Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/0/2FF2F84183D096398A51FA6F044F57FCC8A45BB7.mft
File:                     2FF2F84183D096398A51FA6F044F57FCC8A45BB7.mft (raw, json)
Hash identifier:          hQWKwUgoKPkX7YiP2G3HPWcsoqslrprWCvvwnb22qIA=
Subject key identifier:   DF:D5:34:50:B0:39:3B:D1:2E:17:36:52:BF:7D:BA:6C:41:3E:F4:A1
Authority key identifier: 2F:F2:F8:41:83:D0:96:39:8A:51:FA:6F:04:4F:57:FC:C8:A4:5B:B7
Certificate issuer:       /CN=2FF2F84183D096398A51FA6F044F57FCC8A45BB7
Certificate serial:       08E56E9482E9D8D7DE39BDBC7A25D2681F0FB50A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FF2F84183D096398A51FA6F044F57FCC8A45BB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/0/2FF2F84183D096398A51FA6F044F57FCC8A45BB7.mft
Manifest number:          0334
Signing time:             Mon 15 Apr 2024 02:27:33 +0000
Manifest this update:     Mon 15 Apr 2024 02:22:33 +0000
Manifest next update:     Tue 16 Apr 2024 02:50:33 +0000
Files and hashes:         1: 2FF2F84183D096398A51FA6F044F57FCC8A45BB7.crl (hash: 8eUymlv2vRiBOfk9hpgzgjMi7ocgasK9eLoaFP2gSFw=)
                          2: 3137372e34342e3134342e302f32302d3234203d3e20323632343238.roa (hash: tPERkLfieC9YQ2vl4bJz5c4qX+aevcZ+R926MaYr/Tw=)
                          3: 3137302e38322e3135322e302f32322d3234203d3e20323632343238.roa (hash: VSPek+3WA7bk0dWr9Xeo3B+TVFpGtnu9B59safZLcBE=)
                          4: 323830343a313364633a3a2f33322d3334203d3e20323632343238.roa (hash: 1YbcuBdDpnTqSXXiIHnolOG4Coy7l0kpRZ84oYefxP8=)
                          5: 3139312e362e3137362e302f32302d3234203d3e20323632343238.roa (hash: hf85B1WEZhtLdHkuw1S/dtJCa+1DWpx1Zdpg/ZiXd30=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:e5:6e:94:82:e9:d8:d7:de:39:bd:bc:7a:25:d2:68:1f:0f:b5:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FF2F84183D096398A51FA6F044F57FCC8A45BB7
        Validity
            Not Before: Apr 15 02:22:33 2024 GMT
            Not After : Apr 16 02:50:33 2024 GMT
        Subject: CN=DFD53450B0393BD12E173652BF7DBA6C413EF4A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ab:8b:70:f4:b0:26:17:ae:a8:e7:d5:88:18:
                    95:f4:fa:01:1b:ed:15:f4:fb:99:c2:62:ac:6c:ea:
                    92:66:2c:29:7c:46:96:f7:e3:5b:01:c8:fc:f0:5a:
                    35:6e:a3:a9:33:36:fa:cc:14:9d:24:48:38:64:95:
                    57:12:ed:46:c1:cb:f0:f9:11:38:21:04:cb:13:78:
                    18:75:03:5f:a2:ef:e3:1d:93:8c:44:f6:29:0d:87:
                    52:77:2a:c4:7a:4d:bf:62:9e:ac:a0:44:2f:d0:c5:
                    18:36:d0:ba:1c:97:5d:30:a1:f2:67:c5:72:da:a7:
                    64:46:ef:7c:7f:46:0c:29:e6:a2:ff:5f:1d:6a:99:
                    88:a1:9e:35:66:ae:3c:06:92:b8:50:35:07:26:43:
                    ad:32:04:69:eb:d2:04:55:d3:47:01:bf:be:24:60:
                    3c:37:5c:4b:0a:03:a5:b1:e2:37:98:ec:9a:91:e7:
                    f7:68:5e:54:2e:0b:a3:ae:ae:b9:e7:53:2f:a9:5a:
                    2e:27:ab:89:14:42:53:c4:d9:38:d0:89:ec:a8:60:
                    58:99:0f:a8:89:c4:37:40:8f:8c:40:04:35:9c:26:
                    c2:9c:c6:d9:be:04:be:dc:ce:31:8b:2d:59:f8:79:
                    2d:08:a6:93:48:2c:d5:ce:43:00:b5:30:30:3c:cf:
                    65:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D5:34:50:B0:39:3B:D1:2E:17:36:52:BF:7D:BA:6C:41:3E:F4:A1
            X509v3 Authority Key Identifier:
                keyid:2F:F2:F8:41:83:D0:96:39:8A:51:FA:6F:04:4F:57:FC:C8:A4:5B:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/0/2FF2F84183D096398A51FA6F044F57FCC8A45BB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FF2F84183D096398A51FA6F044F57FCC8A45BB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/0/2FF2F84183D096398A51FA6F044F57FCC8A45BB7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:7f:57:78:e0:6a:b0:9a:a2:4a:dc:37:66:32:dc:a1:b0:09:
         80:09:60:07:e7:6a:b3:75:35:97:3c:e9:2e:f0:09:0a:ed:3b:
         0f:9c:a1:17:46:b4:ac:37:33:8a:a2:58:fb:4c:2f:d6:cf:5c:
         d5:01:db:ad:81:d3:5e:30:70:9c:f6:99:9b:76:d3:5d:30:87:
         d9:0a:a7:4e:9e:ef:df:44:34:3b:9b:21:d8:4a:4b:5c:0f:85:
         f7:ef:03:bb:db:40:ec:92:ff:5b:ad:f3:fe:f4:57:e0:f8:d5:
         63:63:86:6f:90:f4:e2:8f:0d:1b:b0:7e:b3:f2:65:95:81:08:
         98:60:88:a3:27:22:3e:2f:ca:d3:c6:82:d3:fa:95:66:c3:5b:
         31:a3:ec:ca:31:24:bb:1a:99:56:32:91:5e:53:44:7d:d6:65:
         25:b3:3b:17:78:cb:47:a6:a7:6f:c0:84:44:c7:2c:45:4f:51:
         50:ed:ca:1f:17:df:5f:3b:2f:71:87:1a:0b:0b:18:9d:d8:d3:
         a8:47:e7:6a:dc:7e:a8:81:a7:df:bb:9f:49:43:fa:08:40:b6:
         07:4d:e6:31:23:37:66:f3:08:57:0e:c4:f0:4e:74:1c:0a:61:
         34:07:44:7c:c0:81:e2:47:0a:c9:1c:10:49:29:92:87:0e:ca:
         ee:38:90:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----