Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/1/2D796204BFA07353ACB0D88D6C851A4393700E99.mft
File:                     2D796204BFA07353ACB0D88D6C851A4393700E99.mft (raw, json)
Hash identifier:          S5LnHSkUjrkyuX521uOYi34bq6MB7uimS1WeQ6mZO0k=
Subject key identifier:   BB:35:78:AD:BE:CD:0E:DC:55:52:21:5B:1B:B2:50:43:8D:F1:81:FA
Authority key identifier: 2D:79:62:04:BF:A0:73:53:AC:B0:D8:8D:6C:85:1A:43:93:70:0E:99
Certificate issuer:       /CN=2D796204BFA07353ACB0D88D6C851A4393700E99
Certificate serial:       7253FCCCDD19E3795AAA840FAB6D72CB3D372E01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D796204BFA07353ACB0D88D6C851A4393700E99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/1/2D796204BFA07353ACB0D88D6C851A4393700E99.mft
Manifest number:          10
Signing time:             Wed 17 Apr 2024 08:09:07 +0000
Manifest this update:     Wed 17 Apr 2024 08:04:07 +0000
Manifest next update:     Thu 18 Apr 2024 10:16:07 +0000
Files and hashes:         1: 3137392e3132342e3234382e302f32312d3234203d3e20323632393732.roa (hash: ONCLodisyYn8Ja6pFRwsWthUFK1YxDsiDJa1+WbggUk=)
                          2: 2D796204BFA07353ACB0D88D6C851A4393700E99.crl (hash: TlQzh7smIAC/2Dsv2NWRMX4bzTqYCqJ1l/ywleAL+zI=)
                          3: 3138362e3232372e3135322e302f32322d3234203d3e20323632393732.roa (hash: u2CAdo/KTItaJAXDB/4SW+RNPHCpDkiQqdQNcOnnxso=)
                          4: 323830343a6563303a3a2f33322d3438203d3e20323632393732.roa (hash: PCC4XYbBCcu3NJ1hRXHdlGvdkT7hIqGGj4N0UoDlKsI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:53:fc:cc:dd:19:e3:79:5a:aa:84:0f:ab:6d:72:cb:3d:37:2e:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D796204BFA07353ACB0D88D6C851A4393700E99
        Validity
            Not Before: Apr 17 08:04:07 2024 GMT
            Not After : Apr 18 10:16:07 2024 GMT
        Subject: CN=BB3578ADBECD0EDC5552215B1BB250438DF181FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0f:8c:1c:78:93:96:66:80:bb:eb:14:ba:6e:
                    d9:27:c4:74:77:a9:1c:05:e5:a2:0f:5e:b5:48:38:
                    a1:e3:c0:f6:ab:84:31:f2:8e:b9:3e:24:8e:aa:b4:
                    4d:fb:c0:3b:32:07:dd:4b:bd:52:94:2f:99:99:97:
                    0e:15:11:d3:f9:28:b8:b0:e7:cf:35:f3:73:a8:4a:
                    a0:21:3d:37:1e:54:c8:4c:ca:4e:86:c9:d8:f0:d9:
                    c5:0e:b7:7f:05:96:3f:03:fc:43:3a:c6:d5:12:a0:
                    2b:3a:cf:7b:7f:0b:fe:09:dc:5f:01:22:24:ed:56:
                    32:3f:b5:64:37:39:08:c7:02:d8:34:53:eb:14:90:
                    df:09:3c:0e:17:0f:5a:c6:80:78:d1:b0:cf:1d:c9:
                    1f:1d:3d:0b:73:a7:a4:ed:fc:5d:fe:b4:da:34:70:
                    5a:20:cf:b4:7f:05:fa:fc:64:51:82:ec:54:7c:19:
                    66:9b:f8:84:56:6d:aa:5b:ea:69:32:3d:ad:fa:5f:
                    6e:94:69:52:9a:0b:3f:3d:62:89:17:60:08:e3:dc:
                    18:4b:93:7e:7c:bb:9a:12:be:b5:f0:a4:02:e9:3c:
                    b7:61:5e:16:c7:09:51:d3:06:f9:bc:49:1e:f2:51:
                    30:79:70:25:22:5a:4d:b1:07:f4:8d:df:12:2d:86:
                    93:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:35:78:AD:BE:CD:0E:DC:55:52:21:5B:1B:B2:50:43:8D:F1:81:FA
            X509v3 Authority Key Identifier:
                keyid:2D:79:62:04:BF:A0:73:53:AC:B0:D8:8D:6C:85:1A:43:93:70:0E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/1/2D796204BFA07353ACB0D88D6C851A4393700E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D796204BFA07353ACB0D88D6C851A4393700E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/1/2D796204BFA07353ACB0D88D6C851A4393700E99.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ef:b8:4a:b7:92:b7:e6:3f:ea:9c:65:1c:6f:d2:4b:67:32:
         c6:21:00:79:bf:36:c4:73:46:81:ad:31:ee:0a:cd:b3:9b:45:
         d7:cc:8e:1f:11:e4:21:5d:e9:cd:66:f9:82:00:17:9e:b6:dd:
         b0:b8:eb:9d:e2:2f:e0:f7:76:22:5e:18:90:8d:10:dc:21:f6:
         27:7f:e4:03:dc:74:bb:b9:2b:ec:a2:32:b1:74:cb:3d:2e:72:
         24:1f:5b:53:6a:17:3d:ba:88:88:e4:1a:d7:89:0d:8c:9b:c3:
         30:79:53:ea:cd:50:2a:f8:f5:2e:12:b1:f4:b1:0a:02:ea:d5:
         6e:24:fa:84:ef:dc:97:67:a6:b2:de:09:61:41:8a:07:56:db:
         69:b8:12:0e:80:68:65:89:58:79:96:9f:51:2c:21:20:b2:d0:
         c7:ae:92:a0:b1:a4:c5:76:94:8d:b1:1c:33:51:a8:ec:6c:48:
         36:10:88:25:1c:64:c8:75:0b:73:19:9a:b2:8a:57:56:74:d8:
         64:9b:99:b1:68:cd:e6:6e:33:ae:18:ae:54:f8:0d:53:c3:ae:
         c9:c8:ab:d7:98:8a:c1:f2:84:3f:dd:da:22:75:5d:17:52:0e:
         9c:4e:d7:01:27:8b:24:06:f3:08:bb:05:80:60:e9:b4:a2:54:
         e4:d6:d2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----