Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/7A3BC2EDB114CEDBD2031FE0CD75717F31FF0015.mft
File:                     7A3BC2EDB114CEDBD2031FE0CD75717F31FF0015.mft (raw, json)
Hash identifier:          KT18hMmInymnRo4KXJUDePmQa2a8uUZ6EDlV98siLUE=
Subject key identifier:   85:63:D6:8D:C5:6F:75:D7:6D:41:8E:E9:EB:F4:D9:3C:15:72:55:18
Authority key identifier: 7A:3B:C2:ED:B1:14:CE:DB:D2:03:1F:E0:CD:75:71:7F:31:FF:00:15
Certificate issuer:       /CN=7A3BC2EDB114CEDBD2031FE0CD75717F31FF0015
Certificate serial:       3FDB87E09CAED6FAE3749D1767BC3504870D9597
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3BC2EDB114CEDBD2031FE0CD75717F31FF0015.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/7A3BC2EDB114CEDBD2031FE0CD75717F31FF0015.mft
Manifest number:          24
Signing time:             Mon 18 Nov 2024 12:46:11 +0000
Manifest this update:     Mon 18 Nov 2024 12:41:11 +0000
Manifest next update:     Tue 19 Nov 2024 16:24:11 +0000
Files and hashes:         1: 323830343a336361633a3a2f33322d3332203d3e20323636323238.roa (hash: jGXlzyEp+dHEtZ2YB+SzVy/jtkgj+ET5FoDO4MBDIoE=)
                          2: 7A3BC2EDB114CEDBD2031FE0CD75717F31FF0015.crl (hash: WSBJCp+NF1gC1k+2WH+Qj3ZzmMvB4eUJ/KN9RDBf2To=)
                          3: 3139322e3134302e34382e302f32322d3234203d3e20323636323238.roa (hash: bs4qWUgAmH/GTYrw2F/KgUSmyvydZ1AQQ+KBjkZNy8g=)
                          4: 3138312e3232342e37362e302f32322d3234203d3e20323636323238.roa (hash: JdcwPVJVafGDvVBoL2XTN1/DzY1l2lKPy3FsrRJ+kYs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:db:87:e0:9c:ae:d6:fa:e3:74:9d:17:67:bc:35:04:87:0d:95:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A3BC2EDB114CEDBD2031FE0CD75717F31FF0015
        Validity
            Not Before: Nov 18 12:41:11 2024 GMT
            Not After : Nov 19 16:24:11 2024 GMT
        Subject: CN=8563D68DC56F75D76D418EE9EBF4D93C15725518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fb:e8:6b:c0:c5:29:4d:19:4e:30:db:82:9b:
                    09:d1:a2:c3:01:57:b9:d6:95:6a:88:3e:66:b2:5e:
                    ec:49:ec:e4:c1:81:1d:c1:8c:d8:ca:46:8c:86:a5:
                    48:a4:a8:31:b0:45:44:20:ff:5c:94:68:ff:6c:e7:
                    dd:10:da:b8:82:33:e1:ba:55:96:3c:31:b4:13:fb:
                    a9:64:31:07:4b:d5:be:0f:73:26:3c:64:d7:d6:51:
                    e1:35:68:71:85:3c:b3:ed:72:38:d2:c6:7b:10:48:
                    f4:c4:da:8b:8a:b2:6c:ba:83:35:02:fe:9a:54:05:
                    f2:dd:18:31:52:0b:be:3a:92:90:9d:ca:c9:d2:03:
                    dd:e9:48:08:fd:cf:62:4f:8f:02:9d:81:2c:c4:4b:
                    8b:91:79:2a:2a:03:69:3a:a1:06:2d:55:52:b6:43:
                    48:00:a3:9e:4e:f9:a2:d5:ed:62:7c:15:cd:9c:d7:
                    03:c3:dc:0d:d4:c2:cb:46:99:e3:10:71:7c:91:2b:
                    c8:8c:5c:b0:a2:42:a6:fe:46:ba:ec:88:5d:a8:35:
                    9a:c1:d5:56:c4:69:c6:06:8f:f7:19:78:25:09:e9:
                    2f:0a:cd:f9:09:a4:64:27:67:d5:80:26:b0:73:51:
                    44:81:f0:6e:df:b8:2e:f9:0c:4f:75:92:1e:85:9d:
                    9d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:63:D6:8D:C5:6F:75:D7:6D:41:8E:E9:EB:F4:D9:3C:15:72:55:18
            X509v3 Authority Key Identifier:
                keyid:7A:3B:C2:ED:B1:14:CE:DB:D2:03:1F:E0:CD:75:71:7F:31:FF:00:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/7A3BC2EDB114CEDBD2031FE0CD75717F31FF0015.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3BC2EDB114CEDBD2031FE0CD75717F31FF0015.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/7A3BC2EDB114CEDBD2031FE0CD75717F31FF0015.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:66:67:7d:f1:7b:55:bb:f6:3c:0f:ae:c4:e5:26:e0:3c:e0:
         82:a8:63:29:34:91:c4:64:8d:e2:6c:13:b1:0d:b2:8e:2c:f8:
         61:b0:01:98:42:c2:5a:1d:b7:6e:5b:7d:51:dd:19:f8:94:e9:
         db:bf:84:33:c7:5e:24:ae:2d:94:d9:80:7c:bd:39:cf:c3:54:
         ca:aa:c7:16:e3:72:61:91:ec:8f:ab:a8:e5:04:53:b4:4e:f9:
         de:25:99:f6:ca:5d:48:2c:8c:e8:77:1e:18:c1:f0:68:8e:13:
         34:c5:4d:ae:6b:c3:01:24:68:3d:b4:f8:f9:8c:04:fd:ef:9f:
         48:1a:3f:c2:54:b6:96:04:b4:e2:df:6a:ed:80:8f:0b:f9:2b:
         1d:17:f4:fb:7e:b4:ae:85:0c:6d:36:d5:1b:d0:66:53:1d:fc:
         54:58:dc:17:41:da:35:59:02:f8:b1:3a:00:bb:d2:e8:6c:28:
         ac:be:e7:4e:e0:c6:90:26:17:df:fc:40:c2:a2:99:10:fb:f3:
         a7:ce:96:23:1b:de:4d:c9:03:0a:4a:aa:14:85:bf:ef:51:87:
         67:b8:5d:3d:71:a2:b5:18:c4:3f:ed:7f:22:4d:5d:41:6d:92:
         54:be:53:ab:ab:eb:14:06:0e:60:58:31:62:4f:2f:2b:e9:08:
         64:66:2e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----