Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/C133FA3FA6B84483F6615F7504F6EECFD777FA75.mft
File:                     C133FA3FA6B84483F6615F7504F6EECFD777FA75.mft (raw, json)
Hash identifier:          UPpVkPNGEOvsz0LPtJZ/YvIxiAXzwoTAR2lrps1OIVA=
Subject key identifier:   2B:60:4B:0D:19:C3:3B:44:97:11:2F:9B:65:CB:28:39:B3:23:34:E8
Authority key identifier: C1:33:FA:3F:A6:B8:44:83:F6:61:5F:75:04:F6:EE:CF:D7:77:FA:75
Certificate issuer:       /CN=C133FA3FA6B84483F6615F7504F6EECFD777FA75
Certificate serial:       5DB06732E14EFBDDDF123CF2C9AB3866E33A3517
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C133FA3FA6B84483F6615F7504F6EECFD777FA75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/C133FA3FA6B84483F6615F7504F6EECFD777FA75.mft
Manifest number:          0227
Signing time:             Mon 15 Apr 2024 11:30:26 +0000
Manifest this update:     Mon 15 Apr 2024 11:25:26 +0000
Manifest next update:     Tue 16 Apr 2024 13:33:26 +0000
Files and hashes:         1: 323830343a383261633a3a2f33322d3332203d3e20323732353333.roa (hash: f3vsDzPmpydJ1yTCw+MopQQUSR6A0WalqPj5FHLPeB0=)
                          2: C133FA3FA6B84483F6615F7504F6EECFD777FA75.crl (hash: qqatOyjGkV+A5utJLq8FxBGzD2AghMOVX7xo3wmXtUw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:b0:67:32:e1:4e:fb:dd:df:12:3c:f2:c9:ab:38:66:e3:3a:35:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C133FA3FA6B84483F6615F7504F6EECFD777FA75
        Validity
            Not Before: Apr 15 11:25:26 2024 GMT
            Not After : Apr 16 13:33:26 2024 GMT
        Subject: CN=2B604B0D19C33B4497112F9B65CB2839B32334E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f2:05:83:89:c9:f7:ab:e5:d0:27:f7:0a:3a:
                    ed:5e:d0:9b:cb:e0:2f:5c:a4:6a:fd:68:3c:34:db:
                    ec:97:4a:97:6a:c9:cf:54:33:7b:dd:0f:db:c0:ff:
                    cf:54:93:b1:5b:98:68:f0:0b:2f:00:4e:b8:8c:0a:
                    e5:80:60:21:da:a7:92:8f:ff:da:51:2b:2a:17:cd:
                    43:88:50:3f:ed:38:ee:6b:1b:1b:17:24:9c:c4:43:
                    ef:f2:bd:c7:50:6b:85:0a:0e:17:9f:bc:10:11:17:
                    cc:c3:a0:e5:c4:01:88:ea:2a:f5:2d:7c:39:01:62:
                    ea:8e:07:af:91:ab:2e:a5:46:09:b9:99:95:cf:cf:
                    fc:4f:14:f0:78:d8:1c:ce:f5:a3:1a:e6:a0:0d:0e:
                    87:24:6a:f3:5b:6d:3f:98:28:97:fe:f2:b4:7e:eb:
                    ec:73:1f:45:65:1e:81:f9:9c:0d:07:e4:79:34:7c:
                    d1:f3:69:73:5c:4a:09:61:ca:e6:8b:28:d7:0c:66:
                    ac:6c:5e:15:1e:58:85:d6:c5:49:b3:27:74:42:a3:
                    85:92:70:ef:c6:a8:6c:6c:0c:57:f1:a6:a6:ee:e2:
                    e2:c4:1b:db:d3:79:d7:a6:46:93:ab:74:fb:ed:ce:
                    22:86:04:e7:25:f7:54:2b:4e:6f:92:66:97:11:bf:
                    4e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:60:4B:0D:19:C3:3B:44:97:11:2F:9B:65:CB:28:39:B3:23:34:E8
            X509v3 Authority Key Identifier:
                keyid:C1:33:FA:3F:A6:B8:44:83:F6:61:5F:75:04:F6:EE:CF:D7:77:FA:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/C133FA3FA6B84483F6615F7504F6EECFD777FA75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C133FA3FA6B84483F6615F7504F6EECFD777FA75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/C133FA3FA6B84483F6615F7504F6EECFD777FA75.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:2d:af:78:67:1b:ee:dc:d4:bb:37:19:08:b3:fc:a6:61:32:
         80:47:0c:01:8e:4d:f4:1b:0d:cc:e7:7a:00:97:16:a4:16:6a:
         35:2a:cf:db:3a:a4:6f:4f:09:a0:c0:94:e2:ed:9e:ef:e3:08:
         84:87:0e:c4:10:ba:69:4a:b2:1f:53:c9:88:e0:51:9f:35:54:
         69:bd:6b:3b:40:72:99:01:26:ab:c3:bb:a2:44:17:24:cb:c8:
         fe:61:62:00:de:50:1f:9b:1b:20:5d:da:bc:51:a2:f9:f5:f7:
         d8:89:a5:ab:38:85:d8:00:61:1c:fc:a6:1e:83:8a:2d:56:79:
         cf:af:3f:f4:55:3d:14:98:7c:ec:c6:35:be:89:68:8f:02:bd:
         41:e2:23:6b:da:d6:70:e7:e2:5d:e6:09:5b:98:b8:54:64:8a:
         f6:0e:d2:97:95:56:f8:5c:ad:30:11:48:43:6a:43:db:0d:9a:
         c7:0a:62:c7:9c:2a:5d:0b:7f:b3:52:40:80:31:38:6c:ba:14:
         5d:43:9c:ca:8f:ee:ea:86:89:2b:2f:59:8c:2d:1d:ec:84:b5:
         af:df:3f:d0:ac:48:48:b7:98:a2:12:f2:e2:af:3c:ec:c0:39:
         15:35:3f:c3:eb:68:f0:41:08:39:6f:59:09:b2:50:43:b6:81:
         64:d8:7a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----