Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/3D482A1CB31CFB1DBBC6B872842602552155FEEA.mft
File:                     3D482A1CB31CFB1DBBC6B872842602552155FEEA.mft (raw, json)
Hash identifier:          yY1hodDC7gP1cJeKtfaQ9jLPUYFFujpiemVhIIr8PH8=
Subject key identifier:   3A:84:6C:9F:4F:E6:25:67:E7:CE:FF:0C:2C:CB:E5:83:7F:67:E5:58
Authority key identifier: 3D:48:2A:1C:B3:1C:FB:1D:BB:C6:B8:72:84:26:02:55:21:55:FE:EA
Certificate issuer:       /CN=3D482A1CB31CFB1DBBC6B872842602552155FEEA
Certificate serial:       09BE04B1AA9C74BCA59FE3BD14BBE78091E28690
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D482A1CB31CFB1DBBC6B872842602552155FEEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/3D482A1CB31CFB1DBBC6B872842602552155FEEA.mft
Manifest number:          5D
Signing time:             Sun 14 Apr 2024 21:16:00 +0000
Manifest this update:     Sun 14 Apr 2024 21:11:00 +0000
Manifest next update:     Mon 15 Apr 2024 21:16:00 +0000
Files and hashes:         1: 34352e3232362e39322e302f32322d3234203d3e20323636393932.roa (hash: 1/aj7ZTT2Lo1+X7scigfG9i0+IHxrnTDoq3d/MHwj6A=)
                          2: 3D482A1CB31CFB1DBBC6B872842602552155FEEA.crl (hash: 2ckvvirPz8yorcU+nyU/oZU9Q4sl6QlsekVigDdogq0=)
                          3: 323830343a343637633a3a2f33322d3438203d3e20323636393932.roa (hash: aWbGdbLM4G419vtd9nZA1qwIV2Bg9KHhZfjS53/GvEw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:be:04:b1:aa:9c:74:bc:a5:9f:e3:bd:14:bb:e7:80:91:e2:86:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D482A1CB31CFB1DBBC6B872842602552155FEEA
        Validity
            Not Before: Apr 14 21:11:00 2024 GMT
            Not After : Apr 21 21:16:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7b:40:18:c2:f2:71:d5:6d:06:f8:86:97:14:
                    61:25:af:c0:0b:e9:b8:00:fb:3d:20:c6:31:75:71:
                    7a:37:d2:83:97:3b:c1:75:cc:37:5f:ee:17:e7:75:
                    c2:13:fb:12:e0:b6:02:9c:d4:67:81:19:9b:2c:3e:
                    38:7d:22:ad:46:6f:9c:90:b1:b7:70:43:0b:57:00:
                    ad:f8:f8:38:42:61:e7:44:aa:b7:35:6d:29:08:73:
                    6c:83:1a:cc:70:a6:bd:70:c9:be:7b:18:4d:c8:ea:
                    fa:94:cd:e8:62:a2:42:ea:75:4e:68:4b:40:2e:25:
                    bf:02:6f:4a:de:6d:60:63:7d:68:07:5d:cb:e4:29:
                    d5:4b:da:d3:6e:68:40:6a:81:3e:1c:89:af:5a:ec:
                    f7:19:f9:50:0d:65:d5:fa:89:a0:89:91:ed:a2:da:
                    8f:65:25:61:dd:e4:44:38:8e:60:c7:c3:b8:ca:48:
                    ef:ea:72:95:91:73:b9:66:0f:dc:08:3c:06:9f:0c:
                    b1:1c:82:98:c9:8a:b9:40:4e:91:82:19:60:98:62:
                    a4:09:ed:9f:0c:de:c0:e8:65:b2:48:44:83:59:21:
                    fa:9a:49:8e:3d:5a:2e:0a:ea:70:1d:c1:30:dc:f1:
                    7d:90:12:fa:25:c1:c7:4d:e0:d6:bd:b9:e7:48:ab:
                    7d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:84:6C:9F:4F:E6:25:67:E7:CE:FF:0C:2C:CB:E5:83:7F:67:E5:58
            X509v3 Authority Key Identifier:
                keyid:3D:48:2A:1C:B3:1C:FB:1D:BB:C6:B8:72:84:26:02:55:21:55:FE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/3D482A1CB31CFB1DBBC6B872842602552155FEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D482A1CB31CFB1DBBC6B872842602552155FEEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/3D482A1CB31CFB1DBBC6B872842602552155FEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:84:9f:79:e4:ec:73:30:b8:23:ca:75:fc:89:a4:82:77:06:
         c1:dc:e9:f7:6d:79:98:31:a3:19:c8:58:8a:42:65:87:c1:bb:
         37:6c:3e:c4:78:2a:92:c6:ef:fb:48:d5:67:81:da:36:b8:5c:
         fe:93:66:88:c5:f2:a1:6b:c0:cf:66:14:d9:ba:49:7c:51:da:
         9a:5f:d3:7d:f2:35:62:cb:7c:09:a2:ff:7c:db:ea:8c:62:f5:
         30:b7:4f:7a:65:f2:77:5e:1d:0e:f5:37:18:29:40:5c:89:3f:
         72:2e:03:62:2f:69:ef:d6:dd:c3:62:37:bd:a8:f7:93:93:e9:
         e3:9c:95:25:54:ea:e3:e4:d0:b7:db:3a:23:95:1d:be:88:10:
         20:54:f7:cf:0e:9c:86:aa:68:64:a7:38:95:97:f3:b9:eb:2d:
         02:ff:81:39:0b:f3:1e:12:da:8b:e3:82:bf:29:86:58:41:f9:
         d8:bc:8d:bd:c3:0b:89:29:88:2d:3e:ce:72:ba:63:e8:62:49:
         d5:09:0a:d0:9d:00:3f:ef:0a:76:13:f7:9f:a0:58:47:dc:8a:
         23:04:01:70:74:35:74:6f:36:20:26:4e:f1:a2:13:31:86:e2:
         d3:43:ab:c7:24:d2:f6:b7:2e:f2:5e:3e:75:4e:eb:1b:62:3f:
         2e:7c:98:48
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----