Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/0/390314310DD560DE9AA52ED51B31A6BA4B2ABCFC.mft
File:                     390314310DD560DE9AA52ED51B31A6BA4B2ABCFC.mft (raw, json)
Hash identifier:          yJ2sChjj8cPXXHt1tEt6S5SnKOTOvEb7y0Z524mjuSU=
Subject key identifier:   86:1B:ED:CF:EA:BF:F4:66:6C:0E:83:E9:58:DC:3A:A3:41:57:2F:44
Authority key identifier: 39:03:14:31:0D:D5:60:DE:9A:A5:2E:D5:1B:31:A6:BA:4B:2A:BC:FC
Certificate issuer:       /CN=390314310DD560DE9AA52ED51B31A6BA4B2ABCFC
Certificate serial:       288CFED87E5DCE5D16422155091DD72AD11678E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/390314310DD560DE9AA52ED51B31A6BA4B2ABCFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/0/390314310DD560DE9AA52ED51B31A6BA4B2ABCFC.mft
Manifest number:          0365
Signing time:             Sun 14 Apr 2024 21:14:40 +0000
Manifest this update:     Sun 14 Apr 2024 21:09:40 +0000
Manifest next update:     Tue 16 Apr 2024 00:29:40 +0000
Files and hashes:         1: 323830343a346536343a3a2f33322d3334203d3e20323638323538.roa (hash: Y6r+UeMdoFynFQosvCtRuMmXPgyYiTht2BQemkM+fY8=)
                          2: 34352e3233372e382e302f32322d3234203d3e20323638323538.roa (hash: 5fkhdA0woF+vKZmlmB4CKxHSZYo5w/28dFosHhN2Tmw=)
                          3: 390314310DD560DE9AA52ED51B31A6BA4B2ABCFC.crl (hash: uE3HsQKlE6EbBmw+olEKayp9hxRdgLDj2S5FkPwEkNU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:8c:fe:d8:7e:5d:ce:5d:16:42:21:55:09:1d:d7:2a:d1:16:78:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390314310DD560DE9AA52ED51B31A6BA4B2ABCFC
        Validity
            Not Before: Apr 14 21:09:40 2024 GMT
            Not After : Apr 16 00:29:40 2024 GMT
        Subject: CN=861BEDCFEABFF4666C0E83E958DC3AA341572F44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c3:bd:19:ab:c3:21:09:14:23:63:6b:87:59:
                    12:5f:48:93:0d:f1:4d:ec:ad:4b:10:cd:f9:29:c9:
                    57:c9:48:6c:29:b5:bd:59:85:a3:d0:01:4d:07:8c:
                    35:00:03:42:2a:2f:d7:ba:b6:23:5e:2e:5f:b4:66:
                    66:ea:ff:11:03:7b:f0:a9:49:da:79:5f:aa:8c:86:
                    a1:ba:a6:08:9b:bf:b1:21:85:e0:d5:61:77:95:82:
                    1b:9c:ad:01:5e:62:40:0d:10:48:6c:39:5b:a8:31:
                    67:6e:8f:f8:43:67:d7:1c:5c:a5:98:38:25:89:e8:
                    b2:06:c4:aa:71:c3:57:64:da:23:a4:ec:08:42:8f:
                    e4:87:10:2f:1d:66:a5:81:17:34:20:ca:15:2d:80:
                    6e:ef:16:18:fe:7b:7d:36:0c:1e:cd:ea:3a:cd:74:
                    25:80:55:8c:b5:98:90:dd:63:88:83:40:8f:ba:44:
                    20:08:a9:2e:4d:12:e3:38:f7:ff:59:39:89:34:11:
                    3c:54:d2:9a:09:e1:bb:d0:84:d3:31:a8:29:2a:c8:
                    a2:1e:c8:86:e8:a0:b5:b5:ce:35:8a:45:80:a6:cf:
                    d6:6b:08:47:df:e5:48:d9:54:11:f8:f2:72:e1:91:
                    36:59:3f:4b:ce:ac:58:d9:59:e2:15:21:69:dc:87:
                    45:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:1B:ED:CF:EA:BF:F4:66:6C:0E:83:E9:58:DC:3A:A3:41:57:2F:44
            X509v3 Authority Key Identifier:
                keyid:39:03:14:31:0D:D5:60:DE:9A:A5:2E:D5:1B:31:A6:BA:4B:2A:BC:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/0/390314310DD560DE9AA52ED51B31A6BA4B2ABCFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/390314310DD560DE9AA52ED51B31A6BA4B2ABCFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/0/390314310DD560DE9AA52ED51B31A6BA4B2ABCFC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:88:9d:e3:e1:93:18:94:dc:18:7d:00:e0:24:d0:ad:67:e4:
         4d:5c:08:85:c9:5f:8f:5e:1b:8a:5f:2d:bc:fa:1f:ac:75:37:
         06:1a:82:4f:55:63:18:51:90:2b:a6:ab:8a:1e:4b:19:c8:6c:
         b7:c0:23:85:a5:98:d0:78:36:37:44:cd:a3:e9:11:fe:5f:5c:
         10:ff:f4:8a:a3:e4:73:f6:00:fe:ac:7f:8b:5e:a2:bf:4b:44:
         f3:8d:e2:60:75:2f:53:50:07:2b:ec:52:99:19:35:2e:19:89:
         f0:ed:8a:6d:0a:2c:1c:3c:18:e0:fc:33:87:c1:5e:95:dc:dc:
         7d:1c:f6:f1:c2:06:33:dd:78:3f:4b:ec:b5:ec:64:2d:be:5c:
         f8:4c:9b:1f:e6:96:23:1b:1d:eb:b1:b4:b6:ee:8b:00:ac:c5:
         9b:71:8e:30:a2:83:a6:54:a3:6b:3a:84:e9:34:1f:d5:13:8f:
         56:22:38:7b:a4:48:53:f1:a3:a8:f3:09:94:0f:35:04:41:ce:
         9a:e0:e5:b0:0c:1b:0a:8a:d0:6e:35:56:22:2d:9f:14:94:6f:
         df:d5:56:57:64:5b:2a:ae:31:2a:e4:fc:e3:23:37:77:19:4a:
         d1:05:63:7b:88:19:45:b7:df:c1:1f:5b:be:91:fc:0f:a8:78:
         50:c9:f7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----