Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD.mft
File:                     3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD.mft (raw, json)
Hash identifier:          /kiaSuaYqUn0m1OC00+xIWkF4TbMLI3SH8FxWypfy78=
Subject key identifier:   A9:69:2C:0D:C7:D3:E9:8C:53:B1:97:42:6F:11:9C:E0:A4:F8:BB:57
Authority key identifier: 3F:D3:A1:2D:37:BF:70:EB:94:5F:12:1D:5A:05:38:B9:8B:BC:EB:CD
Certificate issuer:       /CN=3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD
Certificate serial:       285119368F688DC1656ED3640337A4CDD672E3DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD.mft
Manifest number:          79
Signing time:             Mon 15 Jul 2024 22:01:34 +0000
Manifest this update:     Mon 15 Jul 2024 21:56:34 +0000
Manifest next update:     Wed 17 Jul 2024 01:29:34 +0000
Files and hashes:         1: 3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD.crl (hash: MFQv2dBUZ0xSU79/qDIn/jFalzuaAxaxcFGGDFnF3pM=)
                          2: 3230302e3131302e3230342e302f32322d3234203d3e20323730323533.roa (hash: H8IC87petCm78wkpbSUVtU2ednNDZpnJVTm3tnKFXrU=)
                          3: 323830343a363932633a3a2f33322d3438203d3e20323730323533.roa (hash: gtVXu4Hm/O7ZWtrN0Yqvh5/pLkEmDj8lZqiqYojyBNk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:51:19:36:8f:68:8d:c1:65:6e:d3:64:03:37:a4:cd:d6:72:e3:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD
        Validity
            Not Before: Jul 15 21:56:34 2024 GMT
            Not After : Jul 17 01:29:34 2024 GMT
        Subject: CN=A9692C0DC7D3E98C53B197426F119CE0A4F8BB57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2d:16:ed:21:8a:33:03:71:0e:90:d9:d0:aa:
                    a4:65:da:16:7b:fc:c7:d2:0e:9f:fb:c6:42:d1:05:
                    99:19:15:87:8f:a9:f2:9d:21:d5:66:fe:2f:7f:9a:
                    79:51:ef:3d:20:0a:e7:82:88:e4:06:59:9b:6a:51:
                    cb:36:c3:e5:bf:88:8c:37:cb:a1:0e:14:3f:6b:5e:
                    0e:a4:b4:f2:7f:49:99:07:27:4e:2c:e6:4b:2b:0e:
                    c0:14:c9:c3:b4:1a:c4:96:8e:f8:c2:5f:d6:88:27:
                    69:ca:dd:cd:08:2f:6d:cb:95:a9:e7:4c:34:00:d0:
                    14:b2:b4:2d:d4:15:11:d0:87:ef:cf:15:ba:30:d4:
                    ce:5e:07:7c:e4:34:6b:2b:56:af:10:fd:05:ae:ff:
                    cc:6e:b5:8e:bd:75:62:cb:c0:f4:61:25:59:6c:0d:
                    5f:3d:e6:84:9e:0d:26:57:b1:ec:ae:85:6d:15:88:
                    be:45:72:87:d9:63:ae:9c:fd:93:9c:bb:58:27:13:
                    61:91:d0:8d:b7:a7:f2:d8:6d:eb:2e:1e:7e:ef:d3:
                    06:eb:7b:25:b5:f5:00:a1:81:76:31:f2:c4:ca:a6:
                    a2:94:30:58:6a:c3:c1:6a:55:8c:fc:19:7d:ff:16:
                    12:74:e1:33:91:dc:37:ad:f6:15:bd:26:95:5a:1c:
                    41:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:69:2C:0D:C7:D3:E9:8C:53:B1:97:42:6F:11:9C:E0:A4:F8:BB:57
            X509v3 Authority Key Identifier:
                keyid:3F:D3:A1:2D:37:BF:70:EB:94:5F:12:1D:5A:05:38:B9:8B:BC:EB:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:35:0a:29:6a:cf:5f:e0:52:44:ee:53:b1:ff:3f:83:f4:07:
         44:f4:89:72:dd:3a:29:d9:88:23:0f:20:d8:b8:e1:5e:fd:0e:
         34:65:ea:81:e5:7e:8a:ca:47:d1:c4:47:41:dd:ef:1b:6a:0b:
         2d:e6:84:8b:e5:ca:bb:16:af:12:a0:d9:81:25:ed:66:3f:61:
         3b:ce:7e:18:70:01:9f:98:5a:a7:4e:fb:2e:2c:f1:8f:70:a3:
         f4:b3:3c:91:0c:e7:33:dc:40:94:20:ba:4d:23:83:c3:1c:79:
         e1:13:2d:ae:0e:c3:72:e5:e2:08:75:d3:67:19:7e:ce:a7:3a:
         2f:d1:9c:49:1e:d2:cd:05:3f:a6:3a:24:ef:ed:cb:69:9d:fa:
         ec:a4:c8:5e:bb:ce:38:c8:28:97:10:86:1d:bb:d2:aa:46:92:
         7d:0a:a6:4a:df:89:d6:ed:93:ab:8a:0c:b0:08:dd:cd:f5:6e:
         76:de:06:eb:73:e1:9e:a7:4a:4b:b4:af:f2:9a:23:60:29:d3:
         05:a5:31:28:26:58:b5:ba:ce:bb:8d:f8:84:61:95:2c:bc:cc:
         3a:b3:b8:fa:93:e1:f5:ae:e3:08:75:c7:b7:a9:55:73:d5:53:
         8b:58:33:1c:17:0e:f9:e9:48:92:7c:52:56:2e:ac:d1:97:4b:
         46:86:8b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----