Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3DcUg5mQ9MSinmMTHhUMfqpBmiGwxLJesWsEnPYeXoYs/0/3F8788D11DDD58B2DA59187B48D648DCFC2612BC.mft
File:                     3F8788D11DDD58B2DA59187B48D648DCFC2612BC.mft (raw, json)
Hash identifier:          yBSq6fhmUJa0+VP0xgt9ru0zm5rq6bZaXeAsuSwr3IY=
Subject key identifier:   7F:48:B4:BD:0E:FC:79:6F:6A:C9:B6:99:65:B9:55:06:6F:B3:97:5A
Authority key identifier: 3F:87:88:D1:1D:DD:58:B2:DA:59:18:7B:48:D6:48:DC:FC:26:12:BC
Certificate issuer:       /CN=3F8788D11DDD58B2DA59187B48D648DCFC2612BC
Certificate serial:       78551D9272C94EACA3A3A08A78BB117D72382D87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F8788D11DDD58B2DA59187B48D648DCFC2612BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3DcUg5mQ9MSinmMTHhUMfqpBmiGwxLJesWsEnPYeXoYs/0/3F8788D11DDD58B2DA59187B48D648DCFC2612BC.mft
Manifest number:          A2
Signing time:             Mon 15 Apr 2024 07:13:54 +0000
Manifest this update:     Mon 15 Apr 2024 07:08:54 +0000
Manifest next update:     Tue 16 Apr 2024 10:45:54 +0000
Files and hashes:         1: 34352e3138372e3133362e302f32322d3332203d3e20323639343739.roa (hash: DZvt/BwkUlj5WWW1sZbjpPOK4qHfWmBg5BzoVlgUKD4=)
                          2: 323830343a363534343a3a2f33322d313238203d3e20323639343739.roa (hash: Ui+Cu5dEHKopb9x5Sz+8TyUBfanlQP1PXsbqq2HInZI=)
                          3: 3F8788D11DDD58B2DA59187B48D648DCFC2612BC.crl (hash: QSLHk7b3+hQBZo7nmfLKVjObh53CwvXblqUASsuAqcw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:55:1d:92:72:c9:4e:ac:a3:a3:a0:8a:78:bb:11:7d:72:38:2d:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F8788D11DDD58B2DA59187B48D648DCFC2612BC
        Validity
            Not Before: Apr 15 07:08:54 2024 GMT
            Not After : Apr 16 10:45:54 2024 GMT
        Subject: CN=7F48B4BD0EFC796F6AC9B69965B955066FB3975A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3c:82:92:f6:f6:c9:0f:3a:a3:2d:98:db:90:
                    c2:5c:aa:b6:6b:88:eb:3c:00:98:7a:b6:35:5c:b4:
                    ed:f8:52:06:8b:da:76:8a:8a:a7:dd:3e:9e:99:59:
                    b6:cc:c0:97:f0:c7:2e:a5:94:1e:37:7e:f1:1c:e2:
                    9a:05:9d:95:e4:42:22:27:2d:c0:9d:cf:4f:3e:63:
                    2e:65:70:e0:a6:e3:82:ef:a4:37:e3:1e:61:58:00:
                    a2:1f:66:3e:65:92:08:52:e4:17:dd:09:dc:44:d4:
                    cf:41:c6:67:d4:85:06:2d:55:3d:bd:2b:15:ea:28:
                    64:ba:ff:a0:ae:58:c3:fc:db:95:45:4d:74:26:3f:
                    fa:a7:80:20:57:40:27:c8:24:15:27:ba:28:bb:77:
                    c4:10:6e:1a:8a:3b:f0:c5:0d:fd:a0:5e:8a:fe:d4:
                    0a:9c:31:fe:8e:5b:1d:b1:16:1a:b8:ae:4e:ff:cb:
                    c8:3e:c2:00:cf:69:75:69:48:3b:29:1d:b0:9c:0e:
                    ea:ff:32:e9:f0:d6:9c:38:fb:bc:c1:34:b8:59:f6:
                    d8:48:bc:53:f3:1a:b4:8f:19:66:0d:21:9e:01:36:
                    1d:e7:64:51:90:65:5d:59:c7:d8:93:86:b7:e1:1d:
                    b9:4b:64:e5:f4:a4:f9:4a:e8:3f:19:cf:2c:5c:c0:
                    f0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:48:B4:BD:0E:FC:79:6F:6A:C9:B6:99:65:B9:55:06:6F:B3:97:5A
            X509v3 Authority Key Identifier:
                keyid:3F:87:88:D1:1D:DD:58:B2:DA:59:18:7B:48:D6:48:DC:FC:26:12:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3DcUg5mQ9MSinmMTHhUMfqpBmiGwxLJesWsEnPYeXoYs/0/3F8788D11DDD58B2DA59187B48D648DCFC2612BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F8788D11DDD58B2DA59187B48D648DCFC2612BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3DcUg5mQ9MSinmMTHhUMfqpBmiGwxLJesWsEnPYeXoYs/0/3F8788D11DDD58B2DA59187B48D648DCFC2612BC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:60:7a:b1:93:b1:19:0f:45:ff:3b:87:f0:75:8f:3f:67:bc:
         83:3b:4e:c3:11:e2:8e:48:4f:05:75:2d:ee:a6:bc:af:00:bd:
         cc:f8:69:c6:44:d6:ac:4b:bf:79:7f:fb:82:0a:dd:56:f6:5e:
         2b:94:85:af:c5:3d:c5:cf:e6:e5:65:b5:c1:cb:cb:e3:21:29:
         16:8d:22:da:b5:c6:ac:ba:a1:1b:79:a5:b6:95:83:87:c7:5e:
         ae:3e:2d:03:25:1d:c9:25:4e:33:0c:7a:6a:58:d3:28:cd:ee:
         66:9c:0f:ef:cc:b2:55:73:e2:7d:ba:c1:ae:10:70:fd:e1:0b:
         d7:4e:3f:9e:8f:c1:64:f5:b4:8e:9c:a3:2f:f9:9b:31:f1:de:
         ac:1a:50:05:54:40:22:8d:a5:6d:ff:b2:8f:d3:7c:7a:ce:0c:
         08:1b:86:ea:60:be:66:75:4f:1b:f5:c2:8c:30:0c:42:6e:01:
         ca:39:df:5f:f2:e7:47:c2:5d:82:f6:01:33:b6:28:da:64:0a:
         30:12:fd:29:83:dc:cd:f9:12:35:9b:96:47:4d:bb:7e:0a:c2:
         1d:81:96:89:b7:87:b9:dd:91:f7:40:53:a6:93:c9:ea:2d:99:
         b4:e2:d7:e5:fb:ec:13:02:d1:18:10:8b:9e:41:1f:a0:06:4e:
         80:ec:4a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----