Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/1/383F1C9E4F62D378CDEAF8399E5B08C19769D169.mft
File:                     383F1C9E4F62D378CDEAF8399E5B08C19769D169.mft (raw, json)
Hash identifier:          znWro9Thgkq02GQ8yfp0He5LB86srbdzvb+cQxyKqM0=
Subject key identifier:   34:ED:02:B9:E4:12:9E:99:36:1B:FB:FB:87:FC:B8:AB:E4:4C:2D:0E
Authority key identifier: 38:3F:1C:9E:4F:62:D3:78:CD:EA:F8:39:9E:5B:08:C1:97:69:D1:69
Certificate issuer:       /CN=383F1C9E4F62D378CDEAF8399E5B08C19769D169
Certificate serial:       428840CA6C6359052AD2DC0B736FC5EE0B7D219C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/383F1C9E4F62D378CDEAF8399E5B08C19769D169.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/1/383F1C9E4F62D378CDEAF8399E5B08C19769D169.mft
Manifest number:          0125
Signing time:             Sun 10 Nov 2024 13:49:16 +0000
Manifest this update:     Sun 10 Nov 2024 13:44:16 +0000
Manifest next update:     Mon 11 Nov 2024 14:38:16 +0000
Files and hashes:         1: 383F1C9E4F62D378CDEAF8399E5B08C19769D169.crl (hash: Xz9nnuukwa/qUy3pRDi6WT/NvsRqHY4UZ4PTIeLIlwg=)
                          2: 323830343a3233343a3a2f33322d3334203d3e20323632373331.roa (hash: hBkgoPZDoAM86lPm0PS4X5HX+d1fyMEo34dFw0Zr5pc=)
                          3: 3138362e3139332e3232342e302f32302d3234203d3e20323632373331.roa (hash: RIvzYFFX2zujqcpKBZHZARnPee+AuLr7R6p2EDCHkcI=)
                          4: 3137372e3139302e3139322e302f32302d3234203d3e20323632373331.roa (hash: BaLJaGy3wOQXhHr22UunT9BmFWB4S8cypA1Jr43re14=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:88:40:ca:6c:63:59:05:2a:d2:dc:0b:73:6f:c5:ee:0b:7d:21:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=383F1C9E4F62D378CDEAF8399E5B08C19769D169
        Validity
            Not Before: Nov 10 13:44:16 2024 GMT
            Not After : Nov 11 14:38:16 2024 GMT
        Subject: CN=34ED02B9E4129E99361BFBFB87FCB8ABE44C2D0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:aa:57:36:1e:48:4b:a9:ff:46:85:1b:9a:fb:
                    d2:e7:d9:34:c5:d7:f7:cf:42:47:d6:2a:8f:4d:b5:
                    71:1f:92:7e:92:8a:a7:47:61:85:d3:48:c8:e5:0b:
                    b5:76:80:5d:25:5f:92:d8:84:a9:71:47:de:9c:55:
                    c5:07:09:76:91:11:30:be:e9:f7:40:1d:b8:19:b9:
                    d7:e3:46:78:f0:d6:44:7e:28:14:21:10:e5:a6:20:
                    3f:b1:66:78:aa:67:e8:fe:9d:87:81:a4:80:b6:7c:
                    f9:e1:01:3e:c7:9f:62:c2:7a:0b:31:fd:8a:f8:c1:
                    5c:f1:90:dd:83:cf:1c:a5:3d:f3:b1:13:0c:9c:b1:
                    8a:be:6a:e3:b8:1a:2a:6d:ad:61:8f:0d:39:49:92:
                    41:b0:44:ae:2f:ec:c2:71:10:46:11:5b:24:d6:91:
                    fa:ec:3f:d4:70:79:2c:48:3f:b2:3b:0c:23:aa:70:
                    93:d7:30:2a:12:e8:67:2f:be:7e:e1:58:47:12:9c:
                    e0:8a:78:75:a2:b9:1a:95:18:61:e9:ea:9b:d0:ab:
                    11:bc:e4:00:74:0d:2b:fa:8c:87:b4:bf:8c:26:f8:
                    b8:20:f9:f7:fd:7b:8c:c6:df:b3:82:93:b9:57:fd:
                    58:2b:7f:b6:5b:b8:d6:ab:6e:38:fd:33:3a:41:d3:
                    1b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:ED:02:B9:E4:12:9E:99:36:1B:FB:FB:87:FC:B8:AB:E4:4C:2D:0E
            X509v3 Authority Key Identifier:
                keyid:38:3F:1C:9E:4F:62:D3:78:CD:EA:F8:39:9E:5B:08:C1:97:69:D1:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/1/383F1C9E4F62D378CDEAF8399E5B08C19769D169.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/383F1C9E4F62D378CDEAF8399E5B08C19769D169.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/1/383F1C9E4F62D378CDEAF8399E5B08C19769D169.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:c3:67:2f:2f:dd:38:8b:66:e8:f9:23:fc:ae:fa:ad:b9:1a:
         f2:d1:3d:04:f0:25:54:76:51:3b:f0:9d:c6:db:48:7c:35:4b:
         6d:45:5a:e1:2c:db:1c:71:9f:f3:f5:67:e2:9c:56:af:bc:bf:
         98:e1:97:c7:54:6a:0f:fd:8a:b5:42:15:dd:1c:5d:ea:be:33:
         26:b1:65:13:c6:29:53:bb:63:11:eb:cd:eb:9c:46:6f:8f:a4:
         43:ec:26:2f:da:33:7a:19:08:d0:83:e5:b5:3c:26:10:0c:22:
         5b:65:e4:2b:8a:7b:62:30:61:a7:c1:f3:47:7f:31:a1:0d:0c:
         ea:8a:0b:36:3b:f0:5c:37:bd:28:9e:54:47:d8:e5:e9:a6:df:
         38:54:19:cd:09:a2:5b:c7:c4:c2:62:bc:2d:31:69:be:5e:ef:
         ef:53:f0:2e:97:55:2e:d5:31:d6:39:89:aa:80:ab:9f:c9:16:
         ab:24:89:fe:68:a8:31:46:79:99:59:c5:b9:01:97:38:33:74:
         6e:c8:86:d0:b1:43:c5:ef:3f:20:f3:69:f8:08:e0:85:aa:70:
         31:84:f7:c0:17:c5:c7:b1:ce:94:34:08:88:68:16:b3:f8:03:
         82:78:40:3e:24:ab:06:db:58:8a:b3:bb:81:3b:30:b0:84:07:
         2c:2f:4c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----