Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/1/3ECDC4CEC2FFEAF1DD22BEFA32E65C4B5C128B50.mft
File:                     3ECDC4CEC2FFEAF1DD22BEFA32E65C4B5C128B50.mft (raw, json)
Hash identifier:          QKnQIwGn6XkWV8yp47lqIWcuiVN3BZp8hYHji1U8JNs=
Subject key identifier:   B8:2D:CF:37:F6:E9:77:1C:00:05:A2:52:44:A2:B2:2A:DA:2C:AD:F7
Authority key identifier: 3E:CD:C4:CE:C2:FF:EA:F1:DD:22:BE:FA:32:E6:5C:4B:5C:12:8B:50
Certificate issuer:       /CN=3ECDC4CEC2FFEAF1DD22BEFA32E65C4B5C128B50
Certificate serial:       3A032137DB96196DBF2B369D50A8A7FC9792D503
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ECDC4CEC2FFEAF1DD22BEFA32E65C4B5C128B50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/1/3ECDC4CEC2FFEAF1DD22BEFA32E65C4B5C128B50.mft
Manifest number:          3E
Signing time:             Sun 19 May 2024 11:59:01 +0000
Manifest this update:     Sun 19 May 2024 11:54:01 +0000
Manifest next update:     Mon 20 May 2024 15:33:01 +0000
Files and hashes:         1: 3137302e3233332e3130342e302f32322d3234203d3e20323635303933.roa (hash: tudj1M/AjEfvtN3Q3lKXVVyf72sKOhS2YpAsNgvELCQ=)
                          2: 323830343a333262303a3a2f33322d3438203d3e20323635303933.roa (hash: k7hglyn+CJ5OonAnYT4OtfnXjps3JKZHnQXw7kK66qM=)
                          3: 3ECDC4CEC2FFEAF1DD22BEFA32E65C4B5C128B50.crl (hash: ZqtfTry62PfEKCQneZ2+zRJ5LtAVB9v3HViHY/2p5LA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:03:21:37:db:96:19:6d:bf:2b:36:9d:50:a8:a7:fc:97:92:d5:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ECDC4CEC2FFEAF1DD22BEFA32E65C4B5C128B50
        Validity
            Not Before: May 19 11:54:01 2024 GMT
            Not After : May 20 15:33:01 2024 GMT
        Subject: CN=B82DCF37F6E9771C0005A25244A2B22ADA2CADF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7b:7d:7d:65:d8:f6:e1:10:0f:38:95:82:11:
                    99:32:28:7a:26:1e:91:45:ce:50:5f:af:d9:e0:01:
                    01:ac:a4:ea:ed:b0:ac:22:17:e3:b8:01:24:d6:39:
                    3c:0e:55:c1:26:d0:02:d3:2d:b6:02:d6:3d:55:54:
                    f3:fc:59:f5:b2:b2:6f:9a:de:48:b9:32:eb:cb:20:
                    3c:a6:44:33:72:18:b4:1d:88:92:10:d2:1d:ad:01:
                    73:9f:b2:2f:69:ba:1c:97:8c:85:3d:9f:f2:2b:c3:
                    43:cd:51:47:17:c1:e3:16:3e:b2:e0:fb:ec:96:f3:
                    ee:f9:20:a9:a1:72:0a:fc:6e:e4:af:a5:e5:24:5e:
                    81:9e:40:8f:70:06:d0:9f:50:c5:cc:29:7f:16:60:
                    24:97:ab:da:58:77:f0:72:80:75:dc:0a:8b:84:41:
                    87:ff:85:72:5b:ef:9a:4b:9c:d7:c4:2e:b0:ab:4c:
                    a1:16:f2:8c:2f:b0:ae:b5:72:f6:0b:90:b6:ff:48:
                    2a:e1:99:d6:5f:cc:e2:57:69:af:a3:ed:85:45:3d:
                    89:d9:86:8d:4e:f6:88:f9:97:04:4b:b5:2a:27:4b:
                    9e:11:7a:13:0b:0b:ed:e7:fe:ce:f7:48:66:3b:96:
                    62:8c:01:b1:16:64:61:a0:ea:8a:e7:03:fb:5f:ba:
                    6a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:2D:CF:37:F6:E9:77:1C:00:05:A2:52:44:A2:B2:2A:DA:2C:AD:F7
            X509v3 Authority Key Identifier:
                keyid:3E:CD:C4:CE:C2:FF:EA:F1:DD:22:BE:FA:32:E6:5C:4B:5C:12:8B:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/1/3ECDC4CEC2FFEAF1DD22BEFA32E65C4B5C128B50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ECDC4CEC2FFEAF1DD22BEFA32E65C4B5C128B50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/1/3ECDC4CEC2FFEAF1DD22BEFA32E65C4B5C128B50.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:c6:76:9e:2b:4c:ac:16:e8:86:23:91:b9:35:58:58:1e:ed:
         4a:b5:50:9c:08:e0:25:1a:d1:1d:43:28:80:47:2d:c9:bf:28:
         12:38:84:6b:06:6b:76:9a:98:ab:54:a1:ee:9e:e9:1d:a7:8e:
         35:f9:15:7f:8f:61:d4:71:11:44:0a:fa:f4:8f:9e:b2:2b:5e:
         dc:68:06:bd:78:af:8a:68:c3:79:ae:51:24:69:de:d9:04:08:
         98:85:86:19:e8:80:a2:18:5e:dd:1f:34:cd:37:95:02:01:57:
         6b:ce:6d:43:02:d3:82:a8:68:af:a2:ee:6d:8a:8f:af:3f:bd:
         a5:b6:ff:6f:9e:31:15:b7:99:26:75:fd:2b:3e:64:41:00:cb:
         bb:84:19:9c:2b:df:f6:0d:2e:8d:b4:bc:b8:44:c8:02:4c:d3:
         40:28:12:d1:9a:fa:8f:11:11:cd:78:7b:cf:a9:54:6b:7f:89:
         42:bb:cc:87:08:04:6f:14:1e:1b:68:43:81:5d:6d:5b:81:0b:
         22:c9:b0:de:13:8b:8b:f7:58:d5:4f:6f:16:ff:2d:ca:25:42:
         88:82:98:7a:2f:7b:0b:f7:d1:62:d1:0a:19:eb:50:37:b7:5c:
         41:bf:50:6a:8c:8f:89:11:68:fd:5b:26:ec:35:0f:65:df:e8:
         06:55:83:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----