Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8fUB7sbinPSTAsoCCZqs8uQbmzU4v93ve8YfsBB7S7VC/0/3F2D0F99CA27BD85085FF4FA8E8D48DECCCE33D9.mft
File:                     3F2D0F99CA27BD85085FF4FA8E8D48DECCCE33D9.mft (raw, json)
Hash identifier:          gP0c8wgtYPz0VFGr60iIS0L/sA0w46QDJ/Lv42mbdGA=
Subject key identifier:   57:04:65:55:BA:A0:7E:58:0A:BC:54:C6:CA:D9:93:8D:D5:92:DA:41
Authority key identifier: 3F:2D:0F:99:CA:27:BD:85:08:5F:F4:FA:8E:8D:48:DE:CC:CE:33:D9
Certificate issuer:       /CN=3F2D0F99CA27BD85085FF4FA8E8D48DECCCE33D9
Certificate serial:       2C2B97375528D5244961163CF1CBD1987EA30C64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F2D0F99CA27BD85085FF4FA8E8D48DECCCE33D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8fUB7sbinPSTAsoCCZqs8uQbmzU4v93ve8YfsBB7S7VC/0/3F2D0F99CA27BD85085FF4FA8E8D48DECCCE33D9.mft
Manifest number:          83
Signing time:             Tue 19 Nov 2024 05:06:58 +0000
Manifest this update:     Tue 19 Nov 2024 05:01:58 +0000
Manifest next update:     Wed 20 Nov 2024 09:00:58 +0000
Files and hashes:         1: 3F2D0F99CA27BD85085FF4FA8E8D48DECCCE33D9.crl (hash: Glmy2IKso3OeU01fBmOr4mqiw7l9C8dkZ9n0XSAsyTo=)
                          2: 3137372e39312e3136382e302f32322d3234203d3e20323633343436.roa (hash: 3bGVb1/7FWH7IpdgNQsGPRtvdhX/nveoLjryi84lDg8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:2b:97:37:55:28:d5:24:49:61:16:3c:f1:cb:d1:98:7e:a3:0c:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F2D0F99CA27BD85085FF4FA8E8D48DECCCE33D9
        Validity
            Not Before: Nov 19 05:01:58 2024 GMT
            Not After : Nov 20 09:00:58 2024 GMT
        Subject: CN=57046555BAA07E580ABC54C6CAD9938DD592DA41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:44:d0:b2:aa:ef:fc:93:34:9f:ea:f3:d5:87:
                    13:c7:fe:fa:7d:0c:29:f6:36:aa:ad:33:8d:dc:56:
                    8a:69:f2:46:c7:c5:ed:ae:ea:b5:cf:85:ec:0a:68:
                    25:ac:c4:8c:7d:2e:f7:70:48:a7:6e:56:d5:68:50:
                    14:26:26:81:1e:46:bc:fd:3a:19:89:9d:84:28:0c:
                    c7:1f:e2:8d:d4:6c:c6:ad:b4:a9:48:61:8f:aa:bd:
                    99:29:8f:7a:8f:6b:d7:d1:d7:8a:67:ec:ad:17:b2:
                    6a:9a:59:4e:af:1d:46:d3:98:e4:fe:d3:b7:68:ef:
                    e1:2b:14:04:8a:f7:ab:cf:b7:6d:8b:43:3e:95:da:
                    6a:f2:55:32:1c:60:70:e1:79:cb:6a:f6:10:67:f0:
                    35:28:51:d2:d5:b2:1e:c4:41:8f:64:4d:08:62:87:
                    fe:43:a1:94:44:8e:c4:a3:a5:e8:95:00:c6:df:46:
                    06:3b:dd:d3:4a:55:03:9f:a6:33:ee:7c:61:a5:14:
                    bf:65:58:e7:e9:45:ec:aa:fd:d7:54:cc:46:17:e9:
                    8a:0c:45:14:6a:1d:63:61:7f:fd:69:14:b3:ba:70:
                    dd:73:e7:13:ad:01:90:6a:9c:a3:9a:42:4b:02:28:
                    35:7d:4d:75:8b:52:aa:6d:df:74:16:ec:1d:2a:13:
                    93:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:04:65:55:BA:A0:7E:58:0A:BC:54:C6:CA:D9:93:8D:D5:92:DA:41
            X509v3 Authority Key Identifier:
                keyid:3F:2D:0F:99:CA:27:BD:85:08:5F:F4:FA:8E:8D:48:DE:CC:CE:33:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8fUB7sbinPSTAsoCCZqs8uQbmzU4v93ve8YfsBB7S7VC/0/3F2D0F99CA27BD85085FF4FA8E8D48DECCCE33D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F2D0F99CA27BD85085FF4FA8E8D48DECCCE33D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fUB7sbinPSTAsoCCZqs8uQbmzU4v93ve8YfsBB7S7VC/0/3F2D0F99CA27BD85085FF4FA8E8D48DECCCE33D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:2b:9a:88:20:e3:9f:c6:73:d0:76:76:c9:e7:9d:3c:5d:23:
         e7:5b:47:36:a7:88:12:ba:6f:d3:f5:ae:69:a8:80:56:42:49:
         8e:c0:88:f7:b2:41:f4:70:e1:d2:15:ea:9a:9e:26:32:5a:0a:
         6a:a8:66:7b:41:0f:fc:31:bf:41:f5:ce:9f:72:11:91:d3:2d:
         c4:7f:88:fc:14:61:5f:d6:e6:6d:2a:66:25:4d:74:01:19:74:
         eb:7d:e6:50:36:d6:db:c7:3d:86:c2:24:e4:5a:36:00:47:5a:
         fe:f2:a3:13:3b:8c:4c:4c:45:85:eb:d9:ee:d3:51:4a:66:ad:
         c3:ec:0c:cb:cd:88:42:ae:b5:de:76:2e:c5:14:b6:09:0e:d1:
         c0:a0:68:21:ad:bf:c3:de:1d:2d:18:f7:66:0b:67:f5:7d:6b:
         e3:f1:d3:fb:cb:5e:23:84:a6:80:93:6b:86:8e:47:da:ad:b5:
         47:7f:4f:29:4e:dd:98:de:af:c6:a1:a8:54:a5:ec:dd:45:1f:
         b9:62:33:e1:e1:6d:f1:0e:f3:14:73:65:81:c9:ca:ab:36:15:
         36:c4:b1:3f:e8:4d:74:df:b4:be:c0:a7:92:57:98:dd:fe:24:
         0c:67:06:12:6b:41:87:55:f2:97:35:2a:a7:90:2a:6b:ec:50:
         a2:dc:71:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----