Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8kjAN1kodZy7qUaSDkEFu9gGZPaDSk65P5VnrL91tmU3/0/38F95E5D5D96543C23B0E3817740D4AA8E4BF10B.mft
File:                     38F95E5D5D96543C23B0E3817740D4AA8E4BF10B.mft (raw, json)
Hash identifier:          4DVv4XsGiR0DYZ+OrY4ebMr7K9e9C8S0nADECZyIN+8=
Subject key identifier:   F3:12:EA:39:3C:3E:FD:06:2D:1D:4F:50:6D:F3:A8:01:7A:03:14:58
Authority key identifier: 38:F9:5E:5D:5D:96:54:3C:23:B0:E3:81:77:40:D4:AA:8E:4B:F1:0B
Certificate issuer:       /CN=38F95E5D5D96543C23B0E3817740D4AA8E4BF10B
Certificate serial:       3D60F7CCDD966C4C0CEDE1B5DB013315BE009B21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38F95E5D5D96543C23B0E3817740D4AA8E4BF10B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kjAN1kodZy7qUaSDkEFu9gGZPaDSk65P5VnrL91tmU3/0/38F95E5D5D96543C23B0E3817740D4AA8E4BF10B.mft
Manifest number:          07EA
Signing time:             Mon 15 Apr 2024 10:55:19 +0000
Manifest this update:     Mon 15 Apr 2024 10:50:19 +0000
Manifest next update:     Tue 16 Apr 2024 11:13:19 +0000
Files and hashes:         1: 38F95E5D5D96543C23B0E3817740D4AA8E4BF10B.crl (hash: m6W8ErgfJS5dfBWokhiaF2OssrR+MAZK6fWZ60bh9Do=)
                          2: 3139312e352e3136302e302f32322d3234203d3e20323633353338.roa (hash: nhsfUbQt+zKN+q67vE0tPnu0nokOwoeBIL4S1mHmEyY=)
                          3: 323830343a313339303a3a2f33322d3334203d3e20323633353338.roa (hash: Lt2cY5OQp62EPeCR8K5IHy7aM+gBWQEe5rrcaiqK29Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:60:f7:cc:dd:96:6c:4c:0c:ed:e1:b5:db:01:33:15:be:00:9b:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F95E5D5D96543C23B0E3817740D4AA8E4BF10B
        Validity
            Not Before: Apr 15 10:50:19 2024 GMT
            Not After : Apr 16 11:13:19 2024 GMT
        Subject: CN=F312EA393C3EFD062D1D4F506DF3A8017A031458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a8:a5:97:b9:34:d8:6c:5a:59:72:b0:cc:3f:
                    ac:4d:b2:1f:6a:d9:f7:4d:e9:c8:f7:12:b0:00:f3:
                    bf:89:a6:d8:a2:fa:82:16:3a:6a:45:90:d5:fa:8e:
                    96:a6:cd:ff:e6:41:7a:87:b5:a5:07:6c:6c:b4:5f:
                    17:a0:52:b3:c5:9c:81:37:d3:23:ad:64:ac:49:b3:
                    48:cf:f4:50:d3:a7:59:57:3d:da:e1:96:65:be:8d:
                    c8:63:bf:52:60:18:5f:bd:30:dd:d7:04:70:73:15:
                    6e:91:fe:0c:80:dc:64:64:cd:81:52:78:69:2f:7f:
                    36:a2:7b:e8:40:e2:ef:5e:1a:2e:da:58:5b:f5:46:
                    07:57:fe:99:dd:85:dc:9d:94:05:f4:ba:f6:5a:69:
                    58:1b:27:35:3a:26:b9:10:70:29:92:02:aa:f3:a7:
                    cf:bc:f6:10:3b:02:8f:ec:1a:dc:73:e4:93:11:4d:
                    61:4d:f4:cb:f6:81:0b:74:e8:3c:9c:91:a0:f8:de:
                    7d:40:78:28:6b:16:eb:4a:58:54:39:15:e7:9d:7c:
                    68:ac:b9:d0:fb:4f:1c:f4:32:4f:70:08:12:ad:5a:
                    05:7d:b8:30:fa:3e:83:45:b0:59:1b:4e:c5:1e:e4:
                    56:68:a6:ea:98:75:0f:f3:85:5f:57:28:02:b8:31:
                    80:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:12:EA:39:3C:3E:FD:06:2D:1D:4F:50:6D:F3:A8:01:7A:03:14:58
            X509v3 Authority Key Identifier:
                keyid:38:F9:5E:5D:5D:96:54:3C:23:B0:E3:81:77:40:D4:AA:8E:4B:F1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kjAN1kodZy7qUaSDkEFu9gGZPaDSk65P5VnrL91tmU3/0/38F95E5D5D96543C23B0E3817740D4AA8E4BF10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38F95E5D5D96543C23B0E3817740D4AA8E4BF10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kjAN1kodZy7qUaSDkEFu9gGZPaDSk65P5VnrL91tmU3/0/38F95E5D5D96543C23B0E3817740D4AA8E4BF10B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:e1:5b:21:25:be:f1:43:38:c4:9c:45:32:60:c7:fc:59:07:
         ed:5e:51:e9:3b:e2:43:4b:8b:87:a4:c8:ce:46:b8:04:38:aa:
         ee:9f:b6:36:25:39:eb:2e:76:85:b7:ff:1f:02:37:2c:a9:3b:
         ba:cd:ac:ce:cb:34:0f:9b:91:f3:7f:da:e8:4a:81:ce:1f:a0:
         4d:ec:a6:ec:a2:86:3e:fa:73:f6:e5:2b:26:22:63:75:bd:f5:
         72:88:57:c4:10:c1:a9:8d:31:f3:e7:60:63:62:7a:8d:0c:5e:
         c5:2c:e5:85:bc:72:8e:aa:07:89:93:7d:14:56:de:e5:04:e3:
         8c:52:e4:d1:18:db:63:1e:67:dc:ee:e0:ad:de:8c:aa:1b:6d:
         47:1c:50:50:d4:9a:87:2b:eb:8a:68:d3:fe:cf:19:1f:8c:10:
         45:57:aa:87:b4:21:f4:72:31:f0:90:43:20:0c:91:c6:0f:19:
         43:57:34:b4:b3:6b:05:27:b8:63:07:75:31:e3:a8:eb:7d:dd:
         1f:f8:72:a3:45:8c:b8:5e:46:11:19:97:94:ef:b5:a8:9b:d2:
         55:96:fb:e7:11:34:c4:95:33:59:8b:cd:0f:7d:36:57:45:88:
         a7:af:84:a1:6f:6b:b6:c0:50:74:f8:f0:27:1b:e0:e2:62:e8:
         70:b3:55:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----