Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/0/B3AE9AF8A62B191BD33CA07A2F0FE985F1BD1074.mft
File:                     B3AE9AF8A62B191BD33CA07A2F0FE985F1BD1074.mft (raw, json)
Hash identifier:          SgwhSV84Giniqz7uWdceeSlCM1yg1ihAYp9Kl+gKZV4=
Subject key identifier:   88:3B:94:77:DA:A4:FF:86:A0:53:D8:19:30:03:9E:96:5D:19:68:F9
Authority key identifier: B3:AE:9A:F8:A6:2B:19:1B:D3:3C:A0:7A:2F:0F:E9:85:F1:BD:10:74
Certificate issuer:       /CN=B3AE9AF8A62B191BD33CA07A2F0FE985F1BD1074
Certificate serial:       56533CB22BE61EC0310CD9309FEDCE6FAE22710F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3AE9AF8A62B191BD33CA07A2F0FE985F1BD1074.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/0/B3AE9AF8A62B191BD33CA07A2F0FE985F1BD1074.mft
Manifest number:          0385
Signing time:             Fri 20 Jan 2023 23:04:18 +0000
Manifest this update:     Fri 20 Jan 2023 22:59:18 +0000
Manifest next update:     Sun 22 Jan 2023 02:43:18 +0000
Files and hashes:         1: 3137302e38312e36302e302f32322d3234203d3e20323636343031.roa (hash: sdAUlqMjjOHO3EGRxIQncyiXH2fb37EyaE85jIRll0M=)
                          2: B3AE9AF8A62B191BD33CA07A2F0FE985F1BD1074.crl (hash: GrNspWv5q9fNRh7hlBMsTJQkcd6uEczi42+Ttt//pQU=)
                          3: 323830343a333734383a3a2f33322d3438203d3e20323636343031.roa (hash: O41weuqSKEze29xMrwoGQSt1w2Ak2I3XragftIKpKro=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:53:3c:b2:2b:e6:1e:c0:31:0c:d9:30:9f:ed:ce:6f:ae:22:71:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3AE9AF8A62B191BD33CA07A2F0FE985F1BD1074
        Validity
            Not Before: Jan 20 22:59:18 2023 GMT
            Not After : Jan 22 02:43:18 2023 GMT
        Subject: CN=883B9477DAA4FF86A053D81930039E965D1968F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8f:a5:ce:4b:be:0a:f5:bd:db:00:96:42:d1:
                    40:1a:f6:27:ba:b2:d6:97:07:d7:d3:31:26:0f:4b:
                    de:54:37:90:8f:8b:b2:f4:8c:97:b4:0b:3a:19:29:
                    46:ca:57:0b:33:c6:b2:70:a1:be:ab:89:af:9a:94:
                    87:96:2f:13:d7:0b:c7:e9:0f:6a:93:c4:38:b0:a6:
                    55:ef:d3:32:26:1d:b9:1e:3c:c6:ea:de:20:0b:9f:
                    8b:89:2f:4c:ac:73:61:87:9d:2e:eb:7a:43:ac:52:
                    c0:fd:2a:6d:1d:20:92:fa:23:8a:ae:bf:83:4f:c5:
                    4d:9e:b8:de:8d:6b:a4:ab:7e:2d:cd:91:f6:51:c5:
                    5a:38:27:2b:de:be:9c:ed:59:a6:86:bc:1a:d8:5a:
                    e1:7c:e2:98:81:f7:30:14:e3:47:80:26:6e:87:da:
                    2b:43:d0:01:c8:9c:a9:a8:53:a0:9f:c0:7c:d5:72:
                    d0:ef:88:a0:04:2c:69:95:7f:0c:74:ee:02:2c:9b:
                    d7:64:40:cb:83:9a:c7:42:98:87:e5:d7:3b:92:a0:
                    a1:a4:a2:17:84:f4:54:ae:4b:ba:4b:51:33:95:0d:
                    83:f3:ed:c6:d1:5f:88:a5:cd:83:af:3b:b1:d4:4d:
                    58:f1:ba:94:c8:db:f3:bc:55:eb:f9:49:34:d3:49:
                    d3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3B:94:77:DA:A4:FF:86:A0:53:D8:19:30:03:9E:96:5D:19:68:F9
            X509v3 Authority Key Identifier:
                keyid:B3:AE:9A:F8:A6:2B:19:1B:D3:3C:A0:7A:2F:0F:E9:85:F1:BD:10:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/0/B3AE9AF8A62B191BD33CA07A2F0FE985F1BD1074.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3AE9AF8A62B191BD33CA07A2F0FE985F1BD1074.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/0/B3AE9AF8A62B191BD33CA07A2F0FE985F1BD1074.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:b9:3e:7c:98:2b:26:9b:1f:9d:90:6c:b6:21:80:b8:73:fb:
         5c:5a:86:0b:96:25:7c:14:5d:f2:6f:ef:0b:85:6b:30:1d:af:
         26:f8:7c:60:92:bb:55:a9:5b:3b:fe:ae:65:af:62:66:bf:d6:
         ed:db:57:b2:37:c6:56:e7:2b:69:38:46:24:33:ed:80:d6:c8:
         03:c0:f8:b0:0f:74:e5:0e:57:f5:14:58:83:3a:31:76:38:77:
         01:19:56:35:63:42:24:13:b7:12:49:1a:4f:0d:bb:68:2c:18:
         0d:6b:87:63:31:6a:2a:12:ae:be:6a:f7:36:8a:67:65:9f:54:
         e4:c7:08:09:1f:26:4f:cf:9d:38:0e:05:d3:0c:e9:e1:9f:4f:
         0c:5e:fe:cd:d1:41:f5:96:a3:2e:fe:2d:26:6b:1d:99:2a:41:
         6e:76:67:00:2b:2f:70:a7:79:f7:65:4e:ab:c0:fd:72:52:c6:
         60:ae:6f:24:39:35:66:73:35:bf:51:8d:bc:d8:61:83:fd:bd:
         72:93:fd:f1:4d:59:6b:ed:fe:d1:d3:b6:d0:e4:87:8d:ae:37:
         94:f7:ea:c4:cc:5e:25:92:ef:0d:bf:a9:eb:be:32:6c:37:4b:
         84:57:60:25:93:03:5b:2e:ea:6b:d3:33:cc:16:10:79:e9:24:
         2a:9b:96:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----