Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/2F70AB1AAC5BBF95C0B3D0609EBA8FB6668FB3B3.mft
File:                     2F70AB1AAC5BBF95C0B3D0609EBA8FB6668FB3B3.mft (raw, json)
Hash identifier:          kRyG/B+GN5NUk1caMI8/YSWHuQHdg2B4F1nW+AppY20=
Subject key identifier:   58:08:DA:6B:3D:42:C3:16:83:55:0A:75:52:B3:E7:2D:55:33:67:49
Authority key identifier: 2F:70:AB:1A:AC:5B:BF:95:C0:B3:D0:60:9E:BA:8F:B6:66:8F:B3:B3
Certificate issuer:       /CN=2F70AB1AAC5BBF95C0B3D0609EBA8FB6668FB3B3
Certificate serial:       64B102FF6D8863178D5EE2C572A8886B105072CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F70AB1AAC5BBF95C0B3D0609EBA8FB6668FB3B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/2F70AB1AAC5BBF95C0B3D0609EBA8FB6668FB3B3.mft
Manifest number:          14
Signing time:             Mon 15 Apr 2024 02:01:38 +0000
Manifest this update:     Mon 15 Apr 2024 01:56:38 +0000
Manifest next update:     Tue 16 Apr 2024 05:37:38 +0000
Files and hashes:         1: 3137392e34382e34382e302f32322d3234203d3e20323731323430.roa (hash: YnJtZY5P2Z0dQARFIrEW97qhmY2+01euLH83S5orFvk=)
                          2: 2F70AB1AAC5BBF95C0B3D0609EBA8FB6668FB3B3.crl (hash: jC6z0UAfkZ4yo3I4jy0WearxXinNiboOLsRsikHEwos=)
                          3: 323830343a373836383a3a2f33322d3438203d3e20323731323430.roa (hash: yh/gdIshn9jv9M3OL67sPhiMKoNCnd+XzpN8fNw8nRI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b1:02:ff:6d:88:63:17:8d:5e:e2:c5:72:a8:88:6b:10:50:72:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F70AB1AAC5BBF95C0B3D0609EBA8FB6668FB3B3
        Validity
            Not Before: Apr 15 01:56:38 2024 GMT
            Not After : Apr 16 05:37:38 2024 GMT
        Subject: CN=5808DA6B3D42C31683550A7552B3E72D55336749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:24:b2:7c:cd:b2:c7:9b:0e:8c:e2:3c:e6:ce:
                    95:29:8c:43:db:56:2a:24:52:e4:48:75:44:b6:15:
                    67:58:11:07:51:28:da:98:71:c0:4c:1a:8b:da:92:
                    5b:be:33:49:aa:6d:ef:08:8a:ef:e7:b9:a2:2f:fa:
                    9d:0e:6b:c2:37:b9:49:9b:6d:7e:4b:4e:97:b1:35:
                    0a:ee:8d:a9:9b:d8:5e:6f:69:e6:6e:8d:db:90:19:
                    7c:1d:e4:63:c2:c5:3b:41:81:0b:3a:c4:18:66:1a:
                    96:bf:70:fe:0f:37:25:45:1d:82:57:49:c7:71:cd:
                    fb:39:a5:b8:ef:1d:04:9f:e3:61:43:13:2e:49:67:
                    ac:8c:18:48:b3:3e:3f:46:71:93:21:f0:6b:64:5e:
                    65:61:11:ee:06:c4:5b:a9:32:7b:1d:d0:56:ff:fe:
                    20:9e:a2:22:82:e9:f1:ab:ce:05:ac:65:34:63:3d:
                    c0:0d:db:3f:9e:ae:49:44:b2:e3:f3:f2:9c:e1:f2:
                    81:79:1f:dd:8f:6c:44:88:8b:dd:de:b6:f0:35:7f:
                    50:a1:f4:2b:35:d9:95:15:ba:12:cc:55:a0:3c:c6:
                    0a:32:2b:4b:db:35:ff:1c:6e:e2:3f:2a:8f:9c:d0:
                    77:55:32:5e:06:5c:50:16:fc:4c:40:e4:55:23:c0:
                    aa:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:08:DA:6B:3D:42:C3:16:83:55:0A:75:52:B3:E7:2D:55:33:67:49
            X509v3 Authority Key Identifier:
                keyid:2F:70:AB:1A:AC:5B:BF:95:C0:B3:D0:60:9E:BA:8F:B6:66:8F:B3:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/2F70AB1AAC5BBF95C0B3D0609EBA8FB6668FB3B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F70AB1AAC5BBF95C0B3D0609EBA8FB6668FB3B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/2F70AB1AAC5BBF95C0B3D0609EBA8FB6668FB3B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:bb:79:4e:eb:78:71:ba:bf:42:c8:ed:6d:d1:b2:be:67:8e:
         04:33:30:7f:5b:8a:65:7d:13:1c:64:b7:a2:08:09:37:42:e4:
         5e:1b:a5:2c:4c:77:35:83:89:44:52:f4:91:39:6d:95:71:40:
         dc:80:4b:ea:9f:d2:74:0b:ef:a0:19:43:de:43:0e:12:b6:48:
         c8:e7:4d:b5:08:77:1d:14:43:17:9b:8f:72:ec:a9:27:71:18:
         55:84:63:72:2d:ae:30:58:6b:af:1d:98:86:be:ff:85:b6:b3:
         20:7c:fe:6d:5e:9a:74:f8:9d:ef:f1:d4:06:6d:15:00:f3:74:
         35:fa:3a:2e:68:d4:5c:c0:33:86:63:ee:59:19:88:0d:cb:18:
         5f:e0:20:b2:34:11:dd:78:92:1a:3b:04:d6:a5:d7:73:68:77:
         6d:87:1a:2f:7d:2e:47:78:62:43:d2:b6:e4:ce:63:6f:34:b6:
         54:99:8d:99:6f:ee:ac:17:9b:e4:fc:30:57:88:08:cb:93:70:
         f3:37:24:7d:fd:ae:35:3d:38:39:a3:8a:fa:76:8e:d2:ba:cb:
         bc:bc:c9:55:4e:1c:4d:3f:aa:eb:e2:29:18:a7:97:13:50:9b:
         9e:86:42:08:bd:2b:e3:52:10:ef:42:48:c9:bd:ec:78:40:cf:
         0c:1d:1a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----