Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/0/3E8280C3FD4D40ED1A9D727BEDC031DB4E6949E7.mft
File:                     3E8280C3FD4D40ED1A9D727BEDC031DB4E6949E7.mft (raw, json)
Hash identifier:          pnzfELGPiSJq7uuklEc99/bPCJU0Y82iCZGutXXOuwY=
Subject key identifier:   3B:F9:E1:C4:08:E7:1B:B7:AF:CD:DA:1E:EB:A7:43:9B:F4:CC:78:87
Authority key identifier: 3E:82:80:C3:FD:4D:40:ED:1A:9D:72:7B:ED:C0:31:DB:4E:69:49:E7
Certificate issuer:       /CN=3E8280C3FD4D40ED1A9D727BEDC031DB4E6949E7
Certificate serial:       32C1A3763E75CFA66BA93118AC4D9ABF24599322
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E8280C3FD4D40ED1A9D727BEDC031DB4E6949E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/0/3E8280C3FD4D40ED1A9D727BEDC031DB4E6949E7.mft
Manifest number:          66
Signing time:             Fri 16 Dec 2022 00:42:41 +0000
Manifest this update:     Fri 16 Dec 2022 00:37:41 +0000
Manifest next update:     Sat 17 Dec 2022 04:33:41 +0000
Files and hashes:         1: 3138392e33362e3235322e302f32322d3234203d3e20323730373936.roa (hash: Qz6LtT7h7AzVmx4B8ePKT/PeF+OSJOP+9H8evHslh9I=)
                          2: 3E8280C3FD4D40ED1A9D727BEDC031DB4E6949E7.crl (hash: YUofiXJR0z2YHJbpSfGduMBC5q1Cd0cS+7/XPGkGSHc=)
                          3: 323830343a373138633a3a2f33322d3438203d3e20323730373936.roa (hash: j+swI0RQcLu9ZlZTt291OlksxYSeprYhkL/ukZy7TTI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:c1:a3:76:3e:75:cf:a6:6b:a9:31:18:ac:4d:9a:bf:24:59:93:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E8280C3FD4D40ED1A9D727BEDC031DB4E6949E7
        Validity
            Not Before: Dec 16 00:37:41 2022 GMT
            Not After : Dec 17 04:33:41 2022 GMT
        Subject: CN=3BF9E1C408E71BB7AFCDDA1EEBA7439BF4CC7887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8c:8d:d1:70:f3:c5:92:de:58:f0:2e:3c:17:
                    12:c1:0c:5a:ce:12:ba:e2:22:d8:5c:be:b6:e1:95:
                    38:fa:de:42:2a:67:d5:dc:32:38:47:4d:34:96:e9:
                    85:6f:95:49:d9:c0:e3:f2:23:1f:41:e6:50:db:cd:
                    63:9c:b1:02:50:c2:35:b2:0b:63:43:11:ed:36:73:
                    9d:21:d7:62:ef:94:0c:c0:ca:1a:81:13:5e:11:fb:
                    95:69:99:fe:99:0c:7a:3f:02:4d:cd:10:b8:03:fa:
                    46:49:88:78:a3:de:7f:e5:f2:98:ef:4c:b5:0a:b1:
                    24:67:7c:6d:32:26:c2:12:87:3f:0c:f9:9e:d3:47:
                    99:0c:6f:62:d3:e4:ad:e2:04:ca:12:da:cd:d3:a0:
                    7a:35:1d:29:93:b6:51:88:f7:16:32:e1:33:5c:7e:
                    b9:47:6b:ab:17:5f:c2:4c:0e:85:47:7c:8d:5b:e2:
                    0a:e8:04:37:bd:ea:7d:7d:13:43:75:da:5f:4c:58:
                    38:fe:32:20:b6:b9:a7:63:b6:4c:b5:b4:48:3a:af:
                    c8:f2:e2:60:85:68:3a:df:47:13:ec:92:79:db:3c:
                    2a:9b:7b:69:18:e4:40:92:fa:78:a8:85:b3:79:40:
                    27:d2:c1:fe:ba:ca:3a:96:d4:41:5f:53:9e:b5:d9:
                    04:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F9:E1:C4:08:E7:1B:B7:AF:CD:DA:1E:EB:A7:43:9B:F4:CC:78:87
            X509v3 Authority Key Identifier:
                keyid:3E:82:80:C3:FD:4D:40:ED:1A:9D:72:7B:ED:C0:31:DB:4E:69:49:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/0/3E8280C3FD4D40ED1A9D727BEDC031DB4E6949E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E8280C3FD4D40ED1A9D727BEDC031DB4E6949E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/0/3E8280C3FD4D40ED1A9D727BEDC031DB4E6949E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:c1:ea:18:ba:85:65:82:65:17:d6:2b:66:59:62:e9:9a:54:
         74:69:b0:e6:4a:66:5c:24:26:da:c9:52:da:e4:c1:51:fa:63:
         c6:f1:0d:60:5e:f4:89:e2:73:87:12:2e:7f:b3:dc:4e:cc:47:
         7e:4f:2c:f6:62:76:4a:5a:84:80:2e:ad:fc:42:78:0a:5f:12:
         34:62:ba:c0:74:ff:97:6e:3b:cf:43:33:4e:47:67:66:f7:c7:
         39:82:1b:3b:a2:a1:17:88:fd:08:df:5d:47:f9:9c:6c:49:38:
         4b:58:51:6c:d2:66:12:d3:00:a6:34:08:ff:ea:85:76:13:e8:
         d5:bd:df:31:0f:a3:76:35:d2:75:c1:f2:55:7e:a4:ab:35:8e:
         49:7c:8a:c6:53:c6:ef:54:f6:f0:b4:6f:42:27:3a:16:05:44:
         78:4b:a1:9d:b7:40:69:2d:b3:22:bb:f9:a9:7c:f7:f9:ce:f9:
         1f:36:3d:fc:86:98:1a:6d:c7:50:58:ee:e9:3a:2a:48:18:81:
         c3:f5:c2:51:2e:37:a6:58:48:77:f6:8a:f1:67:a0:13:27:04:
         89:7d:6a:80:b1:ff:fe:c2:27:2b:90:f0:5e:69:c3:53:cb:bf:
         6a:65:f7:2a:ba:2c:e9:02:58:e4:e5:13:04:83:7d:4f:9c:85:
         8e:04:3a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----