Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/AFFA27A4EF543D92435C4D23302EF84CB77463B8.mft
File:                     AFFA27A4EF543D92435C4D23302EF84CB77463B8.mft (raw, json)
Hash identifier:          2SMQ8onde7hVhnceteAedDOeIwYiA1/na1a+6A7VKt0=
Subject key identifier:   2C:64:1A:BC:01:B2:6F:53:CD:13:FC:FA:63:88:2C:A4:3E:51:4E:4D
Authority key identifier: AF:FA:27:A4:EF:54:3D:92:43:5C:4D:23:30:2E:F8:4C:B7:74:63:B8
Certificate issuer:       /CN=AFFA27A4EF543D92435C4D23302EF84CB77463B8
Certificate serial:       7668BFB77C7031212F241EC1938B920C1F2EC282
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFFA27A4EF543D92435C4D23302EF84CB77463B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/AFFA27A4EF543D92435C4D23302EF84CB77463B8.mft
Manifest number:          5B
Signing time:             Mon 15 Apr 2024 00:43:22 +0000
Manifest this update:     Mon 15 Apr 2024 00:38:22 +0000
Manifest next update:     Tue 16 Apr 2024 00:47:22 +0000
Files and hashes:         1: 34352e3233382e34382e302f32322d3234203d3e20323733363833.roa (hash: fZ83sDf+00ZUf3awqF8VyaBSh98s2p6GQD1T0SXA3ac=)
                          2: AFFA27A4EF543D92435C4D23302EF84CB77463B8.crl (hash: z0tNCrJh0KbQ5LkYMu3GpE6Ur5Vps5GcTj7xxWQJGEI=)
                          3: 323830343a386161343a3a2f33322d3438203d3e20323733363833.roa (hash: kQ6AOI7SwboPx+zesfMq145cHJNctkPDsQy0m3VVG+E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:68:bf:b7:7c:70:31:21:2f:24:1e:c1:93:8b:92:0c:1f:2e:c2:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFFA27A4EF543D92435C4D23302EF84CB77463B8
        Validity
            Not Before: Apr 15 00:38:22 2024 GMT
            Not After : Apr 16 00:47:22 2024 GMT
        Subject: CN=2C641ABC01B26F53CD13FCFA63882CA43E514E4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:db:e2:d9:7e:40:dd:e0:f7:5e:10:1e:30:24:
                    14:36:c8:b7:d5:dd:39:52:8e:83:78:ed:48:33:4e:
                    52:e7:51:37:f2:89:b9:31:00:2d:3c:ce:63:e9:76:
                    2d:99:ca:c3:35:58:e9:ff:12:a3:c9:cb:60:0a:8e:
                    b9:bb:fe:54:2d:42:e9:06:74:c0:be:bc:5b:69:71:
                    22:e3:bb:0c:d1:2d:ef:9c:b3:a4:cc:6f:75:48:67:
                    e7:d5:2b:70:38:d7:28:11:62:04:6d:a2:42:ff:4a:
                    8f:43:e4:86:28:04:f0:80:4f:9e:ae:19:b2:dc:28:
                    67:66:2a:d0:63:5d:b5:77:73:d1:3b:16:26:93:d2:
                    42:ac:30:be:c1:71:41:a6:6c:86:ae:b7:d5:03:ad:
                    a1:fc:7f:3d:60:a3:b7:b7:58:fc:f6:54:48:0d:56:
                    04:1b:86:03:1b:39:63:43:0a:ab:e8:da:c5:17:ad:
                    7e:78:70:0d:78:6d:99:d9:53:98:7c:0b:6e:48:4c:
                    da:05:7b:8c:54:6d:34:b7:2f:f7:94:26:50:bd:0f:
                    e0:c1:c5:25:c9:46:13:32:44:af:6d:63:31:f6:87:
                    7c:13:fc:2b:ec:9e:4d:d7:35:15:b1:0f:10:3c:cb:
                    13:72:7c:52:6c:7c:3b:a8:f7:80:87:90:4f:e8:cb:
                    8e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:64:1A:BC:01:B2:6F:53:CD:13:FC:FA:63:88:2C:A4:3E:51:4E:4D
            X509v3 Authority Key Identifier:
                keyid:AF:FA:27:A4:EF:54:3D:92:43:5C:4D:23:30:2E:F8:4C:B7:74:63:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/AFFA27A4EF543D92435C4D23302EF84CB77463B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFFA27A4EF543D92435C4D23302EF84CB77463B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/AFFA27A4EF543D92435C4D23302EF84CB77463B8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:f4:ee:c0:1e:e1:d5:94:2e:d1:17:6d:69:c9:97:ac:ae:ef:
         4c:b1:c1:0b:f7:fc:48:96:a8:a3:52:40:f3:26:dd:fd:51:90:
         2e:36:ae:7f:09:4b:57:59:72:ba:1b:a0:07:8e:e5:69:25:26:
         28:6b:fe:a6:ec:c1:07:07:b2:70:00:25:17:29:29:ef:ce:41:
         74:a7:8e:c2:4c:8e:2a:66:2f:17:01:2d:d6:4b:38:05:97:4b:
         1f:8c:fb:2b:8d:7b:aa:e7:7f:71:c0:70:c7:ab:92:7f:1f:dd:
         01:fd:0f:93:76:46:ed:b2:ee:70:53:3c:88:a7:1c:a5:f6:4b:
         d7:47:bc:59:2a:64:a7:e4:d2:24:2a:77:d9:92:8f:bb:2f:01:
         5c:a1:98:9b:15:f4:17:e3:28:41:ba:56:cc:7f:f2:5f:68:0b:
         6c:81:13:05:19:ea:65:9b:2e:9d:bb:b4:93:ee:9e:69:0e:7a:
         6b:1f:43:cc:ac:06:3c:a5:e1:26:bf:0e:5e:a3:01:bf:35:f1:
         ca:45:a1:1b:07:98:dc:b5:e2:90:04:2e:98:bc:97:80:42:3e:
         a3:b0:09:53:de:e4:74:63:32:48:7c:03:04:ae:57:13:32:71:
         cc:8d:73:d6:49:c4:b8:71:a3:cf:b2:22:cb:41:4f:de:f9:5f:
         9c:50:8c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----