Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/4E2A07900C1635D03D636966EC6804E4924FDB0E.mft
File:                     4E2A07900C1635D03D636966EC6804E4924FDB0E.mft (raw, json)
Hash identifier:          k2hcNZzO5IWxFwJzp/rXONxzthlB1MXCkMqz1qn0Hv0=
Subject key identifier:   84:4F:6D:D7:E4:DF:0F:25:93:44:4F:F3:13:04:A4:07:A8:E9:7D:DC
Authority key identifier: 4E:2A:07:90:0C:16:35:D0:3D:63:69:66:EC:68:04:E4:92:4F:DB:0E
Certificate issuer:       /CN=4E2A07900C1635D03D636966EC6804E4924FDB0E
Certificate serial:       1202F749D50863FC0C8BDAACAFE4BB78E791B3FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E2A07900C1635D03D636966EC6804E4924FDB0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/4E2A07900C1635D03D636966EC6804E4924FDB0E.mft
Manifest number:          2B
Signing time:             Wed 14 Feb 2024 02:53:58 +0000
Manifest this update:     Wed 14 Feb 2024 02:48:58 +0000
Manifest next update:     Thu 15 Feb 2024 04:39:58 +0000
Files and hashes:         1: 323830343a376433633a333030303a3a2f33362d3336203d3e20323731353438.roa (hash: HFjYt6rLvRgrZIYekDr52hCys7TZqQhj8BhOZioj05s=)
                          2: 3138312e3137342e3231322e302f32322d3234203d3e20323731353438.roa (hash: WwMaLSbkQTfnWEc/CjrL7kHPqQwGG3dkPpqdAB8Euy4=)
                          3: 4E2A07900C1635D03D636966EC6804E4924FDB0E.crl (hash: IvCkkyDURRKv7HMi+abiFIzkjOk+6TxwHu6WNiNuXqg=)
                          4: 323830343a376433633a3a2f33362d3336203d3e20323731353438.roa (hash: w3xClmX7L8SgOBLEBFtekva1etx7GyANbBsGcVjxWmY=)
                          5: 323830343a376433633a313030303a3a2f33362d3336203d3e20323731353438.roa (hash: iHrfmV/ZR74O5csedP5Nsw7tPEz5okh9ULlqnpSE+eo=)
                          6: 323830343a376433633a343030303a3a2f33362d3336203d3e20323731353438.roa (hash: O+s7aIweWe2Kk05bNPkCoYBkG37D0XWsacU8BTKSe9k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:02:f7:49:d5:08:63:fc:0c:8b:da:ac:af:e4:bb:78:e7:91:b3:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E2A07900C1635D03D636966EC6804E4924FDB0E
        Validity
            Not Before: Feb 14 02:48:58 2024 GMT
            Not After : Feb 15 04:39:58 2024 GMT
        Subject: CN=844F6DD7E4DF0F2593444FF31304A407A8E97DDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5e:1c:b2:31:3b:77:91:d3:de:d7:92:fd:17:
                    ec:72:9d:14:fe:ac:79:87:a7:c4:d8:72:91:f8:52:
                    e7:6c:77:4a:a8:e9:59:14:ea:30:04:86:b3:6e:d5:
                    dc:cf:9d:81:a7:16:b2:36:d1:b1:c3:46:f7:4a:cf:
                    1a:0e:2b:90:d2:65:5c:43:9e:13:40:9d:e4:d4:6b:
                    bb:5d:34:b0:85:0c:b3:06:79:77:1b:17:0b:f2:7a:
                    75:f4:a3:d8:17:77:59:1d:c8:fa:50:a1:f5:30:e9:
                    56:30:e4:84:eb:37:85:70:e8:9b:e5:b1:ba:44:9e:
                    a1:53:e2:59:91:8d:9c:81:03:34:3b:cd:83:f7:c5:
                    7b:10:a7:7e:c9:13:d1:ce:b0:bf:49:79:12:8a:32:
                    25:a4:0d:6e:eb:5d:84:a6:f5:c5:16:ae:03:e5:f8:
                    60:fd:e0:16:22:2a:d5:52:2c:d2:c4:95:5b:c4:99:
                    eb:e2:15:ac:04:07:5a:6c:79:ce:23:08:28:c2:f4:
                    30:21:88:91:3b:30:ee:26:83:98:b5:a6:f8:2e:50:
                    45:c8:50:a5:69:7c:b6:b5:64:d3:8f:cf:0d:cf:df:
                    75:e0:93:ec:53:8f:35:28:cf:ea:c6:07:c1:89:e4:
                    2c:3a:0b:9c:e9:57:d7:32:77:bc:7c:a7:92:13:63:
                    5c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:4F:6D:D7:E4:DF:0F:25:93:44:4F:F3:13:04:A4:07:A8:E9:7D:DC
            X509v3 Authority Key Identifier:
                keyid:4E:2A:07:90:0C:16:35:D0:3D:63:69:66:EC:68:04:E4:92:4F:DB:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/4E2A07900C1635D03D636966EC6804E4924FDB0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E2A07900C1635D03D636966EC6804E4924FDB0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/4E2A07900C1635D03D636966EC6804E4924FDB0E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:c5:e1:d1:9c:d7:d6:18:e2:22:5e:0d:d0:85:ba:d4:e6:45:
         38:c7:1f:08:95:bd:11:92:74:5c:e8:48:1b:aa:49:97:54:c3:
         97:f0:2e:94:8a:b9:10:80:f5:dc:af:22:a8:ee:99:74:7e:07:
         fa:99:a6:1b:3c:53:e6:b5:b7:b8:99:f1:be:ec:b2:ee:ae:89:
         bc:bb:19:e1:5f:af:be:84:79:de:7d:b4:33:3b:3e:99:fa:57:
         18:7e:09:07:2c:cf:c0:7f:88:d0:d2:dc:9e:aa:34:26:b5:a2:
         6a:03:ac:8c:86:89:5f:15:48:f7:c0:47:43:8c:79:eb:08:a4:
         93:f3:f3:06:c2:84:60:b8:21:bc:e8:50:b1:3c:66:2c:a0:0e:
         2b:90:44:4c:d0:26:f8:6f:ac:e2:ad:d7:5f:74:2a:c4:8d:d1:
         89:40:e7:9e:48:de:f7:25:96:c0:17:d9:f5:f2:8d:2c:d4:a7:
         a1:23:b1:87:75:8d:fb:5c:0a:ee:08:d5:0b:8d:7d:82:f8:a7:
         a3:21:4a:f7:59:c3:95:5d:45:94:d4:8c:89:46:74:fc:33:bc:
         b6:c1:a1:6e:1a:01:81:ef:c8:67:d8:70:2c:f8:51:67:f8:a3:
         d5:e3:8b:b4:8d:e8:b4:31:c4:56:d1:cd:a4:76:9a:06:15:98:
         76:d4:85:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----