Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/0/2CD97A9413B1CCB310B498A74E162C20325B5DCF.mft
File:                     2CD97A9413B1CCB310B498A74E162C20325B5DCF.mft (raw, json)
Hash identifier:          wAQza3IBwsQLyx4Kx/ShIPB+FlgoRmY+yd8aVqq6saQ=
Subject key identifier:   24:C1:26:66:E2:30:BA:1F:46:42:B7:18:07:65:BB:FA:2C:90:A7:59
Authority key identifier: 2C:D9:7A:94:13:B1:CC:B3:10:B4:98:A7:4E:16:2C:20:32:5B:5D:CF
Certificate issuer:       /CN=2CD97A9413B1CCB310B498A74E162C20325B5DCF
Certificate serial:       053635E5E7141623C1DF92C979BF79DFCD4B6AA4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CD97A9413B1CCB310B498A74E162C20325B5DCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/0/2CD97A9413B1CCB310B498A74E162C20325B5DCF.mft
Manifest number:          B7
Signing time:             Mon 15 Apr 2024 07:43:06 +0000
Manifest this update:     Mon 15 Apr 2024 07:38:06 +0000
Manifest next update:     Tue 16 Apr 2024 08:26:06 +0000
Files and hashes:         1: 2CD97A9413B1CCB310B498A74E162C20325B5DCF.crl (hash: ITarM3yXh33lmXK26RMyivCByzvXRW7PvJLlZZszzm0=)
                          2: 34352e3232352e3136382e302f32322d3234203d3e20323636393938.roa (hash: o/y0LfceqNdZ4MiwQAWFpOTqjzWi+k+J8n/ZjiNyrfw=)
                          3: 323830343a343639343a3a2f33322d3334203d3e20323636393938.roa (hash: oTX+MccKMU6TnMILlDT9ufzbM3KKTvWF2Tb7OomjIC8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:36:35:e5:e7:14:16:23:c1:df:92:c9:79:bf:79:df:cd:4b:6a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CD97A9413B1CCB310B498A74E162C20325B5DCF
        Validity
            Not Before: Apr 15 07:38:06 2024 GMT
            Not After : Apr 16 08:26:06 2024 GMT
        Subject: CN=24C12666E230BA1F4642B7180765BBFA2C90A759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c0:4a:2b:52:09:ba:c3:89:45:b3:06:20:f8:
                    79:70:a2:fa:a9:e6:38:e0:49:4b:6a:b5:30:ca:3b:
                    f1:ed:66:07:43:f8:77:17:99:02:35:7a:22:e7:42:
                    4c:ab:e4:a2:3c:66:4d:bd:8c:c1:2f:de:a7:67:bc:
                    7f:a1:e0:fa:b1:51:5a:db:90:75:c8:6d:92:d2:0d:
                    0c:20:6e:dc:29:f3:08:13:48:6c:ef:c3:2f:1a:24:
                    5a:cd:3c:8a:38:1a:16:ca:b1:77:d8:d8:28:cd:22:
                    33:9b:bc:52:e1:7e:1a:2a:7f:36:5a:10:6f:9b:00:
                    89:5e:ed:d1:7e:55:95:64:6d:b0:67:58:84:fb:d7:
                    de:1a:76:66:1e:94:98:f0:72:45:4f:3e:92:3e:f5:
                    3d:1f:74:0b:2e:70:b8:eb:3b:15:58:a3:c4:55:ec:
                    2f:3e:d6:72:c1:8a:a7:2e:04:1d:3c:d7:a2:95:29:
                    8a:1f:da:44:74:93:a5:f8:39:71:4c:66:53:e5:be:
                    d5:6f:f3:c7:3a:f5:8c:3a:5c:53:2d:49:ca:f3:e0:
                    5a:49:35:7a:54:09:db:bf:9f:a4:22:53:ae:03:35:
                    1b:f4:15:ac:86:06:f7:c0:85:d4:aa:95:8b:88:56:
                    75:99:4f:91:26:55:4a:bc:89:81:38:63:41:a0:2f:
                    1c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C1:26:66:E2:30:BA:1F:46:42:B7:18:07:65:BB:FA:2C:90:A7:59
            X509v3 Authority Key Identifier:
                keyid:2C:D9:7A:94:13:B1:CC:B3:10:B4:98:A7:4E:16:2C:20:32:5B:5D:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/0/2CD97A9413B1CCB310B498A74E162C20325B5DCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CD97A9413B1CCB310B498A74E162C20325B5DCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/0/2CD97A9413B1CCB310B498A74E162C20325B5DCF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:ac:24:ab:aa:e4:45:5f:1b:74:74:64:c3:64:18:c1:a8:df:
         c5:f7:71:f4:4e:ca:f5:78:5b:da:dc:b6:68:4e:06:fc:a2:64:
         a7:77:5e:ca:4e:84:48:a7:36:bc:f7:a9:83:92:dd:6f:7c:92:
         a0:c0:f7:1c:ae:0a:bc:d4:fd:5c:c4:1b:d9:76:00:26:69:22:
         80:b1:79:8d:49:f9:2e:32:45:a1:f1:a3:88:04:53:5d:99:e0:
         6c:04:88:ca:60:05:34:0b:06:02:5a:10:95:e9:22:06:67:9e:
         44:45:6d:e1:a3:b3:90:5c:39:04:72:da:49:57:30:f8:80:35:
         d7:a4:7b:f7:7a:cf:e6:cc:cc:d7:97:64:ce:0c:4e:1a:47:18:
         c8:84:43:b4:9d:90:2c:5e:99:fd:31:43:c8:64:6f:a8:72:63:
         10:54:e1:1e:e4:f0:76:88:cc:79:2d:19:0a:37:c6:bd:9e:c1:
         52:42:a6:2e:1f:98:cb:ba:9c:ea:fa:37:e0:6a:ec:89:04:d0:
         dc:67:36:10:5e:ad:d1:2b:6c:4d:9c:ec:9f:7d:fb:07:6c:e4:
         86:01:62:3c:5b:d7:1f:cd:43:be:fc:47:7d:7e:b8:ad:54:2f:
         78:f4:08:6b:4a:62:bf:c2:e4:24:22:92:39:f1:24:57:04:ff:
         d0:75:05:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----