Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3HvHSSpFhi8owr3AZJgQf1nZZF8nWW2ArYXafwkfxLTU/0/362D99968B66668125E3238E9EB1585A84D71CC5.mft
File:                     362D99968B66668125E3238E9EB1585A84D71CC5.mft (raw, json)
Hash identifier:          aq3GC3Z983WkFC8lQIMF7nxhy2vy4lz+IEkyOlTikoY=
Subject key identifier:   12:75:7F:2A:13:A5:ED:E5:4C:B1:81:D2:21:E4:C2:4B:4F:97:3A:FB
Authority key identifier: 36:2D:99:96:8B:66:66:81:25:E3:23:8E:9E:B1:58:5A:84:D7:1C:C5
Certificate issuer:       /CN=362D99968B66668125E3238E9EB1585A84D71CC5
Certificate serial:       72D28C300793CB2CB9B72A0F02C4F66B96E3DE71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/362D99968B66668125E3238E9EB1585A84D71CC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HvHSSpFhi8owr3AZJgQf1nZZF8nWW2ArYXafwkfxLTU/0/362D99968B66668125E3238E9EB1585A84D71CC5.mft
Manifest number:          0785
Signing time:             Mon 15 Apr 2024 08:35:33 +0000
Manifest this update:     Mon 15 Apr 2024 08:30:33 +0000
Manifest next update:     Tue 16 Apr 2024 12:26:33 +0000
Files and hashes:         1: 323830343a333837343a3a2f33322d3438203d3e20323636343738.roa (hash: QPWXi3E9AvKptUrGDNcGrIcxnURDNPVjTD2e/5KyIP4=)
                          2: 362D99968B66668125E3238E9EB1585A84D71CC5.crl (hash: Hm/hGnAKDGq7JRa2g6F3CvWMn9E8XOeFh5hTcabeboQ=)
                          3: 3137302e3234342e382e302f32322d3234203d3e20323636343738.roa (hash: 46zmzltRmxAKP7IIjLDy3E1RzwJgS9gKM5LKDwzS+dc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:d2:8c:30:07:93:cb:2c:b9:b7:2a:0f:02:c4:f6:6b:96:e3:de:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=362D99968B66668125E3238E9EB1585A84D71CC5
        Validity
            Not Before: Apr 15 08:30:33 2024 GMT
            Not After : Apr 16 12:26:33 2024 GMT
        Subject: CN=12757F2A13A5EDE54CB181D221E4C24B4F973AFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a6:00:ea:68:b8:93:c4:e1:62:c3:0a:c5:3e:
                    79:a6:8c:91:46:69:c1:79:57:2e:ac:0b:36:0f:63:
                    45:c4:13:88:d2:f2:08:4b:6c:23:1c:ce:c1:11:ea:
                    63:b5:cc:7c:19:9a:a8:dc:33:d2:77:12:04:56:ae:
                    72:be:03:85:fc:da:ee:56:5b:9f:a6:c1:4f:a9:f8:
                    c5:36:31:29:2c:e1:36:f2:5f:df:82:53:a4:82:bf:
                    73:de:88:7d:75:96:fa:2f:93:96:10:11:26:40:a2:
                    b2:d4:1a:f2:d5:de:88:f5:6f:58:4f:ca:05:d9:f5:
                    36:bb:57:db:0f:6e:a7:f4:ec:6c:d6:80:31:9d:9d:
                    64:ff:41:3d:84:ac:90:d3:bd:c2:85:48:21:bb:79:
                    d3:4d:5b:7c:3a:fd:cf:db:88:50:d6:8a:d3:c2:95:
                    10:e7:5a:b2:34:64:49:15:83:df:5e:d0:96:2e:96:
                    0e:c4:6b:48:2d:a1:e0:2d:09:fe:93:35:60:8c:5e:
                    0b:08:15:37:1c:46:f7:f5:59:26:7e:ca:52:e4:42:
                    d9:77:d4:3f:4b:cd:19:67:bd:54:5f:1e:3b:af:7e:
                    b8:7f:54:2c:77:a5:c6:46:26:69:6b:40:9c:72:82:
                    58:bb:a6:e3:c5:3e:e1:28:d3:82:07:6e:32:a5:15:
                    bf:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:75:7F:2A:13:A5:ED:E5:4C:B1:81:D2:21:E4:C2:4B:4F:97:3A:FB
            X509v3 Authority Key Identifier:
                keyid:36:2D:99:96:8B:66:66:81:25:E3:23:8E:9E:B1:58:5A:84:D7:1C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HvHSSpFhi8owr3AZJgQf1nZZF8nWW2ArYXafwkfxLTU/0/362D99968B66668125E3238E9EB1585A84D71CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/362D99968B66668125E3238E9EB1585A84D71CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HvHSSpFhi8owr3AZJgQf1nZZF8nWW2ArYXafwkfxLTU/0/362D99968B66668125E3238E9EB1585A84D71CC5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:0c:85:45:0d:6f:ca:37:fb:dd:e0:b0:ac:8b:2a:cd:da:29:
         05:13:d9:51:51:a0:70:ea:e3:27:58:6c:27:93:98:5c:c3:c9:
         48:4c:ca:0e:99:88:93:20:36:57:10:0c:f2:18:85:56:55:f9:
         3c:d5:33:66:d6:78:2d:fe:58:00:c1:f8:7d:a0:5b:1d:80:38:
         a2:ee:aa:9c:df:17:ec:74:15:5e:f0:a8:4d:a6:3e:c4:7b:67:
         c7:52:e2:8d:5b:bd:27:75:de:96:11:c3:9c:e1:e3:99:86:b6:
         6e:d1:c4:fc:61:55:92:bf:03:69:16:1e:6f:3e:d3:fc:79:dc:
         8d:56:c2:95:1e:13:59:17:5b:b9:e0:3b:2c:be:65:c6:ec:00:
         f4:91:7f:20:71:8a:f6:7b:cd:0c:dc:a8:58:34:8e:b8:8d:15:
         16:56:3b:5d:27:bb:74:ed:34:25:a2:75:f3:78:dc:11:5c:12:
         72:dc:7c:87:f0:49:b2:f2:cf:db:f8:11:1a:5d:4c:e3:96:4a:
         99:ee:8a:f8:5f:ef:63:d7:96:13:7f:ec:92:49:75:e1:6f:33:
         d3:ea:1b:6f:d9:eb:12:03:0c:f4:f1:5d:05:78:fc:b3:da:25:
         fc:71:43:82:24:a3:98:e2:ba:45:7e:60:93:99:8e:cb:64:66:
         1f:7a:d8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----