Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/0/2FD34957E649B1523E1FF87A9590244D5E9C6A98.mft
File:                     2FD34957E649B1523E1FF87A9590244D5E9C6A98.mft (raw, json)
Hash identifier:          p5OPRnu6t+4iY8BFWuDEVo85e75r5d5jLFaoSFr9ooY=
Subject key identifier:   74:B2:F4:F5:28:23:CB:B9:ED:0F:F1:AD:3E:F9:76:EC:19:A7:7E:51
Authority key identifier: 2F:D3:49:57:E6:49:B1:52:3E:1F:F8:7A:95:90:24:4D:5E:9C:6A:98
Certificate issuer:       /CN=2FD34957E649B1523E1FF87A9590244D5E9C6A98
Certificate serial:       1080EBE0DA39B0D549519A537FDBC7BA758CDB56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FD34957E649B1523E1FF87A9590244D5E9C6A98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/0/2FD34957E649B1523E1FF87A9590244D5E9C6A98.mft
Manifest number:          066B
Signing time:             Mon 15 Apr 2024 03:23:43 +0000
Manifest this update:     Mon 15 Apr 2024 03:18:43 +0000
Manifest next update:     Tue 16 Apr 2024 07:08:43 +0000
Files and hashes:         1: 323830343a333966633a3a2f33322d3438203d3e20323636303633.roa (hash: c12m6iwshhagMzixvwHQP/1UiUM09taP1eD75YA3sTw=)
                          2: 34352e342e3130342e302f32322d3234203d3e20323636303633.roa (hash: +t2lpD72HvQnavnVIJkNZOTrERcSRr3e6jsq6SsX418=)
                          3: 2FD34957E649B1523E1FF87A9590244D5E9C6A98.crl (hash: W6N4qWUPgheWWr5PRhzTbjkQBHJVfD5Amger3wu/13A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:80:eb:e0:da:39:b0:d5:49:51:9a:53:7f:db:c7:ba:75:8c:db:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FD34957E649B1523E1FF87A9590244D5E9C6A98
        Validity
            Not Before: Apr 15 03:18:43 2024 GMT
            Not After : Apr 16 07:08:43 2024 GMT
        Subject: CN=74B2F4F52823CBB9ED0FF1AD3EF976EC19A77E51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b2:74:87:7f:fd:30:3f:cd:3d:90:22:bc:5e:
                    a7:0d:76:6d:ee:ff:51:bc:f1:b0:03:59:c8:94:cf:
                    a9:d7:3a:f3:56:2b:04:1f:8a:35:93:cc:0c:47:cc:
                    eb:d6:e2:44:1d:37:5f:d2:14:18:8d:96:50:87:16:
                    fc:00:14:35:0b:fa:31:24:9b:d1:f5:9a:9d:96:0b:
                    70:f8:54:e0:f8:87:90:8c:0f:68:26:cc:fa:40:f2:
                    ee:d6:a0:6a:cf:7b:1e:ee:55:88:34:6e:54:da:3a:
                    8b:d3:78:f6:52:1e:b1:df:54:ec:01:b8:ca:b4:07:
                    27:87:65:5d:f6:47:e0:67:8a:f9:b0:db:d0:cc:aa:
                    7f:31:e6:c4:34:1d:f8:4b:49:3f:e4:89:34:43:66:
                    e1:1a:47:94:b0:a7:6f:95:ba:e9:35:05:9e:65:6b:
                    99:f4:6b:d2:17:93:ee:32:ab:12:3c:29:4d:41:23:
                    b3:af:0b:c4:76:e7:c2:de:03:42:25:af:97:54:43:
                    1e:d5:e0:b8:d9:81:b1:09:2f:01:13:0a:fe:50:36:
                    fd:94:70:8a:fd:1f:16:3d:51:00:11:97:ef:78:19:
                    ce:2d:ac:1b:d5:3e:d6:2c:90:25:fd:09:2b:a4:60:
                    0e:86:13:55:8c:45:0b:9e:ab:52:2d:0f:1b:9a:b6:
                    05:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B2:F4:F5:28:23:CB:B9:ED:0F:F1:AD:3E:F9:76:EC:19:A7:7E:51
            X509v3 Authority Key Identifier:
                keyid:2F:D3:49:57:E6:49:B1:52:3E:1F:F8:7A:95:90:24:4D:5E:9C:6A:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/0/2FD34957E649B1523E1FF87A9590244D5E9C6A98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FD34957E649B1523E1FF87A9590244D5E9C6A98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/0/2FD34957E649B1523E1FF87A9590244D5E9C6A98.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:05:6b:b7:ec:cb:d0:b5:1a:02:ac:de:b1:67:c1:8e:56:1a:
         66:9f:4e:e8:32:87:6b:80:5d:11:bb:b7:94:9d:03:dd:34:4c:
         f0:a3:12:7f:5a:96:ac:af:af:b7:e6:bf:06:74:b5:98:bc:87:
         0b:ed:bd:a8:67:7f:c4:c1:54:8d:87:f7:d9:a1:ce:d2:9e:04:
         a3:4d:4a:e8:bb:49:7f:e9:73:24:79:1e:6e:c5:8a:80:b0:49:
         25:1c:0b:83:c1:d9:85:86:f5:5f:83:cd:5e:3b:43:e2:f3:03:
         34:35:f3:26:73:5a:1d:3a:46:b2:43:54:55:3b:59:07:60:d8:
         3d:a4:9f:05:ba:7c:1e:1f:25:d5:03:43:7e:b6:9f:77:e3:43:
         1e:8c:e3:37:33:d0:01:48:ee:03:54:9c:ac:ba:2e:73:3a:fd:
         9e:8e:46:d2:02:d2:8b:61:53:28:90:3b:5a:85:ca:65:45:77:
         9c:01:9b:a0:15:fb:10:76:12:81:28:25:b5:33:af:33:9a:79:
         75:b9:96:32:e3:1f:be:07:27:82:d2:05:a6:6b:7d:bd:35:7d:
         1b:2c:55:ec:b0:dd:3d:77:21:f7:85:81:40:08:10:36:7f:eb:
         58:32:38:7f:c7:3f:2d:2e:c0:d5:eb:1f:47:97:90:b7:ae:62:
         6d:e1:7b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----