Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/0/39585009EDAA4FFC8B2D3209D163C36E2DF83941.mft
File:                     39585009EDAA4FFC8B2D3209D163C36E2DF83941.mft (raw, json)
Hash identifier:          n7NKgEI/urEs1XhxrAZ43hwaEDIHnjuC1E+rYEbfpmk=
Subject key identifier:   C3:DD:77:98:01:97:65:8A:29:E3:D0:03:31:CE:14:8F:E6:03:00:37
Authority key identifier: 39:58:50:09:ED:AA:4F:FC:8B:2D:32:09:D1:63:C3:6E:2D:F8:39:41
Certificate issuer:       /CN=39585009EDAA4FFC8B2D3209D163C36E2DF83941
Certificate serial:       3A77D41FFD3A8381DFB38CBEE8BB07C76DE4F33B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/39585009EDAA4FFC8B2D3209D163C36E2DF83941.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/0/39585009EDAA4FFC8B2D3209D163C36E2DF83941.mft
Manifest number:          01CF
Signing time:             Mon 15 Apr 2024 08:02:13 +0000
Manifest this update:     Mon 15 Apr 2024 07:57:13 +0000
Manifest next update:     Tue 16 Apr 2024 10:44:13 +0000
Files and hashes:         1: 323830343a383134343a3a2f33322d3332203d3e20323732343433.roa (hash: VR/t4EeToSfqg7kZjs5sAXruZzGbuQIm2ZFBMjg6qyg=)
                          2: 39585009EDAA4FFC8B2D3209D163C36E2DF83941.crl (hash: I2ZdEeST36x2RWNNZ714OL4esCIYkm2z2VvqQMDCtu0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:77:d4:1f:fd:3a:83:81:df:b3:8c:be:e8:bb:07:c7:6d:e4:f3:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39585009EDAA4FFC8B2D3209D163C36E2DF83941
        Validity
            Not Before: Apr 15 07:57:13 2024 GMT
            Not After : Apr 16 10:44:13 2024 GMT
        Subject: CN=C3DD77980197658A29E3D00331CE148FE6030037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2a:6e:f2:6d:9b:fd:50:b1:57:d1:ed:ba:ed:
                    25:53:a6:ef:72:21:9a:46:2d:0a:78:cc:40:f1:02:
                    57:e6:9e:b1:9e:38:79:4f:04:44:26:8d:91:1c:47:
                    69:6b:9c:af:2b:cc:39:10:86:db:fd:21:97:ad:42:
                    9b:a3:dc:56:e8:a9:52:74:62:f3:2c:32:46:8d:f5:
                    14:7c:61:04:b6:9f:13:db:b6:95:de:1a:2a:87:eb:
                    3e:77:95:52:64:56:70:b4:d8:77:e9:30:2e:3d:c9:
                    d0:45:33:56:cb:e2:a8:08:b7:c2:82:db:f6:83:27:
                    98:7f:e8:77:c0:9c:ae:57:0b:7b:0d:f9:d0:eb:1d:
                    20:d6:cf:8e:ba:21:76:f4:56:7a:00:c6:96:52:87:
                    fc:02:63:b5:91:4e:50:5c:9b:fb:5d:ff:c5:7d:ea:
                    5e:01:51:26:1f:70:9d:4d:a0:01:8b:3f:e4:b1:57:
                    54:8b:c4:1d:8d:51:f5:15:35:45:fc:26:dc:77:7b:
                    6c:66:83:24:1e:18:cc:68:3c:20:0a:3f:dc:9c:1a:
                    cf:47:4b:83:65:b7:dc:a2:09:f4:c2:60:36:e8:2f:
                    c6:ec:c4:d6:6b:d4:6b:79:d9:95:4c:79:b7:c5:03:
                    82:c8:90:db:9f:a3:68:9d:4c:aa:28:b4:09:05:6f:
                    b6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:DD:77:98:01:97:65:8A:29:E3:D0:03:31:CE:14:8F:E6:03:00:37
            X509v3 Authority Key Identifier:
                keyid:39:58:50:09:ED:AA:4F:FC:8B:2D:32:09:D1:63:C3:6E:2D:F8:39:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/0/39585009EDAA4FFC8B2D3209D163C36E2DF83941.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/39585009EDAA4FFC8B2D3209D163C36E2DF83941.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/0/39585009EDAA4FFC8B2D3209D163C36E2DF83941.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:8a:02:dc:60:9c:0a:96:64:2a:59:5b:9e:b3:d7:ba:46:56:
         d8:38:20:67:04:72:9d:68:ce:11:6e:8b:04:98:97:5c:f0:cc:
         8a:77:8f:5b:db:7b:d1:c4:d1:5d:d9:11:2e:c5:6b:41:92:01:
         56:c6:a7:39:97:60:52:27:cb:ca:60:41:f6:76:87:62:2a:39:
         69:1a:d1:51:0b:ec:e9:58:7e:65:d4:f4:d3:cb:15:b1:65:e4:
         17:ad:ba:3d:3f:86:82:1e:b8:2b:4e:aa:82:ba:c4:06:c8:6d:
         bb:35:6b:97:1a:ec:76:99:3c:22:87:3d:98:3e:6d:5d:13:c1:
         ca:b2:79:06:13:75:18:00:cb:a8:d3:e8:ab:bd:aa:28:6a:f3:
         bf:9a:7a:1f:cc:7a:21:f6:7f:5b:66:4d:22:b7:0f:7a:3f:af:
         27:58:c5:7d:3b:bd:7b:44:a3:32:a5:89:58:1c:a2:74:d9:d4:
         6f:37:33:94:2d:b8:b3:8a:0e:1e:60:c8:db:fe:18:b4:2e:e6:
         5f:34:bb:97:20:34:2e:b0:40:94:a9:61:bf:af:a4:17:4d:34:
         cb:dc:0d:7c:a0:22:09:ac:d3:38:21:56:fd:ae:fb:f6:a3:3e:
         75:89:53:6b:c3:6a:4f:2a:54:f1:d9:61:42:24:21:80:82:ef:
         7b:bb:6e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----