Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3D5D40CF30F71728D13ED1EDA1B87700FA2696DD.mft
File:                     3D5D40CF30F71728D13ED1EDA1B87700FA2696DD.mft (raw, json)
Hash identifier:          mQ9P7je2CQu8N32tKU6biWpDk/qU9nVOxhChTJFKRf0=
Subject key identifier:   8D:53:1C:3C:EE:D8:37:5C:BB:68:2A:8A:77:9A:98:C0:72:E5:0A:99
Authority key identifier: 3D:5D:40:CF:30:F7:17:28:D1:3E:D1:ED:A1:B8:77:00:FA:26:96:DD
Certificate issuer:       /CN=3D5D40CF30F71728D13ED1EDA1B87700FA2696DD
Certificate serial:       16B979146F3B01B586C24282F368868268152C3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D5D40CF30F71728D13ED1EDA1B87700FA2696DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3D5D40CF30F71728D13ED1EDA1B87700FA2696DD.mft
Manifest number:          50
Signing time:             Mon 15 Apr 2024 10:30:12 +0000
Manifest this update:     Mon 15 Apr 2024 10:25:12 +0000
Manifest next update:     Tue 16 Apr 2024 10:42:12 +0000
Files and hashes:         1: AS268018.roa (hash: gfOWtNLgkPpDL9tmC/UopKlRrMrDO6Bjm6Z9JAtQFmY=)
                          2: AS61832.roa (hash: McW08KG7bMdRNdNqM8sTOp7M431jIKoU5Kw1mP6RzPo=)
                          3: AS61946.roa (hash: mfCV2vk0baSyvLGcEi8rer8HZCoz9tgnX3zsv333UxM=)
                          4: AS28598.roa (hash: SGty3yjsOeJVntGDTU2e+qlQtFCAw6x/iRj5G6cCTaU=)
                          5: 3D5D40CF30F71728D13ED1EDA1B87700FA2696DD.crl (hash: E6g3ZuZnXlpDsPhTKeWnbAEyx6/RNnRd2u4Z+erbuV8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b9:79:14:6f:3b:01:b5:86:c2:42:82:f3:68:86:82:68:15:2c:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D5D40CF30F71728D13ED1EDA1B87700FA2696DD
        Validity
            Not Before: Apr 15 10:25:12 2024 GMT
            Not After : Apr 16 10:42:12 2024 GMT
        Subject: CN=8D531C3CEED8375CBB682A8A779A98C072E50A99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3c:54:ca:38:04:26:e0:73:1a:a7:6e:20:fb:
                    02:58:7f:30:67:bf:c9:b8:51:7e:5d:28:dc:ca:cd:
                    be:97:a8:76:0b:cf:0b:5e:20:b9:f9:f0:70:74:d5:
                    88:62:0d:36:74:5e:68:1b:c5:7e:b7:fd:16:f1:8c:
                    6a:27:f1:f7:2c:05:0e:9c:51:72:43:1e:1a:4c:9d:
                    72:53:5c:b4:ea:f3:5f:a6:4c:40:b6:50:68:e5:cf:
                    57:4b:1a:d2:42:bd:f9:a8:0c:8e:18:ac:52:fa:a7:
                    47:6a:be:e4:36:79:47:fc:cd:de:2e:26:27:52:50:
                    8c:de:21:f3:10:5a:12:53:0f:18:9b:48:ed:bc:5e:
                    69:bb:cc:2d:db:d4:7d:97:af:53:81:da:43:3a:c7:
                    d9:2b:6d:8f:86:d5:2f:db:b4:0b:4b:94:62:c1:8c:
                    5f:c0:20:e5:4e:dc:e2:88:e5:ad:26:92:ac:6f:e4:
                    7d:dd:4f:3a:2b:c9:4b:64:47:c0:86:2a:d0:e9:4f:
                    32:a4:cf:d9:2c:31:47:3a:0a:35:41:92:63:c9:0b:
                    cb:fd:69:97:13:3d:cc:88:ba:bb:40:0d:8d:b5:7c:
                    b0:c8:15:78:ff:5c:d6:6f:96:d5:35:71:67:bf:5d:
                    09:2f:71:47:93:0b:e9:59:2f:30:af:0e:a0:07:dd:
                    79:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:53:1C:3C:EE:D8:37:5C:BB:68:2A:8A:77:9A:98:C0:72:E5:0A:99
            X509v3 Authority Key Identifier:
                keyid:3D:5D:40:CF:30:F7:17:28:D1:3E:D1:ED:A1:B8:77:00:FA:26:96:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3D5D40CF30F71728D13ED1EDA1B87700FA2696DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D5D40CF30F71728D13ED1EDA1B87700FA2696DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3D5D40CF30F71728D13ED1EDA1B87700FA2696DD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:9e:ea:2d:dc:b3:d5:fc:28:41:f1:34:58:a4:69:ca:0a:a4:
         e7:5b:62:73:8b:11:67:69:c1:33:1e:71:12:33:29:57:71:7c:
         5f:12:52:df:a8:63:9d:60:be:b0:86:57:b4:c8:e9:2f:cd:00:
         7a:2d:24:5e:ff:4b:8c:3f:3c:fb:30:21:ea:3a:f8:17:6f:a4:
         52:ec:78:bb:43:e7:91:1d:4a:bb:38:01:50:fc:10:c7:eb:0a:
         35:08:33:5f:de:d9:e6:f0:75:c5:b3:f4:92:cb:52:0a:36:23:
         8a:86:1e:b2:5c:c3:32:12:00:91:56:ce:25:05:84:55:4b:fa:
         f8:9d:da:29:c6:96:da:33:08:aa:0f:b4:56:7a:2a:f5:b0:8f:
         65:23:35:91:7e:63:c5:ac:d7:43:67:5d:7e:95:a1:e3:45:db:
         ca:42:7b:7d:40:37:2c:86:b5:9d:0c:5e:de:31:1f:ce:ec:8b:
         88:8d:1e:32:35:1f:89:a8:1c:5c:49:95:7b:fd:2d:df:c2:1d:
         c2:3e:62:e0:9b:c7:e4:07:3b:af:2f:c0:6c:92:99:df:8a:87:
         db:fe:bc:89:ff:7b:91:18:c1:c8:24:39:00:29:be:66:4e:5c:
         a2:e0:42:e5:dc:64:c8:81:b4:d3:24:22:55:78:ca:30:97:a9:
         54:18:a2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----