Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6CkyE4m3WEX8of93tECC3QN875XnJtEHd4BUEtATXUnw/1/3F624DC73663F6020124EB9373C3E190C2003FD8.mft
File:                     3F624DC73663F6020124EB9373C3E190C2003FD8.mft (raw, json)
Hash identifier:          7OxCUBchi2VoRDoR3RS8y/+KkHmDsbAABhYEKOLGmgE=
Subject key identifier:   69:76:6F:38:77:B3:2D:95:37:0A:CF:63:6B:72:E4:2B:40:79:06:CB
Authority key identifier: 3F:62:4D:C7:36:63:F6:02:01:24:EB:93:73:C3:E1:90:C2:00:3F:D8
Certificate issuer:       /CN=3F624DC73663F6020124EB9373C3E190C2003FD8
Certificate serial:       500C077B306E50C7A9E7D1A96FD036F7D261899B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F624DC73663F6020124EB9373C3E190C2003FD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CkyE4m3WEX8of93tECC3QN875XnJtEHd4BUEtATXUnw/1/3F624DC73663F6020124EB9373C3E190C2003FD8.mft
Manifest number:          42
Signing time:             Wed 22 May 2024 18:25:51 +0000
Manifest this update:     Wed 22 May 2024 18:20:51 +0000
Manifest next update:     Thu 23 May 2024 20:31:51 +0000
Files and hashes:         1: 323830343a363839383a3a2f33322d3336203d3e20323639373033.roa (hash: d7RHj4phz0wbJ7S2nFM2GXhmtnahhOZORKDKhnfJpFk=)
                          2: 3F624DC73663F6020124EB9373C3E190C2003FD8.crl (hash: rNLYDmNW49HtyRtsml/igDYeCE9rqcW06YWm9KsuNLA=)
                          3: 34352e3139312e39322e302f32322d3234203d3e20323639373033.roa (hash: BjE4KyZHG5Ei5ur/j3JBqDr0Oiwgd3LPJM+QeUAKcS4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:0c:07:7b:30:6e:50:c7:a9:e7:d1:a9:6f:d0:36:f7:d2:61:89:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F624DC73663F6020124EB9373C3E190C2003FD8
        Validity
            Not Before: May 22 18:20:51 2024 GMT
            Not After : May 23 20:31:51 2024 GMT
        Subject: CN=69766F3877B32D95370ACF636B72E42B407906CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f2:29:27:b3:e4:58:46:48:df:ba:76:5a:4b:
                    c5:0a:fd:b5:6c:e5:0e:5a:ef:47:11:4c:ad:4b:05:
                    e3:05:55:fb:55:38:c9:df:33:1c:b4:ac:d1:3f:93:
                    5a:b6:68:c6:c9:a7:b0:94:bc:88:26:59:07:99:9d:
                    92:ea:fb:36:f0:d9:75:11:a9:21:75:60:56:e9:9e:
                    9d:19:de:ca:22:8e:fe:42:a9:64:ae:fc:b8:09:c0:
                    9c:47:3f:ed:64:a3:a6:06:dd:33:3e:b2:19:fe:21:
                    c0:cf:0c:4d:91:d4:76:74:31:a9:00:06:29:aa:81:
                    f8:b9:fc:54:c5:5e:c0:37:e2:c2:5a:35:04:c3:22:
                    5e:a6:dc:dd:d0:e0:5f:ed:6f:36:e2:32:bc:0d:4e:
                    b4:0d:63:76:13:40:b8:4c:8f:00:3f:74:2e:3f:58:
                    95:b3:1f:87:9f:7b:0e:d6:3e:07:cc:c0:60:68:f9:
                    e7:66:0e:81:ef:f5:a3:ad:6c:49:b9:02:7d:3a:5a:
                    dd:a0:7d:d4:79:06:de:ad:98:02:33:57:da:60:ac:
                    5c:4a:63:1d:cb:72:d2:03:76:4d:ae:54:0c:86:9d:
                    68:a4:4a:9c:49:a4:40:b7:0f:64:10:a6:36:da:d8:
                    0e:d0:18:b5:21:38:72:c4:b5:ef:1d:f1:86:f8:d5:
                    9c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:76:6F:38:77:B3:2D:95:37:0A:CF:63:6B:72:E4:2B:40:79:06:CB
            X509v3 Authority Key Identifier:
                keyid:3F:62:4D:C7:36:63:F6:02:01:24:EB:93:73:C3:E1:90:C2:00:3F:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CkyE4m3WEX8of93tECC3QN875XnJtEHd4BUEtATXUnw/1/3F624DC73663F6020124EB9373C3E190C2003FD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F624DC73663F6020124EB9373C3E190C2003FD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CkyE4m3WEX8of93tECC3QN875XnJtEHd4BUEtATXUnw/1/3F624DC73663F6020124EB9373C3E190C2003FD8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:3e:59:94:f5:01:6d:e6:6d:35:85:41:1f:53:45:42:19:2b:
         67:08:66:bc:44:3f:2c:1a:61:d5:9c:b0:ea:a6:76:73:a7:8b:
         63:e1:cb:74:07:43:6c:de:84:89:a1:6e:a3:56:7e:00:8a:7f:
         62:44:85:4b:40:92:17:c7:85:da:fd:01:0b:18:d8:e0:52:85:
         84:e5:95:78:59:27:12:f2:38:89:37:e1:91:3b:d1:da:83:16:
         be:57:30:94:e7:09:29:c2:25:2a:90:ca:7f:6c:da:2d:fc:f0:
         9b:29:85:9b:e2:2a:b4:88:94:88:b5:ed:63:9b:7e:8e:d9:dd:
         0d:ac:99:e5:2e:8f:ff:15:dd:97:71:e3:60:d3:67:93:6d:f0:
         10:f5:09:e6:ee:63:c7:f7:60:97:48:2c:73:ae:a7:37:38:31:
         4e:9e:77:75:a2:7b:86:45:a5:bc:14:02:b5:5c:ec:a6:dc:a6:
         e6:aa:07:85:46:8f:a3:ef:07:5c:7b:d6:30:fc:b3:4e:47:d1:
         47:d3:2a:c4:b2:ae:85:83:13:b8:4e:a6:d1:dc:69:54:8b:b2:
         12:67:f0:04:f8:4b:82:10:81:10:6b:ed:c1:24:06:6d:28:e0:
         b8:ae:19:76:6e:3e:e7:9d:73:72:80:5b:ce:4e:5d:af:b1:ad:
         21:4a:74:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----