Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/0/2D076D620A8AE1C7F675770C2C99E419639D3DAE.mft
File:                     2D076D620A8AE1C7F675770C2C99E419639D3DAE.mft (raw, json)
Hash identifier:          GwqsAKSpMCdIEij1qiX3ByJPU2qjx5zZjfm0nvw+UTk=
Subject key identifier:   27:14:D6:AC:F7:BF:A4:F5:53:77:5E:F6:64:D6:6A:B3:37:6F:49:14
Authority key identifier: 2D:07:6D:62:0A:8A:E1:C7:F6:75:77:0C:2C:99:E4:19:63:9D:3D:AE
Certificate issuer:       /CN=2D076D620A8AE1C7F675770C2C99E419639D3DAE
Certificate serial:       0D20738286F9B5A19D97FDCE27ABD397B2C1A779
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D076D620A8AE1C7F675770C2C99E419639D3DAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/0/2D076D620A8AE1C7F675770C2C99E419639D3DAE.mft
Manifest number:          04AF
Signing time:             Mon 15 Apr 2024 10:01:44 +0000
Manifest this update:     Mon 15 Apr 2024 09:56:44 +0000
Manifest next update:     Tue 16 Apr 2024 10:02:44 +0000
Files and hashes:         1: 2D076D620A8AE1C7F675770C2C99E419639D3DAE.crl (hash: d0ed7AkGzln4WSpSyh1CSG2G8P0uFm05ddHlqjorTm0=)
                          2: 3230302e3136302e31362e302f32302d3234203d3e203232313438.roa (hash: xEw2osROt+QYvOCAD4japy4Two7m0uWMRmWlCxExBno=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:20:73:82:86:f9:b5:a1:9d:97:fd:ce:27:ab:d3:97:b2:c1:a7:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D076D620A8AE1C7F675770C2C99E419639D3DAE
        Validity
            Not Before: Apr 15 09:56:44 2024 GMT
            Not After : Apr 16 10:02:44 2024 GMT
        Subject: CN=2714D6ACF7BFA4F553775EF664D66AB3376F4914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:86:c9:b5:e9:37:6a:da:95:59:3d:0b:49:b2:
                    ee:c3:2a:a1:c9:4e:5c:8b:93:24:77:ca:23:78:5f:
                    dc:89:c3:dd:ff:84:9c:9e:89:2a:57:40:f0:65:2c:
                    f3:6a:6c:b3:7b:8e:06:02:d8:f5:35:51:2e:1b:fb:
                    1e:1d:97:82:1d:4b:af:14:27:40:6e:fe:dc:49:d6:
                    fd:3a:97:33:c9:0e:25:81:68:27:1f:0f:71:b6:c7:
                    24:f3:47:02:ce:95:9c:45:d5:11:39:35:51:26:4b:
                    62:d5:8f:3e:b8:1f:b9:9e:4d:1f:af:bc:53:9c:81:
                    4f:5b:40:85:6e:94:b1:6d:64:02:37:fe:33:08:d5:
                    90:2b:74:d9:f6:a6:6f:d4:75:44:48:cb:00:f8:bf:
                    17:66:64:fd:02:44:fc:7d:15:a7:87:df:d5:10:56:
                    15:c0:e5:89:35:d8:fe:b4:7d:e2:d9:1d:47:cc:d7:
                    bc:7b:5e:9b:dd:85:a4:26:04:3a:59:c7:39:24:3a:
                    ea:94:cf:00:30:77:3b:37:2f:05:c0:28:58:e6:47:
                    85:f9:44:e0:04:be:aa:37:50:4c:e4:9f:c6:41:38:
                    51:5b:92:1c:be:5a:98:22:44:9c:d2:06:5f:79:ab:
                    5e:53:41:1d:43:52:de:04:c2:af:ee:af:d6:bf:36:
                    1a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:14:D6:AC:F7:BF:A4:F5:53:77:5E:F6:64:D6:6A:B3:37:6F:49:14
            X509v3 Authority Key Identifier:
                keyid:2D:07:6D:62:0A:8A:E1:C7:F6:75:77:0C:2C:99:E4:19:63:9D:3D:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/0/2D076D620A8AE1C7F675770C2C99E419639D3DAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D076D620A8AE1C7F675770C2C99E419639D3DAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/0/2D076D620A8AE1C7F675770C2C99E419639D3DAE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:83:a7:73:79:2b:98:14:05:b2:06:df:60:a0:61:65:87:42:
         b3:c4:0f:b2:75:ea:cf:33:b9:11:3b:e8:d2:66:a1:56:76:6d:
         dd:3a:67:dc:04:d5:d5:a5:a4:84:58:4b:50:cd:a5:8c:cc:99:
         19:a9:0e:67:f7:a6:9f:e2:25:b5:d6:51:f8:dd:fd:8c:68:31:
         58:b9:cb:7a:c4:92:13:1c:02:34:c2:b4:af:5f:37:bb:43:66:
         19:e3:9d:33:8e:28:b3:b0:60:5d:c5:f2:39:b2:6d:66:7d:cb:
         b2:54:22:76:54:45:73:10:64:1d:24:84:82:47:9b:7c:7f:96:
         c8:73:68:df:8d:61:3c:29:bc:e3:dc:48:9e:75:1d:3c:59:e9:
         7a:03:10:3e:51:9b:9b:5a:4f:5d:fa:e1:bd:6c:a4:00:39:b0:
         8a:cc:76:33:0c:92:fb:88:c7:d3:60:44:4d:9f:b1:ed:95:10:
         22:9a:df:41:6d:cc:26:81:fd:3b:18:c0:f5:26:13:ad:4a:52:
         81:15:f2:38:f8:1c:00:67:c7:61:5a:1f:5b:b5:52:07:44:15:
         8d:bf:b0:f4:4f:fb:d9:93:99:fb:2f:d6:92:46:17:fa:d3:14:
         8b:9d:38:2d:ae:36:5b:9e:c2:01:80:39:04:b4:3c:0f:fe:28:
         1e:da:85:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----