Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/0/3BE74639A548CCC5CC56F44AA6C4FFEECCE73F0C.mft
File:                     3BE74639A548CCC5CC56F44AA6C4FFEECCE73F0C.mft (raw, json)
Hash identifier:          8FF+caGezHBlPqZ4nUY9lmfHe+I1JWTMGuOLbMRIRr0=
Subject key identifier:   66:81:9F:9C:C1:FD:42:7D:D5:36:38:07:7C:9C:73:78:94:88:3D:6E
Authority key identifier: 3B:E7:46:39:A5:48:CC:C5:CC:56:F4:4A:A6:C4:FF:EE:CC:E7:3F:0C
Certificate issuer:       /CN=3BE74639A548CCC5CC56F44AA6C4FFEECCE73F0C
Certificate serial:       1785A9BE93420DD17A6C0D9016226B1045AD64C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3BE74639A548CCC5CC56F44AA6C4FFEECCE73F0C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/0/3BE74639A548CCC5CC56F44AA6C4FFEECCE73F0C.mft
Manifest number:          0538
Signing time:             Mon 15 Apr 2024 06:00:02 +0000
Manifest this update:     Mon 15 Apr 2024 05:55:02 +0000
Manifest next update:     Tue 16 Apr 2024 06:00:02 +0000
Files and hashes:         1: 3BE74639A548CCC5CC56F44AA6C4FFEECCE73F0C.crl (hash: ajLl8KyYfMiZBapJKtZ0x9+XRuLVQBHqeC1m6t10byY=)
                          2: 3136382e3132312e3137362e302f32322d3234203d3e20323635333135.roa (hash: q5ECsMHfle5RjYBsvK0e0EjDjdJBk/SazpwUHTCduKQ=)
                          3: 323830343a326466383a3a2f33322d3438203d3e20323635333135.roa (hash: SI7fm4373I26VWyqxYMOwcbtX2Dpa3HvVS5mFl4R/dU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:85:a9:be:93:42:0d:d1:7a:6c:0d:90:16:22:6b:10:45:ad:64:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BE74639A548CCC5CC56F44AA6C4FFEECCE73F0C
        Validity
            Not Before: Apr 15 05:55:02 2024 GMT
            Not After : Apr 16 06:00:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d3:93:bc:5b:d8:10:69:f3:d5:30:71:80:bb:
                    26:98:bf:03:5a:2d:50:85:00:b3:a3:17:65:dc:7b:
                    ce:a7:19:24:b9:ef:7b:68:9c:67:33:fb:6b:9d:cd:
                    93:17:bc:db:15:13:1c:d9:37:9b:f5:1a:aa:09:13:
                    a0:fa:e6:b7:d5:a0:bf:18:6b:4d:65:1f:df:fd:ca:
                    5c:08:8d:68:d3:db:4c:0a:ec:db:ee:5f:33:56:ae:
                    e2:d9:fb:b0:62:04:97:c0:d2:50:1d:40:fe:44:55:
                    e7:0c:6a:5c:b9:90:52:73:a2:4a:86:dd:9e:d3:b3:
                    43:a3:15:47:19:e9:ab:16:54:05:38:e0:5e:51:39:
                    ba:5a:be:bb:9e:06:0e:38:2b:ea:3c:d7:a4:1c:d9:
                    af:b6:19:b9:52:0d:30:0a:f5:59:77:82:26:09:47:
                    5f:d2:25:68:e3:97:7b:a2:15:83:79:74:fe:cf:7a:
                    3c:76:5d:10:d4:3d:bc:00:72:74:43:b5:1d:a8:e9:
                    06:e5:66:49:98:42:e5:a5:28:61:65:05:3b:82:50:
                    96:6a:34:ed:04:76:96:90:3d:09:97:50:d7:5e:6b:
                    9c:bf:46:58:e5:24:c3:8f:75:73:82:77:3f:9e:84:
                    c9:d1:2e:01:10:af:86:d8:2c:c6:c6:d8:77:b6:3b:
                    4a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:81:9F:9C:C1:FD:42:7D:D5:36:38:07:7C:9C:73:78:94:88:3D:6E
            X509v3 Authority Key Identifier:
                keyid:3B:E7:46:39:A5:48:CC:C5:CC:56:F4:4A:A6:C4:FF:EE:CC:E7:3F:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/0/3BE74639A548CCC5CC56F44AA6C4FFEECCE73F0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3BE74639A548CCC5CC56F44AA6C4FFEECCE73F0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/0/3BE74639A548CCC5CC56F44AA6C4FFEECCE73F0C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:a6:d0:10:bc:4e:59:aa:f5:9a:c1:84:af:f9:22:bd:c5:3f:
         66:d4:ff:b6:44:21:c3:a2:26:b8:36:3c:7c:1d:c2:b3:49:0f:
         11:55:0c:7f:a5:83:e2:bf:69:07:ed:d8:d1:48:5e:9a:c1:a8:
         32:f1:86:a5:7b:80:f9:cd:53:36:cf:9f:2f:1b:f8:eb:8b:1a:
         b0:27:b4:8d:f6:0f:fc:a2:26:c8:d3:97:d1:5b:f8:5b:a7:52:
         1b:3e:ef:1f:8d:cd:4e:ee:2f:8e:10:59:0f:1b:3b:d6:d3:c7:
         cf:0a:1e:25:b1:26:2e:97:5e:b6:ba:9b:f7:f0:4f:99:91:e1:
         0d:92:6f:df:76:98:35:e0:48:7d:e6:17:30:29:24:54:b3:3f:
         aa:0e:3d:de:fd:27:8c:a7:f4:71:9b:15:20:93:51:e1:57:68:
         34:b6:68:97:d8:8d:d3:a7:63:a8:94:c4:86:4c:ae:b2:89:40:
         e2:34:7c:ba:94:94:02:40:64:8e:c5:a2:d9:db:c1:dc:c1:fd:
         94:36:ec:ee:08:9e:5f:c8:55:06:41:8e:fb:fc:8f:9b:e0:eb:
         d8:b4:5e:e8:a2:15:2c:eb:81:88:5a:e3:d1:06:3a:e9:49:42:
         7c:e6:1e:ef:92:0a:64:f4:93:9a:36:42:4e:76:47:74:2b:99:
         23:6b:8a:7f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----