Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9kcvRxCXa8YweSa3xkWdhPejhZBxh7oUpTiGrUg3rbR5/1/2B566734F24D7728FDB7066E1F7CD7E7FA56C944.mft
File:                     2B566734F24D7728FDB7066E1F7CD7E7FA56C944.mft (raw, json)
Hash identifier:          xkVDSWYskLbkgHW37MMdXz6LF3RXajMHzpRIXMjOK2o=
Subject key identifier:   AA:E7:72:20:AE:84:1C:7D:FE:B7:3C:32:C3:9E:34:58:FA:DF:86:02
Authority key identifier: 2B:56:67:34:F2:4D:77:28:FD:B7:06:6E:1F:7C:D7:E7:FA:56:C9:44
Certificate issuer:       /CN=2B566734F24D7728FDB7066E1F7CD7E7FA56C944
Certificate serial:       3D64A4BF8111F0996A282F999F149B1BC0EC5A34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B566734F24D7728FDB7066E1F7CD7E7FA56C944.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9kcvRxCXa8YweSa3xkWdhPejhZBxh7oUpTiGrUg3rbR5/1/2B566734F24D7728FDB7066E1F7CD7E7FA56C944.mft
Manifest number:          4B
Signing time:             Tue 28 May 2024 19:18:57 +0000
Manifest this update:     Tue 28 May 2024 19:13:50 +0000
Manifest next update:     Wed 29 May 2024 19:42:50 +0000
Files and hashes:         1: 3133382e302e3134302e302f32322d3234203d3e20323634353531.roa (hash: r3adC6kt0GlFAKNMplt0VuMDH6xag+zpFQS77fYbJqw=)
                          2: 323830343a323136303a3a2f33322d313238203d3e20323634353531.roa (hash: X8XOXtI2XZJZ3ZDi3I+pKXdphU4UUlwzpiCRMbjnsHA=)
                          3: 2B566734F24D7728FDB7066E1F7CD7E7FA56C944.crl (hash: 610dOQlnKMf1SDA0AS5g+7aFdBfb6VT6lwQNXFkvY8M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:64:a4:bf:81:11:f0:99:6a:28:2f:99:9f:14:9b:1b:c0:ec:5a:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B566734F24D7728FDB7066E1F7CD7E7FA56C944
        Validity
            Not Before: May 28 19:13:50 2024 GMT
            Not After : May 29 19:42:50 2024 GMT
        Subject: CN=AAE77220AE841C7DFEB73C32C39E3458FADF8602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d2:d6:f3:0b:04:dc:46:4f:24:42:eb:20:05:
                    f7:f3:b1:e2:00:77:f9:f0:50:2c:21:a5:ef:14:73:
                    b5:8f:8f:5c:67:02:94:98:31:84:dd:3e:27:40:9a:
                    50:01:46:cd:51:2a:50:4b:e2:77:39:3d:f5:47:d6:
                    e5:98:5f:8f:ab:97:9c:f6:52:14:b9:c2:69:e8:d4:
                    d1:9b:52:bf:fd:6b:f5:2b:f3:7f:08:8a:b2:14:5c:
                    c5:f2:ea:59:fb:4f:09:56:a6:59:d3:7b:d7:ce:13:
                    4e:87:56:7f:89:12:21:0c:d1:58:bb:99:bd:f4:d7:
                    1e:14:65:dd:00:dc:0e:e4:6a:c6:18:0d:6e:ce:af:
                    b2:32:26:01:3f:cf:5e:99:f0:cf:68:d8:e4:8e:38:
                    57:76:f4:66:c3:86:52:68:92:d5:b0:ac:1d:86:b3:
                    ab:e9:a5:bd:e3:06:1f:de:38:34:45:d4:03:53:81:
                    45:fc:73:62:63:b6:45:a2:ff:2d:80:ac:c3:2f:d4:
                    14:56:2d:b1:5e:0d:8e:db:e9:b9:ea:26:22:11:dd:
                    a1:50:29:85:18:6e:f3:45:0b:d2:3d:3c:6d:18:d9:
                    74:14:11:7f:71:4d:10:1f:85:87:d9:5b:39:95:0d:
                    43:5c:e5:e5:69:48:df:1d:3d:0b:48:86:19:ac:2a:
                    e0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E7:72:20:AE:84:1C:7D:FE:B7:3C:32:C3:9E:34:58:FA:DF:86:02
            X509v3 Authority Key Identifier:
                keyid:2B:56:67:34:F2:4D:77:28:FD:B7:06:6E:1F:7C:D7:E7:FA:56:C9:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9kcvRxCXa8YweSa3xkWdhPejhZBxh7oUpTiGrUg3rbR5/1/2B566734F24D7728FDB7066E1F7CD7E7FA56C944.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B566734F24D7728FDB7066E1F7CD7E7FA56C944.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kcvRxCXa8YweSa3xkWdhPejhZBxh7oUpTiGrUg3rbR5/1/2B566734F24D7728FDB7066E1F7CD7E7FA56C944.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:97:f5:fc:c5:3a:37:54:20:a3:4d:1c:ea:68:ac:b2:15:ea:
         af:93:ed:9d:dd:72:1a:a3:06:90:4d:11:0f:2f:6a:71:12:c4:
         cc:a7:76:a0:64:d3:ed:b4:2c:44:76:54:db:0b:cb:43:cf:d7:
         33:04:6a:a8:c2:65:cf:d3:d3:f2:21:da:36:6b:11:d0:82:7e:
         cd:41:2d:a5:2a:e2:d2:3a:85:19:ea:42:ae:58:0b:e8:6f:ed:
         b6:00:ed:b7:5e:d4:24:69:c2:7c:0c:53:da:37:53:43:97:a1:
         58:86:7e:fb:1e:2e:af:fe:11:7a:50:ec:97:be:b4:aa:4f:a8:
         56:66:9d:5e:6d:3c:01:58:bb:f2:8d:92:30:8b:ff:ef:3d:b7:
         c2:63:08:1e:c4:d1:f9:3f:31:64:a0:8e:ae:f1:df:4e:87:19:
         85:f4:51:3c:de:2e:c0:33:2b:9a:4a:dd:73:fd:36:3e:11:72:
         0f:ad:ef:14:e2:12:5d:35:96:a9:10:69:85:99:96:76:f3:4a:
         7a:0f:d4:fa:1f:1b:63:57:d5:42:76:83:e6:2b:d8:48:17:dc:
         63:0f:1a:3e:20:7e:52:fe:62:4a:46:0e:8c:7f:3a:f9:db:f9:
         8b:f2:e6:2a:5c:08:3c:12:09:5c:46:b8:36:a6:c0:5c:3b:71:
         c0:0f:ff:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----