Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/C2E766FF08C2E10FBAC140414BCC53321D358C79.mft
File:                     C2E766FF08C2E10FBAC140414BCC53321D358C79.mft (raw, json)
Hash identifier:          dFhAferVeIVb4mtrTMGTYiiOCNRrRgjIhX9lnhG/Jys=
Subject key identifier:   23:3B:9B:A7:C2:B7:0D:55:20:26:B7:F6:7C:82:B9:EB:73:C9:41:44
Authority key identifier: C2:E7:66:FF:08:C2:E1:0F:BA:C1:40:41:4B:CC:53:32:1D:35:8C:79
Certificate issuer:       /CN=C2E766FF08C2E10FBAC140414BCC53321D358C79
Certificate serial:       133D6A495BBB84D094BFF34376B3295D0D128783
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2E766FF08C2E10FBAC140414BCC53321D358C79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/C2E766FF08C2E10FBAC140414BCC53321D358C79.mft
Manifest number:          14
Signing time:             Mon 15 Apr 2024 01:41:39 +0000
Manifest this update:     Mon 15 Apr 2024 01:36:39 +0000
Manifest next update:     Tue 16 Apr 2024 02:08:39 +0000
Files and hashes:         1: 3137372e382e33322e302f32302d3332203d3e20323632383330.roa (hash: yT0kLlxDlUMKQzuKW3PYS0qHZR6JSA3Bt4y5jk+3nLU=)
                          2: C2E766FF08C2E10FBAC140414BCC53321D358C79.crl (hash: 9Wc7BsDJt3NBD7pwhrsfON9Cmdm5tUkyIpdlG5uNpRM=)
                          3: 323830343a3261383a3a2f33322d313238203d3e20323632383330.roa (hash: Z38aTc3Ah4JVhgW1epL4s0H1ToThJyzTkfLyw2CK9hw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:3d:6a:49:5b:bb:84:d0:94:bf:f3:43:76:b3:29:5d:0d:12:87:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2E766FF08C2E10FBAC140414BCC53321D358C79
        Validity
            Not Before: Apr 15 01:36:39 2024 GMT
            Not After : Apr 16 02:08:39 2024 GMT
        Subject: CN=233B9BA7C2B70D552026B7F67C82B9EB73C94144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:71:c9:83:65:61:9d:ec:d6:2e:8c:fe:8a:8f:
                    9b:a8:cc:49:e7:fe:df:ec:59:a4:83:05:bf:4a:81:
                    c3:94:d3:95:f3:2d:bb:ed:0b:e4:5d:67:cd:53:cd:
                    a7:ef:d4:5b:0b:a6:a9:49:ba:ce:02:e4:0f:a3:d2:
                    f7:99:2d:88:94:88:43:4c:e7:01:20:a0:6a:6d:3e:
                    8c:6b:cf:bf:f6:4f:49:6a:ed:db:94:1d:1a:cf:9e:
                    b5:7d:c0:ae:91:6a:20:af:71:9a:52:ad:e0:62:9c:
                    34:97:d4:0b:53:f9:2e:47:b2:6f:8d:aa:95:c4:a5:
                    12:6b:3e:ff:38:1f:22:6f:c7:83:85:03:5a:cc:11:
                    9a:8b:9d:6b:98:57:35:a0:95:57:35:69:c0:2d:9e:
                    f6:0f:99:fc:dc:b6:25:62:6f:57:ec:c3:1d:99:d5:
                    f8:cc:bb:80:b6:06:aa:4c:dd:75:82:e8:7b:16:c9:
                    1a:a8:1c:29:dc:74:c1:9e:31:17:37:8e:d5:6c:7d:
                    1d:9b:f7:db:16:c7:94:11:8c:3d:71:0b:61:98:23:
                    23:f0:fa:03:54:81:cc:68:05:2d:de:d2:3a:00:c1:
                    24:ae:5d:00:2f:cf:d4:db:c9:f4:03:4d:0a:9f:93:
                    96:4a:28:e7:43:6e:fb:7d:3d:5c:9d:55:85:b4:ce:
                    99:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:3B:9B:A7:C2:B7:0D:55:20:26:B7:F6:7C:82:B9:EB:73:C9:41:44
            X509v3 Authority Key Identifier:
                keyid:C2:E7:66:FF:08:C2:E1:0F:BA:C1:40:41:4B:CC:53:32:1D:35:8C:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/C2E766FF08C2E10FBAC140414BCC53321D358C79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2E766FF08C2E10FBAC140414BCC53321D358C79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/C2E766FF08C2E10FBAC140414BCC53321D358C79.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:92:2b:d4:42:88:c2:59:28:27:2f:29:13:1f:f3:e2:53:c6:
         f0:28:5d:5a:85:0e:79:c4:24:20:be:63:26:a7:b3:8d:fb:4a:
         18:99:06:35:0b:90:07:1e:ed:61:94:15:0c:fa:1e:89:dd:5b:
         27:3e:8b:01:82:d3:7e:9e:17:65:3d:7c:de:97:01:49:fa:50:
         56:cb:63:78:1a:42:f2:9c:7f:17:32:5f:d8:a5:87:f8:de:60:
         d1:46:ef:8f:26:09:43:34:1a:28:5c:e0:3a:40:ac:76:d9:2b:
         fb:a5:91:9d:d3:4f:96:f9:f0:af:29:ae:01:2e:1a:a1:04:91:
         b1:e1:0f:bb:73:d4:d8:38:be:ed:45:72:60:0f:de:0e:64:da:
         7e:6b:b8:65:07:8e:1f:73:af:99:9b:8c:66:95:f3:96:f0:ee:
         cb:5b:02:f8:a2:80:1e:0c:19:ae:6c:54:d7:34:d8:7d:e7:ec:
         c4:bb:41:3c:11:e7:52:5b:9e:88:92:db:b8:b4:d4:a0:48:34:
         d8:97:cb:99:c7:5f:18:bc:df:34:3b:a6:40:81:f1:c0:65:0f:
         92:a2:19:0d:97:e9:3e:55:ae:e6:aa:84:b6:4f:09:f1:57:f4:
         f2:ea:7f:50:e0:c2:0a:57:9f:7e:6d:79:a9:fd:9f:89:a3:5c:
         ee:74:93:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----