Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ac8p5n7pKV3URhbtA8bw1BkovCGRkvtJQytWoBQf1QTf/1/385279A7156D16CD0E0832BCE576D91211168351.mft
File:                     385279A7156D16CD0E0832BCE576D91211168351.mft (raw, json)
Hash identifier:          C4s95e3oH3zvq3ATrvBzQLzcZ1kVKnWDSzrBDpyzUfE=
Subject key identifier:   84:9F:72:14:42:06:CB:54:D9:E5:C0:78:9D:D9:3E:54:1E:7B:8E:C4
Authority key identifier: 38:52:79:A7:15:6D:16:CD:0E:08:32:BC:E5:76:D9:12:11:16:83:51
Certificate issuer:       /CN=385279A7156D16CD0E0832BCE576D91211168351
Certificate serial:       2B00DEE96F00FDCE14C9EDD2F30A375C42FD7486
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/385279A7156D16CD0E0832BCE576D91211168351.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ac8p5n7pKV3URhbtA8bw1BkovCGRkvtJQytWoBQf1QTf/1/385279A7156D16CD0E0832BCE576D91211168351.mft
Manifest number:          3F
Signing time:             Tue 21 May 2024 00:59:38 +0000
Manifest this update:     Tue 21 May 2024 00:54:38 +0000
Manifest next update:     Wed 22 May 2024 03:37:38 +0000
Files and hashes:         1: 3139302e3131352e36342e302f32322d3234203d3e20323730343139.roa (hash: GJYFlYvY9HUWQL6M8a67IwE0JL67tST0PGbCM855b00=)
                          2: 323830343a366262383a3a2f33322d3438203d3e20323730343139.roa (hash: vXG8MwIcmeSMofJnXp3Bxo3D6U3Bkj4jizWqGh1u8Lc=)
                          3: 385279A7156D16CD0E0832BCE576D91211168351.crl (hash: c1xVTIELqZ2NCTuStW9LFewSAyualCTScay/EWb6JS0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:00:de:e9:6f:00:fd:ce:14:c9:ed:d2:f3:0a:37:5c:42:fd:74:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=385279A7156D16CD0E0832BCE576D91211168351
        Validity
            Not Before: May 21 00:54:38 2024 GMT
            Not After : May 22 03:37:38 2024 GMT
        Subject: CN=849F72144206CB54D9E5C0789DD93E541E7B8EC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e7:c8:ff:36:00:c4:ff:ee:8a:96:da:38:2a:
                    57:1d:46:d5:b3:40:98:5f:5b:bc:fc:4d:69:ac:3d:
                    56:62:83:3e:3f:82:db:cc:9d:1b:16:7c:d8:82:9f:
                    fa:32:7a:fe:48:77:59:dc:ba:8e:25:2a:a5:f2:f4:
                    6d:f0:c4:9b:3b:b5:58:df:d7:09:de:5f:e6:d0:6a:
                    b9:4d:bd:29:90:ed:87:dd:2c:03:4d:3a:b2:79:94:
                    85:44:fb:4d:78:98:9f:11:c7:d0:64:84:9b:6c:ce:
                    ab:39:c9:55:cc:be:70:54:e6:08:46:f4:d4:d8:4f:
                    16:22:5a:90:a1:53:f0:54:d9:59:d8:2f:86:36:72:
                    e2:53:84:3c:aa:1d:d6:90:42:af:f7:82:46:32:e2:
                    eb:86:71:f8:a1:88:33:f3:23:f4:83:7f:78:22:6e:
                    54:d0:26:4b:fa:64:1c:ba:09:2d:a7:c6:d1:36:05:
                    49:1d:34:b2:94:0f:4f:22:64:01:2a:5d:a1:5e:67:
                    70:05:14:31:e0:d0:cf:03:bd:ad:3b:45:ea:d4:d5:
                    54:33:d0:56:fb:22:48:bf:9e:0c:9c:7b:a9:51:9d:
                    f8:85:ee:89:a9:55:88:e8:a2:88:f5:91:9f:a7:0d:
                    0e:c4:32:a7:31:c8:3e:51:44:81:11:f8:5d:c9:70:
                    c9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:9F:72:14:42:06:CB:54:D9:E5:C0:78:9D:D9:3E:54:1E:7B:8E:C4
            X509v3 Authority Key Identifier:
                keyid:38:52:79:A7:15:6D:16:CD:0E:08:32:BC:E5:76:D9:12:11:16:83:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ac8p5n7pKV3URhbtA8bw1BkovCGRkvtJQytWoBQf1QTf/1/385279A7156D16CD0E0832BCE576D91211168351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/385279A7156D16CD0E0832BCE576D91211168351.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ac8p5n7pKV3URhbtA8bw1BkovCGRkvtJQytWoBQf1QTf/1/385279A7156D16CD0E0832BCE576D91211168351.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:0f:8e:80:08:04:ac:f1:1d:26:f7:67:c0:40:cb:9b:4f:0d:
         05:50:ac:a6:ec:87:73:36:78:9c:1e:b9:ab:0f:b2:72:10:78:
         5c:b0:86:89:b5:53:da:34:12:af:65:ab:93:bc:9e:b1:d1:d4:
         83:86:f3:4b:ef:41:5e:32:47:15:31:54:0a:26:42:ca:f9:fc:
         40:e0:1a:29:96:8d:25:3d:f5:21:cb:b2:8c:80:23:86:19:88:
         aa:76:be:a4:61:b5:6b:31:16:01:b6:0a:50:9d:f3:2c:15:80:
         52:e4:9b:d8:08:a7:45:5a:39:f7:26:9a:37:94:21:d9:10:9a:
         3a:81:0f:dd:9c:35:9e:6f:41:90:e7:a6:4e:14:99:91:09:a1:
         ed:91:65:25:23:63:47:57:2b:f4:48:db:8e:1c:86:a3:0d:5c:
         d1:67:4e:55:6e:89:93:e3:bd:6e:e6:b1:c1:a6:2b:9b:97:69:
         14:2a:07:88:89:c4:ae:98:03:16:29:de:df:ce:52:4a:3b:b6:
         1c:d5:3d:e1:11:d0:d9:8b:64:03:a0:36:df:59:5f:09:be:2f:
         48:3e:bc:5b:59:10:c4:0b:a1:d8:7e:31:fb:6d:e8:df:1a:03:
         4e:b2:e8:cc:fe:6a:ad:ab:ed:f3:29:18:27:81:be:21:71:69:
         40:a3:39:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----