Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8h334Zm2BCT5NrdMWsu4uDXCErAdMZ6oWkhhiCE9Anfz/0/108769B7BB8AB722D7BBB5F24D0A1E364C1D7EA7.mft
File:                     108769B7BB8AB722D7BBB5F24D0A1E364C1D7EA7.mft (raw, json)
Hash identifier:          j/p3IKHfA1Elfo6GV71rWCVc2ubAFCASPzDsIpVF/5I=
Subject key identifier:   32:80:66:7D:37:6C:07:11:4A:A4:55:0B:A6:4C:EC:C3:DF:C1:8E:69
Authority key identifier: 10:87:69:B7:BB:8A:B7:22:D7:BB:B5:F2:4D:0A:1E:36:4C:1D:7E:A7
Certificate issuer:       /CN=108769B7BB8AB722D7BBB5F24D0A1E364C1D7EA7
Certificate serial:       7D54C5396D80ABE5FA9C5302EFF2BA9F11C01A6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/108769B7BB8AB722D7BBB5F24D0A1E364C1D7EA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8h334Zm2BCT5NrdMWsu4uDXCErAdMZ6oWkhhiCE9Anfz/0/108769B7BB8AB722D7BBB5F24D0A1E364C1D7EA7.mft
Manifest number:          C3
Signing time:             Tue 20 Feb 2024 17:51:31 +0000
Manifest this update:     Tue 20 Feb 2024 17:46:31 +0000
Manifest next update:     Wed 21 Feb 2024 21:19:31 +0000
Files and hashes:         1: 3133382e33362e3232382e302f32322d3234203d3e20323634353938.roa (hash: w2YX1Se/QfbXwBo3RYJ0d1i6LoGnVAhy2nTjZd++IlU=)
                          2: 323830343a323233383a3a2f33322d3438203d3e20323634353938.roa (hash: JmehvRRnjYSjr3hawEFbEHIXpDfPcxnikCv5QyZn3t8=)
                          3: 108769B7BB8AB722D7BBB5F24D0A1E364C1D7EA7.crl (hash: P7DFxcO7KKU9qkHgvIi2Gflb3FV386NWddZ528ctNBY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:54:c5:39:6d:80:ab:e5:fa:9c:53:02:ef:f2:ba:9f:11:c0:1a:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=108769B7BB8AB722D7BBB5F24D0A1E364C1D7EA7
        Validity
            Not Before: Feb 20 17:46:31 2024 GMT
            Not After : Feb 21 21:19:31 2024 GMT
        Subject: CN=3280667D376C07114AA4550BA64CECC3DFC18E69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c7:1e:0b:62:e9:af:94:01:b7:99:54:40:fd:
                    be:04:bd:ca:fe:8a:ff:d2:87:21:42:de:9e:3b:98:
                    22:af:c4:5f:de:13:b6:ed:b7:5c:6b:24:cb:c0:bc:
                    ff:49:00:2b:1a:64:44:7e:00:31:01:21:29:4f:f8:
                    2c:a2:9b:5c:11:96:86:17:58:9f:b9:bb:f0:87:56:
                    a5:9e:d4:17:d2:d8:01:0e:5f:f2:a6:f9:0a:50:15:
                    60:e4:2d:bb:fc:32:eb:37:be:e1:64:a8:c8:d7:ee:
                    eb:3b:fc:9d:3d:8d:8f:4f:cb:81:36:d6:37:fa:75:
                    f0:66:13:e4:e7:46:5c:d4:38:79:d5:41:0e:6b:f7:
                    7b:46:99:1f:9d:35:4f:16:90:34:bd:58:ef:ee:8e:
                    b2:aa:fa:c6:da:f6:7a:47:69:7d:46:3a:9e:39:48:
                    5b:cf:38:3f:86:20:c8:01:b4:73:4d:b2:17:30:fb:
                    46:cd:60:6a:27:ba:45:d7:84:96:c1:c3:37:d2:b4:
                    f7:40:74:86:6a:76:6d:d8:2a:5c:0b:ed:ff:c9:1f:
                    8e:33:e0:e9:df:a0:32:6b:7a:89:72:69:96:91:42:
                    e7:9f:03:58:c8:4b:f7:d3:8c:6d:1d:57:c7:10:80:
                    0f:d0:ae:6a:45:d7:4b:3b:27:5e:4c:9e:4a:c9:1f:
                    21:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:80:66:7D:37:6C:07:11:4A:A4:55:0B:A6:4C:EC:C3:DF:C1:8E:69
            X509v3 Authority Key Identifier:
                keyid:10:87:69:B7:BB:8A:B7:22:D7:BB:B5:F2:4D:0A:1E:36:4C:1D:7E:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8h334Zm2BCT5NrdMWsu4uDXCErAdMZ6oWkhhiCE9Anfz/0/108769B7BB8AB722D7BBB5F24D0A1E364C1D7EA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/108769B7BB8AB722D7BBB5F24D0A1E364C1D7EA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8h334Zm2BCT5NrdMWsu4uDXCErAdMZ6oWkhhiCE9Anfz/0/108769B7BB8AB722D7BBB5F24D0A1E364C1D7EA7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:cc:75:4e:3e:ea:cd:f9:1e:8f:52:22:af:27:db:3d:f9:19:
         69:b8:5b:04:b4:08:d8:15:4c:92:06:bc:b2:08:25:6e:fa:7d:
         71:eb:7f:57:d1:14:f2:7c:b3:e1:bb:e7:e3:3e:e7:81:2e:28:
         47:92:50:f1:b7:7b:63:73:37:2e:c4:db:4b:da:85:6d:15:de:
         eb:ec:9b:d8:67:e6:3d:5e:b1:09:45:4c:eb:7d:a4:df:e8:a6:
         ac:e3:20:44:34:6a:52:7b:74:8d:44:87:23:fc:13:cd:c6:dd:
         aa:ff:5c:b6:f1:37:53:ed:6e:59:96:4a:10:32:f2:92:9e:3f:
         05:7a:d5:cf:70:aa:12:6e:bc:32:fe:56:0b:08:01:61:9f:e8:
         46:07:9f:a8:02:be:f5:68:f3:19:99:c1:e6:a4:dd:70:2f:b0:
         b1:b7:64:50:c7:9c:e6:ca:44:0b:1a:cb:e5:96:66:81:74:f8:
         2a:bc:b9:5b:91:28:b7:05:65:60:f1:fb:4f:a3:09:c5:8e:56:
         cc:3d:4b:d8:ed:d6:a5:cc:bc:e5:9a:61:f1:5e:79:37:cd:1d:
         92:c7:34:df:97:a1:22:fc:56:70:ae:69:3d:b1:24:c3:b8:f9:
         83:06:fc:eb:d9:bf:e3:9c:af:30:9f:71:a2:31:9e:f2:fe:e9:
         f7:f5:dd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----