Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4TWTqG2PWhBJpHoQwv7TTbcekXGDbKHRvNhNPi7wfb26/0/1F2E84748355FBB127446FF91925D695C155F607.mft
File:                     1F2E84748355FBB127446FF91925D695C155F607.mft (raw, json)
Hash identifier:          igBAE+KsOFUfBx6saoR1pyLZFXrNs94PxdJu2Pg/xaQ=
Subject key identifier:   E2:C9:A8:EC:65:CE:34:BE:F8:8A:A5:FC:9B:B3:68:DC:0A:FF:40:BD
Authority key identifier: 1F:2E:84:74:83:55:FB:B1:27:44:6F:F9:19:25:D6:95:C1:55:F6:07
Certificate issuer:       /CN=1F2E84748355FBB127446FF91925D695C155F607
Certificate serial:       2EFE4B15A5869F1A357F30353F3F9EB0D74FD1F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F2E84748355FBB127446FF91925D695C155F607.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4TWTqG2PWhBJpHoQwv7TTbcekXGDbKHRvNhNPi7wfb26/0/1F2E84748355FBB127446FF91925D695C155F607.mft
Manifest number:          042D
Signing time:             Sun 14 Apr 2024 19:56:55 +0000
Manifest this update:     Sun 14 Apr 2024 19:51:55 +0000
Manifest next update:     Mon 15 Apr 2024 20:24:55 +0000
Files and hashes:         1: 1F2E84748355FBB127446FF91925D695C155F607.crl (hash: yzEkYub6Ajhh1yKLNyMvjepznAyE3AUKCAoTKE3lp6s=)
                          2: 3230302e33392e3132382e302f32322d3234203d3e20323730373536.roa (hash: BPMJAyYNA72A/N8hJGq9JqsRvuWXNKay/MpcqDpQLlA=)
                          3: 323830343a373065633a3a2f33322d3334203d3e20323730373536.roa (hash: hSZxshmdbcmOvdqmW1X0I44VADY+ZrMIfXsAyp/xoRA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:fe:4b:15:a5:86:9f:1a:35:7f:30:35:3f:3f:9e:b0:d7:4f:d1:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F2E84748355FBB127446FF91925D695C155F607
        Validity
            Not Before: Apr 14 19:51:55 2024 GMT
            Not After : Apr 15 20:24:55 2024 GMT
        Subject: CN=E2C9A8EC65CE34BEF88AA5FC9BB368DC0AFF40BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:31:18:65:b2:4d:86:5d:c3:c9:58:f5:eb:1c:
                    44:03:36:cb:6e:cf:a6:fd:3c:da:43:66:43:00:03:
                    7c:96:c8:fe:52:ae:71:fd:a5:f0:c9:c4:46:ab:fa:
                    a7:e6:eb:a2:a1:07:cc:ba:20:63:83:90:1d:f9:db:
                    66:1c:41:ad:7e:42:57:56:33:d4:c5:49:cb:50:bb:
                    61:61:5e:88:43:ba:27:28:ec:32:5c:00:43:81:a0:
                    fe:f5:98:bc:9e:36:d2:94:92:a9:b7:75:76:9e:1c:
                    4b:ae:21:91:30:7d:3e:13:93:54:86:b5:cc:a4:39:
                    0f:85:21:b0:9f:01:e2:ed:f0:26:56:89:74:cd:ec:
                    73:12:5a:15:82:9a:02:ea:bb:00:86:40:a0:e8:51:
                    d0:6d:98:c2:0d:0a:da:09:7e:db:fa:ba:07:c9:16:
                    12:12:46:7c:21:8e:f6:51:37:f2:53:db:c7:57:97:
                    dd:23:7b:69:47:49:96:32:98:8d:86:f2:70:9f:35:
                    c5:5a:50:2c:1b:31:3a:ff:af:27:b4:c8:29:a0:b1:
                    f1:91:a6:6d:ad:6c:be:ec:ac:53:a0:29:79:e3:08:
                    98:f9:70:5f:c0:78:5f:a9:86:e3:72:74:98:58:bf:
                    66:b5:30:0c:da:0e:6d:8b:98:cd:36:81:24:9d:47:
                    1c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C9:A8:EC:65:CE:34:BE:F8:8A:A5:FC:9B:B3:68:DC:0A:FF:40:BD
            X509v3 Authority Key Identifier:
                keyid:1F:2E:84:74:83:55:FB:B1:27:44:6F:F9:19:25:D6:95:C1:55:F6:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4TWTqG2PWhBJpHoQwv7TTbcekXGDbKHRvNhNPi7wfb26/0/1F2E84748355FBB127446FF91925D695C155F607.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F2E84748355FBB127446FF91925D695C155F607.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4TWTqG2PWhBJpHoQwv7TTbcekXGDbKHRvNhNPi7wfb26/0/1F2E84748355FBB127446FF91925D695C155F607.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:14:01:0f:c5:44:bd:80:80:00:59:b1:de:64:05:da:b6:0d:
         a4:b4:ac:85:43:cf:ca:2f:b0:5d:fc:7a:ed:a8:7c:62:09:1e:
         22:b3:3d:6e:ce:e4:db:98:9f:00:60:3a:db:35:97:99:3a:c7:
         64:84:a2:50:87:6c:07:01:11:f8:10:92:b5:d7:0c:6a:94:2e:
         d5:f4:0d:a1:30:c6:8f:15:1b:c3:31:4a:4d:f9:52:c8:b8:af:
         a0:2b:e4:60:2b:90:e0:bb:51:8a:12:cf:53:4a:8a:ff:1c:85:
         19:f0:a3:17:4c:ed:41:c5:3c:b3:8d:e5:e8:4f:45:e6:9b:f1:
         12:03:3b:6e:4f:ff:5f:70:df:95:ed:d6:eb:f4:a8:fc:c9:ab:
         db:ab:02:05:17:d5:2d:44:14:a1:c1:39:bb:fb:53:40:9c:45:
         a0:92:c2:fa:56:fd:23:84:f2:44:59:e2:7a:c8:ed:50:d0:1f:
         5d:e1:1e:a2:86:c0:bd:f8:69:fb:bb:e4:cd:87:61:73:13:f4:
         dc:03:95:1f:1b:6b:f1:e0:00:0d:0e:bc:50:bd:48:40:32:1b:
         e0:61:d7:39:e7:62:16:24:59:ca:cd:f1:19:f8:6c:7e:d1:f2:
         e8:ca:1b:26:10:02:b9:78:30:02:d0:85:27:e8:24:7a:1a:d8:
         68:d6:24:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----