Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/D08E998E45DEDF758C6FC949F0779ACF97402CB5.mft
File:                     D08E998E45DEDF758C6FC949F0779ACF97402CB5.mft (raw, json)
Hash identifier:          abQfDL0NZFyMM7lV1zDNIUtvf4XoiUvxP9gA2NoP1iU=
Subject key identifier:   02:C7:95:E1:3F:4B:71:06:A7:5B:9F:87:06:DB:BC:93:1D:6D:9A:17
Authority key identifier: D0:8E:99:8E:45:DE:DF:75:8C:6F:C9:49:F0:77:9A:CF:97:40:2C:B5
Certificate issuer:       /CN=D08E998E45DEDF758C6FC949F0779ACF97402CB5
Certificate serial:       29BE2C3D8AFCB96875FF4CEF6D742A38D1CECE88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D08E998E45DEDF758C6FC949F0779ACF97402CB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/D08E998E45DEDF758C6FC949F0779ACF97402CB5.mft
Manifest number:          4A
Signing time:             Sun 14 Apr 2024 12:11:22 +0000
Manifest this update:     Sun 14 Apr 2024 12:06:22 +0000
Manifest next update:     Mon 15 Apr 2024 15:23:22 +0000
Files and hashes:         1: 323830343a363137303a3a2f33322d313238203d3e20323639323334.roa (hash: av4u2xJuz/h11a7mDsdqkeGvx9JepjZ/YJ624Q/zcB8=)
                          2: D08E998E45DEDF758C6FC949F0779ACF97402CB5.crl (hash: eWMYkmaGczMIlqtA+EFWZzWsOblnSgIs3cEgSYtcw1U=)
                          3: 34352e3138322e37362e302f32322d3332203d3e20323639323334.roa (hash: UkUvuQ3h0q3xFosrM4B+3fHBynkWCXQNIl0b+AUro0A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:be:2c:3d:8a:fc:b9:68:75:ff:4c:ef:6d:74:2a:38:d1:ce:ce:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D08E998E45DEDF758C6FC949F0779ACF97402CB5
        Validity
            Not Before: Apr 14 12:06:22 2024 GMT
            Not After : Apr 15 15:23:22 2024 GMT
        Subject: CN=02C795E13F4B7106A75B9F8706DBBC931D6D9A17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ab:ff:6b:f4:99:59:1a:dc:61:48:27:2d:cb:
                    48:9d:4c:ab:b8:50:8f:f7:95:78:df:af:5d:cb:6a:
                    14:db:55:91:52:84:a9:42:41:66:68:c8:ba:d1:23:
                    6f:57:3d:fd:7e:9a:c7:31:3e:2c:47:e3:75:cb:03:
                    2c:15:c8:67:5c:c6:c8:44:11:cf:eb:4c:d4:b6:1a:
                    23:00:9b:1d:0b:f7:78:6b:db:2d:d0:46:d6:6a:b4:
                    ff:b6:f9:bd:0d:52:1c:f1:6e:ce:bb:a7:46:56:27:
                    b1:6b:2d:ff:eb:73:98:ee:79:e0:d3:96:4b:86:ba:
                    67:80:cd:b5:70:96:07:b1:0a:f0:ea:1f:07:18:e1:
                    64:ec:84:98:44:69:3c:78:f0:be:99:5c:65:8e:53:
                    51:96:08:84:ca:ba:48:43:2e:1c:67:2f:5f:fb:32:
                    24:09:cd:1e:71:1a:3b:ab:df:e6:b2:48:35:e3:c2:
                    74:d6:51:cd:91:3d:f9:9a:06:b8:b7:ad:b4:f1:9a:
                    7a:ca:1a:e3:15:a6:86:36:fa:1b:7d:63:72:42:8a:
                    71:a7:27:44:6e:c3:47:29:16:a2:e5:8c:89:66:0b:
                    82:ba:76:10:08:90:3a:ef:6e:77:82:8f:88:0f:04:
                    73:73:d9:d1:92:03:33:01:e8:02:7f:01:67:b9:fc:
                    58:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C7:95:E1:3F:4B:71:06:A7:5B:9F:87:06:DB:BC:93:1D:6D:9A:17
            X509v3 Authority Key Identifier:
                keyid:D0:8E:99:8E:45:DE:DF:75:8C:6F:C9:49:F0:77:9A:CF:97:40:2C:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/D08E998E45DEDF758C6FC949F0779ACF97402CB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D08E998E45DEDF758C6FC949F0779ACF97402CB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/D08E998E45DEDF758C6FC949F0779ACF97402CB5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:8d:4f:d2:75:69:f1:86:ee:bf:92:3d:a5:e9:d0:55:3a:56:
         3e:1f:10:de:00:47:b5:84:1d:35:ad:be:1f:fc:d2:86:77:d4:
         05:1c:8d:89:74:36:43:74:ff:04:fb:2e:f8:aa:6c:b1:f6:32:
         c0:88:78:e2:69:c8:a0:a6:71:fb:e3:0c:85:b6:6a:ce:ce:e7:
         b5:cb:b8:be:7d:b0:e5:c2:20:b2:0a:d0:d9:af:27:c1:40:f0:
         26:dd:44:fc:d6:d4:40:53:9c:5b:cc:88:d0:44:3d:d9:b9:1a:
         90:36:8f:f7:e2:6f:97:1a:fa:95:eb:ce:c3:18:67:46:cc:27:
         b3:80:da:14:98:0e:c0:da:a5:a7:74:60:c0:9a:1b:93:ea:40:
         e7:88:6e:6b:c4:93:b4:5f:87:54:e2:0e:61:58:60:79:44:2a:
         fe:a1:28:78:23:41:bd:57:58:b7:9b:73:15:e6:83:5b:50:60:
         dc:35:57:70:1f:e5:34:77:8e:2a:e3:d2:c4:c3:17:67:e5:ed:
         c0:5a:a8:32:28:05:ed:c8:5e:8f:a6:9d:d7:a7:e5:c5:06:33:
         29:40:14:47:a2:de:88:8c:da:7b:74:45:0a:91:5b:69:0a:58:
         53:26:7e:11:bc:dc:ac:16:13:00:7f:41:98:3b:66:c9:7b:45:
         60:f6:6c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----