Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/C38F0EC3DA3C88117EF77FA3AAEC72340F4C437E.mft
File:                     C38F0EC3DA3C88117EF77FA3AAEC72340F4C437E.mft (raw, json)
Hash identifier:          q3S19wo929qjKqtCSrltpSA6zxgVNcKp4GdqMsPWvVM=
Subject key identifier:   8D:CA:D0:29:B6:AB:5C:9E:89:9D:92:82:14:7A:33:34:F2:4A:DB:B6
Authority key identifier: C3:8F:0E:C3:DA:3C:88:11:7E:F7:7F:A3:AA:EC:72:34:0F:4C:43:7E
Certificate issuer:       /CN=C38F0EC3DA3C88117EF77FA3AAEC72340F4C437E
Certificate serial:       556BC367F4196C29D83DC6A6CC54FC41EE992D5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C38F0EC3DA3C88117EF77FA3AAEC72340F4C437E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/C38F0EC3DA3C88117EF77FA3AAEC72340F4C437E.mft
Manifest number:          0225
Signing time:             Thu 11 Jan 2024 23:27:39 +0000
Manifest this update:     Thu 11 Jan 2024 23:22:39 +0000
Manifest next update:     Sat 13 Jan 2024 01:42:39 +0000
Files and hashes:         1: 323830343a353766343a3a2f33322d3438203d3e20323638303937.roa (hash: CICC9b9vxm1x6mvrYxyMhf8JgX7jz6vnLdw657FQ/yE=)
                          2: C38F0EC3DA3C88117EF77FA3AAEC72340F4C437E.crl (hash: hUCLGh2YvquQbiSSo7uRA29OhwUP6GIMiD9dsBAfy6A=)
                          3: 3133312e3130382e38382e302f32322d3234203d3e20323638303937.roa (hash: kJ3DrSB9kUdGkJkER149YYTolyPRnzlrSVVpxXqTusY=)
                          4: 34352e3136392e34342e302f32322d3234203d3e20323638303937.roa (hash: IJdr8bG7UGsFHyFiOT4IO+LPwJUOYYrFgV6PI5HTLEQ=)
                          5: 3136382e3139342e3230382e302f32322d3234203d3e20323638303937.roa (hash: FiF5YKi2ruD7Uz0OoE4g/sM0vHht6N7oD8qdwKUnAlc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:6b:c3:67:f4:19:6c:29:d8:3d:c6:a6:cc:54:fc:41:ee:99:2d:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C38F0EC3DA3C88117EF77FA3AAEC72340F4C437E
        Validity
            Not Before: Jan 11 23:22:39 2024 GMT
            Not After : Jan 13 01:42:39 2024 GMT
        Subject: CN=8DCAD029B6AB5C9E899D9282147A3334F24ADBB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b9:c4:68:5f:65:24:e7:22:09:24:55:6e:f9:
                    4c:9e:d9:1f:91:3e:bf:d9:0e:07:1d:42:fb:59:f2:
                    83:d0:9a:ff:de:f2:54:d7:12:bc:27:26:28:cb:45:
                    a8:ba:66:41:ab:e1:03:0f:8c:c2:0b:31:f5:02:fe:
                    d5:c9:6c:6e:89:b3:07:af:ac:fe:c2:8a:c1:6f:31:
                    30:b8:31:09:89:ad:0f:81:af:80:66:31:fc:33:3b:
                    28:37:1f:e9:e3:23:25:50:55:b6:35:5b:19:63:b5:
                    b2:ed:ca:a6:22:6e:b8:98:59:00:1f:ea:34:8d:3b:
                    75:40:4f:fd:39:a5:67:ed:33:7a:fb:ea:d3:0b:ee:
                    96:74:30:a9:52:09:5f:b6:37:c1:7c:ac:b4:cd:05:
                    35:4b:00:35:60:2e:a6:ce:2e:f8:a3:85:ab:79:83:
                    32:0a:12:18:e6:67:29:49:9f:82:3c:11:fc:2e:6f:
                    e7:b8:a3:c4:43:47:c3:ce:5d:be:42:f5:8a:69:70:
                    ee:7a:8c:0b:b3:46:9e:24:98:fe:41:6c:44:d8:df:
                    70:12:59:6e:05:dd:cb:af:61:84:ce:e3:f2:0e:c3:
                    49:d8:c5:f3:24:ff:4b:fd:61:32:2f:f5:1a:e7:8a:
                    67:16:f2:b6:e0:4c:08:6e:ba:c7:a6:ca:36:75:4b:
                    2e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:CA:D0:29:B6:AB:5C:9E:89:9D:92:82:14:7A:33:34:F2:4A:DB:B6
            X509v3 Authority Key Identifier:
                keyid:C3:8F:0E:C3:DA:3C:88:11:7E:F7:7F:A3:AA:EC:72:34:0F:4C:43:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/C38F0EC3DA3C88117EF77FA3AAEC72340F4C437E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C38F0EC3DA3C88117EF77FA3AAEC72340F4C437E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/C38F0EC3DA3C88117EF77FA3AAEC72340F4C437E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:5c:78:18:e9:ef:38:92:5a:66:de:2d:50:27:54:f4:53:6e:
         fa:51:f0:6f:ff:ad:a7:4a:c6:d2:64:6f:a8:c7:44:20:5b:32:
         45:0f:5d:cb:84:3b:c5:bf:5c:94:de:fd:90:08:b5:63:61:e9:
         79:64:ff:e7:1f:d5:d5:83:ab:ad:f5:47:23:5d:1b:8e:b9:46:
         74:ed:9a:5a:41:f2:80:e9:4b:f5:0f:2b:b4:fd:39:50:36:df:
         0d:25:cd:71:c9:80:40:74:25:22:34:a6:c8:63:4b:bb:86:20:
         97:94:73:52:f4:c8:de:08:a6:cb:69:65:7d:db:78:58:ad:66:
         e0:e6:00:93:b7:fa:cd:5c:1f:b5:f4:f1:fc:d8:c0:34:1b:95:
         7c:29:ed:fd:d3:98:9a:bf:a6:01:aa:3e:0d:9a:9c:f6:ce:fb:
         fb:26:3c:62:06:a9:83:7b:17:73:55:62:90:53:a7:d2:bb:6c:
         de:e1:5b:11:b4:5d:56:ab:bd:65:89:5e:99:99:10:93:9e:64:
         e1:74:df:59:76:db:62:6c:2e:b8:e7:69:31:b3:e0:8c:96:d8:
         75:f5:26:32:42:ed:4a:a1:88:37:a1:10:26:dc:8e:58:9b:36:
         f1:c5:35:1d:3c:bf:6c:11:ed:19:bf:2b:25:a0:12:d1:2f:a4:
         ba:2c:f2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----