Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/CBF7BBC1E637F8F017C5A051A7EF75CFF8BD34C8.mft
File:                     CBF7BBC1E637F8F017C5A051A7EF75CFF8BD34C8.mft (raw, json)
Hash identifier:          MuSODmIgY+3iB8b+n8CbZk4gliRL57gbpTWmHa0KppM=
Subject key identifier:   58:F2:D8:CC:EF:18:2D:35:EB:93:B8:CF:E9:66:A8:8B:B6:11:23:0D
Authority key identifier: CB:F7:BB:C1:E6:37:F8:F0:17:C5:A0:51:A7:EF:75:CF:F8:BD:34:C8
Certificate issuer:       /CN=CBF7BBC1E637F8F017C5A051A7EF75CFF8BD34C8
Certificate serial:       7384E372BE0BB3B7E96E199E0C1466292720A1B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CBF7BBC1E637F8F017C5A051A7EF75CFF8BD34C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/CBF7BBC1E637F8F017C5A051A7EF75CFF8BD34C8.mft
Manifest number:          023C
Signing time:             Mon 15 Apr 2024 09:47:05 +0000
Manifest this update:     Mon 15 Apr 2024 09:42:05 +0000
Manifest next update:     Tue 16 Apr 2024 13:01:05 +0000
Files and hashes:         1: 323830343a333334343a3a2f33322d313238203d3e20323635333835.roa (hash: z/SkJXc9Y1J6VtL8eIHtuiHy4eEEGogGrXXJEWij/tA=)
                          2: CBF7BBC1E637F8F017C5A051A7EF75CFF8BD34C8.crl (hash: yLba0Gse7cLCDwtvRWW26w0z0SoxhrY28UBJJmaZ3Pc=)
                          3: 3137302e3235342e3234382e302f32322d3332203d3e20323635333835.roa (hash: zHvOXGHFf9UL4J6aOa1F9d9hz/YqWVR78n9SDQSRfQY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:84:e3:72:be:0b:b3:b7:e9:6e:19:9e:0c:14:66:29:27:20:a1:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBF7BBC1E637F8F017C5A051A7EF75CFF8BD34C8
        Validity
            Not Before: Apr 15 09:42:05 2024 GMT
            Not After : Apr 16 13:01:05 2024 GMT
        Subject: CN=58F2D8CCEF182D35EB93B8CFE966A88BB611230D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:28:80:23:64:80:6e:9a:1b:3a:7f:1f:5b:38:
                    ef:ec:ea:a7:ab:a7:98:57:b1:6a:ff:ba:61:5d:3c:
                    e3:de:73:08:03:fe:1c:ca:60:a0:8a:35:15:3a:f4:
                    4a:c8:f7:5a:aa:b0:e4:92:5a:e0:0f:67:0b:fa:c1:
                    a3:26:21:47:3a:cd:8d:56:e5:4c:3f:ba:19:16:8c:
                    79:0c:0c:24:a0:f9:31:9b:fe:44:61:18:43:fc:26:
                    0c:94:80:51:45:2e:6a:d9:39:a9:01:bf:a1:09:61:
                    4c:ce:00:36:d4:63:45:56:3c:29:9d:8b:1e:4e:1e:
                    05:1e:72:1a:95:53:3f:29:e0:74:41:8a:9b:5e:28:
                    ba:3a:0b:d0:b9:b7:20:39:05:2f:c0:92:03:5c:c9:
                    da:a2:1f:a0:8a:45:00:b0:d3:9f:61:51:64:4f:1a:
                    97:ad:30:47:e3:da:88:30:30:49:c7:d8:5b:34:87:
                    51:ba:e9:98:eb:eb:a9:ea:1f:3b:c2:fe:9d:b9:1c:
                    e0:f0:c7:22:6c:00:0e:9c:18:1f:ad:74:6d:2f:c3:
                    86:bc:77:f5:b0:7f:57:bb:71:a8:8e:9a:c4:1f:b4:
                    28:91:55:b7:78:95:56:66:35:dd:e2:d0:ec:c4:0f:
                    00:e3:2a:5e:46:4e:17:f4:6f:60:7c:9b:c8:07:aa:
                    e2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F2:D8:CC:EF:18:2D:35:EB:93:B8:CF:E9:66:A8:8B:B6:11:23:0D
            X509v3 Authority Key Identifier:
                keyid:CB:F7:BB:C1:E6:37:F8:F0:17:C5:A0:51:A7:EF:75:CF:F8:BD:34:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/CBF7BBC1E637F8F017C5A051A7EF75CFF8BD34C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CBF7BBC1E637F8F017C5A051A7EF75CFF8BD34C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/CBF7BBC1E637F8F017C5A051A7EF75CFF8BD34C8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:7a:c2:cf:81:0b:bf:43:f2:54:cd:c4:b0:81:42:26:0b:fe:
         8b:b8:a5:7a:d8:4a:c2:6e:d8:70:44:99:f2:0e:c3:9c:18:b2:
         d1:65:1f:d0:10:e0:a9:2a:31:ba:22:22:17:6e:44:db:bc:44:
         2b:5c:8e:ea:43:d7:91:f4:1b:ef:38:4e:74:3c:c6:2b:c9:bc:
         f6:7c:9a:61:6c:07:2a:59:ac:03:61:e9:82:f9:43:6d:5b:a6:
         71:cf:a6:a0:c4:97:6e:d5:5e:0e:51:41:27:79:02:e9:0a:8a:
         0b:2e:41:f5:5f:4c:f9:80:ee:b7:b9:20:d4:20:54:fa:5a:fd:
         84:10:03:20:30:86:0e:9c:d6:8e:5f:2f:e9:64:9a:f3:96:55:
         df:7f:5c:9c:53:9c:4c:24:eb:cf:8a:95:6d:df:47:89:92:23:
         30:49:bd:ac:fd:e4:63:37:f4:cc:fc:5d:b3:32:42:48:58:16:
         28:a7:20:e8:77:6e:5e:6b:a2:bf:02:88:08:57:a5:ae:92:28:
         1d:13:3e:60:79:91:3f:e1:79:c0:89:de:7f:4f:42:6c:ab:76:
         e6:e5:84:ad:12:3b:32:99:29:65:43:77:06:13:b7:80:90:15:
         d4:9a:2b:1a:59:47:32:ae:6a:e8:ee:ec:b0:de:0d:8d:05:35:
         db:76:1c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----