Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/0/30927BB169705D61DFE4973ACED55565431260B1.mft
File:                     30927BB169705D61DFE4973ACED55565431260B1.mft (raw, json)
Hash identifier:          77nOklfxlOSpLe9OVVHk+YemgCifYazGI+8mfSZ4F+Y=
Subject key identifier:   44:26:02:4E:3F:D3:1B:97:C6:9C:58:56:87:AC:B2:36:FB:B5:8B:0D
Authority key identifier: 30:92:7B:B1:69:70:5D:61:DF:E4:97:3A:CE:D5:55:65:43:12:60:B1
Certificate issuer:       /CN=30927BB169705D61DFE4973ACED55565431260B1
Certificate serial:       4FB7E33B7BFC358789A6CFD1C782BB5C2C30C7BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30927BB169705D61DFE4973ACED55565431260B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/0/30927BB169705D61DFE4973ACED55565431260B1.mft
Manifest number:          0277
Signing time:             Mon 15 Apr 2024 08:57:28 +0000
Manifest this update:     Mon 15 Apr 2024 08:52:28 +0000
Manifest next update:     Tue 16 Apr 2024 09:23:28 +0000
Files and hashes:         1: 3230302e3130372e3232302e302f32322d3234203d3e20323730323539.roa (hash: prLyjS4qUqn+utCfT6JQBMnNjeWPn36gGKWvPsFLj7M=)
                          2: 323830343a363934343a3a2f33322d3438203d3e20323730323539.roa (hash: muteuUlxvbNufhHYgV7SZe9BQoQbkYeHqPE2E9aQ2YU=)
                          3: 30927BB169705D61DFE4973ACED55565431260B1.crl (hash: TzqxS9yiu4Bt5YoxjRomSEtSU9ttKwxzvq9wzjtZ4xk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:b7:e3:3b:7b:fc:35:87:89:a6:cf:d1:c7:82:bb:5c:2c:30:c7:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30927BB169705D61DFE4973ACED55565431260B1
        Validity
            Not Before: Apr 15 08:52:28 2024 GMT
            Not After : Apr 16 09:23:28 2024 GMT
        Subject: CN=4426024E3FD31B97C69C585687ACB236FBB58B0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:71:2c:9e:76:eb:42:a5:1b:dc:4a:79:df:32:
                    56:5a:62:b9:03:5f:fb:fa:24:7c:65:e5:6d:e6:ea:
                    b6:9e:c2:00:d4:c0:4f:6e:ca:02:16:c0:4c:cd:86:
                    0f:7f:99:60:25:83:01:98:7a:a6:73:a6:2f:d7:2c:
                    91:b5:24:21:f6:8f:8d:b2:b0:dc:33:e5:b3:67:04:
                    32:f3:07:d7:0a:19:af:92:d6:89:53:b6:c4:9f:7b:
                    95:fe:21:87:a4:6d:e7:83:ab:4a:f7:77:f4:e1:78:
                    f4:f8:58:3f:90:87:0a:2e:ac:e0:08:79:c5:a3:0f:
                    63:ce:45:8a:3c:ef:45:36:52:a0:31:83:42:05:d6:
                    0e:96:df:84:37:53:0f:db:d7:19:59:d5:f6:39:45:
                    af:c8:38:13:0e:d0:b6:61:5a:d7:e5:67:4e:87:b0:
                    9c:a4:7a:8d:9d:47:df:1f:d1:79:a6:08:b8:15:f8:
                    01:1e:5e:a7:8a:38:bf:94:5d:67:b0:32:92:8d:6b:
                    51:7a:14:de:59:f8:f7:b6:d9:8e:f5:37:5c:bc:65:
                    e5:33:b1:d0:ad:fa:29:56:fc:22:9d:c7:d0:0d:c4:
                    22:5c:26:40:b1:6a:f8:a9:b2:64:b8:d6:aa:46:d3:
                    40:49:34:49:7d:fd:64:20:d7:1a:a0:41:79:a0:d6:
                    8f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:26:02:4E:3F:D3:1B:97:C6:9C:58:56:87:AC:B2:36:FB:B5:8B:0D
            X509v3 Authority Key Identifier:
                keyid:30:92:7B:B1:69:70:5D:61:DF:E4:97:3A:CE:D5:55:65:43:12:60:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/0/30927BB169705D61DFE4973ACED55565431260B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30927BB169705D61DFE4973ACED55565431260B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/0/30927BB169705D61DFE4973ACED55565431260B1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:99:d1:3a:1b:03:1d:0e:36:b4:b1:60:91:6a:8d:d6:a2:8c:
         03:6b:8f:af:6c:da:f1:b4:af:87:ba:2c:f4:f8:d9:8d:66:87:
         73:a6:2c:a5:fd:3a:20:e8:e9:e4:38:0c:a5:d4:5a:c3:a5:21:
         1f:0c:20:ea:0a:b6:0c:59:84:8f:f2:b4:6f:fc:bc:c8:5c:91:
         38:e2:12:2f:e0:e5:7e:7c:eb:1c:0c:98:ad:c6:b5:4e:88:0b:
         6b:94:ec:10:a0:07:4a:ab:6f:be:00:cf:92:d0:75:2e:6f:f4:
         ff:4e:0d:15:52:f2:68:10:b4:2a:cd:f6:7d:2f:7b:09:e8:72:
         0c:01:9b:6a:01:91:69:5c:9e:d9:25:11:70:18:1f:12:62:02:
         5b:94:b3:ed:8b:5b:f1:e5:c5:57:36:18:c2:7e:c3:59:3f:9b:
         2e:8d:3b:d3:69:7d:e6:26:0a:99:83:1e:07:19:97:32:db:63:
         32:97:93:9d:0c:70:ce:8a:0d:af:97:c7:1e:d9:b6:f2:33:d7:
         d3:34:47:0c:e0:b9:46:4f:a5:9a:7c:72:a5:91:11:11:45:39:
         f6:bb:42:c6:ee:5a:de:e4:1f:d2:ef:03:32:dd:52:98:30:d3:
         92:61:54:21:17:75:1e:23:4c:1e:92:b9:91:df:e5:56:a5:d2:
         97:91:c8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----