Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8vvcSKaeKL8UGgoQwNuwcv1vZ25neUQEDwuztHUcCRee/0/3D1B2ED4F5BFA27EF541F9A177250470920ED1BD.mft
File:                     3D1B2ED4F5BFA27EF541F9A177250470920ED1BD.mft (raw, json)
Hash identifier:          7Et8Z8X+3oj7YSYKR5EizPT2E7oLZbCcGTlTxjmrRRs=
Subject key identifier:   E4:49:7F:9C:A0:D3:B6:86:67:10:25:58:95:DD:F4:A8:72:A1:7F:B1
Authority key identifier: 3D:1B:2E:D4:F5:BF:A2:7E:F5:41:F9:A1:77:25:04:70:92:0E:D1:BD
Certificate issuer:       /CN=3D1B2ED4F5BFA27EF541F9A177250470920ED1BD
Certificate serial:       08E77EE1EDB866898BEAF1D7E6FDD87FFE17F601
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D1B2ED4F5BFA27EF541F9A177250470920ED1BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vvcSKaeKL8UGgoQwNuwcv1vZ25neUQEDwuztHUcCRee/0/3D1B2ED4F5BFA27EF541F9A177250470920ED1BD.mft
Manifest number:          18
Signing time:             Tue 05 Mar 2024 19:19:00 +0000
Manifest this update:     Tue 05 Mar 2024 19:14:00 +0000
Manifest next update:     Wed 06 Mar 2024 21:08:00 +0000
Files and hashes:         1: 3D1B2ED4F5BFA27EF541F9A177250470920ED1BD.crl (hash: 4mwjb03mWuaX3ak1zkQcYfIUV+PxQ025Y55O26G/UvU=)
                          2: 3138372e3130392e3234302e302f32302d3234203d3e20323632343937.roa (hash: DArpKwtOrikpXfPwqKy3YvPNKP5KGGw1RJ8Rt+Z6kEg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:e7:7e:e1:ed:b8:66:89:8b:ea:f1:d7:e6:fd:d8:7f:fe:17:f6:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D1B2ED4F5BFA27EF541F9A177250470920ED1BD
        Validity
            Not Before: Mar  5 19:14:00 2024 GMT
            Not After : Mar  6 21:08:00 2024 GMT
        Subject: CN=E4497F9CA0D3B6866710255895DDF4A872A17FB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:df:9a:66:f6:8d:ca:58:7f:51:c1:67:4e:88:
                    70:77:47:37:cf:9a:f4:d4:ab:fb:6b:df:ae:24:45:
                    79:30:69:86:00:0f:a8:02:71:96:aa:79:19:c6:ff:
                    8b:b4:22:ce:29:0a:50:31:2a:24:3a:5c:bb:d5:f0:
                    f8:f8:5c:82:72:63:1e:ba:43:c6:56:02:95:8b:14:
                    19:17:e1:19:28:4f:c9:14:6b:5b:a5:7f:ef:92:a4:
                    70:e0:56:2a:01:4b:35:e3:d3:6e:ba:57:58:0f:25:
                    26:05:b0:c4:bb:4d:4f:a9:9c:09:63:0a:8a:ae:61:
                    a0:8c:e4:2f:67:ff:2f:3b:4c:6c:73:3b:93:fe:5c:
                    6c:9f:92:ba:98:35:b8:54:53:33:15:51:c7:bd:d5:
                    d8:c1:c4:10:b1:f7:6c:22:14:e9:51:d4:80:cb:b2:
                    04:dc:e7:09:1b:4b:f8:2c:f6:ea:33:0d:fd:6f:95:
                    63:0f:fd:39:13:91:01:ee:89:f7:b0:8f:90:75:16:
                    e5:bf:9b:8d:13:d9:02:5e:01:07:51:a2:5c:1d:7d:
                    d2:9a:69:84:89:a6:6f:ad:73:f7:bb:ea:07:2b:ca:
                    9f:62:ca:71:88:61:40:01:e3:96:f9:8c:72:0b:06:
                    50:94:8f:93:4f:b7:c5:f2:07:cc:5e:64:3d:ff:b7:
                    63:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:49:7F:9C:A0:D3:B6:86:67:10:25:58:95:DD:F4:A8:72:A1:7F:B1
            X509v3 Authority Key Identifier:
                keyid:3D:1B:2E:D4:F5:BF:A2:7E:F5:41:F9:A1:77:25:04:70:92:0E:D1:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vvcSKaeKL8UGgoQwNuwcv1vZ25neUQEDwuztHUcCRee/0/3D1B2ED4F5BFA27EF541F9A177250470920ED1BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D1B2ED4F5BFA27EF541F9A177250470920ED1BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vvcSKaeKL8UGgoQwNuwcv1vZ25neUQEDwuztHUcCRee/0/3D1B2ED4F5BFA27EF541F9A177250470920ED1BD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:b4:a3:e0:ed:e3:35:36:d0:5f:73:3a:97:0d:44:99:a5:43:
         f3:44:a2:54:59:0b:39:a8:86:03:3e:cc:2e:cc:45:6a:e2:81:
         58:d9:3c:b5:bc:7f:a5:5e:a6:49:44:5d:c9:a7:a4:3f:9d:db:
         85:da:63:96:6f:c2:b3:6b:8f:28:3e:56:97:1e:b8:74:85:6b:
         f9:66:07:4a:a7:ad:1b:69:a0:e9:eb:88:94:fc:ee:2c:f4:f6:
         aa:89:72:b5:fe:ff:c6:6a:a0:f8:5c:3d:80:74:2a:eb:c6:ef:
         c0:a7:87:d1:9d:5b:c1:48:ab:8f:39:bf:75:71:3e:3a:4e:ec:
         fa:b9:7f:02:1b:83:86:a9:91:39:de:b4:b9:c8:3c:9c:6f:f8:
         8f:f4:61:3f:f5:33:53:2b:16:5b:df:8f:8c:8e:ff:7e:e8:64:
         31:1c:c6:86:d7:5b:4a:07:93:96:68:c2:e0:cd:99:8e:91:62:
         84:5e:d3:23:5c:48:a8:b6:c8:b6:e2:52:21:2f:06:c6:74:eb:
         48:90:57:ef:61:77:2f:27:92:51:5c:78:46:d5:d3:ca:3d:5b:
         58:da:52:8c:70:6b:6e:e0:17:36:8c:62:1d:6f:fc:0a:eb:ee:
         f3:4c:34:93:0c:a3:2f:69:2b:62:21:e3:09:9f:d6:e8:33:fb:
         aa:ea:12:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----