Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AG6C24GVPT12BK1Rn9b5jitUrxyCxLsqXPKgxVCTaiTZ/0/B3E217A2C3B7BEBBD174E9ADEF4DFA806765CF80.mft
File:                     B3E217A2C3B7BEBBD174E9ADEF4DFA806765CF80.mft (raw, json)
Hash identifier:          OXQVbtjOEXO+unIQjTzgAcARPhErIwVMdvfjNxJJpks=
Subject key identifier:   F2:54:B0:F0:20:85:9F:4F:0C:0C:DB:70:B5:FB:CB:26:F3:C0:31:76
Authority key identifier: B3:E2:17:A2:C3:B7:BE:BB:D1:74:E9:AD:EF:4D:FA:80:67:65:CF:80
Certificate issuer:       /CN=B3E217A2C3B7BEBBD174E9ADEF4DFA806765CF80
Certificate serial:       2D264C2A01E9323ED405CA766DF829B925CF3BEC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3E217A2C3B7BEBBD174E9ADEF4DFA806765CF80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AG6C24GVPT12BK1Rn9b5jitUrxyCxLsqXPKgxVCTaiTZ/0/B3E217A2C3B7BEBBD174E9ADEF4DFA806765CF80.mft
Manifest number:          FB
Signing time:             Sun 14 Jan 2024 02:40:54 +0000
Manifest this update:     Sun 14 Jan 2024 02:35:54 +0000
Manifest next update:     Mon 15 Jan 2024 04:21:54 +0000
Files and hashes:         1: 323830343a373138383a3a2f33322d3334203d3e20323730373935.roa (hash: pSmlb6rmR5VZG47slNaUe4WlURpkA+Wra/G/NpnX/Ic=)
                          2: B3E217A2C3B7BEBBD174E9ADEF4DFA806765CF80.crl (hash: NFTfCpWM/1v+QUWmxb183CgZQO4FSWakdbLR9tkwsx0=)
                          3: 3138392e33362e3234342e302f32322d3234203d3e20323730373935.roa (hash: yyEupSiukF7K2yIYzrcMQAMPIdHk+RUfAaK3iumcgnE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:26:4c:2a:01:e9:32:3e:d4:05:ca:76:6d:f8:29:b9:25:cf:3b:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3E217A2C3B7BEBBD174E9ADEF4DFA806765CF80
        Validity
            Not Before: Jan 14 02:35:54 2024 GMT
            Not After : Jan 15 04:21:54 2024 GMT
        Subject: CN=F254B0F020859F4F0C0CDB70B5FBCB26F3C03176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:02:c3:45:35:47:6a:33:84:dc:4e:10:89:0d:
                    7d:5e:62:38:0f:6c:92:b2:8f:6e:a9:d2:23:a2:41:
                    91:cf:fd:f5:23:d4:9a:10:df:96:14:ec:04:91:8b:
                    dd:50:1d:17:34:93:50:3d:ec:ab:44:a0:9a:05:17:
                    a3:9a:77:d2:d7:59:61:19:55:cd:16:f5:2c:8a:2d:
                    90:36:de:76:a5:59:16:60:94:8f:61:ed:0f:aa:ef:
                    ba:a9:87:64:37:79:a1:01:8d:01:d2:60:86:b1:8e:
                    db:b1:c3:cc:55:4f:81:42:0b:61:95:9f:86:5c:96:
                    af:42:61:72:37:86:52:b4:96:09:1b:0c:0d:35:5f:
                    25:c9:07:4d:59:15:fe:84:fc:2d:2c:c8:2c:ab:42:
                    5d:c9:39:5b:91:25:1d:11:de:1f:ce:f1:74:26:ed:
                    40:e0:2c:c2:3c:69:7d:b1:8d:82:bf:2c:4d:9d:50:
                    ee:6e:fd:d5:d7:e2:34:b5:f4:f5:f0:e6:e0:2e:4c:
                    5d:9a:dc:63:b0:a2:1f:a8:33:a0:2d:70:32:41:c3:
                    48:8c:05:cb:dc:9d:f3:27:c3:7e:73:b5:6e:5b:3a:
                    fd:de:62:81:26:1b:ee:ff:84:03:d3:15:1e:d9:3b:
                    72:15:05:b7:8d:83:f8:ff:e1:b0:e7:e8:c2:8a:49:
                    73:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:54:B0:F0:20:85:9F:4F:0C:0C:DB:70:B5:FB:CB:26:F3:C0:31:76
            X509v3 Authority Key Identifier:
                keyid:B3:E2:17:A2:C3:B7:BE:BB:D1:74:E9:AD:EF:4D:FA:80:67:65:CF:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AG6C24GVPT12BK1Rn9b5jitUrxyCxLsqXPKgxVCTaiTZ/0/B3E217A2C3B7BEBBD174E9ADEF4DFA806765CF80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3E217A2C3B7BEBBD174E9ADEF4DFA806765CF80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AG6C24GVPT12BK1Rn9b5jitUrxyCxLsqXPKgxVCTaiTZ/0/B3E217A2C3B7BEBBD174E9ADEF4DFA806765CF80.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:cb:c6:4f:a9:1b:12:a4:1d:28:ac:93:e6:0d:ec:c5:37:5f:
         85:20:d1:8c:14:c4:0b:c6:d8:0d:19:d4:ae:28:8f:51:59:b3:
         8c:d6:92:2f:fe:73:00:51:80:d8:4e:98:d8:82:d0:15:95:c7:
         74:b4:bb:f9:b3:84:a8:3b:5f:ba:be:0f:59:79:74:8c:78:6d:
         ee:8b:e5:3c:58:b8:f5:28:da:7f:4a:8e:0b:4f:09:95:29:1b:
         9e:85:3e:1e:d5:d4:99:6d:d7:4c:31:9d:f1:a0:87:29:8e:8c:
         3b:cc:5a:7f:f8:1b:55:01:47:c7:f6:5f:d8:7f:e5:78:cb:77:
         b2:04:35:5e:66:2b:0b:25:aa:d5:f6:06:f8:b3:e0:cf:89:ac:
         8f:8e:8c:c0:c9:15:60:94:9a:36:b9:1c:ef:e1:af:be:4b:11:
         8f:63:7c:28:4f:1c:4d:cc:48:f7:97:f4:6e:c5:d4:ac:fc:be:
         24:18:81:04:8a:c9:98:4f:28:d2:90:c2:79:dd:4c:58:2b:a9:
         ba:5e:af:7e:d7:eb:cf:39:f1:d7:57:66:b2:27:74:80:9b:f6:
         27:63:ca:51:10:92:24:7c:29:c9:2d:d7:fc:3f:6f:3f:17:cf:
         ac:bc:92:93:38:1c:49:d1:f5:f8:c8:a2:ba:bd:e0:a5:c4:95:
         e7:51:86:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----