Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/0/2F2C4C5663EEB4C72CB2B612563DE7B36D0AB63A.mft
File:                     2F2C4C5663EEB4C72CB2B612563DE7B36D0AB63A.mft (raw, json)
Hash identifier:          ikMsdKwPRx2ChSHi3lmoth0tPvBpcDDFgJCGnH8f4PM=
Subject key identifier:   2B:21:4F:19:9A:0B:02:A4:70:2C:E9:F1:32:C4:46:0A:9C:71:72:BF
Authority key identifier: 2F:2C:4C:56:63:EE:B4:C7:2C:B2:B6:12:56:3D:E7:B3:6D:0A:B6:3A
Certificate issuer:       /CN=2F2C4C5663EEB4C72CB2B612563DE7B36D0AB63A
Certificate serial:       365D8E01CA0D449A106A172B079084B2DF994ACB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F2C4C5663EEB4C72CB2B612563DE7B36D0AB63A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/0/2F2C4C5663EEB4C72CB2B612563DE7B36D0AB63A.mft
Manifest number:          54
Signing time:             Sat 30 Dec 2023 03:35:55 +0000
Manifest this update:     Sat 30 Dec 2023 03:30:55 +0000
Manifest next update:     Sun 31 Dec 2023 07:09:55 +0000
Files and hashes:         1: 34352e37302e32382e302f32322d3332203d3e20323637353734.roa (hash: uGK6d/JXLOlbHaKpmRSJ+G5PV2eIlc2497AV4axCn6M=)
                          2: 2F2C4C5663EEB4C72CB2B612563DE7B36D0AB63A.crl (hash: 4H3FBintxDmgw4AJxEHOUfdIO+WuP5PmefdoTx/Mts0=)
                          3: 323830343a343338303a3a2f33322d313238203d3e20323637353734.roa (hash: vgPzxJsepLj6abt8htorZ/r1b3tfh/e/Ff9bi45HcJI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:5d:8e:01:ca:0d:44:9a:10:6a:17:2b:07:90:84:b2:df:99:4a:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F2C4C5663EEB4C72CB2B612563DE7B36D0AB63A
        Validity
            Not Before: Dec 30 03:30:55 2023 GMT
            Not After : Dec 31 07:09:55 2023 GMT
        Subject: CN=2B214F199A0B02A4702CE9F132C4460A9C7172BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:91:b8:31:ae:1c:94:9d:ef:6d:67:84:6b:8f:
                    83:6c:c4:65:6d:cb:5c:6e:8a:34:ee:82:df:7d:df:
                    64:50:f9:7c:b0:5b:4f:6e:3a:bc:88:96:81:c3:6f:
                    c2:93:1a:08:f6:ac:60:d9:27:64:d2:85:7d:54:de:
                    a5:36:54:2f:2c:f9:fa:48:1d:fe:1d:96:c7:2a:23:
                    7f:e6:a7:f1:08:77:b1:31:aa:8e:b2:13:76:67:9b:
                    85:63:d5:68:bb:1d:40:a1:84:d2:f3:ae:c7:7b:1c:
                    72:a6:9e:fd:cd:bd:c8:b1:14:64:1a:33:21:83:cf:
                    13:da:7f:7b:7d:6a:ce:14:95:0a:d5:d7:c7:7d:70:
                    42:dd:92:a2:ac:6a:4a:c6:af:72:62:f2:b0:a2:4e:
                    a8:06:50:9d:ac:a7:a0:da:a2:86:09:c6:3b:3b:94:
                    d9:f6:82:8d:49:b9:0f:b0:c7:d8:04:2e:df:02:a4:
                    a4:97:55:af:a5:e5:d2:5a:fe:a5:8d:75:4c:1e:fa:
                    27:53:1c:61:8f:40:65:d6:19:73:3c:4a:30:4d:82:
                    02:45:1b:ec:89:17:70:bf:70:d2:53:1e:bd:8b:06:
                    34:16:24:da:9f:a9:ad:fc:b4:5a:a4:ce:ad:5c:f2:
                    97:aa:96:83:a0:2a:a8:bb:78:5f:27:4d:57:96:3d:
                    3b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:21:4F:19:9A:0B:02:A4:70:2C:E9:F1:32:C4:46:0A:9C:71:72:BF
            X509v3 Authority Key Identifier:
                keyid:2F:2C:4C:56:63:EE:B4:C7:2C:B2:B6:12:56:3D:E7:B3:6D:0A:B6:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/0/2F2C4C5663EEB4C72CB2B612563DE7B36D0AB63A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F2C4C5663EEB4C72CB2B612563DE7B36D0AB63A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/0/2F2C4C5663EEB4C72CB2B612563DE7B36D0AB63A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:a5:75:ce:3b:c8:91:5a:1a:24:75:7b:3e:a4:bf:82:87:28:
         aa:6d:25:92:85:0b:c2:82:ed:88:e2:e9:89:1e:1b:9a:78:35:
         d4:d8:60:6a:f9:b6:22:54:c6:d5:55:17:22:70:2f:8f:a6:0c:
         77:60:fc:67:d3:90:39:62:40:40:3a:98:05:7f:e7:5b:08:0c:
         50:ea:8e:f2:2b:49:f2:ea:25:da:df:af:14:56:cf:70:b6:ed:
         1f:4d:43:e4:90:ca:f6:ef:2a:da:14:27:ab:75:7d:02:a4:58:
         5b:3a:bd:10:ae:8f:45:92:7e:9f:a8:95:b1:ee:cc:bf:73:59:
         53:b0:b2:e6:39:38:7b:eb:da:b6:22:ca:6c:43:06:b5:fe:5c:
         72:a3:c1:0a:1c:32:37:4b:94:2d:6b:bd:93:91:cd:c9:28:99:
         0f:9c:77:98:cf:63:8d:8a:6a:6b:4c:52:77:4a:d3:21:c4:3c:
         f0:ed:48:cb:f4:1c:92:85:c1:4a:06:9d:c9:df:0b:57:6a:23:
         dd:94:c0:af:62:3b:73:a0:2c:48:7f:4e:85:72:db:94:9b:32:
         af:37:22:4d:fc:42:b7:08:fe:3f:db:23:55:16:a6:ed:d0:bf:
         e9:7c:db:87:f0:fa:a8:1d:a9:86:24:82:99:22:7c:06:cf:8e:
         40:4a:5a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----