Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/2CD0D4F4D734A5C1F429F81ABF207B8F5D59F23D.mft
File:                     2CD0D4F4D734A5C1F429F81ABF207B8F5D59F23D.mft (raw, json)
Hash identifier:          uwgFl330/zV1/tEl6DiXQj2dGd5rhHZp5yADxvCGV3Y=
Subject key identifier:   1F:0A:99:53:9E:C3:D7:BF:E8:04:7E:48:EF:E2:B4:3E:1D:18:FE:2F
Authority key identifier: 2C:D0:D4:F4:D7:34:A5:C1:F4:29:F8:1A:BF:20:7B:8F:5D:59:F2:3D
Certificate issuer:       /CN=2CD0D4F4D734A5C1F429F81ABF207B8F5D59F23D
Certificate serial:       2BD7786678F821627CFFF1909B430A26943BF649
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CD0D4F4D734A5C1F429F81ABF207B8F5D59F23D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/2CD0D4F4D734A5C1F429F81ABF207B8F5D59F23D.mft
Manifest number:          0405
Signing time:             Mon 15 Apr 2024 09:30:00 +0000
Manifest this update:     Mon 15 Apr 2024 09:25:00 +0000
Manifest next update:     Tue 16 Apr 2024 10:57:00 +0000
Files and hashes:         1: 34352e3233302e3231322e302f32322d3234203d3e20323637313735.roa (hash: bRwhbPLNbeghVxmwN+Etobf+owA6K/udFjM2GrX9xq8=)
                          2: 2CD0D4F4D734A5C1F429F81ABF207B8F5D59F23D.crl (hash: LpPSRf4whih1I7HrVtpJld09eJIRtX+BN6AjosPSvwE=)
                          3: 323830343a343934383a3a2f33322d3334203d3e20323637313735.roa (hash: 2YoGakToEH9uuq7aycXvD1JaXqQ+fynaFqXuU0rQGW0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:d7:78:66:78:f8:21:62:7c:ff:f1:90:9b:43:0a:26:94:3b:f6:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CD0D4F4D734A5C1F429F81ABF207B8F5D59F23D
        Validity
            Not Before: Apr 15 09:25:00 2024 GMT
            Not After : Apr 16 10:57:00 2024 GMT
        Subject: CN=1F0A99539EC3D7BFE8047E48EFE2B43E1D18FE2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:47:f2:c7:5f:5c:03:a6:89:68:2b:ae:d3:f4:
                    d6:35:0e:71:e6:e5:db:a0:b3:a4:84:76:10:3b:23:
                    5b:27:44:5c:04:19:df:92:2a:b0:5b:55:b3:a5:90:
                    97:1c:09:4f:93:d0:49:bb:0f:fb:cf:ac:d5:c0:16:
                    d1:eb:4a:e4:a8:5f:29:91:27:27:8a:e5:c4:62:4a:
                    b9:a2:a0:ff:e8:71:34:8c:89:0b:4d:99:d3:b1:12:
                    45:0c:1e:a3:d8:8a:3b:f5:f6:00:fb:47:8c:8a:b0:
                    e0:b7:05:bb:72:7d:84:f5:a8:85:0e:62:c7:e7:58:
                    08:12:f7:e8:ac:05:83:f8:ff:3e:66:34:9a:a2:09:
                    4b:d1:13:3f:a8:a2:ea:60:7a:02:9c:17:4b:f3:18:
                    00:2c:30:71:b8:f8:2d:16:17:de:0f:22:1a:1f:41:
                    0b:b7:a8:50:34:3d:3b:18:48:a8:0a:26:d6:ff:13:
                    94:cd:2c:e3:e0:c5:09:3d:5b:54:05:6a:18:b7:f4:
                    7c:a7:bf:e3:2f:a2:d8:aa:88:4e:69:15:b2:90:f9:
                    13:51:d1:c6:ab:1e:cc:e1:59:a2:18:63:dc:12:f5:
                    2f:ba:09:14:b6:62:30:6d:03:47:d4:5d:5a:0b:8e:
                    78:ca:55:57:4a:91:0c:e0:86:99:e6:fb:94:27:8a:
                    55:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0A:99:53:9E:C3:D7:BF:E8:04:7E:48:EF:E2:B4:3E:1D:18:FE:2F
            X509v3 Authority Key Identifier:
                keyid:2C:D0:D4:F4:D7:34:A5:C1:F4:29:F8:1A:BF:20:7B:8F:5D:59:F2:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/2CD0D4F4D734A5C1F429F81ABF207B8F5D59F23D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CD0D4F4D734A5C1F429F81ABF207B8F5D59F23D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/2CD0D4F4D734A5C1F429F81ABF207B8F5D59F23D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:24:0b:cd:9c:fe:dc:0f:3e:31:9c:90:82:0e:c2:a1:b9:11:
         4b:bd:42:52:f6:ae:ba:cc:ce:05:7f:2d:64:4e:71:07:40:cc:
         8f:be:ba:d9:b7:d7:c5:bc:63:98:25:2e:5a:ae:51:8d:c6:c2:
         84:54:05:71:4d:22:d4:24:cd:1e:dd:18:d4:01:88:1e:92:9a:
         ec:76:61:2f:27:66:20:a4:20:34:8e:4d:20:51:24:7e:83:8c:
         4b:7a:bc:3d:34:09:08:a8:bf:ac:8d:a3:de:f5:0e:b0:41:64:
         19:d1:1e:12:1e:27:3c:22:40:29:4f:63:f5:57:5a:85:c8:de:
         3d:e4:09:53:10:b5:ad:d3:cf:57:be:2e:24:a2:d7:c7:a6:2a:
         43:2c:19:f5:fb:f5:e1:6d:9b:28:37:33:54:fd:25:39:ec:83:
         ba:7f:14:74:a1:26:77:6d:9b:f7:12:c0:f9:46:20:2a:48:4f:
         39:11:07:c1:b0:05:92:d7:51:33:93:bd:d8:5b:a1:32:6f:27:
         bb:6a:cb:2e:99:fb:1b:81:6c:02:73:7b:3b:fe:e1:37:59:8d:
         a1:c4:a5:0b:ef:9f:24:5b:69:f9:6d:13:26:9b:7c:da:a4:59:
         43:ac:f6:71:14:28:81:9c:e1:30:f0:14:f9:c4:82:a1:d0:3f:
         db:f2:f2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----