Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/C614D688CF10EA8437DB075BEBCF03058EA36736.mft
File:                     C614D688CF10EA8437DB075BEBCF03058EA36736.mft (raw, json)
Hash identifier:          BJ+a8XgtaQIoFBwkws8t7BfVoBnbZTDBJqhvQuV6dbk=
Subject key identifier:   A3:02:2A:39:35:E6:71:BD:50:95:70:F3:0B:CD:38:B8:08:9C:7E:8B
Authority key identifier: C6:14:D6:88:CF:10:EA:84:37:DB:07:5B:EB:CF:03:05:8E:A3:67:36
Certificate issuer:       /CN=C614D688CF10EA8437DB075BEBCF03058EA36736
Certificate serial:       5894D62A8B2E76766F292123A108FE6A847BE427
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C614D688CF10EA8437DB075BEBCF03058EA36736.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/C614D688CF10EA8437DB075BEBCF03058EA36736.mft
Manifest number:          56
Signing time:             Mon 25 Sep 2023 04:33:49 +0000
Manifest this update:     Mon 25 Sep 2023 04:28:49 +0000
Manifest next update:     Tue 26 Sep 2023 08:12:49 +0000
Files and hashes:         1: 323830343a336262633a3a2f33322d313238203d3e20323636313638.roa (hash: 6Byx5kjKMdCWKf2C+GRTlfs2JHjqFlvAIIMw8PO2KKQ=)
                          2: C614D688CF10EA8437DB075BEBCF03058EA36736.crl (hash: yGtlTFlLg2FSsxi6787Bs9zma/IRHHFrhT27iDTObW4=)
                          3: 3136302e31392e3234342e302f32322d3332203d3e20323636313638.roa (hash: eiqR4V+XhEhlZ2KXhs9cnnTY8xdOQDAHxeJ82oj7XZ4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:94:d6:2a:8b:2e:76:76:6f:29:21:23:a1:08:fe:6a:84:7b:e4:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C614D688CF10EA8437DB075BEBCF03058EA36736
        Validity
            Not Before: Sep 25 04:28:49 2023 GMT
            Not After : Sep 26 08:12:49 2023 GMT
        Subject: CN=A3022A3935E671BD509570F30BCD38B8089C7E8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:21:e4:e9:5e:22:6d:ef:95:52:9e:07:54:45:
                    21:9f:e0:6f:b4:41:65:1c:07:26:3b:23:44:41:47:
                    b9:df:18:25:e4:3d:45:06:e4:16:d2:8d:7a:7c:5f:
                    be:64:4e:5d:61:e1:e5:38:fc:f6:fa:fa:41:d5:d9:
                    b0:2d:9c:79:d3:d6:ee:72:18:4e:61:75:74:f9:ec:
                    6d:48:52:68:2a:cc:6d:26:aa:49:a7:50:a5:c0:0d:
                    91:f2:53:6d:19:69:4e:7c:dd:dd:92:de:22:d7:0c:
                    5c:17:4c:8b:02:fa:0c:42:65:b9:e0:ed:0c:a9:31:
                    5b:08:c8:57:ab:5b:70:59:64:e4:1f:9b:bd:02:9c:
                    79:0f:37:8b:4f:29:35:82:f2:cf:f1:aa:61:ff:b9:
                    ce:d5:2a:db:ea:68:c4:16:b6:0d:14:f5:de:e4:bd:
                    0e:d0:96:40:af:16:bc:ae:92:2e:f7:ca:1d:fa:ef:
                    4d:40:54:56:68:60:31:47:5f:bb:f2:f9:29:f6:54:
                    6a:2f:0a:44:73:bd:70:da:22:b6:28:dd:4a:3d:90:
                    30:62:49:7c:d0:a9:50:cd:48:5d:14:c6:af:3a:33:
                    05:e6:4c:0a:f2:d4:7e:f0:3d:cd:a5:d7:ea:86:47:
                    96:f9:44:a4:7c:b5:16:a2:4f:34:6a:bc:18:d4:c9:
                    57:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:02:2A:39:35:E6:71:BD:50:95:70:F3:0B:CD:38:B8:08:9C:7E:8B
            X509v3 Authority Key Identifier:
                keyid:C6:14:D6:88:CF:10:EA:84:37:DB:07:5B:EB:CF:03:05:8E:A3:67:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/C614D688CF10EA8437DB075BEBCF03058EA36736.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C614D688CF10EA8437DB075BEBCF03058EA36736.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/C614D688CF10EA8437DB075BEBCF03058EA36736.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:14:a0:9d:a0:f7:b7:aa:97:a8:39:16:03:a2:0c:1f:0e:2a:
         c9:ba:fe:ff:64:0d:45:dd:3b:31:eb:fc:3e:71:33:bb:18:13:
         56:5c:7b:b1:29:7f:cd:3c:ba:f3:77:63:e7:88:90:fb:f8:1f:
         7c:2c:fd:68:72:e0:e0:c5:a0:56:3f:c9:1f:cf:d1:2b:95:e0:
         0a:80:cd:2f:eb:cf:5d:ca:2d:7e:34:e8:f0:ca:8e:fb:ac:da:
         64:3d:0e:ad:ee:58:7f:40:9e:f5:4d:de:fe:c4:99:7a:90:eb:
         ab:f5:f6:74:0e:47:f5:5a:5d:d9:b4:61:75:e4:7e:02:0c:95:
         39:a1:fa:17:e2:36:b8:ba:fe:1b:45:20:fc:48:22:59:fb:2f:
         80:a1:54:31:55:b3:04:b5:62:f0:bb:f4:b4:ea:61:82:94:81:
         6f:54:70:a3:7e:70:3c:4c:fd:13:1e:04:51:54:98:18:ce:53:
         d5:4a:56:62:b6:f3:a0:0b:55:3b:7e:d0:06:ca:98:e9:ab:50:
         40:42:1a:55:7f:ad:73:9e:ca:40:78:70:d6:a1:8c:70:3f:64:
         2a:53:9a:0a:ae:d2:63:a7:2b:00:49:db:3b:9f:31:b5:62:01:
         d8:f6:d8:2f:74:41:57:15:f4:e1:a5:a4:e0:fd:f1:18:7f:ae:
         76:40:56:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----