Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/22vrpt1oFoGSCLE2sZa23H2LCdD2bvqgkfcmh2dFBs3g/0/C3F6F0D038825F4DBBC6F75FCFDDC35E667465CE.mft
File:                     C3F6F0D038825F4DBBC6F75FCFDDC35E667465CE.mft (raw, json)
Hash identifier:          RiBP+o413cz9gp7KUyqoBSEULFKRoU7NCmwCZ4lPbd0=
Subject key identifier:   99:38:94:7A:00:8F:EA:DA:CC:16:FE:52:A1:D1:B6:36:3D:40:FD:F2
Authority key identifier: C3:F6:F0:D0:38:82:5F:4D:BB:C6:F7:5F:CF:DD:C3:5E:66:74:65:CE
Certificate issuer:       /CN=C3F6F0D038825F4DBBC6F75FCFDDC35E667465CE
Certificate serial:       44625B5DC1A5BD586C06B9892791E21591AD6729
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3F6F0D038825F4DBBC6F75FCFDDC35E667465CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/22vrpt1oFoGSCLE2sZa23H2LCdD2bvqgkfcmh2dFBs3g/0/C3F6F0D038825F4DBBC6F75FCFDDC35E667465CE.mft
Manifest number:          20
Signing time:             Fri 01 Nov 2024 20:32:57 +0000
Manifest this update:     Fri 01 Nov 2024 20:27:57 +0000
Manifest next update:     Sun 03 Nov 2024 00:14:57 +0000
Files and hashes:         1: C3F6F0D038825F4DBBC6F75FCFDDC35E667465CE.crl (hash: vY4q73WW+O4Lgbauh5BBAcD9wnTp3QHOJu8EQomJdGg=)
                          2: 323830343a353666633a3430303a3a2f33382d313238203d3e20323638303336.roa (hash: BSuBzK4CBcQPNADa591qqnrZ3kmXiIcawIVTk3DpOxw=)
                          3: 34352e3136382e32372e302f32342d3332203d3e20323638303336.roa (hash: WfbluAPmAAMpaWzmHOJE5J1mhv4oaw/17TFAMztX13I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:62:5b:5d:c1:a5:bd:58:6c:06:b9:89:27:91:e2:15:91:ad:67:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3F6F0D038825F4DBBC6F75FCFDDC35E667465CE
        Validity
            Not Before: Nov  1 20:27:57 2024 GMT
            Not After : Nov  3 00:14:57 2024 GMT
        Subject: CN=9938947A008FEADACC16FE52A1D1B6363D40FDF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c6:42:39:20:20:40:31:61:0f:38:a5:66:44:
                    ec:b1:c0:5c:c8:19:1b:80:dc:6c:27:54:34:4b:17:
                    3f:4d:1c:4a:ac:0b:59:9d:81:e4:09:dd:67:6e:37:
                    c1:fb:cb:34:d3:62:08:69:73:e7:df:52:7f:f6:84:
                    21:04:c5:ca:7e:4d:6d:2b:56:df:d5:fd:df:37:10:
                    1e:ff:35:22:46:c3:f9:93:c2:ab:4e:bc:41:ac:6b:
                    04:70:b7:78:29:ed:31:c7:e2:47:98:77:2b:7c:e3:
                    97:b6:4b:23:01:70:5a:5e:73:5d:18:f5:06:a3:03:
                    c8:72:2f:e3:80:99:ae:4c:94:24:6f:fe:fd:66:8a:
                    35:ef:26:69:4f:1d:5c:86:97:39:7f:05:d8:df:ff:
                    fa:7f:43:dd:f9:70:15:2f:a4:1b:c3:a1:58:f3:19:
                    fe:4e:93:0a:8c:6a:76:46:36:d1:59:d4:f4:aa:b4:
                    4c:09:98:b4:d3:1e:5f:ea:3f:56:7c:c3:d5:a7:ae:
                    56:7c:0b:58:13:d0:8f:b8:5d:fe:96:bd:d1:07:fb:
                    e1:db:17:2c:e0:81:2b:02:5d:41:c0:49:71:9e:72:
                    44:40:86:76:01:48:19:e2:4d:3f:92:b7:42:8a:32:
                    d7:99:bc:08:0f:5f:17:c9:3a:4e:74:00:67:26:6e:
                    09:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:38:94:7A:00:8F:EA:DA:CC:16:FE:52:A1:D1:B6:36:3D:40:FD:F2
            X509v3 Authority Key Identifier:
                keyid:C3:F6:F0:D0:38:82:5F:4D:BB:C6:F7:5F:CF:DD:C3:5E:66:74:65:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/22vrpt1oFoGSCLE2sZa23H2LCdD2bvqgkfcmh2dFBs3g/0/C3F6F0D038825F4DBBC6F75FCFDDC35E667465CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3F6F0D038825F4DBBC6F75FCFDDC35E667465CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/22vrpt1oFoGSCLE2sZa23H2LCdD2bvqgkfcmh2dFBs3g/0/C3F6F0D038825F4DBBC6F75FCFDDC35E667465CE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:b3:a1:f6:ba:9c:c4:2e:f6:d7:5a:da:38:3d:b2:8e:96:b5:
         bf:06:e6:f3:e8:bb:5c:21:0e:70:2d:65:d3:bf:4d:e9:ce:7b:
         c5:06:67:49:8f:3a:9b:61:77:bd:3c:04:4d:16:eb:dc:7d:64:
         83:eb:fb:37:8f:8b:fb:33:de:d5:10:57:4b:01:d3:6a:da:ef:
         a6:24:3b:9f:cb:8d:72:b8:80:8f:ab:56:6e:c7:dd:d1:36:c3:
         6d:58:2e:dd:64:36:41:f8:1d:95:4b:8b:9b:af:01:3d:28:e8:
         61:ea:cc:1a:ba:cf:a9:09:71:fa:fe:a4:d8:57:b2:f3:fa:50:
         76:7b:6a:57:69:0b:37:7e:56:fa:e8:67:f4:6e:3a:31:63:0e:
         2b:a4:aa:d2:0c:85:77:56:cd:78:dd:3f:77:f7:54:aa:b3:be:
         40:19:f6:c1:d6:da:d3:d6:23:7f:cc:31:48:44:87:67:3e:8a:
         f1:d8:bf:3b:02:80:3a:94:ca:a7:1b:5f:99:9a:1e:b2:82:bd:
         19:80:87:ba:db:81:95:5f:ce:ea:b3:d2:6d:db:6c:2f:98:f6:
         6f:06:9d:3a:7e:e8:78:e9:fc:bc:65:20:e7:4c:6e:4b:12:55:
         57:57:79:ac:32:76:34:ab:1c:fb:88:36:a1:4e:46:01:86:1a:
         e2:f9:e5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 21:39:18 2024 by rpki-client on console-ams.rpki-client.org