Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/2B7410E96445484E31D8CA6B9453554810501CE8.mft
File:                     2B7410E96445484E31D8CA6B9453554810501CE8.mft (raw, json)
Hash identifier:          cfis8zINNHjF0jhdlxP4/1Mi2cqM8/Wl1NumPkeajtk=
Subject key identifier:   BD:BC:0A:7F:49:E7:49:C4:3B:84:0D:F7:B1:F5:44:80:42:54:47:F4
Authority key identifier: 2B:74:10:E9:64:45:48:4E:31:D8:CA:6B:94:53:55:48:10:50:1C:E8
Certificate issuer:       /CN=2B7410E96445484E31D8CA6B9453554810501CE8
Certificate serial:       46A89AF799A22D37D28FDFFB91A2637618906FB5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B7410E96445484E31D8CA6B9453554810501CE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/2B7410E96445484E31D8CA6B9453554810501CE8.mft
Manifest number:          3E
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
Manifest this update:     Sun 14 Apr 2024 23:55:00 +0000
Manifest next update:     Tue 16 Apr 2024 00:00:00 +0000
Files and hashes:         1: 323830343a373362303a3a2f33322d3438203d3e20323730393331.roa (hash: xYsYxasp4xctEg3QRQBJyja2H3EPZTiqmi7VDzHtgfg=)
                          2: 3230302e3134322e3232342e302f32322d3234203d3e20323730393331.roa (hash: l+LmvZyc6I1FTpAXqGF1XwqX0H0CUPDncyKWnDLw60Q=)
                          3: 2B7410E96445484E31D8CA6B9453554810501CE8.crl (hash: LZul6BAMIFQlt/IFHk5/icAaVzFAqR8UvHbXUPgC9ao=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:a8:9a:f7:99:a2:2d:37:d2:8f:df:fb:91:a2:63:76:18:90:6f:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B7410E96445484E31D8CA6B9453554810501CE8
        Validity
            Not Before: Apr 14 23:55:00 2024 GMT
            Not After : Apr 22 00:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:27:90:8e:29:a2:cb:62:79:f0:55:70:6f:d1:
                    c7:35:d3:23:96:a0:48:1d:fe:bc:7a:b7:98:c5:c0:
                    3e:fa:20:e7:c2:48:9e:8b:e4:ce:47:bd:6f:54:f9:
                    0b:f1:19:df:17:9a:81:3c:fb:af:01:42:e4:6e:4c:
                    94:4d:be:d8:85:7a:ac:61:33:21:6f:b6:df:f6:64:
                    b3:37:75:1e:68:64:14:78:3f:50:aa:e0:f7:45:e5:
                    a3:11:ab:9e:46:e1:e9:62:e8:13:4b:e5:0c:c2:dc:
                    d7:18:4c:21:c0:78:ad:67:c4:01:d8:76:8a:34:43:
                    98:56:f8:6a:4a:e8:1d:83:5e:d4:cb:63:8e:3e:f8:
                    07:04:e6:85:a4:18:33:3d:99:8c:26:c8:05:31:6b:
                    69:91:99:bf:1b:b9:46:6a:0e:2a:69:00:0e:43:fa:
                    ed:6f:31:fa:05:3f:3c:18:65:16:6a:4f:19:c9:c0:
                    9b:09:bd:80:75:fe:38:41:01:17:88:98:32:2a:36:
                    90:b8:cf:75:b3:e0:10:67:52:6b:b7:6e:99:30:81:
                    b6:a0:e6:9b:a1:97:96:9c:c6:66:c3:eb:1c:86:22:
                    43:2e:a5:9a:5b:d0:09:a1:b6:4b:8e:1d:41:db:43:
                    c3:54:19:87:5b:eb:cc:df:1c:aa:25:b1:93:af:89:
                    6e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:BC:0A:7F:49:E7:49:C4:3B:84:0D:F7:B1:F5:44:80:42:54:47:F4
            X509v3 Authority Key Identifier:
                keyid:2B:74:10:E9:64:45:48:4E:31:D8:CA:6B:94:53:55:48:10:50:1C:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/2B7410E96445484E31D8CA6B9453554810501CE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B7410E96445484E31D8CA6B9453554810501CE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/2B7410E96445484E31D8CA6B9453554810501CE8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:a0:25:f6:d1:b5:b7:55:c2:e1:c9:f4:e7:23:e6:c9:22:a4:
         55:8a:9d:e3:9d:79:eb:bb:9f:20:17:6b:72:37:06:a2:bc:a0:
         40:73:a6:9a:42:05:9c:b0:9c:49:63:0d:43:ad:0a:15:7e:0b:
         e7:73:7f:5f:5f:e5:b4:ce:ba:8a:0d:f3:2b:6b:7c:dc:5a:d0:
         f9:5b:0f:63:3c:c7:1a:3a:1e:2f:ef:8a:a8:62:a3:0a:1d:65:
         39:c5:98:07:20:23:cf:00:b3:8e:75:20:a3:a9:c9:a3:be:cb:
         da:e9:30:e6:f1:ec:a8:b9:06:7e:38:de:50:08:c9:ae:07:32:
         5f:a9:b6:00:5c:15:06:c3:a1:10:cd:9d:4b:75:e5:40:41:7e:
         ac:21:fc:6e:66:42:0a:26:92:00:2c:2a:ff:70:66:71:96:41:
         87:9e:02:87:a1:14:2e:7e:81:44:5e:2c:64:d1:33:41:d0:f1:
         3c:1e:33:81:7d:c3:c2:95:8f:db:54:5a:9a:02:e1:4d:3e:25:
         17:f6:51:32:bf:e1:f8:5b:a4:2e:5b:01:93:9f:2e:54:8c:85:
         d1:20:5e:a3:52:6b:8d:15:07:00:70:dc:39:cb:c3:f8:bf:fd:
         03:78:bc:d7:f3:ac:1f:5d:0e:f8:a4:4d:9c:f4:a6:b1:64:d3:
         4f:88:42:00
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----