Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/38C8751CBD42BDAF6FF931ADD4002C724A3B8A4B.mft
File:                     38C8751CBD42BDAF6FF931ADD4002C724A3B8A4B.mft (raw, json)
Hash identifier:          mhNkMVhabYs2Na58UKfIAufZWewsWkn9iTCLldScKIg=
Subject key identifier:   03:A6:64:67:AB:22:A4:AE:38:25:E6:2C:E7:7E:FF:47:FF:BB:D2:35
Authority key identifier: 38:C8:75:1C:BD:42:BD:AF:6F:F9:31:AD:D4:00:2C:72:4A:3B:8A:4B
Certificate issuer:       /CN=38C8751CBD42BDAF6FF931ADD4002C724A3B8A4B
Certificate serial:       46E4EC849B2A20EEA285285F6F9554B8618D21BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38C8751CBD42BDAF6FF931ADD4002C724A3B8A4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/38C8751CBD42BDAF6FF931ADD4002C724A3B8A4B.mft
Manifest number:          014B
Signing time:             Mon 15 Apr 2024 08:05:00 +0000
Manifest this update:     Mon 15 Apr 2024 08:00:00 +0000
Manifest next update:     Tue 16 Apr 2024 08:36:00 +0000
Files and hashes:         1: 38C8751CBD42BDAF6FF931ADD4002C724A3B8A4B.crl (hash: 0+ZKiMF2zmcdZsirELBeAcC7Qkh2/9xg8+JnSeqM674=)
                          2: 3136382e3139372e3134342e302f32322d3234203d3e20323635343837.roa (hash: hRvxTsJlUDHrPQ2rwDP26VMNyLqUkLC+e0ZBL7WV/Wk=)
                          3: 323830343a333465383a3a2f33322d3438203d3e20323635343837.roa (hash: Zn+SIdqErwj1Y6UK5bY6Xb0h0/jpHU9yj0bZPYW93pk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:e4:ec:84:9b:2a:20:ee:a2:85:28:5f:6f:95:54:b8:61:8d:21:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38C8751CBD42BDAF6FF931ADD4002C724A3B8A4B
        Validity
            Not Before: Apr 15 08:00:00 2024 GMT
            Not After : Apr 16 08:36:00 2024 GMT
        Subject: CN=03A66467AB22A4AE3825E62CE77EFF47FFBBD235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:84:95:90:2d:14:ff:e5:44:59:6c:40:d9:82:
                    5e:47:ba:be:c9:b2:5e:38:3e:7d:83:b4:97:b1:d3:
                    88:c2:bf:04:e9:a3:c6:ec:e7:dc:d8:0c:12:88:3f:
                    b0:45:f1:17:01:72:d0:5b:41:9d:e6:ae:2e:50:0a:
                    6b:35:ee:c7:98:e7:5e:9b:c2:0f:ae:6d:90:aa:9b:
                    4d:25:f7:44:3e:59:4f:48:f3:48:34:cf:74:3f:48:
                    83:9e:01:7b:ae:bb:07:69:a3:3a:7d:75:ff:4d:76:
                    c4:42:aa:c4:24:6a:72:9b:68:7d:ca:a4:b7:c2:6c:
                    7e:ca:5b:bd:83:35:a4:3c:38:a7:20:53:31:3b:63:
                    d9:3a:2d:1f:90:38:32:11:2d:40:6a:a8:6b:2a:b5:
                    fa:56:8d:8d:56:fb:89:87:9f:ef:8c:34:15:66:8a:
                    c0:cc:82:1e:2e:ab:07:aa:7f:4e:56:e9:ae:8f:9a:
                    fa:b7:41:e6:19:78:87:3f:28:12:a0:51:4e:0f:fa:
                    14:64:ca:42:fb:dd:0d:c3:c8:9b:5c:7d:9c:84:c2:
                    2c:53:82:82:8a:3f:29:99:06:8d:08:fa:5a:15:94:
                    ab:87:40:a4:6d:6b:1c:8a:1e:a3:8a:29:b5:58:be:
                    49:06:aa:48:ff:a4:99:8d:43:61:10:d7:12:a8:a4:
                    bf:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A6:64:67:AB:22:A4:AE:38:25:E6:2C:E7:7E:FF:47:FF:BB:D2:35
            X509v3 Authority Key Identifier:
                keyid:38:C8:75:1C:BD:42:BD:AF:6F:F9:31:AD:D4:00:2C:72:4A:3B:8A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/38C8751CBD42BDAF6FF931ADD4002C724A3B8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38C8751CBD42BDAF6FF931ADD4002C724A3B8A4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/38C8751CBD42BDAF6FF931ADD4002C724A3B8A4B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:d6:bb:e6:24:30:16:e6:3c:9c:ae:d6:a5:dd:84:c5:44:cb:
         0d:55:31:ba:76:4d:35:2c:7c:f5:da:47:5d:5f:e7:e2:7a:f4:
         8c:48:93:ee:eb:9a:08:3f:90:4c:12:08:6d:5e:f4:b2:c7:f6:
         6c:2b:20:4e:b0:1f:1c:28:b7:c0:5e:ef:f2:12:b2:13:69:23:
         8f:8b:ee:c0:d8:d3:cb:55:1d:3d:b3:0e:e8:01:92:d8:2d:bd:
         58:c7:45:39:bd:58:03:9d:81:e1:84:c6:e7:9c:fd:25:40:3e:
         b7:0f:48:a1:08:79:4c:21:ef:51:3f:fa:fe:e4:bd:0d:13:66:
         f6:13:8b:aa:50:34:59:da:60:c6:8e:88:02:28:2a:47:ea:cc:
         b5:1a:15:07:c4:4f:b1:3c:d1:d4:56:db:21:f6:83:5f:33:9f:
         0c:31:e6:5f:ce:0a:6b:1a:82:70:6b:4e:7b:45:03:0d:4a:dd:
         e3:12:10:52:8b:35:69:7c:6e:00:19:77:aa:d4:68:f8:41:41:
         86:6c:ca:aa:4e:65:d4:75:7c:1a:80:51:b2:16:41:34:a9:17:
         93:8c:5b:76:05:68:38:aa:a6:7b:be:4b:a0:fa:a3:e7:13:d5:
         6a:71:94:45:d8:10:19:f9:30:c0:2f:71:e5:82:a9:7c:0c:1f:
         45:2e:f8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----