Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/0/0249D40E0D1F259C584F5A52FCB768DD9F6D7982.mft
File:                     0249D40E0D1F259C584F5A52FCB768DD9F6D7982.mft (raw, json)
Hash identifier:          KkpFMYBhQEp29t0dm24C1bPjgLwO7/bzRoZUOnH1x9I=
Subject key identifier:   3C:02:3F:32:34:30:3E:29:FE:3F:5D:B0:BB:68:16:6E:6E:2D:C4:CA
Authority key identifier: 02:49:D4:0E:0D:1F:25:9C:58:4F:5A:52:FC:B7:68:DD:9F:6D:79:82
Certificate issuer:       /CN=0249D40E0D1F259C584F5A52FCB768DD9F6D7982
Certificate serial:       2F3A98AFC17CC0E16A7C610E23AAE978EEC459FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0249D40E0D1F259C584F5A52FCB768DD9F6D7982.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/0/0249D40E0D1F259C584F5A52FCB768DD9F6D7982.mft
Manifest number:          27
Signing time:             Sun 14 Apr 2024 21:33:52 +0000
Manifest this update:     Sun 14 Apr 2024 21:28:52 +0000
Manifest next update:     Tue 16 Apr 2024 09:57:52 +0000
Files and hashes:         1: 3134332e3133372e3135322e302f32322d3332203d3e20323634303432.roa (hash: aDhSYj4oTztHgTm38LMyptPim87FylmdwPIqPntJwwY=)
                          2: 323830343a323965343a3a2f33322d313238203d3e20323634303432.roa (hash: aXd6wERwcLef6ceCqfTuEZ3Cu0tzOU5R5tdVNipvf38=)
                          3: 0249D40E0D1F259C584F5A52FCB768DD9F6D7982.crl (hash: ziD4tDbk9dzTrRBmZ3eLUzJAQs1P416MBzRk241ixdc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:3a:98:af:c1:7c:c0:e1:6a:7c:61:0e:23:aa:e9:78:ee:c4:59:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0249D40E0D1F259C584F5A52FCB768DD9F6D7982
        Validity
            Not Before: Apr 14 21:28:52 2024 GMT
            Not After : Apr 16 09:57:52 2024 GMT
        Subject: CN=3C023F3234303E29FE3F5DB0BB68166E6E2DC4CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:63:31:b0:e1:76:8f:68:76:8b:5f:63:3e:3f:
                    42:67:b1:ff:19:1c:de:d8:e7:47:12:65:bd:e6:c4:
                    46:04:ab:48:eb:15:79:cb:8c:f4:b3:7d:c5:24:f3:
                    cf:c9:48:c1:4f:0c:20:f2:fd:c5:11:2d:48:60:5d:
                    79:fe:e2:87:37:98:dd:7e:2a:90:5b:65:17:25:7e:
                    5d:b3:f4:70:b9:6d:12:0c:1a:27:d8:4b:6c:77:b9:
                    27:9d:77:01:69:ac:1e:9c:06:f4:46:90:44:31:a4:
                    1f:a2:c7:79:02:f8:8c:25:f1:74:60:ac:16:e0:aa:
                    1c:b3:0e:26:74:46:3a:61:a1:0c:02:fa:fb:4b:89:
                    32:48:b9:52:d6:6f:94:c0:e4:1f:1d:7f:e9:11:d2:
                    a0:51:c0:fe:48:e3:f8:d3:37:00:cb:b7:bd:3a:92:
                    a1:ab:56:aa:88:d6:9e:f7:09:d5:7a:cf:70:40:0c:
                    d2:65:15:2c:ae:77:d1:b0:78:8c:ef:94:e1:1f:39:
                    35:44:83:05:43:12:5b:9b:a0:a2:25:14:07:bd:e1:
                    57:92:68:69:f1:29:e6:8d:71:c1:45:b9:99:c9:1b:
                    18:a3:d2:7a:11:a7:48:6c:5a:1b:19:8b:6d:f6:20:
                    0c:57:43:c9:37:15:9c:03:0d:b3:05:72:c6:35:7f:
                    c4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:02:3F:32:34:30:3E:29:FE:3F:5D:B0:BB:68:16:6E:6E:2D:C4:CA
            X509v3 Authority Key Identifier:
                keyid:02:49:D4:0E:0D:1F:25:9C:58:4F:5A:52:FC:B7:68:DD:9F:6D:79:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/0/0249D40E0D1F259C584F5A52FCB768DD9F6D7982.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0249D40E0D1F259C584F5A52FCB768DD9F6D7982.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/0/0249D40E0D1F259C584F5A52FCB768DD9F6D7982.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:b0:35:08:1c:7b:c7:62:b8:6d:8b:b7:37:b7:1b:42:74:1c:
         6b:99:0a:9a:87:1a:4c:8e:24:5b:2f:31:9b:8c:0a:e4:e9:1b:
         e3:23:06:76:a7:46:92:27:82:03:7d:56:84:04:14:a7:b2:bc:
         9d:20:12:ad:f2:9c:ac:4a:e1:da:59:13:39:9b:8d:5a:21:91:
         97:15:23:85:bc:9c:68:09:7a:96:d5:f6:87:03:80:d5:18:8c:
         0f:62:35:46:fe:30:e8:70:2c:f3:a8:58:00:6f:24:3e:08:b4:
         ed:a8:dc:b1:65:47:10:83:cb:bd:0b:44:69:3d:65:70:0e:24:
         9d:2e:93:6b:59:c1:45:e0:58:25:78:44:1a:0c:54:6f:02:19:
         16:3f:60:f8:27:4e:c6:2a:b4:3c:f8:bd:77:81:6d:7a:cf:cf:
         8d:1e:ef:4e:a1:b1:7d:7a:a0:4b:96:64:63:12:72:ec:2e:56:
         4f:5b:81:78:fb:83:fc:9b:29:40:d0:c8:24:da:18:2a:6c:38:
         bb:e5:9e:2b:fa:f1:5e:49:03:5d:2d:5e:fb:8b:45:98:8d:44:
         dd:a9:ed:89:a4:db:fd:4a:23:d6:d7:7c:3b:30:81:b1:08:25:
         3b:75:c1:2f:47:29:57:29:e6:b9:c6:63:88:9e:40:8e:b4:b1:
         f4:5a:30:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----