Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DhSptJHFELEV3Mm2sPYjjT3iTWD7idfYYU1AXKCQ6Zkg/0/2A876EB3D8C19EC441483201BDB5CEB1C0C6640A.mft
File:                     2A876EB3D8C19EC441483201BDB5CEB1C0C6640A.mft (raw, json)
Hash identifier:          7Cao3Z68XRjlLBYE1KDVr/mJDqr1qKBgxll8sP84QFs=
Subject key identifier:   76:41:CA:B3:AE:A9:82:31:CD:83:28:EE:06:20:7B:0F:C0:ED:4D:BF
Authority key identifier: 2A:87:6E:B3:D8:C1:9E:C4:41:48:32:01:BD:B5:CE:B1:C0:C6:64:0A
Certificate issuer:       /CN=2A876EB3D8C19EC441483201BDB5CEB1C0C6640A
Certificate serial:       7CAAFC87F1D9D70C10CCA9A654FA05318155A85B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A876EB3D8C19EC441483201BDB5CEB1C0C6640A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhSptJHFELEV3Mm2sPYjjT3iTWD7idfYYU1AXKCQ6Zkg/0/2A876EB3D8C19EC441483201BDB5CEB1C0C6640A.mft
Manifest number:          E5
Signing time:             Sun 14 Apr 2024 19:56:05 +0000
Manifest this update:     Sun 14 Apr 2024 19:51:05 +0000
Manifest next update:     Mon 15 Apr 2024 22:04:05 +0000
Files and hashes:         1: 3137302e37392e36302e302f32322d3234203d3e20323636323837.roa (hash: GFcGCii/zOFk5ToWW0mMPE5nkITJVVf0gSu67vVVYLg=)
                          2: 2A876EB3D8C19EC441483201BDB5CEB1C0C6640A.crl (hash: CJV7l8mXMioJpw/+UX8yjtkzWV1+a5Wsb6Ne/5SzVvo=)
                          3: 323830343a333537343a3a2f33322d3438203d3e20323636323837.roa (hash: 4OPwO0f/J6wqnpOIy10tm2ONeC6m6a0w7uyDdFr0tnk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:aa:fc:87:f1:d9:d7:0c:10:cc:a9:a6:54:fa:05:31:81:55:a8:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A876EB3D8C19EC441483201BDB5CEB1C0C6640A
        Validity
            Not Before: Apr 14 19:51:05 2024 GMT
            Not After : Apr 15 22:04:05 2024 GMT
        Subject: CN=7641CAB3AEA98231CD8328EE06207B0FC0ED4DBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:41:f0:dd:c1:90:ba:03:5a:25:ac:ce:2a:60:
                    5d:34:5d:bc:73:fc:bd:e2:6f:35:52:08:23:3f:43:
                    b7:1d:d7:0a:75:db:5a:94:dd:0a:7e:3d:8c:c5:cc:
                    78:da:d7:43:1d:de:29:b6:bf:f0:9b:b7:65:d7:23:
                    2e:b7:22:a3:65:2a:68:0b:f7:b8:11:e8:95:4a:5b:
                    6b:72:eb:2a:6c:3a:0a:e8:e4:dd:3d:d1:96:82:0a:
                    f7:28:71:d3:c2:fc:4c:50:d0:c2:f4:24:0d:f3:93:
                    da:e2:ab:8d:0b:2d:c0:b0:f2:e7:82:b0:ef:a2:64:
                    b4:e5:36:ea:7c:b6:60:e3:1f:99:08:06:14:66:f5:
                    ca:4b:cd:28:fd:25:fd:03:38:9b:42:4e:cb:30:73:
                    67:09:88:31:1a:62:0b:30:c4:3b:da:12:ec:c9:98:
                    f4:a6:ec:dc:c1:59:e3:14:66:6b:6c:5e:c6:96:6a:
                    e1:7b:82:b8:f8:7f:96:75:93:1f:15:50:2e:18:87:
                    88:9a:51:d0:30:4a:f6:fe:e2:85:a9:69:ad:87:0b:
                    89:b7:77:b4:4a:e5:e3:67:6a:4c:67:7b:9c:3d:b2:
                    6d:dc:3a:08:10:9f:1f:ed:74:e9:cc:2a:ee:e2:a5:
                    21:dc:6b:05:c1:9e:76:f7:ac:1f:79:cc:34:b7:91:
                    8a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:41:CA:B3:AE:A9:82:31:CD:83:28:EE:06:20:7B:0F:C0:ED:4D:BF
            X509v3 Authority Key Identifier:
                keyid:2A:87:6E:B3:D8:C1:9E:C4:41:48:32:01:BD:B5:CE:B1:C0:C6:64:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhSptJHFELEV3Mm2sPYjjT3iTWD7idfYYU1AXKCQ6Zkg/0/2A876EB3D8C19EC441483201BDB5CEB1C0C6640A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A876EB3D8C19EC441483201BDB5CEB1C0C6640A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhSptJHFELEV3Mm2sPYjjT3iTWD7idfYYU1AXKCQ6Zkg/0/2A876EB3D8C19EC441483201BDB5CEB1C0C6640A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:27:a2:f7:bf:3c:bb:0e:53:be:80:d2:a7:44:8f:cc:e1:05:
         ee:66:e8:9e:fe:ed:d1:5a:39:01:a7:5f:89:7d:77:16:a1:49:
         91:e3:0e:b5:73:4f:dd:90:4c:69:31:ef:d8:4a:91:f4:08:a8:
         b3:ab:93:c9:f4:dc:44:b2:c3:23:2c:bb:38:34:ec:7e:03:e2:
         bc:ed:8f:25:e5:87:0c:d8:8f:53:e7:85:35:fa:7e:66:7a:0d:
         dd:18:12:dc:47:f5:c7:20:ee:6b:be:d7:2b:89:9f:50:4c:5c:
         7d:0e:9f:ae:8e:ac:21:b3:a3:dd:d4:b1:9d:15:f4:6d:d3:12:
         e1:06:6c:77:c0:13:9b:0e:76:45:2c:c5:14:44:40:ca:05:4f:
         4e:db:f9:87:75:44:7d:60:f0:cc:7f:10:c8:8f:61:68:b0:60:
         5c:d3:f8:26:ae:6a:74:0f:e5:e1:42:1c:af:6e:81:b0:12:b9:
         f6:a3:3c:78:ff:b5:b5:69:ba:4c:1b:3f:c0:c2:cd:f5:44:ea:
         f4:c0:05:58:98:8e:78:99:04:5b:f6:37:7c:8c:f1:6b:5b:47:
         97:a9:21:86:93:c9:8b:d8:5b:1a:72:75:4c:c1:ac:1a:f0:dc:
         62:26:29:f6:ff:50:9a:33:f7:89:f2:a7:48:85:7c:ca:57:8a:
         37:a9:8a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----