Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/1/C2E87513F90F19827CFF91ECAD417BF0F1ABBBDD.mft
File:                     C2E87513F90F19827CFF91ECAD417BF0F1ABBBDD.mft (raw, json)
Hash identifier:          PAVKz0uVMDTuL8FHPbjcJuf2IYUmBgEVmHXtOdRuXos=
Subject key identifier:   08:5F:3A:25:F1:38:31:92:98:4D:26:0E:41:F0:A6:6C:D1:F1:AE:E9
Authority key identifier: C2:E8:75:13:F9:0F:19:82:7C:FF:91:EC:AD:41:7B:F0:F1:AB:BB:DD
Certificate issuer:       /CN=C2E87513F90F19827CFF91ECAD417BF0F1ABBBDD
Certificate serial:       2A5587287AE38AC10E94CD62418A0195AAA978EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2E87513F90F19827CFF91ECAD417BF0F1ABBBDD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/1/C2E87513F90F19827CFF91ECAD417BF0F1ABBBDD.mft
Manifest number:          D6
Signing time:             Tue 05 Dec 2023 07:47:08 +0000
Manifest this update:     Tue 05 Dec 2023 07:42:08 +0000
Manifest next update:     Wed 06 Dec 2023 11:12:08 +0000
Files and hashes:         1: 3137372e37302e3136302e302f32302d3234203d3e203533303139.roa (hash: rZThk1GOEIEeUs7qQWFfQCotLOVkEqdiXw0K+8byCiU=)
                          2: C2E87513F90F19827CFF91ECAD417BF0F1ABBBDD.crl (hash: yDHYXcNTy45r+NGTrRFl7BoYLAoibNAB1xsJJ7Mwz4E=)
                          3: 323830343a3564633a3a2f33322d3438203d3e203533303139.roa (hash: a5YO0M67sh9YGIcXf/e97jG6+ZDzbKi7zmTW8z5H0xI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:55:87:28:7a:e3:8a:c1:0e:94:cd:62:41:8a:01:95:aa:a9:78:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2E87513F90F19827CFF91ECAD417BF0F1ABBBDD
        Validity
            Not Before: Dec  5 07:42:08 2023 GMT
            Not After : Dec  6 11:12:08 2023 GMT
        Subject: CN=085F3A25F1383192984D260E41F0A66CD1F1AEE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1a:33:00:00:08:de:8d:8a:8e:54:1c:56:f8:
                    4b:8e:df:ca:da:40:2a:ac:e7:ba:2a:68:6e:07:f6:
                    4d:e0:a7:00:70:8a:9f:bc:53:84:88:5c:62:2c:30:
                    8d:1c:f3:bc:60:2b:14:c4:8e:f9:78:53:1d:4e:15:
                    70:c2:34:80:a0:26:96:6c:94:71:99:03:21:45:08:
                    bb:f3:a9:cf:66:72:84:03:74:3b:67:42:f8:3f:fb:
                    01:17:31:b4:8c:e2:98:e9:e3:a5:f6:9e:b5:3c:2d:
                    bd:99:07:49:d9:bf:2c:30:b9:4f:ae:0b:5e:26:ab:
                    5a:84:0f:bf:a0:d3:b1:5d:f0:2e:f9:fa:b0:51:35:
                    38:51:fe:5b:9e:26:75:1e:2a:2e:37:36:7f:e9:d4:
                    93:46:7d:b5:44:7f:48:83:d7:39:3c:c9:d8:9c:fb:
                    c7:45:82:c1:b3:af:4d:55:a5:32:3d:7d:d3:55:a9:
                    d0:ac:4d:ce:b9:f6:3a:7e:91:11:29:4c:75:ca:49:
                    68:a2:04:94:8c:f2:06:c3:c1:54:d7:2b:e8:d9:04:
                    54:e1:6a:d7:f9:ab:19:a6:6f:8a:e5:28:5f:a4:2a:
                    5c:26:28:ec:85:98:95:8e:a6:1c:22:03:d1:7c:e5:
                    28:cb:39:9f:47:36:b9:63:05:a8:69:d8:c4:bf:38:
                    5c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:5F:3A:25:F1:38:31:92:98:4D:26:0E:41:F0:A6:6C:D1:F1:AE:E9
            X509v3 Authority Key Identifier:
                keyid:C2:E8:75:13:F9:0F:19:82:7C:FF:91:EC:AD:41:7B:F0:F1:AB:BB:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/1/C2E87513F90F19827CFF91ECAD417BF0F1ABBBDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2E87513F90F19827CFF91ECAD417BF0F1ABBBDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/1/C2E87513F90F19827CFF91ECAD417BF0F1ABBBDD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:1e:b9:17:a2:ff:e1:1d:d8:27:e8:e6:d2:b7:d8:ce:fd:12:
         db:f3:02:cd:08:75:9f:e3:b6:ab:f9:33:c3:e7:26:8d:19:b2:
         6f:89:7f:68:e9:76:90:a4:b8:91:e8:59:73:c3:75:f3:af:2b:
         54:b8:41:29:52:c5:a5:b8:0d:f3:eb:7f:bf:77:45:ae:55:af:
         19:b2:b5:b5:ee:b4:fc:d0:22:b2:c1:c7:b0:ed:e4:a6:00:1f:
         3f:7e:04:1c:9b:41:06:12:2d:2b:b0:a6:0a:8b:92:9b:ed:8e:
         93:78:f8:c9:5b:83:18:55:94:50:f1:77:a5:d0:db:15:d2:57:
         bf:b2:89:66:2a:ec:cc:3f:61:0d:f8:d3:fd:1b:b7:18:28:5d:
         d2:c6:2d:f9:d3:62:95:bd:4c:fd:1e:5c:f9:35:dd:12:49:cd:
         35:4a:6d:7d:a7:bd:52:72:50:8e:72:ed:34:41:3e:7b:7d:7e:
         ce:ba:24:67:a6:98:f9:7b:7d:69:d9:78:48:e3:c3:43:c9:5a:
         43:cd:f3:f9:8a:d3:91:b0:3f:0e:90:75:13:cb:5d:8c:d5:ea:
         a3:d3:c8:89:bc:c6:41:3f:5e:1f:77:5a:ba:67:5a:d4:a1:93:
         a7:cd:08:6b:3e:b5:c9:2a:66:84:90:f5:ba:7f:54:6a:86:4e:
         6d:ea:11:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----