Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/0/3FAA2F2256C88D2409021E1C510F3D519C6EDBE2.mft
File:                     3FAA2F2256C88D2409021E1C510F3D519C6EDBE2.mft (raw, json)
Hash identifier:          qDi5w/VOBkQsyaSryqzdWEGMS9yv+VCm6EopbJ33xng=
Subject key identifier:   80:96:AF:79:3D:0B:DA:20:8A:2F:40:DD:DC:46:E8:76:C5:FA:F7:F4
Authority key identifier: 3F:AA:2F:22:56:C8:8D:24:09:02:1E:1C:51:0F:3D:51:9C:6E:DB:E2
Certificate issuer:       /CN=3FAA2F2256C88D2409021E1C510F3D519C6EDBE2
Certificate serial:       5D19881E0C0B11473434E415FB844250783313A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FAA2F2256C88D2409021E1C510F3D519C6EDBE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/0/3FAA2F2256C88D2409021E1C510F3D519C6EDBE2.mft
Manifest number:          19
Signing time:             Sun 18 Feb 2024 23:05:01 +0000
Manifest this update:     Sun 18 Feb 2024 23:00:00 +0000
Manifest next update:     Tue 20 Feb 2024 02:42:00 +0000
Files and hashes:         1: 323830343a386563383a3a2f33322d3438203d3e203631363136.roa (hash: bkHd4TATV8nyCFiOF6Tzqi4foVKttYqOGPyBhz2movA=)
                          2: 3FAA2F2256C88D2409021E1C510F3D519C6EDBE2.crl (hash: JpIoyDJzOMkrBFeokihEaQ2WEnNBaUx63XPeFS2FZgc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:19:88:1e:0c:0b:11:47:34:34:e4:15:fb:84:42:50:78:33:13:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FAA2F2256C88D2409021E1C510F3D519C6EDBE2
        Validity
            Not Before: Feb 18 23:00:00 2024 GMT
            Not After : Feb 20 02:42:00 2024 GMT
        Subject: CN=8096AF793D0BDA208A2F40DDDC46E876C5FAF7F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e5:ed:9b:1b:a1:2d:71:ab:12:87:dc:e2:ba:
                    fa:5f:a7:19:45:9e:33:42:d8:9a:c3:8a:0f:c4:ed:
                    4a:02:6b:dc:d0:2f:bc:fb:93:43:42:8d:a4:8f:84:
                    bd:c3:90:24:91:8f:ac:35:4c:f5:05:c7:8d:3b:e4:
                    59:fb:88:da:21:8e:d9:56:06:ae:0a:93:02:f0:f3:
                    de:42:d3:ff:e8:e7:18:b6:f8:ec:fd:7c:78:4a:0e:
                    dc:00:82:ce:38:ae:34:30:31:3f:f6:99:ef:41:3e:
                    2e:89:f3:8e:54:ce:71:fc:04:85:e4:65:c2:dd:e2:
                    2a:12:ee:a3:ae:99:51:c5:44:aa:91:23:f3:eb:9d:
                    af:94:f2:00:7b:bd:af:e1:8f:f2:77:fd:3f:5b:b8:
                    f8:0b:e5:f2:8e:6c:8a:5d:96:8c:e4:2a:a1:74:8a:
                    3e:c7:0a:df:35:19:ff:80:2f:e8:46:f0:a4:c2:ca:
                    a1:46:f8:e9:a6:4e:a4:25:b1:e3:f2:cb:10:ef:4f:
                    b8:1d:62:4c:99:10:66:ab:dd:2f:d5:ef:51:df:c6:
                    15:60:29:61:85:9f:ef:8e:2c:91:14:31:a9:1e:63:
                    93:72:0e:6a:02:b9:c3:6b:9b:83:18:46:f1:9f:2a:
                    c4:3d:9d:9d:83:98:29:d3:5a:d5:cf:a1:87:6f:1d:
                    b6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:96:AF:79:3D:0B:DA:20:8A:2F:40:DD:DC:46:E8:76:C5:FA:F7:F4
            X509v3 Authority Key Identifier:
                keyid:3F:AA:2F:22:56:C8:8D:24:09:02:1E:1C:51:0F:3D:51:9C:6E:DB:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/0/3FAA2F2256C88D2409021E1C510F3D519C6EDBE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FAA2F2256C88D2409021E1C510F3D519C6EDBE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/0/3FAA2F2256C88D2409021E1C510F3D519C6EDBE2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:13:9d:17:91:c9:a7:70:90:4d:1a:ba:a9:39:8e:ac:18:d1:
         c2:b1:16:ef:32:12:13:54:e8:ce:c9:3a:86:fe:16:bc:b7:3a:
         7e:06:de:a6:b2:e5:ef:74:6c:73:3b:dc:2a:5e:62:44:a1:28:
         40:9e:af:65:04:58:e0:26:0b:3a:b6:86:f8:76:de:db:2c:90:
         b2:22:48:58:24:e1:ab:2f:e9:16:4d:88:ad:c1:36:ac:0f:90:
         47:8d:8d:17:eb:6d:c9:56:c7:d6:23:d2:08:45:0a:e9:9f:b4:
         86:50:30:b8:65:f8:e6:9d:75:37:c2:a2:27:33:2f:3a:55:66:
         2c:13:4c:63:89:f0:2c:de:0c:67:19:cc:05:3e:dd:53:c7:08:
         b5:32:5e:d6:17:e0:05:2d:50:37:f6:ed:b1:e5:4a:90:66:eb:
         eb:af:fb:2f:af:e8:36:08:97:d6:eb:ff:54:32:1b:5c:15:53:
         18:f0:f5:f1:41:d5:02:4c:a5:e3:cb:67:a7:5d:7b:53:86:e6:
         94:c8:e1:63:d6:3a:d7:f1:eb:75:83:4a:fb:40:56:fb:be:7a:
         8e:3a:cb:d4:1d:61:0b:ff:2f:0a:77:c7:9b:39:22:39:a4:07:
         67:05:95:37:a0:80:51:b8:29:c7:66:8d:29:0f:e0:0e:dd:0d:
         6e:f9:ba:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----