Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/B3DCEA246C36CBEF4DEA95909D08AC331EA4BDAD.mft
File:                     B3DCEA246C36CBEF4DEA95909D08AC331EA4BDAD.mft (raw, json)
Hash identifier:          MXhtUHG9B+zeq/eBE5ELWMSKets0Kw7sIwTt7FwxH+M=
Subject key identifier:   B5:F1:0E:61:F7:49:28:B6:91:80:1F:4D:EB:19:AD:76:D1:0A:04:D0
Authority key identifier: B3:DC:EA:24:6C:36:CB:EF:4D:EA:95:90:9D:08:AC:33:1E:A4:BD:AD
Certificate issuer:       /CN=B3DCEA246C36CBEF4DEA95909D08AC331EA4BDAD
Certificate serial:       287AC807077017659A0A8F8928C3392156AAA6E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3DCEA246C36CBEF4DEA95909D08AC331EA4BDAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/B3DCEA246C36CBEF4DEA95909D08AC331EA4BDAD.mft
Manifest number:          2D
Signing time:             Sun 14 Apr 2024 23:18:40 +0000
Manifest this update:     Sun 14 Apr 2024 23:13:40 +0000
Manifest next update:     Tue 16 Apr 2024 02:38:40 +0000
Files and hashes:         1: B3DCEA246C36CBEF4DEA95909D08AC331EA4BDAD.crl (hash: VyQMCvDKc3cX1snTUdDkRXatatsVyU/PFbdYeXs3oMc=)
                          2: 323830343a353239383a3a2f33322d3334203d3e20323638353238.roa (hash: uuCzIkYQS8ID4A9mlIkZlQI9OFGHm15BrPs7E+GEJtM=)
                          3: 34352e3136322e3231362e302f32322d3234203d3e20323638353238.roa (hash: TPDb39A7Tw/ksuyEZ7H8TZCwFYkO00NoGDe7zSNTYm8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:7a:c8:07:07:70:17:65:9a:0a:8f:89:28:c3:39:21:56:aa:a6:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3DCEA246C36CBEF4DEA95909D08AC331EA4BDAD
        Validity
            Not Before: Apr 14 23:13:40 2024 GMT
            Not After : Apr 16 02:38:40 2024 GMT
        Subject: CN=B5F10E61F74928B691801F4DEB19AD76D10A04D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:29:0c:9b:1d:f9:d9:4f:4e:21:81:02:80:8a:
                    f3:6a:84:39:30:89:43:99:bc:90:85:e6:1b:cb:4e:
                    b9:da:ea:46:9a:52:32:2f:46:28:6f:0c:48:10:a2:
                    94:0c:c1:59:46:a2:28:14:58:44:4b:b4:03:de:9c:
                    2d:56:2e:f1:46:69:67:06:71:e4:36:da:2b:3b:fd:
                    84:f6:25:25:5b:30:58:80:ac:7a:48:65:88:86:e2:
                    ad:1c:c5:0a:ba:36:b5:4c:95:fd:89:da:e6:50:9f:
                    e5:41:b1:f6:26:6b:81:83:5d:1d:2d:b5:d9:33:59:
                    eb:48:a5:7b:97:09:33:7d:fe:66:54:db:17:2f:f6:
                    fb:0a:1e:64:e9:33:f1:d8:6b:90:33:36:55:29:d2:
                    67:80:ab:10:e0:43:f5:ac:f2:67:74:38:85:7d:0d:
                    8e:4c:5b:b8:ef:91:e4:1e:53:3c:3c:b8:aa:71:32:
                    eb:31:c4:52:7d:fd:31:ed:4e:ca:a0:ad:29:48:a9:
                    ee:f3:d1:29:9c:f5:ce:7c:ec:1f:58:63:dd:ba:4d:
                    a5:e0:66:2f:7d:a4:7e:70:f6:a5:23:05:c4:23:7d:
                    87:b2:24:9c:1b:96:ab:fe:d9:0c:f4:bb:87:b8:1e:
                    4e:43:36:ca:c4:a8:0a:78:b4:76:75:4d:8a:83:e7:
                    45:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F1:0E:61:F7:49:28:B6:91:80:1F:4D:EB:19:AD:76:D1:0A:04:D0
            X509v3 Authority Key Identifier:
                keyid:B3:DC:EA:24:6C:36:CB:EF:4D:EA:95:90:9D:08:AC:33:1E:A4:BD:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/B3DCEA246C36CBEF4DEA95909D08AC331EA4BDAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3DCEA246C36CBEF4DEA95909D08AC331EA4BDAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/B3DCEA246C36CBEF4DEA95909D08AC331EA4BDAD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:41:23:72:d6:1a:26:da:5a:6d:b5:3b:48:63:2a:93:3b:1c:
         55:68:b5:82:6c:f7:dd:24:df:de:54:94:7f:84:4f:b2:ef:e2:
         4b:10:3d:e1:0c:ad:c5:81:7f:43:de:9a:da:3a:b8:b9:c2:37:
         d6:ed:fe:03:b0:47:70:6f:6d:98:7f:02:95:9f:13:45:ec:cf:
         89:70:29:71:48:a2:2e:0e:8e:83:09:c0:5c:4c:75:ab:cc:46:
         91:ef:b8:97:4d:ea:b7:09:ea:5e:45:f6:d2:75:c1:9e:c7:1e:
         89:89:67:38:72:5d:4f:c9:b2:8c:bd:ea:fa:a7:43:32:a5:f0:
         f3:3a:ff:f7:cd:f6:f9:de:44:d3:cd:c2:10:ec:79:dd:fe:54:
         e4:3b:d5:f9:49:8d:e1:5b:e4:07:ec:91:d2:f3:8c:d4:50:c7:
         25:cb:1b:7e:05:4a:77:e4:78:a5:5b:8f:fb:bb:a7:39:2b:f8:
         53:50:8f:2c:0a:1b:94:ba:e2:b7:8d:ae:83:c4:00:bf:ab:0c:
         bc:3d:af:24:70:fc:7a:12:d7:11:e8:e4:65:b3:c7:ce:a7:4c:
         1d:21:9b:9c:1e:fc:f8:bf:55:f1:6a:0e:a8:10:b7:f5:5c:0e:
         34:6e:d0:63:42:89:4e:22:34:70:cd:22:24:6c:a0:67:d7:fb:
         df:8f:1c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----