Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A3uPy2vKawxLSvQgredYqK93UwgQ9EbfUbE8r2aVihp3/1/028AECB7B2EB02A3D78A64A521872D461244B9AE.mft
File:                     028AECB7B2EB02A3D78A64A521872D461244B9AE.mft (raw, json)
Hash identifier:          AupxDFzhA2awXcRrv0ur6H9XLHUEO6h3oL348THgWjc=
Subject key identifier:   65:40:D3:F9:26:82:4B:24:24:3E:FF:6F:03:7D:F0:B9:6B:41:F5:6C
Authority key identifier: 02:8A:EC:B7:B2:EB:02:A3:D7:8A:64:A5:21:87:2D:46:12:44:B9:AE
Certificate issuer:       /CN=028AECB7B2EB02A3D78A64A521872D461244B9AE
Certificate serial:       07EE8F767697EAFA66E0242A2B52F685F1BF8B38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028AECB7B2EB02A3D78A64A521872D461244B9AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3uPy2vKawxLSvQgredYqK93UwgQ9EbfUbE8r2aVihp3/1/028AECB7B2EB02A3D78A64A521872D461244B9AE.mft
Manifest number:          3B
Signing time:             Thu 16 May 2024 23:50:13 +0000
Manifest this update:     Thu 16 May 2024 23:45:13 +0000
Manifest next update:     Sat 18 May 2024 00:32:13 +0000
Files and hashes:         1: 323830343a363761303a3a2f33322d3438203d3e20323639363430.roa (hash: T1sooaP1Erze+Cbi3mKOnerk9cv/c/Hw+Ai3+eaUIqk=)
                          2: 028AECB7B2EB02A3D78A64A521872D461244B9AE.crl (hash: NMWwBmLUhHQX+tonnX5srh0fBZaguV9xCSZK6/Q3I0Y=)
                          3: 34352e3139302e36382e302f32322d3234203d3e20323639363430.roa (hash: 861QlvrFX3foDjig2H/xcr0QyZv30KxLEaqdnM/ylcg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ee:8f:76:76:97:ea:fa:66:e0:24:2a:2b:52:f6:85:f1:bf:8b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=028AECB7B2EB02A3D78A64A521872D461244B9AE
        Validity
            Not Before: May 16 23:45:13 2024 GMT
            Not After : May 18 00:32:13 2024 GMT
        Subject: CN=6540D3F926824B24243EFF6F037DF0B96B41F56C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8e:ea:48:b9:77:2e:af:68:b4:09:77:b4:7e:
                    2c:6d:0d:7d:78:42:42:c0:19:ac:ed:a4:3f:97:e4:
                    6c:24:3d:a8:3e:02:e4:bf:bd:dd:96:5a:37:39:b9:
                    7c:98:db:84:3f:51:27:3b:d5:88:46:be:d6:10:a3:
                    c2:f6:1c:30:a4:52:a4:01:57:bf:30:c5:fb:77:4a:
                    57:01:30:7e:cb:73:2a:a6:5f:a7:a0:45:4f:c1:45:
                    99:58:18:17:20:9a:fc:75:17:a4:ed:db:f5:09:2d:
                    53:62:c1:a7:3e:85:1d:38:ba:39:c3:05:e1:06:a5:
                    b2:bb:69:f1:59:5f:33:d3:59:35:88:2a:13:7e:b5:
                    55:0a:c8:0a:f9:26:64:aa:f3:88:50:0f:12:39:71:
                    70:db:e0:93:35:0a:ae:19:e0:83:b2:af:d8:44:80:
                    32:c4:64:9e:d7:20:92:07:8f:38:d6:42:47:02:43:
                    b0:9d:86:35:94:66:ef:87:f2:7d:40:55:a8:36:fa:
                    b6:c4:6c:ea:be:68:13:fd:c2:94:e1:1d:5d:82:be:
                    2d:3c:8c:f4:9e:ec:18:6c:1a:55:76:39:34:ee:3b:
                    48:f0:87:d5:87:d7:0d:77:72:c6:f1:98:31:64:7a:
                    6f:b3:89:25:d2:cf:ac:20:a4:cb:f5:1e:46:a0:a3:
                    a4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:40:D3:F9:26:82:4B:24:24:3E:FF:6F:03:7D:F0:B9:6B:41:F5:6C
            X509v3 Authority Key Identifier:
                keyid:02:8A:EC:B7:B2:EB:02:A3:D7:8A:64:A5:21:87:2D:46:12:44:B9:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3uPy2vKawxLSvQgredYqK93UwgQ9EbfUbE8r2aVihp3/1/028AECB7B2EB02A3D78A64A521872D461244B9AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028AECB7B2EB02A3D78A64A521872D461244B9AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3uPy2vKawxLSvQgredYqK93UwgQ9EbfUbE8r2aVihp3/1/028AECB7B2EB02A3D78A64A521872D461244B9AE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:7b:ce:57:30:e1:99:2a:05:fb:93:fb:86:60:4c:5e:4b:7d:
         69:25:83:60:52:c0:de:9d:56:ad:60:72:65:0b:93:2e:f1:9a:
         e2:13:9c:83:0a:a5:52:86:01:c8:99:8c:3b:52:da:d4:ac:30:
         e5:21:1a:5d:d4:2b:28:04:58:fe:6b:61:68:f8:9b:f1:11:23:
         23:5b:5a:31:ac:cd:7a:dd:2e:54:68:9b:72:7c:bc:39:20:5d:
         d4:1d:0e:70:2c:c8:99:18:05:f4:82:39:47:f2:0e:42:ba:bc:
         58:b0:5a:29:b6:48:c1:28:da:3b:91:ff:3a:bf:c5:43:66:34:
         b3:d8:7c:a6:7b:f9:8e:f6:8a:95:88:73:81:e5:a2:cd:a9:e7:
         d6:38:8d:11:c6:5f:81:5f:01:1c:d4:5d:ae:2d:8a:04:d7:26:
         85:0c:88:a0:e8:37:83:89:e2:32:9e:f0:2c:ee:5c:24:35:9c:
         8f:66:94:b0:38:22:27:ed:f0:42:87:af:6c:b5:a7:4d:79:00:
         d6:e7:17:a9:5e:50:a1:eb:a3:f1:84:aa:53:1b:49:02:30:26:
         6b:65:7c:37:7e:e8:9c:ab:64:7c:a4:20:9c:66:fc:e1:94:ad:
         f4:80:97:23:11:fa:ff:78:bd:d1:22:e3:69:d6:b0:54:c5:62:
         22:22:3b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----