Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/2DD7DB25073BEE444F1A2C15B600446279751268.mft
File:                     2DD7DB25073BEE444F1A2C15B600446279751268.mft (raw, json)
Hash identifier:          JQWffkQfkODFJZlIV+osFoFJGe1pyOrVcZDMody1mT0=
Subject key identifier:   02:14:4E:2C:D4:34:3A:E3:8A:71:55:8A:24:0D:B8:E2:FF:66:65:77
Authority key identifier: 2D:D7:DB:25:07:3B:EE:44:4F:1A:2C:15:B6:00:44:62:79:75:12:68
Certificate issuer:       /CN=2DD7DB25073BEE444F1A2C15B600446279751268
Certificate serial:       63F510862DB62C258C8A6139B485918B38A51882
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DD7DB25073BEE444F1A2C15B600446279751268.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/2DD7DB25073BEE444F1A2C15B600446279751268.mft
Manifest number:          0278
Signing time:             Sun 14 Apr 2024 19:43:21 +0000
Manifest this update:     Sun 14 Apr 2024 19:38:21 +0000
Manifest next update:     Mon 15 Apr 2024 23:00:21 +0000
Files and hashes:         1: 323830343a346665303a3a2f33322d3332203d3e20323638333535.roa (hash: mQ1Os7qn5QMuStDzDSMi8pPULAnzO8QbK+573YHhuts=)
                          2: 323830343a346665303a383030303a3a2f33332d3333203d3e20323638333535.roa (hash: D/tBXYnnbFDtD4qSbnftkz8CCfgyzzB36YfySzQkxgI=)
                          3: 34352e3233392e37322e302f32322d3232203d3e20323638333535.roa (hash: fER4ysvKo/NRLaokfqAWX7Xz1IG8VPcyiu9GnbE7jro=)
                          4: 34352e3233392e37342e302f32332d3233203d3e20323638333535.roa (hash: ldd3XBVf8hSN+fcL3fEEvDHyc5du0qlEplLoFgLP4o0=)
                          5: 34352e3233392e37322e302f32332d3233203d3e20323638333535.roa (hash: cPHxYpLicVc2Blrsq2WI20lZ8UUXDKWIPSYrwwLGueI=)
                          6: 2DD7DB25073BEE444F1A2C15B600446279751268.crl (hash: jSRV63OKID8goCjgVWF/6wkWR21RjAYQQ6LVLCVGwTo=)
                          7: 323830343a346665303a3a2f33332d3333203d3e20323638333535.roa (hash: 7hicLItAadkbmPzxwFqf4jd6ep13U2luDvEMUlSbKyE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f5:10:86:2d:b6:2c:25:8c:8a:61:39:b4:85:91:8b:38:a5:18:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DD7DB25073BEE444F1A2C15B600446279751268
        Validity
            Not Before: Apr 14 19:38:21 2024 GMT
            Not After : Apr 15 23:00:21 2024 GMT
        Subject: CN=02144E2CD4343AE38A71558A240DB8E2FF666577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:76:4a:5a:0c:28:dd:56:86:cc:a4:04:f2:38:
                    10:f9:da:e0:97:4e:e5:5d:4d:34:ce:29:df:25:85:
                    d6:3a:4a:90:3d:a3:44:70:82:16:70:9a:b3:ed:42:
                    28:29:f1:39:d2:ed:7d:9d:07:95:ac:d9:fc:99:42:
                    8a:c8:34:7b:96:8a:d2:ad:54:06:bf:70:49:24:ed:
                    9b:14:f2:7d:13:9c:72:75:20:68:90:af:49:f1:1a:
                    92:80:62:ad:fd:3e:f8:81:5b:8f:8b:a3:86:0d:c8:
                    e4:04:1f:d3:d2:98:45:9e:b3:ec:35:dd:72:1e:0f:
                    e0:88:4e:12:59:be:5a:da:e9:c1:33:63:a1:6b:39:
                    32:8b:c2:bf:97:76:98:5c:6c:b0:4a:89:a4:32:94:
                    34:cd:38:10:de:af:60:11:13:bd:87:7b:c7:a1:ef:
                    9d:ff:39:0e:0e:0a:9c:c9:05:71:a8:82:44:8a:82:
                    73:98:7f:d0:4f:4b:47:a1:6d:b8:fa:f9:ad:54:34:
                    1e:d0:f5:53:ba:d4:22:32:b3:4d:05:fb:07:fa:32:
                    78:5b:18:29:8e:45:ef:b9:97:91:8f:33:14:b6:65:
                    dd:9d:f5:1f:a3:20:f9:75:81:b3:ac:d0:b0:d4:94:
                    a6:69:35:37:45:7c:fc:6a:f3:3f:c8:b5:78:5b:3c:
                    84:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:14:4E:2C:D4:34:3A:E3:8A:71:55:8A:24:0D:B8:E2:FF:66:65:77
            X509v3 Authority Key Identifier:
                keyid:2D:D7:DB:25:07:3B:EE:44:4F:1A:2C:15:B6:00:44:62:79:75:12:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/2DD7DB25073BEE444F1A2C15B600446279751268.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DD7DB25073BEE444F1A2C15B600446279751268.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/2DD7DB25073BEE444F1A2C15B600446279751268.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:13:dc:40:15:97:6c:70:eb:8f:a2:3b:9b:41:e4:7a:66:6a:
         4b:20:2a:f2:4a:87:34:99:b6:da:1c:f2:42:42:40:7f:d9:20:
         7c:f1:af:ab:48:2d:02:e5:ed:9a:91:9b:25:a3:e6:d7:5d:c4:
         4d:ed:dd:2e:b5:98:ea:f9:f1:25:40:85:55:83:85:bd:3f:72:
         7c:11:79:e2:eb:aa:5b:0b:6b:ee:00:a5:6c:3c:7c:24:04:b1:
         38:b4:de:89:44:66:ab:26:ae:fd:cd:10:91:43:f2:e6:e0:b5:
         28:6c:81:ed:bf:61:4b:50:1a:10:99:37:26:2f:41:21:1e:88:
         11:2b:c9:cd:2d:00:c7:1b:04:8f:73:eb:6e:3b:cd:cd:7f:f3:
         32:5b:e3:02:9e:a8:c7:bc:40:9a:a2:a7:9f:db:1b:cf:7c:c6:
         63:40:ff:be:47:97:cc:5c:fc:54:61:f1:1c:c6:40:21:71:8e:
         50:38:7e:ed:2b:71:d9:94:ad:bc:19:9c:66:11:44:f4:29:db:
         d4:45:00:ea:8c:81:f6:d6:7d:92:8c:26:26:5c:16:da:77:ea:
         d1:a9:01:c9:6f:23:50:d0:5d:73:60:4f:9d:f1:91:8e:05:19:
         c0:42:62:09:d1:dd:e5:23:fd:6e:db:c4:7c:02:a6:b2:2c:37:
         44:77:8a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----