Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2XPT6igjoPuFGSck2ac3EB4wwnjA8UqHZiTTvDF4EmiY/0/2BD5F5DB3376C3320EEFAAFFEF3A34EEF3F1E933.mft
File:                     2BD5F5DB3376C3320EEFAAFFEF3A34EEF3F1E933.mft (raw, json)
Hash identifier:          WoVDaUAqhlTlNjzLkL6jRNqtKYLlAdDzzmcYt9JOZm4=
Subject key identifier:   A9:CF:F2:D8:8F:80:57:E6:F8:DB:16:98:A3:5F:57:67:2C:62:14:7A
Authority key identifier: 2B:D5:F5:DB:33:76:C3:32:0E:EF:AA:FF:EF:3A:34:EE:F3:F1:E9:33
Certificate issuer:       /CN=2BD5F5DB3376C3320EEFAAFFEF3A34EEF3F1E933
Certificate serial:       516C26F80D986F95AFBDFF55E83ABFDCDA21B7EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BD5F5DB3376C3320EEFAAFFEF3A34EEF3F1E933.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2XPT6igjoPuFGSck2ac3EB4wwnjA8UqHZiTTvDF4EmiY/0/2BD5F5DB3376C3320EEFAAFFEF3A34EEF3F1E933.mft
Manifest number:          026C
Signing time:             Mon 15 Apr 2024 04:01:43 +0000
Manifest this update:     Mon 15 Apr 2024 03:56:43 +0000
Manifest next update:     Tue 16 Apr 2024 04:27:43 +0000
Files and hashes:         1: 323830343a333561303a3a2f33322d3335203d3e20323636323937.roa (hash: 1oQmJIlTmRtGISNeuPT5Aaw1F/AXzgAcuzC0VoBsGco=)
                          2: 3137302e37392e3230342e302f32322d3234203d3e20323636323937.roa (hash: ubClWMJ7Kbn/YgZmQHILn5GvyetniPJuvOwOBeqkjmw=)
                          3: 2BD5F5DB3376C3320EEFAAFFEF3A34EEF3F1E933.crl (hash: 6l+/J+4QdZAvPneiGoynSw8qPqR5+xYERxnud8T0Bmg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:6c:26:f8:0d:98:6f:95:af:bd:ff:55:e8:3a:bf:dc:da:21:b7:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BD5F5DB3376C3320EEFAAFFEF3A34EEF3F1E933
        Validity
            Not Before: Apr 15 03:56:43 2024 GMT
            Not After : Apr 16 04:27:43 2024 GMT
        Subject: CN=A9CFF2D88F8057E6F8DB1698A35F57672C62147A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:86:45:41:d7:3a:0f:ff:28:5c:d3:ea:41:44:
                    b6:cc:f9:58:b6:b0:3f:ac:90:4a:4e:06:b6:5e:af:
                    55:e7:90:65:c4:92:da:a3:7f:7f:92:e7:59:f8:50:
                    4b:b6:49:84:f0:01:0d:03:65:a9:db:8b:67:db:10:
                    f4:a3:b6:f3:3d:b8:24:06:94:80:9c:0d:e2:18:f2:
                    1e:aa:de:fb:d5:f5:fd:06:1f:7b:f8:73:c8:b8:4f:
                    c1:97:52:9a:eb:db:7a:e2:66:1d:66:be:57:de:ba:
                    f9:0c:15:75:a0:4f:e8:aa:61:fa:04:70:70:c2:b2:
                    9f:51:22:01:b4:82:50:e7:1d:3f:85:62:e2:18:f3:
                    07:2a:4f:8b:45:99:4c:dd:55:16:22:f4:4a:29:06:
                    38:f8:8e:a6:1c:f1:65:7f:38:8c:62:60:9e:71:f6:
                    3f:f6:59:9b:70:ec:c2:a3:c7:de:1b:3c:32:0e:ae:
                    12:dc:f9:e4:70:a7:c5:38:ca:0c:75:14:de:2a:1f:
                    ea:a7:2b:e3:fb:42:cd:df:ca:d8:b9:98:45:32:9b:
                    b3:6e:d8:dd:40:40:c2:92:f8:f8:49:ec:f9:d2:bc:
                    4e:83:02:7c:9b:0e:75:69:0e:13:81:bf:cb:2d:1c:
                    3c:9d:cd:47:de:df:70:be:da:2c:f8:9a:32:6a:88:
                    6a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:CF:F2:D8:8F:80:57:E6:F8:DB:16:98:A3:5F:57:67:2C:62:14:7A
            X509v3 Authority Key Identifier:
                keyid:2B:D5:F5:DB:33:76:C3:32:0E:EF:AA:FF:EF:3A:34:EE:F3:F1:E9:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2XPT6igjoPuFGSck2ac3EB4wwnjA8UqHZiTTvDF4EmiY/0/2BD5F5DB3376C3320EEFAAFFEF3A34EEF3F1E933.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BD5F5DB3376C3320EEFAAFFEF3A34EEF3F1E933.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XPT6igjoPuFGSck2ac3EB4wwnjA8UqHZiTTvDF4EmiY/0/2BD5F5DB3376C3320EEFAAFFEF3A34EEF3F1E933.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:fb:7c:0a:2d:f4:29:b0:74:9d:d7:9b:7d:39:1f:97:e5:4f:
         e3:d8:2f:4c:99:f3:9a:0b:ab:93:d9:06:eb:2b:94:92:4e:e4:
         e3:95:2d:0e:46:ba:72:6b:fb:25:63:14:c3:2a:f9:8e:8c:7d:
         bd:45:50:ff:6a:85:14:f7:71:0e:47:d0:99:d1:69:b6:b8:41:
         65:f4:b7:69:25:9c:c8:f8:d4:5e:3b:c9:85:6d:de:b7:54:82:
         d1:a9:8d:dc:d4:a3:fc:fb:76:5d:81:12:8a:1b:d9:e2:6e:0b:
         3c:d2:71:ed:df:8a:01:46:e8:9a:71:5c:b4:f6:09:aa:fc:e0:
         3a:75:e4:54:8b:a1:22:f3:81:ea:27:8c:f8:3b:1a:d0:63:38:
         c2:78:af:9d:37:3f:fe:91:72:5a:bb:2f:d5:4c:22:00:b5:87:
         c5:bc:a5:1a:0f:d8:ef:a8:42:c2:5c:fc:49:a3:97:fa:18:e8:
         41:5d:b4:20:5c:5f:7c:a0:b5:6c:be:34:b4:27:a3:22:d5:46:
         33:e9:3d:4a:5b:46:78:f8:9d:af:5c:d0:02:31:29:f5:88:86:
         c5:65:76:16:1e:ec:d7:79:f8:be:72:76:58:e5:f3:9f:e4:a8:
         b6:f1:a9:c4:7b:3c:3e:9d:e9:e0:73:89:8c:9c:87:ef:fb:ad:
         21:b7:16:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----