Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4mTGRMf9aiRR76Ci7nvo8oL5wDz7mv9GgCDkzZJi4Ers/0/B2A2487A9726D782A9349A5E95A6B583BE8F27EC.mft
File:                     B2A2487A9726D782A9349A5E95A6B583BE8F27EC.mft (raw, json)
Hash identifier:          fFps0jXVriawKmxUvkjfMIPBZn9B6CtefLDd1r2umCk=
Subject key identifier:   01:C2:68:9B:BC:7A:07:1D:92:22:AB:6E:22:79:BE:F2:F7:47:25:AE
Authority key identifier: B2:A2:48:7A:97:26:D7:82:A9:34:9A:5E:95:A6:B5:83:BE:8F:27:EC
Certificate issuer:       /CN=B2A2487A9726D782A9349A5E95A6B583BE8F27EC
Certificate serial:       4B2F1F7BE251019DA5201F6F85C8C8EBA5EC29C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2A2487A9726D782A9349A5E95A6B583BE8F27EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mTGRMf9aiRR76Ci7nvo8oL5wDz7mv9GgCDkzZJi4Ers/0/B2A2487A9726D782A9349A5E95A6B583BE8F27EC.mft
Manifest number:          34
Signing time:             Mon 15 Apr 2024 08:27:35 +0000
Manifest this update:     Mon 15 Apr 2024 08:22:35 +0000
Manifest next update:     Tue 16 Apr 2024 10:40:35 +0000
Files and hashes:         1: B2A2487A9726D782A9349A5E95A6B583BE8F27EC.crl (hash: c9auA7AVDDkib9HRIzaGLKYRnFVcwjsnQoS2TtWE4C8=)
                          2: 323830343a353365343a3a2f33322d3332203d3e20323638363134.roa (hash: P5z8ton6iZzEtLD3c5kKvyquv5an6PHREAF0NgC40KE=)
                          3: 34352e3136342e3131322e302f32322d3234203d3e20323638363134.roa (hash: SgzmXco5VoHPnPo73auFg9q3Zhu6AMwqsdZx1JXQXio=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:2f:1f:7b:e2:51:01:9d:a5:20:1f:6f:85:c8:c8:eb:a5:ec:29:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2A2487A9726D782A9349A5E95A6B583BE8F27EC
        Validity
            Not Before: Apr 15 08:22:35 2024 GMT
            Not After : Apr 16 10:40:35 2024 GMT
        Subject: CN=01C2689BBC7A071D9222AB6E2279BEF2F74725AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:66:71:ce:4e:fa:6b:85:a4:71:cf:87:51:20:
                    dc:af:7a:54:2d:b9:2e:97:41:07:2c:86:b3:a7:2f:
                    d4:6f:41:ae:77:75:71:2a:98:36:b0:07:f0:79:03:
                    63:f1:c2:30:bf:bb:a3:c2:65:35:86:93:e3:e2:d3:
                    75:9d:d9:94:50:75:0b:76:cb:e3:61:1f:15:8e:e1:
                    d4:8d:8a:bb:26:5c:ef:3c:bd:b0:83:c7:3c:9e:5a:
                    59:cb:97:c1:9f:96:71:b0:c5:cf:5e:b0:ca:fc:da:
                    bb:7f:a9:3b:2e:d5:f3:81:30:85:6b:a0:88:b0:57:
                    5d:13:06:9f:5f:de:84:ed:e6:91:5d:36:8b:37:1b:
                    9b:1a:43:5f:ca:f7:09:e1:2d:f9:a2:d3:b8:1d:30:
                    55:8a:35:e5:a2:e6:48:2c:85:c9:f8:ab:f1:1a:10:
                    9c:1a:60:d5:d9:30:2c:9e:53:b4:c3:f1:65:34:53:
                    cb:58:8f:38:49:51:3c:3b:38:e1:10:9f:46:87:dd:
                    38:35:92:b5:fc:87:7a:b5:72:bf:ec:3d:40:be:aa:
                    89:e6:3f:ef:42:7b:ff:09:06:6e:36:ff:28:49:8c:
                    d9:82:39:6b:19:02:2f:c2:50:7a:73:e9:3c:ed:12:
                    12:d6:6d:a0:bb:e8:15:1b:8b:d4:ce:c9:df:07:23:
                    e1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C2:68:9B:BC:7A:07:1D:92:22:AB:6E:22:79:BE:F2:F7:47:25:AE
            X509v3 Authority Key Identifier:
                keyid:B2:A2:48:7A:97:26:D7:82:A9:34:9A:5E:95:A6:B5:83:BE:8F:27:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mTGRMf9aiRR76Ci7nvo8oL5wDz7mv9GgCDkzZJi4Ers/0/B2A2487A9726D782A9349A5E95A6B583BE8F27EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2A2487A9726D782A9349A5E95A6B583BE8F27EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mTGRMf9aiRR76Ci7nvo8oL5wDz7mv9GgCDkzZJi4Ers/0/B2A2487A9726D782A9349A5E95A6B583BE8F27EC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:61:e6:f4:94:fe:7c:32:d9:d0:bb:48:f1:e5:3d:93:f5:97:
         10:ef:4e:3a:81:fd:05:7e:10:fc:ff:c1:1d:e6:4c:51:9e:3c:
         cd:ac:9f:ed:73:f3:d6:79:ea:ec:b6:1b:3e:3b:61:a9:1d:05:
         b8:64:72:ab:b7:93:38:71:6e:06:26:f6:98:c8:76:16:4b:42:
         19:b2:32:e2:de:47:19:29:5a:ff:04:24:12:ff:d4:fa:23:aa:
         31:8d:1a:49:3b:19:b6:09:c5:17:b7:42:01:83:b8:80:c7:8b:
         68:2e:d8:40:9e:4b:19:15:ab:68:0f:7f:e7:c3:a7:35:6f:af:
         d1:b8:16:03:f8:64:d6:98:bd:5a:6d:2e:df:c5:0e:91:41:cf:
         5c:ed:26:50:93:32:93:86:35:46:ba:34:1c:65:0f:8e:f0:b2:
         7e:a7:52:41:96:27:9a:7c:cc:e3:05:7a:fd:75:a8:8e:28:1e:
         8f:eb:f1:9e:0b:56:40:18:b2:25:b8:ac:72:0c:0a:6a:23:e3:
         c0:ad:96:bb:4e:ff:a9:42:96:89:c0:e7:1d:d3:7f:b4:97:a3:
         5d:bc:e5:92:20:93:c9:9a:a2:ea:d2:dc:b6:05:bf:95:56:3f:
         38:78:e2:d8:bc:d3:44:73:56:a2:ad:95:f2:3d:81:58:69:3a:
         13:b3:22:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----