Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/6320CD7E38D87C910B5072CD7D4824F3E72D236C.mft
File:                     6320CD7E38D87C910B5072CD7D4824F3E72D236C.mft (raw, json)
Hash identifier:          VBhbzZT01EmmiXSufWyb+YL1bUDUGwhwi91IvG6euzQ=
Subject key identifier:   A3:94:93:40:84:18:7F:59:53:13:3F:B6:AF:20:7A:A9:D3:8A:E3:50
Authority key identifier: 63:20:CD:7E:38:D8:7C:91:0B:50:72:CD:7D:48:24:F3:E7:2D:23:6C
Certificate issuer:       /CN=6320CD7E38D87C910B5072CD7D4824F3E72D236C
Certificate serial:       72CA428898341F094CAEFBF31D7C5DDF8301CFAB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6320CD7E38D87C910B5072CD7D4824F3E72D236C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/6320CD7E38D87C910B5072CD7D4824F3E72D236C.mft
Manifest number:          01E3
Signing time:             Mon 15 Apr 2024 07:38:00 +0000
Manifest this update:     Mon 15 Apr 2024 07:33:00 +0000
Manifest next update:     Tue 16 Apr 2024 08:20:00 +0000
Files and hashes:         1: 323830343a366264343a3a2f33322d3336203d3e20323730343238.roa (hash: 0aUU8st8/ndU9hsSem+ldLTExD7tkHir2Pip6xUaENk=)
                          2: 6320CD7E38D87C910B5072CD7D4824F3E72D236C.crl (hash: /oiypDeX5OMI51UYcUG90mWC7L0w9PFTeqOuwNnQ8tM=)
                          3: 3139302e3131312e3138342e302f32322d3234203d3e20323730343238.roa (hash: 5+kLD/wSQ4sb8zDSdApLFLkIhMI5ZY2jRhXU7+y9cAo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ca:42:88:98:34:1f:09:4c:ae:fb:f3:1d:7c:5d:df:83:01:cf:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6320CD7E38D87C910B5072CD7D4824F3E72D236C
        Validity
            Not Before: Apr 15 07:33:00 2024 GMT
            Not After : Apr 16 08:20:00 2024 GMT
        Subject: CN=A394934084187F5953133FB6AF207AA9D38AE350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:80:5c:54:65:e1:fe:62:17:49:49:e2:bf:04:
                    a6:c6:c7:c8:c5:96:78:ce:22:7a:17:68:e6:ec:76:
                    ff:74:3b:0e:85:fc:c3:df:ea:fb:49:13:85:28:9f:
                    17:55:14:bf:af:fb:04:9e:ab:23:96:f4:20:f9:e7:
                    5b:fb:2a:69:fc:6e:79:08:e1:b4:89:df:c0:de:80:
                    37:f8:60:09:b1:43:c9:02:bb:91:97:99:c9:f8:3f:
                    d3:60:18:52:39:d3:25:8a:bb:1c:9e:65:93:69:bd:
                    c7:8a:2b:e5:f9:c2:e9:86:15:87:76:dc:11:0f:db:
                    54:2a:05:80:e3:31:06:aa:0e:68:d9:ba:c1:e3:fc:
                    ac:ad:4b:16:6d:31:f8:8e:2b:f4:c6:e7:73:45:3d:
                    d0:a8:88:34:6b:20:78:2a:51:fc:82:88:bc:ba:e7:
                    c3:56:34:65:8e:0b:c4:a2:e0:88:14:d9:ab:07:4e:
                    c5:e4:48:46:38:6f:6c:c5:66:2f:90:70:74:6f:49:
                    4b:6b:85:3b:94:db:b6:92:d7:35:73:c3:10:82:f0:
                    af:5f:be:6d:04:30:b6:51:39:17:c8:dc:bc:ba:f4:
                    af:83:b5:4c:64:58:73:6e:0b:05:fc:79:05:6c:a4:
                    bc:0d:6e:47:5a:13:b0:bb:55:74:2d:16:99:bf:eb:
                    16:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:94:93:40:84:18:7F:59:53:13:3F:B6:AF:20:7A:A9:D3:8A:E3:50
            X509v3 Authority Key Identifier:
                keyid:63:20:CD:7E:38:D8:7C:91:0B:50:72:CD:7D:48:24:F3:E7:2D:23:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/6320CD7E38D87C910B5072CD7D4824F3E72D236C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6320CD7E38D87C910B5072CD7D4824F3E72D236C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/6320CD7E38D87C910B5072CD7D4824F3E72D236C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:4a:d7:41:61:56:95:39:77:17:3f:b2:a3:50:ec:dd:6c:9a:
         71:14:8e:19:d0:22:5a:39:83:fe:22:68:f7:10:87:58:44:bd:
         e0:b6:59:d7:36:25:cb:c7:ca:52:5c:7e:dd:4a:88:12:62:35:
         84:5a:a2:4c:3c:bd:cd:92:c4:77:16:d4:14:81:5d:b4:73:7b:
         db:9c:fc:a6:b2:6b:23:7f:dc:f6:67:00:ca:6b:1a:5d:81:ed:
         ec:5c:87:af:7b:45:62:57:c8:06:e2:e7:50:93:55:58:f9:e4:
         cc:1c:bf:c7:18:ec:fc:04:c2:c8:c6:7a:8c:86:fc:ab:f2:07:
         cb:0d:18:5d:39:5e:aa:ed:25:57:c4:f0:87:b9:85:e6:66:8f:
         20:42:2e:69:01:31:86:81:32:cb:50:2e:21:9f:06:73:7f:48:
         80:0e:86:42:2a:28:4f:a7:7a:ce:ca:b3:3e:1f:3d:66:a2:87:
         81:f8:d7:4f:bf:10:76:4a:1d:e6:10:16:ae:b9:3a:03:18:a0:
         3c:8b:9c:1e:43:5f:89:e6:78:d1:84:ed:de:24:17:e5:eb:34:
         d5:96:1f:74:c8:9d:46:b3:52:58:74:d2:48:54:40:9a:e5:8f:
         11:02:9c:51:f9:e9:c2:15:c8:bb:fe:b4:30:2e:09:b3:cd:06:
         13:9b:01:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----