Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/2B8C048D5678769A63BDDF77C151B142C39211C1.mft
File:                     2B8C048D5678769A63BDDF77C151B142C39211C1.mft (raw, json)
Hash identifier:          MoSueTZ/4G/Cq7DdizUS1ZlgCrOET6g8XJ+a9MFvFPY=
Subject key identifier:   2C:4A:3A:BC:6D:1C:30:B3:03:7A:07:B9:EF:43:A8:E3:63:D4:D3:67
Authority key identifier: 2B:8C:04:8D:56:78:76:9A:63:BD:DF:77:C1:51:B1:42:C3:92:11:C1
Certificate issuer:       /CN=2B8C048D5678769A63BDDF77C151B142C39211C1
Certificate serial:       335237A00E1E4F1851048E8B131EED4AA1EC13D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B8C048D5678769A63BDDF77C151B142C39211C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/2B8C048D5678769A63BDDF77C151B142C39211C1.mft
Manifest number:          29
Signing time:             Sun 22 May 2022 03:30:59 +0000
Manifest this update:     Sun 22 May 2022 03:25:59 +0000
Manifest next update:     Mon 23 May 2022 06:36:59 +0000
Files and hashes:         1: 323830343a333132633a3a2f33322d3438203d3e20323634393938.roa (hash: y4es4XSpAYPfudtYkLEnD8DXinFkaW9z/kwbPb4Lt7o=)
                          2: 2B8C048D5678769A63BDDF77C151B142C39211C1.crl (hash: 3wzvQ6v4uSUlt/eVEgiSwwCXzwAHNAabdC/lQmXQoQo=)
                          3: 3137302e38342e3135362e302f32322d3234203d3e20323634393938.roa (hash: PjSiD5EWXwmKtyL13ttJaDVhRL/4w8c1g108trfpVdw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:52:37:a0:0e:1e:4f:18:51:04:8e:8b:13:1e:ed:4a:a1:ec:13:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B8C048D5678769A63BDDF77C151B142C39211C1
        Validity
            Not Before: May 22 03:25:59 2022 GMT
            Not After : May 23 06:36:59 2022 GMT
        Subject: CN=2C4A3ABC6D1C30B3037A07B9EF43A8E363D4D367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7d:a6:91:d4:c7:ec:02:ab:ce:a3:04:92:77:
                    ab:29:1f:90:ce:dd:a0:74:1c:6d:57:97:3f:dd:77:
                    39:27:4c:cd:81:fd:fd:43:1d:a1:70:59:70:8e:21:
                    51:e2:c5:a9:b0:f9:e7:d1:e7:60:1e:c3:21:ed:55:
                    aa:ca:1d:63:98:f8:97:d5:b2:9f:75:bc:83:6f:6f:
                    1c:ce:33:67:d3:64:cb:3f:6c:0a:ec:1d:62:25:4c:
                    5b:e5:43:5f:25:e2:34:be:bd:45:a5:05:24:85:c3:
                    07:ef:70:e1:6f:3d:6c:ec:7c:b2:1a:61:65:d0:2c:
                    86:c4:d7:4a:46:8b:0f:a9:30:0a:a1:5e:64:29:34:
                    dd:2c:1c:43:10:4f:80:12:57:66:6e:b8:ad:95:5f:
                    d5:f8:74:1c:a9:fc:40:19:1d:db:b9:7b:37:35:78:
                    7b:d1:3c:52:f4:e6:7c:7d:f7:80:82:3d:e2:12:95:
                    0d:25:1f:e0:c7:2f:bc:00:79:32:58:b6:88:94:59:
                    c0:84:6b:80:db:de:42:8d:f9:33:d0:10:a0:a9:0c:
                    df:72:9c:e7:0f:26:92:56:ce:2a:30:1a:c2:41:98:
                    ab:05:25:ef:8b:19:83:25:d5:15:7c:b2:37:09:ad:
                    16:25:90:ed:82:a2:20:be:5f:47:49:c1:cc:48:fe:
                    15:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4A:3A:BC:6D:1C:30:B3:03:7A:07:B9:EF:43:A8:E3:63:D4:D3:67
            X509v3 Authority Key Identifier:
                keyid:2B:8C:04:8D:56:78:76:9A:63:BD:DF:77:C1:51:B1:42:C3:92:11:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/2B8C048D5678769A63BDDF77C151B142C39211C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B8C048D5678769A63BDDF77C151B142C39211C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/2B8C048D5678769A63BDDF77C151B142C39211C1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:25:3c:01:69:2b:58:fa:20:c5:fd:17:86:a2:58:f7:1d:37:
         a8:3e:95:0b:9e:a4:b8:25:f8:37:5e:41:37:96:34:f0:c4:15:
         aa:8c:1a:a6:92:b7:85:d7:f7:80:cd:65:9b:6e:c0:a0:be:b4:
         97:e6:13:e7:c6:a1:f7:0f:a4:e2:c9:a5:17:34:a7:00:13:01:
         dc:eb:a9:12:04:bd:a7:b4:a1:d8:5c:4f:aa:32:0c:0f:ba:c4:
         e9:e1:30:a5:b6:7c:65:fb:cb:83:ee:2c:29:4d:bd:c5:b4:b2:
         e8:d1:68:2c:3a:4e:a4:bd:57:f9:5c:72:f0:75:24:4c:11:ba:
         d6:1b:9f:08:39:6b:99:a0:2f:f5:84:42:58:88:af:cf:30:12:
         da:01:08:a7:05:4e:05:54:53:8a:7a:42:4c:61:7f:ea:42:37:
         66:83:f9:fc:54:33:aa:0a:81:05:dd:d0:58:1f:fb:52:aa:68:
         c5:1a:6f:5c:e6:08:73:e0:16:69:15:59:60:0e:59:c5:59:00:
         49:60:12:1a:d6:ab:95:45:a6:1f:60:14:97:3c:a0:f5:f4:3c:
         bb:d6:09:ae:cd:72:85:4f:c7:ed:af:a8:ff:4a:36:4f:01:1b:
         33:67:86:49:f3:16:10:59:80:c9:cc:e5:08:58:67:e6:7f:20:
         79:62:5b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----