Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/3EBD05E7C59D112ECB00A73F8D33BCD894C5FAE5.mft
File:                     3EBD05E7C59D112ECB00A73F8D33BCD894C5FAE5.mft (raw, json)
Hash identifier:          2QiOvBvZlszPByZb8HKLG/myfXru0VZXllgskTF5GsU=
Subject key identifier:   A7:0F:3E:B6:53:E9:EB:DD:CE:73:30:17:60:15:06:F6:46:08:50:4F
Authority key identifier: 3E:BD:05:E7:C5:9D:11:2E:CB:00:A7:3F:8D:33:BC:D8:94:C5:FA:E5
Certificate issuer:       /CN=3EBD05E7C59D112ECB00A73F8D33BCD894C5FAE5
Certificate serial:       7B7125D621F0DF20499135A76E74A220D3759065
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3EBD05E7C59D112ECB00A73F8D33BCD894C5FAE5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/3EBD05E7C59D112ECB00A73F8D33BCD894C5FAE5.mft
Manifest number:          03
Signing time:             Wed 31 Jan 2024 16:06:23 +0000
Manifest this update:     Wed 31 Jan 2024 16:01:23 +0000
Manifest next update:     Thu 01 Feb 2024 16:39:23 +0000
Files and hashes:         1: 323830343a363566633a3a2f33322d313238203d3e20323939353236.roa (hash: g10uClWBCz7BfNMI/0Idhcp5g+45Ri6FVlAOlHb1Y0c=)
                          2: 34352e3138362e3234342e302f32322d3234203d3e20323939353236.roa (hash: 88XJW5cRlBCEP/vY6JLSjp4S3VYTzeqr/36Jo3gG+z8=)
                          3: 3EBD05E7C59D112ECB00A73F8D33BCD894C5FAE5.crl (hash: isK4+uLNWWp9cuDMfGYQiymmd+ZeS6om/Owt3px8wcI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:71:25:d6:21:f0:df:20:49:91:35:a7:6e:74:a2:20:d3:75:90:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EBD05E7C59D112ECB00A73F8D33BCD894C5FAE5
        Validity
            Not Before: Jan 31 16:01:23 2024 GMT
            Not After : Feb  1 16:39:23 2024 GMT
        Subject: CN=A70F3EB653E9EBDDCE733017601506F64608504F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2c:12:5d:8d:a0:3b:13:d3:55:88:5e:2c:b8:
                    9a:2b:e1:66:e1:e6:07:c3:b3:7f:02:bf:f7:a9:dd:
                    be:7e:2a:56:25:9d:3d:b5:b0:f7:2b:42:80:d2:6c:
                    9a:4c:42:dc:47:2e:1e:17:c1:35:92:03:bc:6f:fc:
                    9e:f2:6a:6b:20:53:18:3e:8c:88:f9:1d:52:05:86:
                    18:4a:04:3d:66:8e:18:ef:2c:7d:5d:69:8f:cf:2d:
                    0b:22:59:df:20:23:00:c1:95:47:f8:f7:64:10:3e:
                    59:d2:2d:61:86:9a:27:12:8d:fe:66:79:8d:75:f7:
                    fb:24:c7:11:0e:41:97:e5:be:0f:8d:01:d7:2c:87:
                    81:19:72:33:98:5b:72:a6:4b:ac:87:02:4f:38:c8:
                    13:9a:d9:91:98:37:81:e9:e7:5d:67:c0:1f:2c:ba:
                    1e:7a:32:7b:63:3c:b0:8d:45:75:06:28:2d:a3:6b:
                    f5:a0:83:1a:d2:ac:d0:fc:7e:64:76:ea:61:52:3b:
                    5d:25:21:40:a9:d9:9d:3e:90:71:b2:a2:95:fc:06:
                    fb:8a:77:32:b1:08:cb:cf:e9:85:4d:8b:78:74:9a:
                    0a:73:ef:f9:71:55:e9:fe:84:ee:61:a1:a2:ce:f0:
                    37:8d:92:76:03:67:b9:ad:28:d8:42:dc:68:54:7b:
                    f2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:0F:3E:B6:53:E9:EB:DD:CE:73:30:17:60:15:06:F6:46:08:50:4F
            X509v3 Authority Key Identifier:
                keyid:3E:BD:05:E7:C5:9D:11:2E:CB:00:A7:3F:8D:33:BC:D8:94:C5:FA:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/3EBD05E7C59D112ECB00A73F8D33BCD894C5FAE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3EBD05E7C59D112ECB00A73F8D33BCD894C5FAE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/3EBD05E7C59D112ECB00A73F8D33BCD894C5FAE5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:92:97:60:c8:9f:05:f4:18:15:48:a6:73:5b:16:b6:15:bc:
         54:9e:2f:35:92:03:49:17:5b:41:04:a1:d1:c9:a1:5c:f3:a3:
         94:ff:3a:2c:d9:47:59:f8:a0:4f:af:9b:ad:7b:65:75:54:d4:
         d2:2c:d3:6e:cb:9d:d9:6f:15:f6:dd:cc:5a:d6:14:ee:e1:7e:
         52:9d:99:c2:a4:f9:dc:ea:49:bf:73:df:7c:38:43:55:4d:6f:
         0d:e2:51:5e:3b:32:64:dd:ed:44:44:93:b2:d3:98:21:29:b4:
         8a:15:47:c4:7c:de:9d:c2:2a:ec:59:af:24:c7:37:f5:31:d2:
         a8:fd:46:72:2e:31:d6:84:b2:56:d8:26:f5:f0:10:93:d3:32:
         74:59:fa:0f:89:f0:5c:2d:b1:d6:b7:01:92:37:56:7b:8d:86:
         f7:b5:5d:c6:91:f0:0f:c6:58:a7:e2:79:e2:7e:ba:5f:64:13:
         0c:09:a0:5f:ef:a8:09:d2:71:f5:2c:b6:1e:7a:a0:8c:2a:fe:
         2f:99:4f:2f:75:c6:80:96:1b:73:ed:b3:3b:9d:f7:db:da:32:
         92:74:66:f9:74:6e:ea:69:f6:fb:4c:8e:bb:4b:bb:4d:73:c3:
         85:9c:f4:88:46:12:c5:87:e7:f0:28:92:4f:7e:e1:62:b5:ac:
         03:53:67:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----