Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/2DDB5A9ECD2CC0565753C38F6A772170A3461002.mft
File:                     2DDB5A9ECD2CC0565753C38F6A772170A3461002.mft (raw, json)
Hash identifier:          hDgfzn+b8B1hEg/mX7DGkU3jQR5swAwiqRne3k4onPE=
Subject key identifier:   43:62:82:20:3F:F3:96:2F:2E:B1:C4:80:AE:ED:C4:04:2D:6B:B8:F0
Authority key identifier: 2D:DB:5A:9E:CD:2C:C0:56:57:53:C3:8F:6A:77:21:70:A3:46:10:02
Certificate issuer:       /CN=2DDB5A9ECD2CC0565753C38F6A772170A3461002
Certificate serial:       722C369A3249D7211ABDAB286A02805DEF1C8D4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DDB5A9ECD2CC0565753C38F6A772170A3461002.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/2DDB5A9ECD2CC0565753C38F6A772170A3461002.mft
Manifest number:          36
Signing time:             Mon 15 Apr 2024 11:04:58 +0000
Manifest this update:     Mon 15 Apr 2024 10:59:58 +0000
Manifest next update:     Tue 16 Apr 2024 14:15:58 +0000
Files and hashes:         1: 3137302e37392e3133322e302f32322d3234203d3e20323636323933.roa (hash: UVVFvLIjkPKIcqve5jKGPsXzv1Ii50hTkzkc3BjViMk=)
                          2: 323830343a333538633a3a2f33322d3332203d3e20323636323933.roa (hash: zObtUZbcetEwnzArwrHZ2W0mlIy6i4gI5E+fVDTrAT0=)
                          3: 2DDB5A9ECD2CC0565753C38F6A772170A3461002.crl (hash: dnV7GGAXUPeAnc64JvyMQzp87H9PMluyq9PBlYVg6fI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:2c:36:9a:32:49:d7:21:1a:bd:ab:28:6a:02:80:5d:ef:1c:8d:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DDB5A9ECD2CC0565753C38F6A772170A3461002
        Validity
            Not Before: Apr 15 10:59:58 2024 GMT
            Not After : Apr 16 14:15:58 2024 GMT
        Subject: CN=436282203FF3962F2EB1C480AEEDC4042D6BB8F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:14:57:fa:28:3e:c1:fe:11:ca:7d:83:48:4a:
                    e5:63:f3:20:01:42:cb:0a:5a:89:27:9a:8a:1a:11:
                    fb:65:0c:06:d2:30:26:9c:16:74:c7:33:17:8a:c9:
                    d9:6c:2a:46:d2:b3:1d:45:53:09:29:18:35:f5:00:
                    df:5e:9a:13:e4:bc:59:04:33:5d:9b:80:88:34:ec:
                    3f:a8:a3:a0:4a:e6:34:9d:da:49:70:fb:8b:9c:9c:
                    74:a9:d4:01:34:d8:d2:19:48:42:5e:24:e7:83:8b:
                    42:6f:12:33:3d:a2:ef:b2:7e:4d:aa:dc:5f:8e:ce:
                    22:26:7c:10:dd:cb:b1:3d:39:cd:0d:a6:13:4a:b0:
                    2a:11:ae:a6:7f:12:52:3e:13:05:11:c7:23:c6:a9:
                    29:4c:ac:4b:30:ad:4c:3f:0d:14:bd:9d:1b:f0:26:
                    21:52:00:28:72:c5:5e:e7:58:6e:f4:39:c4:ee:ba:
                    eb:07:13:3c:56:03:7c:7b:01:64:69:1a:e0:dd:b6:
                    f7:38:26:87:d7:71:2e:34:f1:aa:1a:ff:4d:5e:c0:
                    e7:87:8c:96:7a:86:f1:c9:b1:35:c5:b7:92:51:4f:
                    a7:fe:e3:49:b0:58:8b:2e:23:02:36:80:32:37:2c:
                    6f:58:32:2c:12:f8:73:7f:86:f4:df:47:bd:13:ac:
                    07:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:62:82:20:3F:F3:96:2F:2E:B1:C4:80:AE:ED:C4:04:2D:6B:B8:F0
            X509v3 Authority Key Identifier:
                keyid:2D:DB:5A:9E:CD:2C:C0:56:57:53:C3:8F:6A:77:21:70:A3:46:10:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/2DDB5A9ECD2CC0565753C38F6A772170A3461002.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DDB5A9ECD2CC0565753C38F6A772170A3461002.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/2DDB5A9ECD2CC0565753C38F6A772170A3461002.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:08:10:fc:64:1d:fa:67:b4:78:82:56:7d:6c:12:3a:aa:80:
         45:7b:45:0b:aa:ac:e1:ac:1a:ee:fe:8d:64:1e:08:65:28:78:
         82:33:e4:be:bf:1c:10:96:84:8e:2f:25:86:6c:64:ba:9e:6b:
         c0:51:68:7f:99:47:67:61:ea:b4:17:29:fe:a0:f7:5c:37:a1:
         7b:f4:d2:9a:01:ae:d3:40:de:76:43:a3:e2:05:d7:e6:51:f6:
         ba:12:e6:7a:59:8f:2c:e4:e9:11:95:6c:7e:a3:2a:98:fe:9e:
         d0:e3:c0:e8:bf:c1:ae:3b:9a:93:d3:d2:0f:84:ab:53:39:23:
         69:98:45:41:a7:f9:27:b5:14:0f:5e:16:42:48:de:9d:f7:a8:
         55:91:b3:5c:37:e7:93:71:27:56:9e:98:43:48:ee:3e:62:3b:
         ea:03:7f:df:3e:a9:60:84:5f:7a:24:3e:aa:dd:ee:80:08:98:
         bd:4c:c0:54:93:b1:b1:90:fc:48:5e:56:05:b9:96:bc:9c:ac:
         7f:8c:5b:cd:02:95:de:fa:09:75:8e:69:9b:bc:ce:c3:56:2a:
         21:b0:ee:52:e2:f1:07:eb:65:8f:ec:b1:5f:c3:a6:9b:65:2d:
         a2:db:16:27:a7:3e:60:c1:a1:16:ed:cc:28:49:5b:d5:a4:b0:
         dd:6e:28:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----