Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7jkfUhbhdxHvKqKhW2wND8HmY4sJQz7u27BEYy8EQwL5/0/3F58E583E9963E31931B98D04AF87252F51C22AB.mft
File:                     3F58E583E9963E31931B98D04AF87252F51C22AB.mft (raw, json)
Hash identifier:          aD7GN5Z2MusUVnNcEF5vcihgEOz4w3HB8O84ZREt/x0=
Subject key identifier:   BE:A6:9F:AF:BA:2A:A4:F2:80:91:B1:16:E3:6E:9D:8E:04:72:0A:2A
Authority key identifier: 3F:58:E5:83:E9:96:3E:31:93:1B:98:D0:4A:F8:72:52:F5:1C:22:AB
Certificate issuer:       /CN=3F58E583E9963E31931B98D04AF87252F51C22AB
Certificate serial:       72BE765FDE69F12F93FD383CF60E45258E9A2812
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F58E583E9963E31931B98D04AF87252F51C22AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7jkfUhbhdxHvKqKhW2wND8HmY4sJQz7u27BEYy8EQwL5/0/3F58E583E9963E31931B98D04AF87252F51C22AB.mft
Manifest number:          037E
Signing time:             Mon 15 Apr 2024 08:17:08 +0000
Manifest this update:     Mon 15 Apr 2024 08:12:08 +0000
Manifest next update:     Tue 16 Apr 2024 10:27:08 +0000
Files and hashes:         1: 3136382e3138312e3230302e302f32322d3234203d3e20323635333434.roa (hash: /0CsFeG5xs/Dj8peK++6gS37Yw1Kuj+IdGDQIe7R7dY=)
                          2: 3F58E583E9963E31931B98D04AF87252F51C22AB.crl (hash: cIL8SN4QlYtGCpo0/LhCnj/pHkUmFV/vGp4V17yeHWI=)
                          3: 323830343a326536383a3a2f33322d3438203d3e20323635333434.roa (hash: g8iUgumm4H9XGV5GYFlhUyPkzBizvVGR6dLvIh7mj5g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:be:76:5f:de:69:f1:2f:93:fd:38:3c:f6:0e:45:25:8e:9a:28:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F58E583E9963E31931B98D04AF87252F51C22AB
        Validity
            Not Before: Apr 15 08:12:08 2024 GMT
            Not After : Apr 16 10:27:08 2024 GMT
        Subject: CN=BEA69FAFBA2AA4F28091B116E36E9D8E04720A2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:91:cf:62:e8:9b:44:8e:94:97:8d:13:b4:89:
                    b8:96:b5:0f:3e:b3:a2:63:09:c4:75:7d:77:9e:65:
                    a8:33:1a:25:a0:db:03:3f:95:dc:75:14:5a:95:a4:
                    ec:1c:01:99:7d:3d:97:94:f6:e2:c0:69:6f:6b:74:
                    ec:83:c7:d4:1f:95:0b:cd:ee:9d:11:0c:79:46:bb:
                    c1:a1:a3:c8:4e:52:51:f8:a5:99:71:9e:38:d0:c5:
                    af:1f:c1:75:46:a0:74:6b:b9:5f:9c:8d:c1:9d:98:
                    e8:ca:24:af:d8:4a:4b:8c:0c:e4:65:cb:e0:34:ea:
                    6d:8f:fc:40:32:fb:c5:f0:fb:42:55:38:46:40:93:
                    34:4b:7e:e7:44:05:83:63:62:13:0d:19:0b:f5:16:
                    0f:c3:50:0b:0e:6a:16:79:e5:ea:07:03:87:88:fc:
                    33:14:39:14:6d:15:b2:da:e1:52:28:90:17:db:ff:
                    b3:bf:47:f2:62:d4:60:1c:fc:a9:32:d8:83:24:de:
                    4e:3a:d1:5d:22:05:08:4f:54:e0:73:69:f7:77:fe:
                    23:32:47:57:03:02:78:8d:1d:10:19:7d:5e:aa:4d:
                    6d:10:44:a4:03:a4:ec:d2:02:31:75:82:71:71:ff:
                    e0:e1:0d:68:32:f0:52:f4:68:ea:e0:1d:60:b8:7c:
                    b3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A6:9F:AF:BA:2A:A4:F2:80:91:B1:16:E3:6E:9D:8E:04:72:0A:2A
            X509v3 Authority Key Identifier:
                keyid:3F:58:E5:83:E9:96:3E:31:93:1B:98:D0:4A:F8:72:52:F5:1C:22:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7jkfUhbhdxHvKqKhW2wND8HmY4sJQz7u27BEYy8EQwL5/0/3F58E583E9963E31931B98D04AF87252F51C22AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F58E583E9963E31931B98D04AF87252F51C22AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7jkfUhbhdxHvKqKhW2wND8HmY4sJQz7u27BEYy8EQwL5/0/3F58E583E9963E31931B98D04AF87252F51C22AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:bb:37:65:de:7e:6f:e6:61:f8:9d:49:74:ce:fd:58:fb:16:
         56:09:ab:98:e1:41:eb:b0:c7:f5:4f:aa:58:ab:cb:44:b7:0d:
         ec:6e:00:59:b8:c9:a8:44:e3:a6:47:f4:b6:7d:fa:57:59:2b:
         d1:f4:f3:a8:ce:a5:47:d2:6e:72:41:64:7d:78:6b:14:cf:d2:
         5c:cd:f8:24:a4:ab:4e:fb:08:b1:f2:d6:15:98:ec:ed:eb:ff:
         58:ed:3e:ff:02:c1:ff:c1:3e:34:2a:c5:1b:ef:08:b8:e6:bb:
         4e:40:b6:45:15:a0:24:d7:75:bb:32:de:12:57:a3:b2:84:ab:
         23:56:b0:fa:51:96:39:c9:6e:b7:4f:95:12:39:ad:19:12:fa:
         25:df:16:10:0f:8e:0c:9e:b6:92:63:ba:11:d6:84:5f:27:4c:
         cf:91:04:7e:2e:23:74:27:ea:5c:5e:e7:d8:54:a4:48:67:15:
         10:98:55:fb:39:f7:6d:04:75:a2:54:4f:a8:e6:d2:c8:e0:c2:
         00:d0:7a:b0:60:59:e7:ad:a2:dd:3a:91:72:d0:c2:1f:18:3b:
         b3:bb:b1:7a:ed:19:d8:d1:ec:ad:a2:d3:65:de:2e:33:1d:27:
         e8:65:7e:a3:eb:57:bc:66:d5:a6:2a:41:66:49:fe:94:2e:a1:
         5d:b7:d9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----