Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/0/38A142BBA0A65C853D9555B68E29AAFFF43DC2E5.mft
File:                     38A142BBA0A65C853D9555B68E29AAFFF43DC2E5.mft (raw, json)
Hash identifier:          50zkSXkbLHIsJjyJ+tzQZDN+oQq3KDz5HXEyZO57oE0=
Subject key identifier:   2E:DE:3C:7D:E0:04:49:9B:42:48:4A:16:65:6B:F0:17:3C:FF:EB:4E
Authority key identifier: 38:A1:42:BB:A0:A6:5C:85:3D:95:55:B6:8E:29:AA:FF:F4:3D:C2:E5
Certificate issuer:       /CN=38A142BBA0A65C853D9555B68E29AAFFF43DC2E5
Certificate serial:       5EDDE5EA5FC82C36C4D0CAC9EF4A3201F6AD6A38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38A142BBA0A65C853D9555B68E29AAFFF43DC2E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/0/38A142BBA0A65C853D9555B68E29AAFFF43DC2E5.mft
Manifest number:          20
Signing time:             Sat 18 Nov 2023 12:38:10 +0000
Manifest this update:     Sat 18 Nov 2023 12:33:10 +0000
Manifest next update:     Sun 19 Nov 2023 15:47:10 +0000
Files and hashes:         1: 323830343a313966633a3a2f33322d313238203d3e203631383330.roa (hash: V/aIyZAuM+rCNlPEvBqggt+1teOEPLovUDh40403dW4=)
                          2: 3230312e3134302e3234302e302f32322d3332203d3e203631383330.roa (hash: YIV7tNrXRLB6A7UTtPNGKzd9cmxrJcAOkQA2B4/8GQw=)
                          3: 38A142BBA0A65C853D9555B68E29AAFFF43DC2E5.crl (hash: FbkhC0gqDuUZtwRRVROn2Il+ycno1QCgF16qHpUje/8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:dd:e5:ea:5f:c8:2c:36:c4:d0:ca:c9:ef:4a:32:01:f6:ad:6a:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38A142BBA0A65C853D9555B68E29AAFFF43DC2E5
        Validity
            Not Before: Nov 18 12:33:10 2023 GMT
            Not After : Nov 19 15:47:10 2023 GMT
        Subject: CN=2EDE3C7DE004499B42484A16656BF0173CFFEB4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:52:79:05:eb:05:03:7a:cb:d7:53:eb:dd:9e:
                    7a:c6:ee:56:f0:00:d4:e5:d0:c7:67:05:ca:79:25:
                    0f:3d:41:d7:5a:ef:9d:b4:80:3b:88:0e:58:4d:c6:
                    7c:23:80:fc:2a:26:5b:85:0e:f3:61:b9:c6:61:34:
                    02:10:d2:c9:78:90:43:01:ba:ba:40:21:15:bf:9d:
                    9b:9e:fe:1e:3e:8d:af:07:68:3c:8d:80:9b:8e:a1:
                    47:d9:11:91:82:5e:7f:e3:46:44:01:13:9a:29:6a:
                    6a:ff:7a:d1:df:00:0f:31:e4:c9:f1:f3:c6:0b:07:
                    f3:ae:7b:d7:d4:7d:13:1b:a2:28:f4:5d:12:9f:c5:
                    3f:75:59:83:7d:b2:4e:3b:fa:6c:31:54:ce:2e:bd:
                    f7:15:03:11:30:a6:32:da:a6:42:1e:73:f0:76:df:
                    01:11:8e:af:f2:08:94:2c:49:34:33:3a:20:9b:99:
                    4f:26:3d:7e:c1:4a:66:3a:17:bc:59:07:d3:6a:35:
                    9b:9f:8e:43:2d:bb:17:c7:1e:b5:ab:a7:58:59:2d:
                    76:c8:aa:a1:35:29:bf:86:71:70:cb:13:21:16:c7:
                    99:16:71:2a:58:21:f9:04:be:6a:8b:ff:4f:d2:90:
                    01:b4:7a:6f:5e:c2:f1:37:38:6e:11:48:d1:45:e0:
                    2b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:DE:3C:7D:E0:04:49:9B:42:48:4A:16:65:6B:F0:17:3C:FF:EB:4E
            X509v3 Authority Key Identifier:
                keyid:38:A1:42:BB:A0:A6:5C:85:3D:95:55:B6:8E:29:AA:FF:F4:3D:C2:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/0/38A142BBA0A65C853D9555B68E29AAFFF43DC2E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38A142BBA0A65C853D9555B68E29AAFFF43DC2E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/0/38A142BBA0A65C853D9555B68E29AAFFF43DC2E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:4f:ec:d8:03:15:3e:40:54:c1:9d:48:31:2c:e6:5c:ef:7d:
         c7:8a:c1:1a:01:49:dc:12:7d:20:6b:99:71:a5:8f:9c:da:55:
         a2:6a:3f:94:f7:bc:c4:42:a9:08:19:df:f8:48:67:8a:62:67:
         71:bc:93:01:56:71:02:42:68:d3:f5:b6:45:88:05:c2:04:07:
         c7:19:e2:20:a8:d4:d6:e5:85:22:a4:ec:bc:ca:03:1c:29:2a:
         5e:09:ef:fa:ea:08:79:61:0d:22:73:d8:27:27:9c:96:e6:e9:
         d4:7a:b1:ec:31:a5:6a:43:2c:06:a4:51:e0:4d:df:4f:1a:9d:
         63:5f:25:75:f2:26:c1:21:a1:b9:8f:ff:c1:9a:cc:21:00:fc:
         c2:07:7f:bd:ed:dd:90:e9:ac:7a:dd:ff:23:73:27:33:62:ff:
         db:6e:26:fa:71:8a:ad:b9:2d:21:61:c0:1a:88:9b:82:60:58:
         f3:31:2d:43:3b:60:e3:35:de:c5:f8:0a:81:f6:fa:12:58:96:
         f1:72:c3:d5:ae:76:f3:98:a6:4c:81:57:eb:83:a1:00:57:22:
         4d:50:db:d3:ab:ad:64:9b:82:63:50:ae:9c:21:f9:b2:45:2d:
         6a:79:35:36:9c:af:e2:4b:2f:10:33:6f:96:1b:74:cb:bc:ad:
         f5:29:59:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----