Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/34295E781AF0048314C0DB3D472BE122CF44A038.mft
File:                     34295E781AF0048314C0DB3D472BE122CF44A038.mft (raw, json)
Hash identifier:          wJzjKd3mgtLY1g6LAZblGFt9QvEf2lOUazE88bnrB+I=
Subject key identifier:   CF:C3:90:59:84:4A:D6:28:69:0E:D4:F6:81:01:2E:63:A5:A0:33:45
Authority key identifier: 34:29:5E:78:1A:F0:04:83:14:C0:DB:3D:47:2B:E1:22:CF:44:A0:38
Certificate issuer:       /CN=34295E781AF0048314C0DB3D472BE122CF44A038
Certificate serial:       033A6744E06A89B15E5A30597B52A3556C4E1F54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34295E781AF0048314C0DB3D472BE122CF44A038.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/34295E781AF0048314C0DB3D472BE122CF44A038.mft
Manifest number:          2C
Signing time:             Mon 11 Mar 2024 16:04:13 +0000
Manifest this update:     Mon 11 Mar 2024 15:59:13 +0000
Manifest next update:     Tue 12 Mar 2024 18:58:13 +0000
Files and hashes:         1: 34295E781AF0048314C0DB3D472BE122CF44A038.crl (hash: GniHp174Z9Vnik7kHNWI1NGLc65fhp/X7JuTrmGGf4Q=)
                          2: 34352e3138362e3234342e302f32322d3234203d3e20323639353236.roa (hash: rv7Riial5+OaCe5BkcFgJso4q2VcHy3ZCVA1amI5Cds=)
                          3: 323830343a363566633a3a2f33322d313238203d3e20323639353236.roa (hash: xVBHMCVeghDE28LaezOkr5rfb6uMaFyQgPWyFMynePw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:3a:67:44:e0:6a:89:b1:5e:5a:30:59:7b:52:a3:55:6c:4e:1f:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34295E781AF0048314C0DB3D472BE122CF44A038
        Validity
            Not Before: Mar 11 15:59:13 2024 GMT
            Not After : Mar 12 18:58:13 2024 GMT
        Subject: CN=CFC39059844AD628690ED4F681012E63A5A03345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:77:ed:f6:6b:42:ce:df:a2:41:0b:6f:34:0a:
                    59:05:fe:f9:07:de:db:c3:67:f2:96:0f:18:5c:e8:
                    1e:f0:18:73:cf:eb:9f:ee:b1:e4:0a:51:5e:f3:0d:
                    07:a3:35:9e:c6:9f:12:24:15:cf:fc:b4:e1:6e:b6:
                    12:9f:8a:ce:fa:c4:39:47:cc:63:73:ac:02:ab:b0:
                    9e:70:84:4d:cf:28:35:e7:d2:2d:bc:fc:93:d9:8b:
                    35:22:11:4f:11:9c:7b:66:8b:49:49:eb:ee:c4:0e:
                    2f:4b:6e:90:aa:bd:32:73:09:0a:0d:60:4e:ad:f3:
                    09:ed:a8:7c:45:7a:32:8f:69:00:4a:8c:87:40:c3:
                    00:c3:a3:f1:2c:10:8f:6c:1f:b5:49:db:b2:f1:cb:
                    b3:18:bc:22:eb:09:38:7c:84:2d:1b:a5:70:0f:6d:
                    36:89:dc:36:fc:79:c1:d9:a4:34:d7:8a:da:50:2c:
                    d9:5e:36:17:a1:f1:f0:b6:86:0c:45:65:db:ff:8f:
                    a7:05:f1:de:0d:2a:1e:3c:9a:ce:48:59:8c:15:f1:
                    89:e8:a2:5d:93:ed:ed:c4:0e:98:cb:d1:0a:76:f7:
                    2f:6c:86:5d:51:c2:88:f3:d8:83:7c:64:7b:93:c6:
                    cf:7b:1e:d4:8e:0e:9c:af:82:5a:6f:8f:96:b0:47:
                    2d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C3:90:59:84:4A:D6:28:69:0E:D4:F6:81:01:2E:63:A5:A0:33:45
            X509v3 Authority Key Identifier:
                keyid:34:29:5E:78:1A:F0:04:83:14:C0:DB:3D:47:2B:E1:22:CF:44:A0:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/34295E781AF0048314C0DB3D472BE122CF44A038.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34295E781AF0048314C0DB3D472BE122CF44A038.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/34295E781AF0048314C0DB3D472BE122CF44A038.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:18:23:e0:e6:b6:14:31:82:d0:b6:7f:62:0f:50:ea:5e:88:
         f9:38:72:9e:c4:3c:b7:0b:c3:db:a0:f4:ca:6c:e5:c6:c1:bb:
         81:07:f7:b3:cc:c6:83:c9:c6:a3:ef:d8:66:fa:92:a1:52:f3:
         b2:a1:18:e1:cb:bf:dc:2d:46:37:32:27:fb:5e:58:dd:41:be:
         a0:0b:76:9d:90:a9:c4:a2:bc:03:37:90:79:6c:db:2e:b2:ae:
         86:e0:41:a1:9b:0e:bb:5b:c4:96:ec:9f:2f:55:3c:26:c9:56:
         28:db:9b:e1:84:6c:12:91:fb:5f:22:dd:48:fd:3d:c4:df:29:
         62:24:58:1e:e7:7e:23:f8:ae:83:1e:bb:6a:e3:c3:8b:a2:4d:
         7f:79:94:f3:12:bd:c0:89:22:92:4d:2a:2a:d0:1a:ea:56:ca:
         1c:20:1c:88:fa:fa:4f:1a:22:3a:28:19:ce:d4:d3:62:cb:46:
         52:3a:09:fe:28:2c:e6:47:67:f9:d1:76:47:6c:85:d6:07:82:
         9a:5d:e9:60:99:be:a3:95:e2:6a:f8:70:20:cb:c3:10:db:88:
         da:ef:ec:24:e0:67:1c:43:39:18:fd:48:1c:ac:49:6f:d5:52:
         89:71:ad:75:3d:bf:f9:29:70:3e:de:d5:d3:72:63:77:c1:ec:
         8f:c5:dc:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----