Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6BKKT3FEsg5U6fAzTTDWMmffQpbXpPnzhKJhUmyhieBp/0/035FFFD8EAD1B9CBA2633D8CBE3310AC4E8D3371.mft
File:                     035FFFD8EAD1B9CBA2633D8CBE3310AC4E8D3371.mft (raw, json)
Hash identifier:          3Ip97m1UsHLEUs3XApV1Vqw28ECcUg/1k9tHcYqtNmg=
Subject key identifier:   F0:D4:E6:80:10:3F:FE:2A:37:04:19:AC:E4:6E:96:D7:72:FC:34:14
Authority key identifier: 03:5F:FF:D8:EA:D1:B9:CB:A2:63:3D:8C:BE:33:10:AC:4E:8D:33:71
Certificate issuer:       /CN=035FFFD8EAD1B9CBA2633D8CBE3310AC4E8D3371
Certificate serial:       0BCD36DC5EB0C78130DBC48C3D08BAD0F72B84D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/035FFFD8EAD1B9CBA2633D8CBE3310AC4E8D3371.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BKKT3FEsg5U6fAzTTDWMmffQpbXpPnzhKJhUmyhieBp/0/035FFFD8EAD1B9CBA2633D8CBE3310AC4E8D3371.mft
Manifest number:          0787
Signing time:             Mon 15 Apr 2024 07:39:59 +0000
Manifest this update:     Mon 15 Apr 2024 07:34:59 +0000
Manifest next update:     Tue 16 Apr 2024 08:05:59 +0000
Files and hashes:         1: 3137372e31302e3132382e302f32322d3234203d3e20323632373339.roa (hash: 8bEvcPqMOZGCtLcwr6JQtKwbd+4YMxgkafB/5eLI5yw=)
                          2: 323830343a3563633a3a2f33322d3438203d3e20323632373339.roa (hash: 54dxoNNgqDsDgaAFMKYOuiFKwvzxJj3T03xwI3E9Its=)
                          3: 035FFFD8EAD1B9CBA2633D8CBE3310AC4E8D3371.crl (hash: T8jmCOI0cc0exAXQ5OlxN7yWfBSWjw8TbFtCOrGyIdE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:cd:36:dc:5e:b0:c7:81:30:db:c4:8c:3d:08:ba:d0:f7:2b:84:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=035FFFD8EAD1B9CBA2633D8CBE3310AC4E8D3371
        Validity
            Not Before: Apr 15 07:34:59 2024 GMT
            Not After : Apr 16 08:05:59 2024 GMT
        Subject: CN=F0D4E680103FFE2A370419ACE46E96D772FC3414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8d:dc:fc:8b:a9:06:0e:f1:bd:5c:0a:96:d4:
                    8c:c5:f2:da:17:a2:6f:28:dc:ca:84:6f:05:c2:49:
                    5d:68:72:11:9b:ab:7e:51:bf:0e:27:81:4f:b4:93:
                    4e:49:05:e6:3a:8c:f8:3e:99:d0:d4:88:4b:61:ce:
                    73:d4:94:a3:11:dc:91:7e:a6:6e:2c:52:b4:72:b4:
                    ad:67:d3:1e:c5:57:52:b4:3a:ad:36:0f:43:96:b3:
                    d6:42:e1:da:97:42:3b:ea:af:25:96:9b:e1:2c:51:
                    d7:0d:d7:69:db:5f:18:3e:86:57:d6:dd:8e:1e:bf:
                    23:e6:2a:59:a9:c4:63:89:27:ec:f0:0c:67:72:38:
                    d0:e2:b2:e8:e8:5e:53:a7:92:6e:03:ab:18:d4:af:
                    88:d4:15:6b:37:4a:b4:e6:72:47:df:8c:06:2c:d4:
                    6d:44:3c:1a:a7:1f:27:fb:55:1e:b4:14:ea:48:ea:
                    f9:ba:c9:5b:c7:2f:23:32:66:e2:01:90:cb:52:e9:
                    e1:08:40:a4:f5:33:dd:77:93:f6:7d:0b:47:27:00:
                    f5:d7:5b:d5:19:83:66:c1:36:93:72:bd:72:fd:f2:
                    f4:50:17:46:17:94:cf:e1:c2:22:cf:b3:2c:9e:51:
                    a2:ce:ef:f3:eb:a4:ae:b8:e1:fa:8c:e6:99:a3:ec:
                    46:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D4:E6:80:10:3F:FE:2A:37:04:19:AC:E4:6E:96:D7:72:FC:34:14
            X509v3 Authority Key Identifier:
                keyid:03:5F:FF:D8:EA:D1:B9:CB:A2:63:3D:8C:BE:33:10:AC:4E:8D:33:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BKKT3FEsg5U6fAzTTDWMmffQpbXpPnzhKJhUmyhieBp/0/035FFFD8EAD1B9CBA2633D8CBE3310AC4E8D3371.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/035FFFD8EAD1B9CBA2633D8CBE3310AC4E8D3371.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BKKT3FEsg5U6fAzTTDWMmffQpbXpPnzhKJhUmyhieBp/0/035FFFD8EAD1B9CBA2633D8CBE3310AC4E8D3371.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:b2:0b:3b:73:5e:51:3e:f2:f2:60:52:b4:dc:a9:79:eb:74:
         b1:af:54:8e:8b:fc:70:10:94:33:81:3d:5f:93:20:d0:86:90:
         6c:c1:ca:58:0e:5c:1a:ec:38:f5:86:42:cf:84:ff:4f:47:e4:
         2a:2c:3e:30:a8:51:d5:06:5a:26:bd:6e:e7:c1:aa:ab:f7:70:
         a4:1e:2e:05:2a:43:37:9d:40:79:3c:28:0a:71:a6:91:87:db:
         28:f6:fc:65:0b:9e:96:83:be:e7:55:f0:fd:87:49:1b:38:c6:
         7b:7d:54:8b:16:a8:74:6e:09:13:47:24:29:e8:17:82:4f:57:
         c3:4f:35:6b:fb:7f:de:5f:a3:67:cb:9a:91:21:46:ba:b9:9c:
         15:b7:a2:20:df:f6:45:ab:20:eb:63:97:cb:00:34:26:ee:1f:
         37:73:01:30:95:57:55:65:12:34:c7:61:75:50:1a:e7:44:1d:
         f5:9a:2c:4d:48:cc:54:34:d2:e1:1e:9a:1f:34:a0:8f:60:da:
         e2:91:51:bc:5d:93:49:93:36:6a:23:07:ed:05:41:21:52:61:
         5e:4d:4a:72:1f:4d:ea:b6:a3:fb:97:bf:c6:d0:31:d4:8d:f3:
         fb:1c:fd:d9:43:a1:cb:04:5e:08:72:dc:22:ff:ff:8e:24:80:
         f8:a7:6b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----