3034E6317D1A06D13E2ABF.mft (raw, json)
Hash identifier:          VrbqO8ovozwsrJpBHzGCEx3Hit9qEKw37tIJphx+xRw=
Subject key identifier:   C8:AC:07:A7:08:1A:24:CC:DA:F0:98:4B:12:AA:65:EE:C1:A3:D5:E7
Authority key identifier: 2F:62:07:BE:ED:9A:5C:77:4E:30:34:E6:31:7D:1A:06:D1:3E:2A:BF
Certificate issuer:       /CN=2F6207BEED9A5C774E3034E6317D1A06D13E2ABF
Certificate serial:       35380D01306C0660414AB429DB0888C2B6E9D1C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F6207BEED9A5C774E3034E6317D1A06D13E2ABF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/0/2F6207BEED9A5C774E3034E6317D1A06D13E2ABF.mft
Manifest number:          032C
Signing time:             Mon 15 Apr 2024 06:39:45 +0000
Manifest this update:     Mon 15 Apr 2024 06:34:45 +0000
Manifest next update:     Tue 16 Apr 2024 08:42:45 +0000
Files and hashes:         1: 3138372e34392e3138302e302f32322d3234203d3e20323730353131.roa (hash: o1bFZuWgoHSg1CkxkKn4i1tYmWDlpj6ilZTxKj/+yY4=)
                          2: 2F6207BEED9A5C774E3034E6317D1A06D13E2ABF.crl (hash: 2Yd9NuPcR0J2qpC8N2jnaE3bQRgEnzjb9VjYeU67lb0=)
                          3: 323830343a366431343a3a2f33322d3438203d3e20323730353131.roa (hash: +fcUyp9pwgFO0ddqkTvqNdJNi7T6TWXBbIu1SNzbN24=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:38:0d:01:30:6c:06:60:41:4a:b4:29:db:08:88:c2:b6:e9:d1:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F6207BEED9A5C774E3034E6317D1A06D13E2ABF
        Validity
            Not Before: Apr 15 06:34:45 2024 GMT
            Not After : Apr 16 08:42:45 2024 GMT
        Subject: CN=C8AC07A7081A24CCDAF0984B12AA65EEC1A3D5E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0b:90:81:f4:9f:1d:cd:b9:d1:18:d3:49:97:
                    a9:51:5d:28:a7:94:7a:63:ea:5f:73:83:6b:79:cf:
                    32:6f:dd:07:7e:f3:93:72:16:14:e0:fa:0b:54:cf:
                    92:c7:61:bd:5b:9e:0a:fe:c2:6e:84:8e:e8:f6:dd:
                    3b:08:f5:f9:2b:91:7f:d5:a9:c4:53:51:1e:a5:41:
                    72:8e:96:23:00:95:13:19:a7:46:84:1b:1f:ed:5f:
                    93:71:5c:09:73:51:ca:0a:8b:a2:d0:82:0a:b6:92:
                    80:0f:84:72:51:fd:30:09:9c:ff:0a:d8:db:24:6b:
                    0d:8c:9e:75:0d:e4:61:d7:5c:56:78:a2:82:ec:06:
                    1c:50:35:4b:04:8b:20:03:e2:f8:5b:f7:e6:98:8b:
                    24:b1:80:10:e8:27:0d:0e:35:8a:36:2c:70:bf:94:
                    ad:75:04:09:4a:c7:95:7d:04:59:80:a1:da:da:9c:
                    23:b8:47:99:2f:1e:21:52:e7:bd:0c:ca:33:84:9f:
                    b2:d5:16:80:86:6b:fc:d8:d3:cb:2b:7c:18:6b:1d:
                    f8:ab:29:11:0c:bb:68:f5:38:bb:55:95:90:1f:b0:
                    0a:09:04:4e:fe:bd:d2:6a:e2:ab:6b:56:53:27:1a:
                    ff:87:a7:1b:f9:98:91:d4:d7:ee:45:6b:e1:5c:fd:
                    9f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:AC:07:A7:08:1A:24:CC:DA:F0:98:4B:12:AA:65:EE:C1:A3:D5:E7
            X509v3 Authority Key Identifier:
                keyid:2F:62:07:BE:ED:9A:5C:77:4E:30:34:E6:31:7D:1A:06:D1:3E:2A:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/0/2F6207BEED9A5C774E3034E6317D1A06D13E2ABF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F6207BEED9A5C774E3034E6317D1A06D13E2ABF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/0/2F6207BEED9A5C774E3034E6317D1A06D13E2ABF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:fa:e9:0d:2a:55:1a:7f:39:9c:f2:55:a3:00:93:4b:dd:6a:
         9b:0b:4f:9c:c0:c5:ce:8c:69:18:ab:cc:22:78:be:a9:55:2a:
         64:83:1b:41:59:03:5c:b9:c8:74:76:1b:9a:4a:12:75:22:0f:
         ae:c5:0f:7e:92:91:9e:46:0a:cd:d0:39:91:de:77:6e:65:f8:
         9e:8b:64:43:b2:01:d3:1f:fa:6c:fe:7a:bf:9f:1b:33:5d:96:
         0c:2d:ad:99:bb:20:32:49:27:0b:c4:f5:02:92:91:c2:59:33:
         c4:d1:12:63:71:1e:f0:61:ee:1c:fb:00:05:c4:51:35:c6:14:
         63:b7:69:14:c1:ec:9b:80:68:10:ee:60:a2:20:19:d7:5e:54:
         65:e2:97:6f:9f:4d:b2:49:ca:90:68:b6:0a:0a:b7:e6:64:ad:
         61:a0:4f:5c:c0:a9:4e:f1:f7:93:d9:eb:3d:88:22:ce:88:84:
         13:8b:35:1e:50:7d:ac:73:10:f6:36:0e:d8:a5:ca:b3:b4:67:
         2f:ef:8a:9e:9e:13:11:93:1f:f1:02:9d:c3:90:00:c9:f0:90:
         27:17:dc:af:f1:6b:b1:12:b5:0a:06:86:04:a0:ba:a6:4b:7b:
         f0:4e:30:95:03:70:3c:77:aa:94:16:70:f5:51:37:78:61:5f:
         9b:94:77:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----