Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/1/E2E37F67D2EE63A12224C15B9AD15A60A6BF0B43.mft
File:                     E2E37F67D2EE63A12224C15B9AD15A60A6BF0B43.mft (raw, json)
Hash identifier:          L0GQSOOX8awtHKnlGEz+hTs63n09zoIbibyyZEF4coE=
Subject key identifier:   55:DD:77:3D:39:A1:12:75:76:FC:C5:78:B9:A0:02:BD:79:5D:E2:CF
Authority key identifier: E2:E3:7F:67:D2:EE:63:A1:22:24:C1:5B:9A:D1:5A:60:A6:BF:0B:43
Certificate issuer:       /CN=E2E37F67D2EE63A12224C15B9AD15A60A6BF0B43
Certificate serial:       56896EE15FF64AE171DDD5779F31A90EFAEB29FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2E37F67D2EE63A12224C15B9AD15A60A6BF0B43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/1/E2E37F67D2EE63A12224C15B9AD15A60A6BF0B43.mft
Manifest number:          2C
Signing time:             Mon 12 Feb 2024 21:35:40 +0000
Manifest this update:     Mon 12 Feb 2024 21:30:40 +0000
Manifest next update:     Wed 14 Feb 2024 01:27:40 +0000
Files and hashes:         1: 3230302e3130372e3131362e302f32322d3332203d3e20323730323438.roa (hash: BXek+COpcbfTDrU+Y4goM90Nsh0jZwKYViuiRUq54NI=)
                          2: E2E37F67D2EE63A12224C15B9AD15A60A6BF0B43.crl (hash: 5ytN2Ad9GjEkyWVfmpLouwNeMDWUVhsyNkFBK5+In1o=)
                          3: 323830343a363931383a3a2f33322d313238203d3e20323730323438.roa (hash: 7oWUQh93zNmh1UbCHIDOgzn+/c9d+5hY14Ck//FVDSE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:89:6e:e1:5f:f6:4a:e1:71:dd:d5:77:9f:31:a9:0e:fa:eb:29:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2E37F67D2EE63A12224C15B9AD15A60A6BF0B43
        Validity
            Not Before: Feb 12 21:30:40 2024 GMT
            Not After : Feb 14 01:27:40 2024 GMT
        Subject: CN=55DD773D39A1127576FCC578B9A002BD795DE2CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:62:ea:cb:54:cb:06:68:86:df:e5:ee:c1:d2:
                    6f:cf:b8:79:a7:64:0d:87:58:aa:8f:43:86:88:8a:
                    92:a5:6e:e9:cb:7f:ef:cd:02:4f:4a:aa:23:68:b0:
                    bf:1f:fc:ae:36:1a:4f:12:88:e9:6e:a4:af:0e:27:
                    55:1c:d5:28:94:77:c8:0a:41:f5:d7:88:36:f0:a3:
                    e6:97:67:3c:9d:c7:55:10:1c:7c:a3:6a:20:2f:94:
                    15:6e:4a:b4:5d:85:a8:c1:43:f1:99:86:56:39:bc:
                    a1:00:1b:e9:f8:d1:a9:3d:96:a9:f6:7c:d2:f5:47:
                    7d:75:29:17:c5:1b:63:38:ca:1b:63:68:0e:d2:98:
                    f4:9d:bf:c6:df:46:9d:7d:19:0a:a3:b3:6d:1a:92:
                    43:25:b7:58:98:dc:29:c2:27:80:28:a0:99:ac:52:
                    e5:23:6f:94:53:dc:13:5f:4a:3c:9e:1e:b6:c4:b8:
                    cd:39:5a:38:08:79:53:65:2b:a2:d5:31:41:b1:26:
                    f3:84:b7:2b:e0:df:53:cb:8e:af:1c:45:9e:76:7a:
                    16:94:23:9d:78:3b:38:32:e6:b0:03:bc:2e:9d:80:
                    7d:b7:64:38:1a:01:55:a0:e4:e1:05:57:5e:48:9a:
                    1f:f8:9f:f0:9c:cc:4c:82:6f:68:45:81:fc:90:20:
                    0d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:DD:77:3D:39:A1:12:75:76:FC:C5:78:B9:A0:02:BD:79:5D:E2:CF
            X509v3 Authority Key Identifier:
                keyid:E2:E3:7F:67:D2:EE:63:A1:22:24:C1:5B:9A:D1:5A:60:A6:BF:0B:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/1/E2E37F67D2EE63A12224C15B9AD15A60A6BF0B43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2E37F67D2EE63A12224C15B9AD15A60A6BF0B43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/1/E2E37F67D2EE63A12224C15B9AD15A60A6BF0B43.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:b0:27:1c:ab:e8:66:bf:aa:b5:10:94:50:64:17:9f:b9:fc:
         f4:78:f0:00:f5:fa:20:2d:bd:dc:1d:7b:9f:91:f6:04:ff:e6:
         bf:6b:92:d6:99:2c:8b:c4:64:83:0f:33:de:7a:94:d5:bf:2b:
         8d:58:0c:83:99:01:61:f5:a0:66:22:ba:3c:99:ab:ef:9c:cb:
         16:18:a0:d9:af:54:13:a7:a3:43:3e:19:50:e2:9e:86:38:68:
         45:62:2c:5c:8e:89:f7:ec:20:fa:9b:21:be:3e:d1:17:da:d6:
         56:3a:6c:68:cb:5c:6b:a9:62:a4:87:bb:e7:89:26:a7:95:01:
         a5:86:9d:10:0e:61:e4:34:2f:ba:27:1a:2c:88:b6:38:7b:07:
         15:04:f4:46:e8:26:e8:3d:09:9b:61:eb:5d:b4:b4:4e:40:ce:
         b2:38:cd:d6:a2:38:64:79:9a:98:32:36:f5:6e:d1:04:3f:48:
         df:be:8d:bd:c6:32:6b:6b:74:6f:14:91:69:e1:a4:52:d3:7f:
         9b:df:98:3c:a6:ed:74:52:ee:ff:85:27:df:77:e7:65:27:34:
         cd:e7:b5:bf:e7:c1:59:a8:bb:3b:d2:ae:f9:d4:01:12:0c:4c:
         e8:1b:b7:9f:93:ae:cb:51:21:59:96:e8:87:3c:83:8b:70:c0:
         89:39:04:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----