Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/1/2BE96A9D00DF227936266A4035089C530868CA3A.mft
File:                     2BE96A9D00DF227936266A4035089C530868CA3A.mft (raw, json)
Hash identifier:          QJ2L0zh9BzOaO0qusSlg1TU1/zy2wC3yF5q4SUB7+Rk=
Subject key identifier:   73:1E:33:B3:2C:49:FC:53:7E:BF:B8:B2:E9:60:04:A7:9C:AE:EB:EC
Authority key identifier: 2B:E9:6A:9D:00:DF:22:79:36:26:6A:40:35:08:9C:53:08:68:CA:3A
Certificate issuer:       /CN=2BE96A9D00DF227936266A4035089C530868CA3A
Certificate serial:       272A628177D71AF7886AC881C55BC9394CBAD3C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BE96A9D00DF227936266A4035089C530868CA3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/1/2BE96A9D00DF227936266A4035089C530868CA3A.mft
Manifest number:          E8
Signing time:             Mon 23 Sep 2024 13:29:53 +0000
Manifest this update:     Mon 23 Sep 2024 13:24:53 +0000
Manifest next update:     Tue 24 Sep 2024 17:12:53 +0000
Files and hashes:         1: 3230302e302e36342e302f32342d3234203d3e20323730343631.roa (hash: kxiZQDKF0ASi3P4WSSxLHhT5/mO1oQPl3T7OdsqSEPI=)
                          2: 2BE96A9D00DF227936266A4035089C530868CA3A.crl (hash: IV16om5D2HqCJPf+ZnnRC146DVXpDC1w2Qb8NecLDMs=)
                          3: 323830343a373737383a3a2f33322d3332203d3e20323731313830.roa (hash: e58AYYQq52xySadab1cut7FwB/ziu0M9ekofmfbkAvQ=)
                          4: 323830343a373737383a3130303a3a2f34302d3430203d3e20323731313830.roa (hash: WM+m6bPgxasipkdejrAXMhDkDUfeOxTu3KektoUS95o=)
                          5: 3230302e3132352e3132392e302f32342d3234203d3e20323731313830.roa (hash: 9VwH8zVCd7ViXw3E8Ige1HlVCSwLWX7XJ4Nmhz7V6lA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:2a:62:81:77:d7:1a:f7:88:6a:c8:81:c5:5b:c9:39:4c:ba:d3:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BE96A9D00DF227936266A4035089C530868CA3A
        Validity
            Not Before: Sep 23 13:24:53 2024 GMT
            Not After : Sep 24 17:12:53 2024 GMT
        Subject: CN=731E33B32C49FC537EBFB8B2E96004A79CAEEBEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e9:09:c9:9d:03:df:49:e1:4e:48:e3:d3:f4:
                    db:4c:d2:63:2d:33:6d:3b:52:68:f4:21:67:ad:38:
                    af:3d:41:87:9e:61:29:3f:71:60:c7:bb:1f:33:16:
                    e5:9b:2c:72:14:0e:16:44:3e:04:2e:97:b2:df:2c:
                    6c:d1:d1:34:ad:a4:ce:99:1b:41:ef:85:47:86:6d:
                    16:66:5f:8b:cc:e0:d3:c2:20:fd:b1:60:a3:33:7f:
                    be:ee:54:6a:e7:24:31:5f:70:87:3b:da:48:9c:77:
                    1a:f7:7b:85:93:9e:61:8a:01:dd:bb:e4:4c:0b:95:
                    78:e0:31:90:ea:35:12:33:c4:1f:8d:a1:83:b4:fd:
                    79:c5:e2:3d:1d:00:dd:3b:cc:8e:db:46:52:7c:ee:
                    9b:29:a9:7e:ac:d9:50:50:8b:31:26:19:fb:62:18:
                    30:6c:df:4a:20:9b:ab:19:95:56:d6:7d:b4:07:5a:
                    cc:da:a4:7a:e5:c1:b5:39:e5:1b:07:4c:a2:04:36:
                    2d:fd:be:3e:1e:e4:a1:4a:e0:67:8b:98:b0:02:ef:
                    d5:19:87:48:87:8b:af:19:22:4e:20:63:d3:7d:8d:
                    c2:6c:b6:05:c8:9c:6b:11:ad:b3:ba:45:00:bd:95:
                    b7:b5:d1:df:19:dd:57:a2:9a:95:70:bc:91:4d:59:
                    e3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:1E:33:B3:2C:49:FC:53:7E:BF:B8:B2:E9:60:04:A7:9C:AE:EB:EC
            X509v3 Authority Key Identifier:
                keyid:2B:E9:6A:9D:00:DF:22:79:36:26:6A:40:35:08:9C:53:08:68:CA:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/1/2BE96A9D00DF227936266A4035089C530868CA3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BE96A9D00DF227936266A4035089C530868CA3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/1/2BE96A9D00DF227936266A4035089C530868CA3A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:6e:d2:85:76:07:9c:af:67:0c:d2:52:87:d0:a8:30:94:af:
         74:96:45:a8:c1:49:94:f0:e2:7f:c8:3b:3c:90:84:ad:1f:84:
         03:11:48:17:dc:ea:89:ad:2e:96:72:1e:9e:39:4a:61:b8:92:
         81:5d:da:b2:7a:71:a2:ad:69:86:3c:b2:2d:7c:26:2c:ac:b4:
         7f:8a:7f:13:23:40:32:f2:8b:40:db:20:40:56:6e:87:db:f4:
         d8:02:18:27:fb:22:c5:60:3a:71:4e:fe:8e:64:26:71:75:e9:
         7d:e9:59:e0:ba:08:78:1e:20:d2:cc:c2:2a:88:7a:f7:26:73:
         8c:cb:89:6d:c3:d5:9c:fc:cf:8c:35:02:8b:07:40:37:9d:b2:
         b7:37:70:23:18:53:21:96:75:09:cc:71:dc:61:c1:ba:84:bc:
         2b:14:b3:e1:d0:ba:6f:1c:6a:27:53:74:1e:1f:6a:51:16:10:
         3b:2c:56:ea:28:fd:57:6b:d7:58:06:59:f9:3c:9f:df:39:5d:
         69:0d:65:f7:47:79:05:06:ca:75:77:41:ef:91:60:d4:2a:a1:
         49:7c:ad:ab:14:8a:9d:0a:12:70:15:00:7f:46:d3:c8:61:05:
         5c:b6:00:ae:23:cf:00:5a:cb:ff:ba:cd:cd:8e:a4:6d:a3:22:
         0c:e5:ae:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----