Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3S6JLonNup96iCmUg78XBB9eg7xwL3MvetSDLRd5xvWT/0/2B87B88FB4107377B1B3DA934801B74900693940.mft
File:                     2B87B88FB4107377B1B3DA934801B74900693940.mft (raw, json)
Hash identifier:          SDPuCiOxu7syQQ9LrxavvAjc9qjkkdWhB7YsaaFNLwk=
Subject key identifier:   D0:39:68:C4:EC:24:6B:12:9D:16:B3:82:4B:94:A1:E9:73:DD:F0:21
Authority key identifier: 2B:87:B8:8F:B4:10:73:77:B1:B3:DA:93:48:01:B7:49:00:69:39:40
Certificate issuer:       /CN=2B87B88FB4107377B1B3DA934801B74900693940
Certificate serial:       7338ADDFFB4D938745974B289EC1F60566485617
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B87B88FB4107377B1B3DA934801B74900693940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3S6JLonNup96iCmUg78XBB9eg7xwL3MvetSDLRd5xvWT/0/2B87B88FB4107377B1B3DA934801B74900693940.mft
Manifest number:          54
Signing time:             Mon 15 Apr 2024 06:29:57 +0000
Manifest this update:     Mon 15 Apr 2024 06:24:57 +0000
Manifest next update:     Tue 16 Apr 2024 08:25:57 +0000
Files and hashes:         1: 2B87B88FB4107377B1B3DA934801B74900693940.crl (hash: /a56ifoBZ9IY53BNhp92XGizzlfRz74j+B7zVj6GpaU=)
                          2: 3139302e3131322e3134382e302f32322d3234203d3e20323639373130.roa (hash: hn9HgnuPo6rWRq61K2fN8pGNsOt97XXSF6hohZ8o8fU=)
                          3: 323830343a363862343a3a2f33322d3438203d3e20323639373130.roa (hash: ssCUXOxlio1JyreIcjNE3Q07EJty3Vo+1LG3bYkhql8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:38:ad:df:fb:4d:93:87:45:97:4b:28:9e:c1:f6:05:66:48:56:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B87B88FB4107377B1B3DA934801B74900693940
        Validity
            Not Before: Apr 15 06:24:57 2024 GMT
            Not After : Apr 16 08:25:57 2024 GMT
        Subject: CN=D03968C4EC246B129D16B3824B94A1E973DDF021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:22:84:79:41:89:63:a9:9a:bf:65:b7:bb:28:
                    db:a7:00:d8:dc:6d:fa:eb:69:87:45:34:7e:e9:13:
                    cb:c5:41:75:3c:05:47:b4:ad:f6:c2:0b:08:c5:4e:
                    60:e0:34:3e:af:7e:60:cf:03:b8:7e:5b:aa:7a:bb:
                    d6:89:73:76:fc:2e:b4:48:da:8a:5a:67:28:70:64:
                    2c:4a:37:54:fe:da:07:11:b8:22:7e:09:90:ff:8b:
                    28:03:93:da:06:ec:82:d6:55:9b:60:27:8c:ca:a0:
                    8d:ec:bd:50:bc:51:19:1e:5c:af:0e:01:a0:4f:ce:
                    5a:18:36:99:59:c0:50:20:46:ae:8f:df:b0:dc:3c:
                    79:ae:28:f0:70:61:b5:7a:82:fc:21:a1:ba:6c:c4:
                    7d:2d:f0:4a:24:ec:cb:61:53:a6:1b:34:ea:cd:15:
                    99:bc:50:8c:9e:4c:61:cb:57:59:be:66:5d:38:87:
                    92:ea:38:b7:08:da:37:7b:13:e8:bd:e6:dc:f3:54:
                    66:1a:be:92:9b:2b:3d:31:e9:3a:c9:f1:69:f9:8b:
                    b5:49:76:15:a2:5f:80:ce:8e:ac:50:19:b4:07:18:
                    c5:f7:a0:86:f4:71:06:00:71:2f:70:8d:e6:6a:f1:
                    70:7a:d4:54:c4:c5:0c:13:67:7d:21:f1:4d:66:b6:
                    e4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:39:68:C4:EC:24:6B:12:9D:16:B3:82:4B:94:A1:E9:73:DD:F0:21
            X509v3 Authority Key Identifier:
                keyid:2B:87:B8:8F:B4:10:73:77:B1:B3:DA:93:48:01:B7:49:00:69:39:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3S6JLonNup96iCmUg78XBB9eg7xwL3MvetSDLRd5xvWT/0/2B87B88FB4107377B1B3DA934801B74900693940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B87B88FB4107377B1B3DA934801B74900693940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3S6JLonNup96iCmUg78XBB9eg7xwL3MvetSDLRd5xvWT/0/2B87B88FB4107377B1B3DA934801B74900693940.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:eb:e5:08:e4:70:59:ea:60:af:5a:50:d6:ed:52:d4:f6:41:
         05:56:7d:5a:7c:25:fc:4c:7a:a5:d6:84:81:99:fb:90:e3:f3:
         97:01:0a:5e:e6:8f:3e:7e:69:ca:cc:24:55:27:08:36:85:6b:
         8f:c7:a7:43:8a:ad:6b:4d:d8:cd:bb:ed:d1:58:95:d5:7d:ad:
         35:69:de:f3:b7:82:31:6c:e5:f3:85:92:83:b0:6a:15:bf:a3:
         ee:23:f9:93:50:a7:31:3f:05:92:a2:46:28:8a:31:3a:49:c0:
         33:1a:f1:77:a8:e2:a9:24:95:29:d6:f5:ef:7b:37:bd:c6:25:
         d7:c6:47:9a:df:6c:35:3e:92:77:19:36:c3:8c:1a:93:05:a5:
         e4:51:53:ec:5b:52:de:b7:1b:04:db:99:8f:df:fe:73:73:88:
         a6:1d:60:2a:ac:5a:d3:c0:10:59:e6:3b:00:58:9e:98:f8:a5:
         0a:40:73:0e:4f:bd:17:80:d2:33:80:34:a1:83:3b:d5:ae:c5:
         36:8d:56:41:8f:59:df:b0:fc:e2:3f:a3:ba:8c:21:3b:2c:9c:
         cc:01:f7:b3:3d:4b:31:f1:36:ff:d8:fa:37:eb:1f:78:5b:91:
         87:10:c0:e3:ca:d7:1e:63:af:48:25:23:ae:c0:2f:2d:19:31:
         9a:8a:22:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----