Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/0/211F2EA499E75BB9BC78B84D5AAA75DDE784939C.mft
File:                     211F2EA499E75BB9BC78B84D5AAA75DDE784939C.mft (raw, json)
Hash identifier:          gLLpSI1H3mgzvMtTtlzP2a6EcR8m+vYEEGGj7P3EiNI=
Subject key identifier:   55:1F:C0:1E:02:53:74:B7:45:EE:1F:95:E7:3F:CB:4B:BF:08:EC:B6
Authority key identifier: 21:1F:2E:A4:99:E7:5B:B9:BC:78:B8:4D:5A:AA:75:DD:E7:84:93:9C
Certificate issuer:       /CN=211F2EA499E75BB9BC78B84D5AAA75DDE784939C
Certificate serial:       25F940F2B3AEFF6F0250C11179459D5788055456
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/211F2EA499E75BB9BC78B84D5AAA75DDE784939C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/0/211F2EA499E75BB9BC78B84D5AAA75DDE784939C.mft
Manifest number:          02DD
Signing time:             Mon 15 Apr 2024 10:00:00 +0000
Manifest this update:     Mon 15 Apr 2024 09:55:00 +0000
Manifest next update:     Tue 16 Apr 2024 13:22:00 +0000
Files and hashes:         1: 3133382e33362e38332e302f32342d3234203d3e20323634353731.roa (hash: zOzGICq9cgGLLQzIS4zvAJ5ASuBxJKAo9MqoG4gE2k0=)
                          2: 211F2EA499E75BB9BC78B84D5AAA75DDE784939C.crl (hash: HPKR0G2wn7Ug1SF6x6Pc3DyhZPfjfyBSo5cPbpM0tE4=)
                          3: 3133382e33362e38322e302f32342d3234203d3e20323634353731.roa (hash: WnYb3xfpm4d6XMcBLH0r6HFOHMKz4d3YtR3ldpe+gbY=)
                          4: 323830343a323163303a3a2f33322d3332203d3e20323634353731.roa (hash: IKEo7IMEy7QRx4Ut66mBSavZfHQSd5D9hMKWBCmGffI=)
                          5: 3133382e33362e38312e302f32342d3234203d3e20323634353731.roa (hash: n6DEf7Q7l0H+1fVya6WNb99y487FXmOURnJ640UEhEc=)
                          6: 3133382e33362e38302e302f32322d3232203d3e20323634353731.roa (hash: NqkP7QinHJSCkPIfjyVDyJnW+RFsVSMkmtz3/5qEE/U=)
                          7: 3133382e33362e38302e302f32342d3234203d3e20323634353731.roa (hash: 2C9AOXFbRExHTuVT/7uPhjLCYPv2U13ODbXJmMaQ0II=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f9:40:f2:b3:ae:ff:6f:02:50:c1:11:79:45:9d:57:88:05:54:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=211F2EA499E75BB9BC78B84D5AAA75DDE784939C
        Validity
            Not Before: Apr 15 09:55:00 2024 GMT
            Not After : Apr 16 13:22:00 2024 GMT
        Subject: CN=551FC01E025374B745EE1F95E73FCB4BBF08ECB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:45:ef:bb:7e:81:c2:ef:16:07:61:4c:8b:09:
                    65:03:f6:9a:34:aa:99:94:1f:71:e2:0c:0c:df:29:
                    bd:5a:68:e3:79:00:4c:1d:f3:28:b5:e1:99:3c:45:
                    b8:86:08:81:d4:a0:e2:c4:21:8f:39:1b:8a:8f:9f:
                    b2:fd:c5:63:0f:bc:2c:0b:fa:59:a0:a9:e7:58:74:
                    42:75:85:2e:a1:c3:20:ec:5d:5a:b9:06:1c:c6:35:
                    ea:29:8a:7f:77:4c:c0:0f:73:33:4b:ae:0a:77:ab:
                    06:66:ce:9b:c5:f0:28:3d:64:ef:f7:9b:bb:e6:f6:
                    02:31:ba:10:53:ca:68:5a:44:69:d2:44:5c:46:63:
                    bd:44:64:60:b8:68:d0:e4:59:3f:76:53:79:72:09:
                    64:5e:79:e6:d4:bf:77:5b:94:ce:b7:b5:20:25:09:
                    e0:fa:17:51:af:6d:80:6b:0d:92:e2:d8:94:0e:be:
                    86:d6:9f:20:e7:db:a3:7b:59:b6:a7:47:b9:0a:00:
                    2f:87:9d:26:00:72:8a:55:d4:03:3f:30:64:5c:03:
                    f7:b0:c8:10:89:2e:b1:e0:bc:0b:a5:2d:c8:b5:01:
                    87:bb:38:c0:0f:1f:03:6c:be:3e:0d:59:e2:4c:bf:
                    1f:9b:af:ba:d9:12:10:bc:83:5c:e3:3d:d9:b6:2e:
                    1b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:1F:C0:1E:02:53:74:B7:45:EE:1F:95:E7:3F:CB:4B:BF:08:EC:B6
            X509v3 Authority Key Identifier:
                keyid:21:1F:2E:A4:99:E7:5B:B9:BC:78:B8:4D:5A:AA:75:DD:E7:84:93:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/0/211F2EA499E75BB9BC78B84D5AAA75DDE784939C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/211F2EA499E75BB9BC78B84D5AAA75DDE784939C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/0/211F2EA499E75BB9BC78B84D5AAA75DDE784939C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:05:10:19:01:b7:e5:20:2c:b9:6c:ba:98:b6:5d:5c:ec:b4:
         d8:46:61:5d:73:9d:75:a0:e3:e2:8a:84:d4:94:3b:a8:a9:26:
         b0:91:9e:71:31:08:84:ee:bb:5a:52:77:2d:74:b7:b5:1b:d0:
         6e:30:82:b6:e9:34:d5:63:a3:b5:b1:9f:97:f2:fb:4f:8e:ba:
         cb:da:b6:46:2e:60:2f:e8:70:0c:89:a0:12:4a:53:8e:65:75:
         09:1e:19:36:14:9d:23:ab:26:b7:8d:49:72:24:de:2b:82:eb:
         e7:77:70:5c:8a:ee:74:5a:68:ae:5d:1a:c7:14:06:e4:79:0f:
         84:f2:37:c2:64:6b:fc:89:a8:a6:85:98:97:37:fc:0b:77:dc:
         0e:d8:89:3e:59:07:3f:bb:af:cb:86:28:aa:26:8c:14:34:85:
         62:8a:b4:81:7e:3e:b3:3e:08:1f:38:9e:5a:d7:f1:e8:86:18:
         70:54:5f:07:8d:03:72:b3:3a:e7:d6:b4:be:06:14:b3:7d:ad:
         92:96:b7:fc:c4:a7:f5:3e:c4:70:f1:30:a6:22:9b:0a:42:19:
         f8:5f:f2:74:8a:b9:c5:bd:23:82:a0:8d:ea:c7:05:f3:3c:9b:
         c1:0e:6d:39:f3:f8:ca:c0:57:f0:79:b9:ed:9a:d1:d8:1f:22:
         f0:26:0e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----