Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/B3BF073AB1A2985154054B140C7DB1BF95516900.mft
File:                     B3BF073AB1A2985154054B140C7DB1BF95516900.mft (raw, json)
Hash identifier:          IJ3pM0+1qpDwFIWqx0RbhG/LhkQsMSiK4eNdYxhYpT8=
Subject key identifier:   55:23:89:FE:91:75:7D:D8:E6:1D:27:F2:E2:E8:56:32:57:41:6B:EE
Authority key identifier: B3:BF:07:3A:B1:A2:98:51:54:05:4B:14:0C:7D:B1:BF:95:51:69:00
Certificate issuer:       /CN=B3BF073AB1A2985154054B140C7DB1BF95516900
Certificate serial:       5EF66B1E377925A63F426911E172352EA524EE69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3BF073AB1A2985154054B140C7DB1BF95516900.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/B3BF073AB1A2985154054B140C7DB1BF95516900.mft
Manifest number:          062C
Signing time:             Mon 15 Apr 2024 11:05:56 +0000
Manifest this update:     Mon 15 Apr 2024 11:00:51 +0000
Manifest next update:     Tue 16 Apr 2024 13:30:51 +0000
Files and hashes:         1: 323830343a333736633a3a2f33322d3336203d3e20323636343133.roa (hash: JqgcA+0CN7xFJkgZ4oPlySLg+y2X8sjz1zOi5tLB7CE=)
                          2: B3BF073AB1A2985154054B140C7DB1BF95516900.crl (hash: QJ3OCntboI3Yj0HQkLnrpUc2rncfEHOzaQ9apG1JWKU=)
                          3: 3137302e38312e3130302e302f32322d3234203d3e20323636343133.roa (hash: g3pQ5EPbta50EGfRa+VOWMkxsu6jrgNU5YHmmmBlF3o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:f6:6b:1e:37:79:25:a6:3f:42:69:11:e1:72:35:2e:a5:24:ee:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3BF073AB1A2985154054B140C7DB1BF95516900
        Validity
            Not Before: Apr 15 11:00:51 2024 GMT
            Not After : Apr 16 13:30:51 2024 GMT
        Subject: CN=552389FE91757DD8E61D27F2E2E8563257416BEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:13:60:ba:3e:90:91:3e:c6:cc:74:a6:4d:00:
                    19:b4:c8:d2:c8:51:aa:d1:1f:4d:ef:5e:c9:b2:1e:
                    b5:5e:97:16:e2:05:d4:a2:7e:de:d6:de:84:07:4b:
                    df:51:22:68:03:5a:3a:02:f2:be:45:c3:c2:83:ea:
                    0d:24:70:1a:d5:eb:bb:7f:46:32:b9:3f:f7:66:c5:
                    f4:14:80:b1:58:d0:74:68:89:7a:1e:31:77:d8:1e:
                    45:b2:dd:ca:db:bd:5d:ba:32:10:ff:e0:ce:44:3e:
                    35:26:9d:bf:e7:de:5c:77:3a:04:dc:1d:40:f2:b9:
                    d6:9e:af:2b:ed:d7:2b:51:50:77:fd:e6:1a:8d:cb:
                    08:fb:e8:10:94:32:99:e5:1d:36:ea:fc:02:2d:2d:
                    88:44:dc:bf:7b:1e:48:e7:3a:e7:9a:c4:2d:e6:13:
                    16:3d:08:c3:0b:8c:c3:00:f8:18:3b:d6:f6:42:55:
                    09:9c:69:af:8d:4a:31:c7:10:c0:49:75:1d:55:6b:
                    9b:49:b9:be:2c:74:c0:71:83:58:d4:19:87:ff:8a:
                    6d:8a:b0:9c:1e:3d:34:8b:4d:89:51:07:1d:6b:fb:
                    fe:32:76:64:13:d7:90:54:7e:6d:e7:d0:39:71:20:
                    e3:a8:45:08:8a:90:18:76:ef:2e:49:86:28:b6:39:
                    6c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:23:89:FE:91:75:7D:D8:E6:1D:27:F2:E2:E8:56:32:57:41:6B:EE
            X509v3 Authority Key Identifier:
                keyid:B3:BF:07:3A:B1:A2:98:51:54:05:4B:14:0C:7D:B1:BF:95:51:69:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/B3BF073AB1A2985154054B140C7DB1BF95516900.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3BF073AB1A2985154054B140C7DB1BF95516900.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/B3BF073AB1A2985154054B140C7DB1BF95516900.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:67:0e:68:67:a3:27:3b:00:79:11:4f:73:99:a0:a7:a4:d9:
         ed:be:35:0c:cd:e0:27:05:9b:f5:84:9e:cc:11:83:d9:82:75:
         b1:ca:0c:f0:6b:3e:e5:21:25:cb:e7:7f:b6:9e:a4:7a:bf:07:
         2e:a8:9a:24:c7:3c:23:0a:62:83:91:e2:96:7b:5b:23:b5:12:
         2d:88:3b:f5:5d:84:96:cf:57:32:8d:11:a3:93:66:33:e0:d4:
         e8:fa:d5:ac:b2:68:2c:91:06:93:33:2c:a9:d0:8b:43:0c:82:
         f1:23:78:26:fc:b9:d2:88:d4:09:02:9f:13:bb:18:37:0d:9b:
         82:12:e5:c6:6f:fb:f5:10:ab:7a:b9:9c:59:23:f1:88:de:b8:
         ce:4e:4d:9e:fb:99:84:ec:7f:44:3b:6a:08:45:c6:db:a5:d4:
         44:c1:31:01:92:df:fc:c1:ac:12:ad:e7:44:17:4b:67:97:01:
         2c:a6:86:83:ff:c5:04:ce:3b:6b:98:43:08:99:1c:8a:9c:29:
         43:76:f4:f5:82:02:a9:04:9a:c2:70:7c:28:38:23:a0:4c:0b:
         a0:5a:c2:50:5a:6b:8c:1a:5c:90:44:4c:fa:d6:4d:3c:38:d3:
         01:8f:4d:fe:b6:b1:bb:9b:eb:d0:2e:ab:1c:89:65:8f:6c:86:
         68:aa:b3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----