Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/82FD5EA2E5AB899BE12BB6FF3200025B147B8D6E.mft
File:                     82FD5EA2E5AB899BE12BB6FF3200025B147B8D6E.mft (raw, json)
Hash identifier:          DcDPiHCzIre1+CWKoJEzarJlCbhNPeOD07V0AUh7Qjo=
Subject key identifier:   3B:17:1A:3E:DF:80:FF:24:D4:E6:E8:13:0F:6B:69:26:C5:40:7D:F9
Authority key identifier: 82:FD:5E:A2:E5:AB:89:9B:E1:2B:B6:FF:32:00:02:5B:14:7B:8D:6E
Certificate issuer:       /CN=82FD5EA2E5AB899BE12BB6FF3200025B147B8D6E
Certificate serial:       701A6A67749B79F9C7CD80FB549802EE67DDC89C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82FD5EA2E5AB899BE12BB6FF3200025B147B8D6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/82FD5EA2E5AB899BE12BB6FF3200025B147B8D6E.mft
Manifest number:          FA
Signing time:             Mon 15 Apr 2024 01:07:07 +0000
Manifest this update:     Mon 15 Apr 2024 01:02:07 +0000
Manifest next update:     Tue 16 Apr 2024 02:07:07 +0000
Files and hashes:         1: 37322e34342e32302e302f32322d3234203d3e20323636313636.roa (hash: 8vMQaCI6ePGWv+V5HXzslhWQ2//ckRJlCa4E3kkE4c0=)
                          2: 82FD5EA2E5AB899BE12BB6FF3200025B147B8D6E.crl (hash: zJ9VoyuYteu+ZqQgI3c75ixbwJK/RNcwx2tmiHKyhg4=)
                          3: 323830343a336262343a3a2f33322d3438203d3e20323636313636.roa (hash: u4yx9i6kWhjXtAvjPYtt7LingbKIuj//lZRcfpE0GpU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:1a:6a:67:74:9b:79:f9:c7:cd:80:fb:54:98:02:ee:67:dd:c8:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82FD5EA2E5AB899BE12BB6FF3200025B147B8D6E
        Validity
            Not Before: Apr 15 01:02:07 2024 GMT
            Not After : Apr 16 02:07:07 2024 GMT
        Subject: CN=3B171A3EDF80FF24D4E6E8130F6B6926C5407DF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a2:0f:43:ba:b2:49:1c:95:09:dd:18:61:36:
                    bf:a5:0a:0b:9c:0a:9b:96:16:38:5d:6a:d0:a2:11:
                    d4:a7:5e:51:b7:09:21:e9:28:7f:16:2b:7e:46:45:
                    6b:22:59:ab:6c:39:97:ce:68:d4:f2:5a:28:5c:30:
                    75:92:be:28:66:43:c1:76:7c:7e:33:1f:83:1d:22:
                    06:b7:51:6c:66:f2:f3:90:0a:d5:53:60:29:04:69:
                    3e:be:da:f0:3e:c1:16:63:70:c3:5a:62:ac:dd:35:
                    e1:a5:d9:cd:ad:80:b6:12:6d:95:7a:4a:69:8f:01:
                    74:bc:5d:5b:a0:39:db:58:2d:17:9a:d0:4b:26:a9:
                    82:8a:17:be:18:22:a6:30:8f:cd:ab:2e:50:68:5f:
                    ef:95:d6:54:db:26:e9:73:16:71:f8:61:33:33:69:
                    2b:9a:dc:07:e7:bf:e0:c7:4a:a1:a8:9b:6b:c7:d4:
                    ae:a8:4c:91:52:5d:d4:af:09:16:24:15:50:01:67:
                    06:58:25:6d:54:96:d6:ff:bd:3a:5d:fe:28:e7:d8:
                    48:bc:61:48:e2:ed:35:9d:42:ce:69:78:d8:cd:73:
                    f3:2c:cf:b7:25:cf:f4:73:4a:87:c4:00:28:9c:28:
                    a2:29:60:77:b4:30:92:ea:d1:4b:ca:be:f9:8f:ee:
                    d0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:17:1A:3E:DF:80:FF:24:D4:E6:E8:13:0F:6B:69:26:C5:40:7D:F9
            X509v3 Authority Key Identifier:
                keyid:82:FD:5E:A2:E5:AB:89:9B:E1:2B:B6:FF:32:00:02:5B:14:7B:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/82FD5EA2E5AB899BE12BB6FF3200025B147B8D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82FD5EA2E5AB899BE12BB6FF3200025B147B8D6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/82FD5EA2E5AB899BE12BB6FF3200025B147B8D6E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:be:68:84:7d:ad:78:25:23:4a:30:03:1f:a0:80:cc:b3:2a:
         15:fe:6b:ac:4a:e5:fd:d7:28:94:9a:02:b6:4c:e6:b7:09:4b:
         c1:85:57:bb:b2:d1:7a:1e:bb:a4:12:b1:39:2f:99:3c:d7:3d:
         db:fb:a5:ed:4f:7d:e5:44:8a:55:8a:1a:a7:2b:2c:c1:c4:d2:
         5c:ba:64:d5:ea:a3:e6:8d:54:32:f3:9e:fa:80:a3:f8:c2:37:
         a6:e0:96:4b:19:b1:05:5d:fe:30:72:15:5e:8a:f7:02:73:65:
         4d:f9:af:91:5a:6f:13:b0:96:11:95:93:52:98:5c:c6:78:fe:
         fa:6b:7b:b0:c1:74:37:b9:df:d2:f0:14:d0:98:4e:01:cd:79:
         e0:99:cd:92:ff:af:d2:9b:72:81:67:2f:88:1a:30:11:70:d3:
         d0:4b:25:92:ac:80:fd:ce:ef:d4:26:fd:4d:5a:e6:b6:50:37:
         91:b4:aa:33:fd:76:dd:df:47:10:93:f9:7f:e5:67:e4:b3:1a:
         68:69:cb:de:46:97:a6:b4:fe:89:7f:1d:5f:07:31:e7:2f:f1:
         6e:a0:68:4b:11:c2:ae:8b:96:08:f6:4d:13:b7:99:a3:1c:35:
         16:8e:7a:30:58:29:26:2c:80:f4:77:54:5f:1a:d7:8c:49:27:
         90:46:3a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----