Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/2B53696444942411AB4D957C2F70BA54A48B1189.mft
File:                     2B53696444942411AB4D957C2F70BA54A48B1189.mft (raw, json)
Hash identifier:          p/qq/U9Yjy48pXZCNCmTyvPzgShbWzZcqFQuoiMAlEU=
Subject key identifier:   20:23:15:E9:BD:AF:9B:A9:50:38:DD:1B:8D:07:47:CD:9A:68:DE:12
Authority key identifier: 2B:53:69:64:44:94:24:11:AB:4D:95:7C:2F:70:BA:54:A4:8B:11:89
Certificate issuer:       /CN=2B53696444942411AB4D957C2F70BA54A48B1189
Certificate serial:       652A394D0C7A813DDEC1E90C9106977169C5D3C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B53696444942411AB4D957C2F70BA54A48B1189.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/2B53696444942411AB4D957C2F70BA54A48B1189.mft
Manifest number:          02D4
Signing time:             Sun 14 Apr 2024 21:02:37 +0000
Manifest this update:     Sun 14 Apr 2024 20:57:37 +0000
Manifest next update:     Mon 15 Apr 2024 23:01:37 +0000
Files and hashes:         1: 3137372e35332e3230382e302f32322d3234203d3e20323731333130.roa (hash: n1qGvbynK76YupHPuK+ueBrzEg/eC3L/0CgbitMaQGI=)
                          2: 323830343a373938343a3a2f33322d3438203d3e20323731333130.roa (hash: UiITOCRLIA0pRrqVlQe6ZI+SBlWhpuVkeIPPGS+0N0c=)
                          3: 2B53696444942411AB4D957C2F70BA54A48B1189.crl (hash: rSOZnNSx4FC89j6bU5AzWbUYB3cjyTW4L6WrCH7VN6c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:2a:39:4d:0c:7a:81:3d:de:c1:e9:0c:91:06:97:71:69:c5:d3:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B53696444942411AB4D957C2F70BA54A48B1189
        Validity
            Not Before: Apr 14 20:57:37 2024 GMT
            Not After : Apr 15 23:01:37 2024 GMT
        Subject: CN=202315E9BDAF9BA95038DD1B8D0747CD9A68DE12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0a:17:8c:ea:91:b1:be:df:8b:28:3f:31:82:
                    54:ba:83:75:15:7d:e2:c3:ec:6b:c0:4b:2f:6b:db:
                    a4:12:78:5d:c7:2d:2f:29:37:cb:7b:f3:5f:d8:ca:
                    db:54:02:09:91:21:e8:b2:24:2c:1f:5e:ba:a6:78:
                    37:8b:23:98:26:29:0b:98:7b:7a:19:3d:67:cd:f9:
                    10:26:a9:53:c7:cb:a5:d5:07:d0:45:2a:b8:4a:82:
                    bb:95:e4:83:e7:b2:81:f2:5f:1c:5c:3d:73:d7:a6:
                    bd:4a:bb:1b:54:fe:b2:23:2c:7a:79:43:42:5c:7e:
                    b9:db:24:c3:e5:fe:e7:96:2b:91:26:36:4c:e1:24:
                    d1:63:4f:aa:4c:6f:c5:d8:9b:94:ef:91:ad:84:da:
                    71:61:3a:ed:7e:7f:dd:2c:ea:61:5b:72:a2:f0:9a:
                    b0:b6:27:e7:05:26:d6:69:f0:5e:dd:d5:97:f4:c6:
                    1a:d6:65:00:71:7f:b9:38:ab:88:0d:68:ae:7f:63:
                    de:32:5f:d8:0e:d9:a1:e9:1e:a8:c7:41:9b:bc:2c:
                    5e:0f:4c:70:12:5d:f2:a2:10:ba:00:a9:f7:e6:42:
                    d7:30:52:aa:f1:8d:da:37:1a:63:25:e3:ff:62:0a:
                    8c:f1:cb:98:a7:07:3f:d3:66:94:36:b3:4a:f9:81:
                    27:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:23:15:E9:BD:AF:9B:A9:50:38:DD:1B:8D:07:47:CD:9A:68:DE:12
            X509v3 Authority Key Identifier:
                keyid:2B:53:69:64:44:94:24:11:AB:4D:95:7C:2F:70:BA:54:A4:8B:11:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/2B53696444942411AB4D957C2F70BA54A48B1189.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B53696444942411AB4D957C2F70BA54A48B1189.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/2B53696444942411AB4D957C2F70BA54A48B1189.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:7e:e1:78:27:7e:4b:cf:4f:0b:86:4d:f4:46:83:da:aa:0e:
         93:ea:ad:31:a4:5e:04:42:4b:59:ff:60:fe:bc:f5:bf:c1:43:
         0f:b0:52:43:c2:ed:5d:a8:be:07:71:ac:35:3e:d6:1a:1e:9c:
         c2:0c:42:23:83:14:3d:5d:4e:37:df:d7:27:92:c2:43:98:82:
         f6:fe:2f:63:89:15:d4:8d:b0:9b:a8:b5:58:e1:89:8a:bd:97:
         a5:c2:8d:47:54:bf:92:41:f5:d1:5f:e5:04:e6:6d:74:db:ed:
         68:d1:3e:fb:f3:ec:6d:75:31:f3:ae:9b:0e:41:98:9d:8e:63:
         91:da:35:d3:da:63:76:ea:89:83:8d:a2:a7:0a:02:83:1d:fa:
         93:27:01:df:4f:f7:58:ee:da:ae:1d:8c:35:3d:94:9a:e3:e5:
         00:cc:5e:c0:12:fb:c6:c5:86:8a:1e:01:ba:87:d2:3d:f9:1c:
         d5:7d:ea:e2:ff:d5:d7:42:2d:eb:df:fb:1e:5c:64:11:b7:9b:
         24:8f:a9:4e:4b:7d:44:6d:47:e2:12:3d:98:de:63:f7:0a:e4:
         99:67:a9:69:9b:38:44:dd:14:02:76:94:a9:53:42:c2:14:b6:
         13:a3:b0:c0:d0:5b:b2:41:59:0a:04:02:b5:9b:33:6b:40:9c:
         3c:e4:b9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----