Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/E8F1gZavUZe1v2WFdJotuKoMPjG5zLgdfzFDhMVBggTd/0/2A276491E950744A9FBA35D7BC3D32A5EAB1EB9C.mft
File:                     2A276491E950744A9FBA35D7BC3D32A5EAB1EB9C.mft (raw, json)
Hash identifier:          uFQTPkIg+KhjyYHxJGRX9PNJ6Ttc77BzPtodj1/hddY=
Subject key identifier:   FC:E9:4C:68:CC:AE:7F:4A:9C:5C:BE:20:EA:C7:F7:5B:32:AF:B3:9C
Authority key identifier: 2A:27:64:91:E9:50:74:4A:9F:BA:35:D7:BC:3D:32:A5:EA:B1:EB:9C
Certificate issuer:       /CN=2A276491E950744A9FBA35D7BC3D32A5EAB1EB9C
Certificate serial:       6529C15B79FFD7967ADA456FDE526D83195F0668
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A276491E950744A9FBA35D7BC3D32A5EAB1EB9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E8F1gZavUZe1v2WFdJotuKoMPjG5zLgdfzFDhMVBggTd/0/2A276491E950744A9FBA35D7BC3D32A5EAB1EB9C.mft
Manifest number:          34
Signing time:             Mon 15 Apr 2024 00:10:07 +0000
Manifest this update:     Mon 15 Apr 2024 00:05:07 +0000
Manifest next update:     Tue 16 Apr 2024 00:22:07 +0000
Files and hashes:         1: 2A276491E950744A9FBA35D7BC3D32A5EAB1EB9C.crl (hash: ceGOk01FQHNNpVgGwBtOP78Fg/Wo0LsQaSR19PcCEto=)
                          2: 323830343a386630633a3a2f33322d313238203d3e20323733343634.roa (hash: XObGerXNuYTA7B5v2TGMt/jCw2w7Vav5cdke945VbCs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:29:c1:5b:79:ff:d7:96:7a:da:45:6f:de:52:6d:83:19:5f:06:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A276491E950744A9FBA35D7BC3D32A5EAB1EB9C
        Validity
            Not Before: Apr 15 00:05:07 2024 GMT
            Not After : Apr 16 00:22:07 2024 GMT
        Subject: CN=FCE94C68CCAE7F4A9C5CBE20EAC7F75B32AFB39C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b8:92:aa:b9:88:3d:2c:d5:28:fa:b7:c1:b6:
                    8b:3a:2d:f1:93:17:2a:ce:50:ed:93:f6:67:23:33:
                    13:31:5e:dd:05:b1:50:ae:5f:2c:3f:1c:63:48:cd:
                    0f:5e:9a:cc:c0:b7:9b:df:18:e5:30:92:5d:ba:00:
                    68:9e:a9:13:35:de:fc:12:88:a5:1a:73:3e:e5:24:
                    42:67:a2:dd:02:05:e5:ac:26:b0:26:eb:ad:b4:38:
                    09:08:cc:ec:92:95:9c:94:80:89:1a:b9:b8:53:93:
                    46:f5:ae:a9:1a:a8:f0:5a:f5:58:68:d9:85:2f:f6:
                    a6:67:da:66:fb:f6:f6:a0:f0:b3:18:a7:39:be:b8:
                    d5:24:b8:65:46:af:dd:aa:78:2e:4c:64:72:e5:74:
                    61:b0:38:58:f1:2a:2e:72:33:78:4f:c7:bd:d8:a1:
                    72:c4:8a:62:e3:f9:5c:b6:d3:dd:3b:db:9e:c6:78:
                    7d:e6:6b:62:88:c9:59:f7:7a:c8:f4:22:99:10:27:
                    a9:74:5c:69:42:90:62:50:9e:1c:bb:d3:91:e2:17:
                    4c:85:c8:65:65:39:57:d6:10:c9:7f:cd:10:62:a0:
                    5b:59:c8:d9:a4:6d:67:87:dc:a3:44:ec:9f:32:f7:
                    bd:bc:88:78:b7:14:e4:35:07:8b:ec:bd:36:f5:a0:
                    f5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E9:4C:68:CC:AE:7F:4A:9C:5C:BE:20:EA:C7:F7:5B:32:AF:B3:9C
            X509v3 Authority Key Identifier:
                keyid:2A:27:64:91:E9:50:74:4A:9F:BA:35:D7:BC:3D:32:A5:EA:B1:EB:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E8F1gZavUZe1v2WFdJotuKoMPjG5zLgdfzFDhMVBggTd/0/2A276491E950744A9FBA35D7BC3D32A5EAB1EB9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A276491E950744A9FBA35D7BC3D32A5EAB1EB9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E8F1gZavUZe1v2WFdJotuKoMPjG5zLgdfzFDhMVBggTd/0/2A276491E950744A9FBA35D7BC3D32A5EAB1EB9C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:d2:fd:03:a6:a6:c5:b9:7b:cc:91:7f:d7:94:4d:21:db:0a:
         df:31:ff:36:00:0a:a5:c7:d4:41:f7:29:7f:e9:d0:35:f1:6c:
         d5:7c:c3:35:a8:ac:4a:a0:57:42:a0:40:34:4c:1a:ff:a5:8f:
         43:ce:8c:e0:39:36:6d:7f:89:df:59:ae:1f:85:dd:95:22:bd:
         90:48:37:48:3b:e1:36:8f:69:14:cf:ad:eb:01:f8:8f:5a:e7:
         e2:71:d4:9a:f7:15:3f:e5:21:f6:5d:c1:33:42:56:42:e8:51:
         2d:2b:12:b2:ff:a7:a3:43:05:c6:ec:5b:c7:e8:f5:24:db:bb:
         3c:6f:f2:e1:01:3f:85:14:00:33:ee:3d:2c:29:9c:7c:cc:b0:
         85:b0:5e:26:2e:ef:15:27:ab:26:d5:7c:2d:e8:45:7d:a4:a6:
         39:d6:be:0a:00:ea:95:0a:3e:46:b3:f0:17:5b:77:48:a0:f4:
         62:50:cb:28:df:71:11:37:c8:af:97:c6:8b:a8:b4:74:41:58:
         03:89:42:df:75:4f:b4:57:4f:c8:c2:8a:f6:ef:0d:c8:34:a0:
         78:2d:af:e7:5a:1f:75:e6:d2:f6:c4:0d:2b:d7:0a:74:a9:e4:
         d7:89:bd:78:4e:cb:2d:46:ee:7e:56:33:0e:16:de:0b:b8:b6:
         ca:1f:98:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----