Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C514coYEexrxv39oTKuNiJmKkE1Mhqyja9Ns3stH3x3C/1/2A2DC1A8A522E5692AEF631E05B5909122DEF928.mft
File:                     2A2DC1A8A522E5692AEF631E05B5909122DEF928.mft (raw, json)
Hash identifier:          INQRr6OfKNgFtqQpEgiP5fKnIqHfFM/QRsjKHizUlQA=
Subject key identifier:   86:14:D6:88:85:DF:2E:E5:FA:8A:61:93:9F:4E:AC:B7:74:9B:DE:11
Authority key identifier: 2A:2D:C1:A8:A5:22:E5:69:2A:EF:63:1E:05:B5:90:91:22:DE:F9:28
Certificate issuer:       /CN=2A2DC1A8A522E5692AEF631E05B5909122DEF928
Certificate serial:       2D5474C2840FC3A941593D8930CC902D15780B97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A2DC1A8A522E5692AEF631E05B5909122DEF928.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C514coYEexrxv39oTKuNiJmKkE1Mhqyja9Ns3stH3x3C/1/2A2DC1A8A522E5692AEF631E05B5909122DEF928.mft
Manifest number:          02
Signing time:             Sat 20 Apr 2024 01:55:06 +0000
Manifest this update:     Sat 20 Apr 2024 01:50:06 +0000
Manifest next update:     Sun 21 Apr 2024 02:04:06 +0000
Files and hashes:         1: 2A2DC1A8A522E5692AEF631E05B5909122DEF928.crl (hash: /g3Er+fYbrLW5yRdJvtbMRfsoRTZl19VakyMUnepR6g=)
                          2: 3139302e38392e3235322e302f32322d3234203d3e20323730343134.roa (hash: fZv/8as/cX9x7fU5kQkSqFfcxS+ns8u0/7Nl8sVJFbM=)
                          3: 323830343a366261343a3a2f33322d3438203d3e20323730343134.roa (hash: SPRQbbFRDUcVEfmzLamT8jgmgBf7j2WLf5jbHqajsiw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:54:74:c2:84:0f:c3:a9:41:59:3d:89:30:cc:90:2d:15:78:0b:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2DC1A8A522E5692AEF631E05B5909122DEF928
        Validity
            Not Before: Apr 20 01:50:06 2024 GMT
            Not After : Apr 21 02:04:06 2024 GMT
        Subject: CN=8614D68885DF2EE5FA8A61939F4EACB7749BDE11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:85:95:7c:a9:b1:da:0a:0f:09:49:20:71:f4:
                    36:68:91:45:45:b7:1a:87:61:98:c0:12:8e:b2:8c:
                    5c:cd:72:79:57:2a:cb:d9:8f:9f:ad:37:34:b6:48:
                    e9:f9:c2:e1:54:ae:6f:61:2a:88:6e:63:6a:26:6f:
                    73:65:72:9d:1c:7c:5a:d6:cb:a6:e0:78:09:61:5f:
                    7d:69:9f:11:3a:b9:06:8f:ef:06:75:41:4c:1c:80:
                    b3:49:0d:29:4a:14:f5:53:31:d4:3f:83:b1:a3:21:
                    64:14:ba:f8:18:97:4d:bb:de:a5:ec:6a:b4:5c:f1:
                    95:15:c0:54:20:c5:5f:69:e9:9c:68:71:02:bc:c8:
                    ed:06:04:e3:d7:3c:46:68:24:8a:b2:4f:eb:72:6a:
                    ff:9c:61:db:60:00:65:4e:92:65:53:b0:9d:41:09:
                    4c:6b:b7:cd:bf:a9:e3:95:f5:60:68:fc:1e:aa:21:
                    de:8a:d6:9d:a2:87:b8:ec:f6:93:c7:01:d0:94:57:
                    10:c5:59:d4:6f:ad:23:95:7e:56:e6:4d:29:83:d2:
                    d8:b9:9e:a1:fb:88:0c:2c:fa:9f:d2:b1:19:fe:c9:
                    cf:56:08:05:24:3b:7e:bd:c9:32:4d:96:44:d1:7c:
                    8d:df:3f:96:a3:87:35:a3:6c:ec:3b:43:95:75:7f:
                    65:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:14:D6:88:85:DF:2E:E5:FA:8A:61:93:9F:4E:AC:B7:74:9B:DE:11
            X509v3 Authority Key Identifier:
                keyid:2A:2D:C1:A8:A5:22:E5:69:2A:EF:63:1E:05:B5:90:91:22:DE:F9:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C514coYEexrxv39oTKuNiJmKkE1Mhqyja9Ns3stH3x3C/1/2A2DC1A8A522E5692AEF631E05B5909122DEF928.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A2DC1A8A522E5692AEF631E05B5909122DEF928.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C514coYEexrxv39oTKuNiJmKkE1Mhqyja9Ns3stH3x3C/1/2A2DC1A8A522E5692AEF631E05B5909122DEF928.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:88:c2:9e:f4:63:6c:64:f5:b2:50:f9:d2:17:59:45:62:96:
         65:f9:34:93:60:b4:9a:46:a1:49:2e:8d:5c:b4:cd:ad:b4:f3:
         70:d8:df:a3:b9:d9:30:49:3f:f8:50:34:a1:45:1a:66:95:ff:
         73:38:57:8c:b3:5b:04:37:38:0c:86:a6:ab:ea:5c:1e:11:1c:
         04:4c:b2:03:2f:94:8c:f2:de:2a:1c:d5:77:56:49:10:a4:f9:
         6b:1d:c4:51:93:ea:37:ab:e1:8e:e2:23:74:00:64:d5:09:a4:
         7a:61:40:9c:88:6e:f9:fd:f2:e9:c8:db:ff:98:49:b0:e8:c1:
         75:f9:e1:f6:a0:17:61:a5:fc:67:97:24:cd:76:e9:10:0c:9a:
         82:76:e2:c4:07:b6:50:1e:a9:b9:d8:b5:32:b1:55:d4:7f:fd:
         c4:69:8f:0b:c8:3d:f8:11:2c:18:28:6a:5f:bf:79:5c:6b:09:
         35:a8:bb:a9:2b:cc:99:a4:d8:85:05:ad:32:d9:a8:43:87:97:
         06:c0:b3:2c:7f:23:03:4d:66:9c:92:2c:ea:7e:c6:a2:11:b8:
         14:34:a2:71:00:6e:0e:c6:1d:13:6e:1d:cb:dd:c2:e6:89:40:
         24:4c:0c:9e:2a:c4:bf:7b:30:b6:07:1b:cc:fb:f6:0d:ee:32:
         b0:44:7f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----