Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HDzXJtxXvXRkjVa6fiUEDTfdactB9KNnhnBKGU2gQiW2/0/2D2B1C0A519E55A84D6F466E7A256F2093430E1D.mft
File:                     2D2B1C0A519E55A84D6F466E7A256F2093430E1D.mft (raw, json)
Hash identifier:          0QTYJiQ/jkvRBy7G7/IROhBc65IpSEVlwofptbARdkU=
Subject key identifier:   C6:8C:E3:2B:B6:86:BC:DD:4E:08:5B:66:3C:7C:8A:75:7A:23:4C:75
Authority key identifier: 2D:2B:1C:0A:51:9E:55:A8:4D:6F:46:6E:7A:25:6F:20:93:43:0E:1D
Certificate issuer:       /CN=2D2B1C0A519E55A84D6F466E7A256F2093430E1D
Certificate serial:       4274444A48EB31FD0BCC43A422263B1084626E16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D2B1C0A519E55A84D6F466E7A256F2093430E1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDzXJtxXvXRkjVa6fiUEDTfdactB9KNnhnBKGU2gQiW2/0/2D2B1C0A519E55A84D6F466E7A256F2093430E1D.mft
Manifest number:          24
Signing time:             Sat 10 Feb 2024 18:24:48 +0000
Manifest this update:     Sat 10 Feb 2024 18:19:48 +0000
Manifest next update:     Sun 11 Feb 2024 18:36:48 +0000
Files and hashes:         1: 2D2B1C0A519E55A84D6F466E7A256F2093430E1D.crl (hash: H5GzOFVQIL1rZHM4Tawzt8nlC371gwhl9pvLMj5/upw=)
                          2: 323830343a333032343a3a2f33322d3332203d3e20323634393332.roa (hash: BevtK0DfyXLaQpek4MhrENIlqOkKty5kzZ0RZ7qQTLI=)
                          3: 3136382e3233322e31322e302f32322d3234203d3e20323634393332.roa (hash: Y1bTeZeUpuE6Avn9VwRLLogRH5zlVkcUIAWdEZj+YMw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:74:44:4a:48:eb:31:fd:0b:cc:43:a4:22:26:3b:10:84:62:6e:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D2B1C0A519E55A84D6F466E7A256F2093430E1D
        Validity
            Not Before: Feb 10 18:19:48 2024 GMT
            Not After : Feb 11 18:36:48 2024 GMT
        Subject: CN=C68CE32BB686BCDD4E085B663C7C8A757A234C75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:67:20:41:8c:70:a4:d0:fc:a5:2a:39:94:b9:
                    09:64:9e:f2:f8:de:e5:15:82:3b:e0:16:d6:b5:01:
                    70:d3:fe:6f:d8:f8:8c:28:ea:7e:74:4d:bf:a2:51:
                    26:df:46:30:a5:6b:1d:65:85:78:42:42:e0:bb:fc:
                    20:23:62:9d:0d:92:e7:6f:52:33:4d:42:6a:1a:03:
                    40:cb:9f:2c:4d:a1:92:52:6c:1c:7c:d2:53:18:ff:
                    3f:cf:22:3a:c0:06:ad:81:e4:37:7c:e2:74:cb:e7:
                    0a:c6:09:9a:c7:02:fd:c0:c0:be:dd:e4:56:28:ae:
                    ef:ab:9d:d2:ad:75:c4:19:49:63:46:5a:f7:0e:ae:
                    1d:ce:c0:5c:e1:56:92:ec:1d:0c:bb:60:26:92:52:
                    d0:4a:00:97:bd:15:7b:6c:87:9f:18:bb:8d:8a:27:
                    37:04:9a:6c:f2:0d:94:ac:3e:82:ee:72:3c:56:21:
                    23:fe:fd:15:45:41:ff:13:82:c6:ab:30:68:4c:4a:
                    6f:0e:97:e4:03:56:87:86:9d:67:ab:44:f8:45:48:
                    6c:53:b0:16:d6:95:f9:80:d7:bd:b2:56:34:15:6b:
                    4b:94:ce:1e:08:12:df:9d:02:fa:5d:52:44:5d:89:
                    78:17:61:9e:ed:f1:64:cd:c0:16:d6:71:02:90:dc:
                    3f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8C:E3:2B:B6:86:BC:DD:4E:08:5B:66:3C:7C:8A:75:7A:23:4C:75
            X509v3 Authority Key Identifier:
                keyid:2D:2B:1C:0A:51:9E:55:A8:4D:6F:46:6E:7A:25:6F:20:93:43:0E:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDzXJtxXvXRkjVa6fiUEDTfdactB9KNnhnBKGU2gQiW2/0/2D2B1C0A519E55A84D6F466E7A256F2093430E1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D2B1C0A519E55A84D6F466E7A256F2093430E1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDzXJtxXvXRkjVa6fiUEDTfdactB9KNnhnBKGU2gQiW2/0/2D2B1C0A519E55A84D6F466E7A256F2093430E1D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:5f:bd:d2:de:87:b7:54:40:bd:f9:02:cb:d6:61:6a:00:f7:
         37:3c:7f:90:80:b7:eb:c4:cd:8b:64:27:57:0e:2a:b9:9c:23:
         74:60:4d:58:13:c8:46:bd:79:e4:5b:b9:79:10:93:38:1c:e8:
         b1:fd:0e:61:40:98:dc:88:07:d3:7a:09:df:2c:e9:7f:cc:37:
         7f:f3:6e:7b:a7:1b:e5:44:f9:74:83:b9:e3:8c:50:55:69:ab:
         e9:b8:51:6b:96:21:a0:f6:ce:4e:1a:0d:be:eb:1a:c3:18:48:
         c2:67:f5:74:0e:15:a7:a3:4d:ae:00:1e:c6:4e:9f:1f:19:b8:
         a9:ed:fe:ad:df:5c:4b:a0:fa:c6:3d:43:74:f4:9c:4b:69:95:
         a3:20:83:0e:b6:20:0c:b7:ce:f2:1b:05:95:2b:21:0b:02:c3:
         29:ff:d6:0b:10:13:3e:1a:10:ff:56:b5:1c:2b:99:0e:52:95:
         4e:03:32:0d:9f:aa:54:86:ea:75:26:cc:f3:e9:4a:e7:01:12:
         45:5e:c6:6d:30:1f:0d:c9:a7:33:a9:3f:dc:8b:fc:2f:3d:64:
         7c:e8:43:b1:f6:58:cb:d5:8d:11:77:8f:20:72:ce:ed:e0:e9:
         dd:3a:c3:0b:78:04:97:b6:8b:47:28:6a:6e:11:75:3f:9c:34:
         42:fd:02:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----