Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GyLVzFMWSPvpkLVDSUVfuRZ89Y5jsddoVMTpENVouy2w/0/1BD3539362BF32EB95BC6B5278F59D9AE218EA54.mft
File:                     1BD3539362BF32EB95BC6B5278F59D9AE218EA54.mft (raw, json)
Hash identifier:          9pkYLQvdxfvQJr+m4X2hIVjCdBLon+6X/+nnDqBJG3g=
Subject key identifier:   E2:66:18:01:DD:9B:CC:78:0B:78:5E:78:9B:E8:60:54:8C:62:A1:75
Authority key identifier: 1B:D3:53:93:62:BF:32:EB:95:BC:6B:52:78:F5:9D:9A:E2:18:EA:54
Certificate issuer:       /CN=1BD3539362BF32EB95BC6B5278F59D9AE218EA54
Certificate serial:       6FD818885AC8E325DC178797DBD6BCCE2F3C4CC9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BD3539362BF32EB95BC6B5278F59D9AE218EA54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GyLVzFMWSPvpkLVDSUVfuRZ89Y5jsddoVMTpENVouy2w/0/1BD3539362BF32EB95BC6B5278F59D9AE218EA54.mft
Manifest number:          2B
Signing time:             Mon 26 Feb 2024 01:59:00 +0000
Manifest this update:     Mon 26 Feb 2024 01:54:00 +0000
Manifest next update:     Tue 27 Feb 2024 04:16:00 +0000
Files and hashes:         1: 3230312e37312e3232302e302f32322d3234203d3e20323731313135.roa (hash: k7Dq2cWx0wEd5Bua9pV2mfrwFphFzDnDRYCMKc0PJ1s=)
                          2: 323830343a373637633a3a2f33322d3334203d3e20323731313135.roa (hash: 8w/Fj1vkNUghSDKIz4xlb/A05IBPyMZDyUUCFmrBbNA=)
                          3: 1BD3539362BF32EB95BC6B5278F59D9AE218EA54.crl (hash: 6srST0XIY2M3+KNXLsF/DBEp1apdXXUcbJ1RqKH+dkA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:d8:18:88:5a:c8:e3:25:dc:17:87:97:db:d6:bc:ce:2f:3c:4c:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BD3539362BF32EB95BC6B5278F59D9AE218EA54
        Validity
            Not Before: Feb 26 01:54:00 2024 GMT
            Not After : Feb 27 04:16:00 2024 GMT
        Subject: CN=E2661801DD9BCC780B785E789BE860548C62A175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:61:a5:2a:67:59:2c:b7:e7:66:ab:65:86:9b:
                    4b:6e:56:81:9a:af:6a:33:29:12:b3:26:e6:28:96:
                    e2:8f:96:a7:a8:8c:e4:9c:87:c5:fd:e4:08:12:31:
                    d1:74:a3:7f:72:d2:7c:30:17:ed:6b:b0:9d:30:21:
                    d5:88:b6:0a:3c:2d:a5:62:95:86:3a:a3:98:00:79:
                    61:99:d6:a1:a7:e0:68:2c:0e:8b:10:57:99:b7:b8:
                    35:09:bd:84:64:bc:3f:df:ac:f7:7b:1c:d4:90:53:
                    a7:98:45:5e:15:04:cb:06:8b:91:b0:46:ca:f3:a3:
                    80:e2:d4:c0:ef:a4:74:52:6a:f2:0e:c0:a5:6f:a0:
                    eb:72:0a:fc:fb:1b:64:4f:51:9f:11:c4:af:99:7b:
                    ca:aa:c6:79:66:ee:69:e9:15:5e:98:59:7a:cf:c4:
                    10:fc:47:73:d3:53:49:69:41:f2:ab:47:bb:86:22:
                    99:fa:17:d4:e5:77:b2:f5:75:92:22:a6:a1:f5:00:
                    e0:91:56:0d:e4:d2:9b:6d:47:92:fe:fd:71:c2:62:
                    ef:24:8a:90:7f:6e:a4:d3:57:da:0c:2f:25:75:19:
                    46:84:69:6e:ad:bd:36:9e:12:3b:ef:44:07:5a:de:
                    ee:a9:78:8c:f7:e4:3e:8a:b7:3c:ca:16:de:ca:6a:
                    ec:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:66:18:01:DD:9B:CC:78:0B:78:5E:78:9B:E8:60:54:8C:62:A1:75
            X509v3 Authority Key Identifier:
                keyid:1B:D3:53:93:62:BF:32:EB:95:BC:6B:52:78:F5:9D:9A:E2:18:EA:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GyLVzFMWSPvpkLVDSUVfuRZ89Y5jsddoVMTpENVouy2w/0/1BD3539362BF32EB95BC6B5278F59D9AE218EA54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BD3539362BF32EB95BC6B5278F59D9AE218EA54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GyLVzFMWSPvpkLVDSUVfuRZ89Y5jsddoVMTpENVouy2w/0/1BD3539362BF32EB95BC6B5278F59D9AE218EA54.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:52:a3:f2:e1:7a:86:1f:76:76:ff:72:cf:c1:a7:d7:b9:6f:
         4a:5d:43:de:96:c2:49:98:eb:b2:77:64:10:fa:e4:b2:8c:4a:
         f6:27:d6:1e:5d:4b:8f:7b:ef:9a:ea:e3:7c:b1:5c:3d:47:a5:
         d9:5a:15:ea:de:50:10:4e:f4:26:3a:f5:7f:46:41:c4:02:c3:
         83:ba:40:ef:60:54:fb:42:79:52:09:83:01:0c:b8:1e:3f:86:
         2f:95:d0:78:95:66:f6:09:83:90:f2:65:0f:ce:6d:51:8e:6c:
         ac:8b:65:79:3c:17:aa:01:f4:fa:c0:bf:78:e0:81:59:f8:e7:
         ee:af:ad:da:89:4e:d6:f2:d5:eb:08:e5:76:e0:75:d1:54:b5:
         06:63:c5:3c:9b:dc:b1:55:69:93:be:97:d4:4d:da:f3:d1:63:
         8e:a0:84:2d:99:e6:04:53:03:49:ab:0d:53:3b:bb:2f:f5:bd:
         cb:45:df:2a:f5:f7:51:3c:54:eb:97:fd:2d:cc:c9:d8:99:2d:
         21:cc:cd:ff:63:60:1d:b8:68:c5:0b:4c:df:f9:18:fb:b2:6b:
         c8:2a:6b:4f:a4:a1:34:f9:c3:6f:32:91:a1:57:a9:a4:9c:ff:
         49:e6:fe:bc:da:d5:97:e6:7c:7c:97:e5:c1:83:a9:0d:a0:9e:
         e1:c8:2d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----