Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/2A0C4065352FA29FE69D81683D46C7FAE700B8B0.mft
File:                     2A0C4065352FA29FE69D81683D46C7FAE700B8B0.mft (raw, json)
Hash identifier:          sX5y57VsIQVcn0WoTCa/kuTVIKb9+reJT8sepM2L3Z8=
Subject key identifier:   31:DB:45:2A:35:61:B6:21:60:ED:F0:E2:B6:E0:BF:EB:4C:69:0D:A2
Authority key identifier: 2A:0C:40:65:35:2F:A2:9F:E6:9D:81:68:3D:46:C7:FA:E7:00:B8:B0
Certificate issuer:       /CN=2A0C4065352FA29FE69D81683D46C7FAE700B8B0
Certificate serial:       41A832C945E35DF87320B6643D539AE62C861C6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A0C4065352FA29FE69D81683D46C7FAE700B8B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/2A0C4065352FA29FE69D81683D46C7FAE700B8B0.mft
Manifest number:          3C
Signing time:             Tue 09 Jan 2024 04:23:41 +0000
Manifest this update:     Tue 09 Jan 2024 04:18:41 +0000
Manifest next update:     Wed 10 Jan 2024 04:58:41 +0000
Files and hashes:         1: 323830343a323936633a3a2f33322d3332203d3e20323634303134.roa (hash: WqK3QQKMVxAcAL1M39FBEP9hOfDyZo3M3MbSJmZeWzY=)
                          2: 2A0C4065352FA29FE69D81683D46C7FAE700B8B0.crl (hash: 8mknQ4FPzB0GgqMzUZ3qyT+5qtDk1OZoqf2IeoZBCbU=)
                          3: 3134332e302e3136342e302f32322d3234203d3e20323634303134.roa (hash: RNuasEMNAjvR1TGWt/i97WjM3H5LnkCDiPHcxqFEjl4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:a8:32:c9:45:e3:5d:f8:73:20:b6:64:3d:53:9a:e6:2c:86:1c:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A0C4065352FA29FE69D81683D46C7FAE700B8B0
        Validity
            Not Before: Jan  9 04:18:41 2024 GMT
            Not After : Jan 10 04:58:41 2024 GMT
        Subject: CN=31DB452A3561B62160EDF0E2B6E0BFEB4C690DA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2f:7a:de:97:ff:4d:d8:7e:48:d3:ea:d9:1e:
                    1b:2a:d0:20:7a:d5:4d:58:7d:59:8a:fd:c3:6e:4c:
                    f8:89:fa:b5:a8:70:15:14:76:82:42:5e:94:f0:4b:
                    ab:19:94:28:21:f8:ac:0f:18:66:1e:44:0b:b3:df:
                    2b:29:df:b1:9e:2c:2b:b1:f1:27:fe:4b:be:9a:dc:
                    c2:5e:37:62:84:b4:9b:24:4c:d3:28:6e:a3:1d:d9:
                    2c:0e:14:be:37:fe:39:fc:73:73:02:5a:62:7b:ac:
                    2b:1d:93:20:9b:00:a4:27:cc:5b:83:f3:44:e9:c0:
                    6b:c3:d7:52:99:85:7f:2e:1c:17:68:53:c5:ff:2b:
                    4f:45:ab:e1:a7:3e:40:28:fe:ee:2e:77:88:e3:a9:
                    5e:e4:5a:cd:a1:2b:07:db:8f:6e:45:3b:55:98:e7:
                    db:24:5c:66:81:a3:ad:15:eb:00:20:ee:9a:b3:04:
                    70:6f:08:77:99:47:26:3e:31:a6:0a:e8:96:d0:6b:
                    9e:83:88:f1:60:33:c2:79:63:cd:cf:92:ad:76:bc:
                    45:23:5a:58:70:a3:3e:0c:34:b8:1b:3f:52:93:f2:
                    22:ed:83:1e:69:b0:a9:06:05:c0:d4:e2:83:d6:f3:
                    46:a9:6d:ca:8d:f9:c1:a6:51:79:bf:3b:f0:30:19:
                    20:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:DB:45:2A:35:61:B6:21:60:ED:F0:E2:B6:E0:BF:EB:4C:69:0D:A2
            X509v3 Authority Key Identifier:
                keyid:2A:0C:40:65:35:2F:A2:9F:E6:9D:81:68:3D:46:C7:FA:E7:00:B8:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/2A0C4065352FA29FE69D81683D46C7FAE700B8B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A0C4065352FA29FE69D81683D46C7FAE700B8B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/2A0C4065352FA29FE69D81683D46C7FAE700B8B0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:a2:fc:3c:26:91:97:64:cf:34:cf:b4:e3:7d:5b:4d:59:3c:
         b3:d6:0c:a9:17:6e:c4:18:38:c2:34:74:48:0d:d8:e3:a1:c0:
         b4:e0:a7:63:9e:c4:55:5c:de:5a:db:f7:ed:0f:2f:e7:41:72:
         78:67:56:bb:e1:8f:1f:2c:8a:56:2b:8a:6a:d3:af:ef:91:cb:
         96:56:e6:13:d4:c4:df:54:5a:c9:81:9e:d9:20:06:70:bc:44:
         e7:24:6c:88:46:90:38:22:05:e0:28:d0:7a:30:f3:0f:e6:c8:
         1a:29:d1:48:d8:88:ac:24:81:d9:9f:ea:20:b5:8a:ff:64:4e:
         b4:2c:91:e7:01:07:46:29:00:ca:6b:a6:f6:17:6a:6a:1b:85:
         6f:1c:cd:66:a2:0b:99:78:19:e5:05:c6:64:7a:bf:b8:c7:21:
         4d:cd:ad:28:7d:2b:1e:54:70:d7:c4:52:90:ed:c7:87:84:b3:
         54:60:28:f4:1f:f1:40:a2:74:86:48:91:3b:bd:6d:15:e2:d2:
         5c:c8:fe:f7:89:df:e9:df:36:b2:18:fa:28:4f:36:a4:21:73:
         56:28:82:f9:b1:98:b5:de:be:18:dc:d2:5a:58:23:25:d7:b4:
         e9:4d:0a:87:f4:f6:d3:cf:ee:0a:33:ff:d9:62:cf:97:bc:36:
         f4:16:9e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----