Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4BiBXSinunnqShdyd6zkzZfmvQCeWhv57TeCtB15fwgJ/0/3E4B0EBA092ECF38A66FC86C03C8561B66D194F8.mft
File:                     3E4B0EBA092ECF38A66FC86C03C8561B66D194F8.mft (raw, json)
Hash identifier:          H0m44mnfkdJtjdy4Vif8s+/S9fy2K7r+mLFWOVmbfvw=
Subject key identifier:   95:48:FA:73:46:0E:97:80:B4:60:C7:8E:25:3C:9A:6C:00:7E:B4:49
Authority key identifier: 3E:4B:0E:BA:09:2E:CF:38:A6:6F:C8:6C:03:C8:56:1B:66:D1:94:F8
Certificate issuer:       /CN=3E4B0EBA092ECF38A66FC86C03C8561B66D194F8
Certificate serial:       06B81C73CB6A1145E6CDFD6D594506D7CC3533B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E4B0EBA092ECF38A66FC86C03C8561B66D194F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4BiBXSinunnqShdyd6zkzZfmvQCeWhv57TeCtB15fwgJ/0/3E4B0EBA092ECF38A66FC86C03C8561B66D194F8.mft
Manifest number:          0187
Signing time:             Wed 27 Sep 2023 06:43:07 +0000
Manifest this update:     Wed 27 Sep 2023 06:38:07 +0000
Manifest next update:     Thu 28 Sep 2023 08:22:07 +0000
Files and hashes:         1: 3E4B0EBA092ECF38A66FC86C03C8561B66D194F8.crl (hash: mBlY+VzZEDW1NFx01qnlg5fLIghZZGLCB2pmx+cGHIE=)
                          2: 323830343a343732343a3a2f33322d3634203d3e20323637303334.roa (hash: Kq4elfkX+oyPFpgoQiD9cCawxyBg9d5ptJH4SR+VZNw=)
                          3: 34352e3232372e3135362e302f32322d3234203d3e20323637303334.roa (hash: dDuJZMDu7c+D17/PoQ5gawjKsmGO4EDD0BijOv/Jgb4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:b8:1c:73:cb:6a:11:45:e6:cd:fd:6d:59:45:06:d7:cc:35:33:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E4B0EBA092ECF38A66FC86C03C8561B66D194F8
        Validity
            Not Before: Sep 27 06:38:07 2023 GMT
            Not After : Sep 28 08:22:07 2023 GMT
        Subject: CN=9548FA73460E9780B460C78E253C9A6C007EB449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:af:a8:b5:ac:e8:11:f8:48:be:f5:9b:d3:6c:
                    79:7d:b9:03:9d:11:c9:9f:74:b0:72:7a:b1:f9:3c:
                    0c:42:de:af:1b:5b:74:2b:5b:cb:ae:bc:16:fd:43:
                    a8:2f:c5:0a:16:81:df:a9:a6:b8:79:5a:ef:f5:31:
                    47:c0:6d:fb:6b:de:e2:9e:84:84:31:04:d1:8f:85:
                    3c:d4:02:d7:5b:79:04:32:55:cd:7e:8a:af:58:9a:
                    3b:91:f6:b5:2a:79:da:8b:d0:69:0d:9d:fc:6b:86:
                    5d:b1:e7:e1:04:31:d6:cc:ff:d9:53:94:ce:76:fc:
                    7b:af:6b:b1:d2:1d:56:53:86:be:a9:ab:d4:6e:6d:
                    1a:6b:39:b6:a0:bb:bf:3c:a5:bc:44:61:94:c9:52:
                    e3:34:ca:b4:70:da:b7:c4:44:74:e1:e9:23:a1:1b:
                    70:4a:1e:af:56:90:11:92:d4:de:95:5c:83:64:19:
                    e8:a0:12:6e:84:e6:ce:20:5a:e7:5c:8a:38:09:ac:
                    c6:b3:ed:64:a7:ee:cd:f2:36:25:0d:98:f1:7d:93:
                    bc:24:cf:6d:17:10:0e:11:f7:9c:dc:1e:60:df:70:
                    4a:c4:07:3d:ef:d9:89:56:46:2b:f3:e4:9a:de:f9:
                    10:17:6f:aa:0e:ea:e5:9b:ed:26:a4:76:6c:59:13:
                    6d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:48:FA:73:46:0E:97:80:B4:60:C7:8E:25:3C:9A:6C:00:7E:B4:49
            X509v3 Authority Key Identifier:
                keyid:3E:4B:0E:BA:09:2E:CF:38:A6:6F:C8:6C:03:C8:56:1B:66:D1:94:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4BiBXSinunnqShdyd6zkzZfmvQCeWhv57TeCtB15fwgJ/0/3E4B0EBA092ECF38A66FC86C03C8561B66D194F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E4B0EBA092ECF38A66FC86C03C8561B66D194F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4BiBXSinunnqShdyd6zkzZfmvQCeWhv57TeCtB15fwgJ/0/3E4B0EBA092ECF38A66FC86C03C8561B66D194F8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:06:f5:c4:d5:d6:9c:fb:2c:70:e7:f9:34:c9:c3:4f:a4:c0:
         e7:3d:b7:81:46:27:09:1c:d2:ac:1c:bf:2b:08:97:e7:ce:61:
         8d:cb:1f:d8:ac:23:18:bf:e7:71:1c:b4:da:d4:6c:7c:03:c3:
         59:43:33:af:2e:14:0a:97:cc:a4:f5:93:d4:a3:d4:77:a7:44:
         6d:f5:ee:68:bc:04:29:3e:eb:15:d3:95:93:e2:1c:55:5a:df:
         9d:59:1f:79:5e:11:93:54:b9:0b:9d:4b:41:c4:d9:f1:59:3d:
         73:bf:8f:4f:67:69:07:42:97:69:fe:6e:a1:65:07:2d:06:dc:
         68:dc:e4:07:be:1c:e2:7d:af:d6:12:1c:1f:39:45:35:04:f3:
         4f:8b:22:e2:4c:b4:aa:06:fb:8b:d9:e0:ad:aa:d3:d2:f6:8e:
         c0:3f:56:ea:3d:71:a0:f6:47:1e:d0:e9:db:e5:58:8d:f8:1a:
         79:27:60:f2:ac:03:7f:20:37:99:95:75:93:cd:08:ae:2e:c2:
         0a:de:23:19:05:8b:fa:5a:8f:e1:51:79:28:50:16:47:98:70:
         47:6f:b4:01:1c:b5:da:d1:16:75:80:1e:d1:1a:59:ac:be:9e:
         95:37:74:3d:68:81:c7:4d:f0:e4:e4:ef:ee:20:11:4a:ff:89:
         5d:46:fd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----