Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.mft
File:                     122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.mft (raw, json)
Hash identifier:          gt6EDK/2H7e4+WxjOhoMy3nc5QByx0lzdHu2JdOwSfU=
Subject key identifier:   5F:A6:3B:CA:EB:0C:D0:C6:A1:1C:1A:99:01:08:CE:13:56:C4:64:75
Authority key identifier: 12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F
Certificate issuer:       /CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
Certificate serial:       3C099AA473F439C323ACE331C760750C229C40EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.mft
Manifest number:          0397
Signing time:             Thu 22 Jun 2023 03:00:14 +0000
Manifest this update:     Thu 22 Jun 2023 02:55:14 +0000
Manifest next update:     Fri 23 Jun 2023 05:21:14 +0000
Files and hashes:         1: 323830343a316230343a3a2f33322d3438203d3e203533303438.roa (hash: huktyN3qtpw+Aqf+zv/nEP5a2imHUNPpm35qtRl4CLg=)
                          2: 122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.crl (hash: nXLwPnZu/4fQFdD7dQGY1Gq/LcMLQodgoOtsR37Au4U=)
                          3: 3133322e3235352e3137362e302f32322d3234203d3e203533303438.roa (hash: ry//t6ehOLCOYFQj+FRje7MDwAmH4YbrwPWFkul4Qv0=)
                          4: 3138372e37332e39362e302f32302d3234203d3e203533303438.roa (hash: 60cyEzwksUIT2Cq93uTmfP/V/KbXSuv28NgzwdUHgzU=)
                          5: 3137372e3133372e34382e302f32312d3234203d3e203533303438.roa (hash: ksrZVKhAtYNfXbvcvtzCqF1O/atCQ9QwdC3pMrLk2So=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:09:9a:a4:73:f4:39:c3:23:ac:e3:31:c7:60:75:0c:22:9c:40:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
        Validity
            Not Before: Jun 22 02:55:14 2023 GMT
            Not After : Jun 23 05:21:14 2023 GMT
        Subject: CN=5FA63BCAEB0CD0C6A11C1A990108CE1356C46475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3e:bf:b4:5d:ce:d0:42:62:bc:71:11:fc:f8:
                    85:0a:55:02:37:ca:62:cd:59:88:3d:30:62:6c:0e:
                    24:30:46:4b:26:c4:86:54:7f:91:84:dc:e8:ca:8e:
                    e0:d1:32:68:63:12:c1:20:c9:53:69:d4:c5:1c:fd:
                    9e:61:48:25:c8:2b:bb:7c:47:df:ac:63:30:0c:ba:
                    9d:0a:56:a4:5d:cc:d2:42:50:b6:a4:9e:33:82:a8:
                    72:ba:d3:1f:5c:00:b3:58:56:6c:ee:f7:47:8d:23:
                    97:b3:fa:a7:d7:61:5f:d8:98:0f:ac:89:15:66:ab:
                    c0:1d:46:9f:bc:3f:86:a0:be:2e:b7:7d:2d:ef:e5:
                    5a:f9:36:c7:cf:cc:10:14:7c:84:ed:3d:b2:94:9b:
                    87:fa:11:8e:6d:07:10:4e:90:4e:76:11:5a:99:e7:
                    36:3e:35:73:bc:6e:23:f7:7c:50:0b:a3:48:d4:3e:
                    52:fc:e0:be:2a:d5:96:05:32:5b:93:93:fc:bb:9f:
                    cc:ab:ca:02:27:a8:ac:e4:ed:57:f9:14:41:44:ce:
                    f7:ed:18:37:8e:68:96:a4:2e:8d:63:76:58:2c:13:
                    46:66:e5:91:47:fe:82:89:12:1c:b3:b9:5d:4c:25:
                    19:5c:ee:c7:ed:89:f1:0e:67:2c:ee:c3:aa:1d:1b:
                    4f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A6:3B:CA:EB:0C:D0:C6:A1:1C:1A:99:01:08:CE:13:56:C4:64:75
            X509v3 Authority Key Identifier:
                keyid:12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:ff:33:df:ce:76:86:ba:af:4c:22:08:58:54:f2:eb:52:f6:
         1f:c3:fb:25:d6:69:52:26:22:c2:ad:28:fe:d3:4b:1d:5e:54:
         f2:6a:57:e1:b9:cf:f4:7a:7e:49:02:f3:24:dd:af:f7:50:2d:
         1c:46:38:d6:cd:38:cf:ad:16:b1:e2:0a:72:87:40:d0:f4:e3:
         77:d4:08:3f:b0:a0:70:ae:5d:8a:fa:62:94:69:67:b2:f7:1e:
         ce:6d:28:3b:af:0d:cd:b7:5e:18:f1:47:66:9a:d9:80:bb:41:
         0b:81:ce:24:d6:14:60:52:b9:27:8b:7a:ef:ad:62:42:c6:b7:
         e2:18:b9:2c:16:8e:62:c4:19:bd:5b:3d:56:ae:2c:8b:4b:db:
         53:ad:f7:d6:34:4b:06:f3:e3:7c:fb:9a:7b:ed:8a:4a:38:f4:
         0a:15:41:4e:57:fd:87:4e:af:6b:34:43:e2:fa:45:42:f0:7b:
         aa:a8:ad:ca:bc:99:b1:59:7c:8b:ff:60:d4:a4:17:6e:d1:4e:
         ea:56:79:b7:dd:cd:12:13:80:e6:fd:4e:ac:ac:d9:f7:05:c9:
         ae:b1:8b:8a:48:0c:29:b1:f4:ed:bf:8c:e2:7b:64:26:48:ef:
         20:f3:90:eb:42:fb:00:36:18:5e:ca:7d:87:b5:0d:75:3e:5d:
         e7:e5:e9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----