Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DFWWvhjkbx23GKbs7vQTkGmDMMsmTsmwvxNAeE3HHaYC/0/3AF9ACDF6871ABB0B488D7A16E6F97947FCD7798.mft
File:                     3AF9ACDF6871ABB0B488D7A16E6F97947FCD7798.mft (raw, json)
Hash identifier:          Piv2tFnlEEADRuGYVrFS2iEcFSWoCQk0y5lf6FKavJQ=
Subject key identifier:   AF:89:45:24:6F:0D:72:CB:7B:BA:CE:02:08:D9:CE:40:17:DE:A3:E3
Authority key identifier: 3A:F9:AC:DF:68:71:AB:B0:B4:88:D7:A1:6E:6F:97:94:7F:CD:77:98
Certificate issuer:       /CN=3AF9ACDF6871ABB0B488D7A16E6F97947FCD7798
Certificate serial:       38105DD378CEE2555F011D66034E283265F24CD9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AF9ACDF6871ABB0B488D7A16E6F97947FCD7798.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFWWvhjkbx23GKbs7vQTkGmDMMsmTsmwvxNAeE3HHaYC/0/3AF9ACDF6871ABB0B488D7A16E6F97947FCD7798.mft
Manifest number:          0180
Signing time:             Sun 18 Feb 2024 22:31:33 +0000
Manifest this update:     Sun 18 Feb 2024 22:26:33 +0000
Manifest next update:     Mon 19 Feb 2024 23:11:33 +0000
Files and hashes:         1: 34352e3137332e3233332e302f32342d3332203d3e20323638383333.roa (hash: mmwUK1OPSY3sr+sLLOEKWxG/a6Av02YRcpSmphYQSfA=)
                          2: 3AF9ACDF6871ABB0B488D7A16E6F97947FCD7798.crl (hash: XOhhzc/T/Q2fMedbUCUf7ZYjZB3yyPr30lrcxBpsTkI=)
                          3: 323830343a356234633a3a2f33322d313238203d3e20323638383333.roa (hash: l97vHTsxeCNTKBH0zP+ZPOLcYcIKJsyX0tax8MowEj8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:10:5d:d3:78:ce:e2:55:5f:01:1d:66:03:4e:28:32:65:f2:4c:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AF9ACDF6871ABB0B488D7A16E6F97947FCD7798
        Validity
            Not Before: Feb 18 22:26:33 2024 GMT
            Not After : Feb 19 23:11:33 2024 GMT
        Subject: CN=AF8945246F0D72CB7BBACE0208D9CE4017DEA3E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b7:ad:6c:c7:80:8d:18:48:ec:98:ba:cd:ef:
                    f1:cf:57:de:a8:fe:07:98:05:2d:9e:05:19:80:08:
                    c7:29:c1:3a:c4:66:b6:7c:e3:32:db:46:ce:d3:f8:
                    aa:86:c3:71:e1:33:8a:14:fe:1c:6a:ad:fd:ce:1b:
                    67:67:60:fe:2a:0a:ce:17:b6:27:ee:50:85:74:19:
                    a4:f0:2f:85:6d:c7:79:e3:6f:8e:89:56:cc:e9:c8:
                    d0:37:25:95:98:ae:a9:98:96:6d:29:19:80:78:34:
                    5a:de:9e:a9:48:3a:e4:79:f5:38:3a:8a:5f:e1:90:
                    44:bf:64:07:7f:50:94:e4:3a:ab:55:6a:94:6c:52:
                    1d:ac:96:b4:17:89:9d:06:eb:16:da:fd:94:88:dc:
                    09:ff:d0:6a:82:73:06:26:df:c9:94:11:6e:14:66:
                    d8:ff:f5:47:c5:43:30:7e:40:0b:33:9e:af:e8:64:
                    53:77:0c:fc:fc:7f:cc:85:37:90:ae:af:a7:4f:61:
                    01:1c:37:94:57:6d:8f:85:96:4c:b1:07:75:63:4a:
                    a3:fd:3e:9c:a1:73:06:81:a2:85:f2:1c:c2:56:82:
                    b8:b6:12:98:1e:67:09:d7:8d:70:a5:a1:b8:5f:85:
                    3f:9e:9a:1c:d3:c8:b1:33:90:7f:19:d8:50:9c:6e:
                    4a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:89:45:24:6F:0D:72:CB:7B:BA:CE:02:08:D9:CE:40:17:DE:A3:E3
            X509v3 Authority Key Identifier:
                keyid:3A:F9:AC:DF:68:71:AB:B0:B4:88:D7:A1:6E:6F:97:94:7F:CD:77:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFWWvhjkbx23GKbs7vQTkGmDMMsmTsmwvxNAeE3HHaYC/0/3AF9ACDF6871ABB0B488D7A16E6F97947FCD7798.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AF9ACDF6871ABB0B488D7A16E6F97947FCD7798.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFWWvhjkbx23GKbs7vQTkGmDMMsmTsmwvxNAeE3HHaYC/0/3AF9ACDF6871ABB0B488D7A16E6F97947FCD7798.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:12:df:13:aa:9a:ca:3c:8d:b1:e4:b1:7f:c3:55:d1:05:03:
         f6:fb:a3:02:67:32:19:cc:73:a5:c6:de:98:a1:54:a5:d4:9b:
         43:fe:23:1b:63:f8:97:b1:be:2a:1f:16:95:c1:3b:a8:d0:57:
         91:76:bf:15:97:56:a2:b5:7e:59:9d:55:12:c2:af:5d:79:fc:
         6e:5d:4a:d4:16:d5:65:a7:8e:c9:8b:bd:38:b1:50:df:25:38:
         d5:62:d1:7c:60:fa:1f:02:30:35:57:4e:fd:7c:8f:c5:4a:3c:
         e4:b7:af:98:74:1c:c2:44:aa:d5:3d:80:64:8d:b4:33:0a:9d:
         07:d4:f7:2d:7c:f7:62:8f:22:53:4d:32:e8:3b:de:23:0f:4d:
         64:77:77:e4:82:33:1c:d4:b6:9b:47:b5:b9:e3:18:9b:f8:d1:
         c5:28:59:64:08:d3:c8:22:eb:1c:7b:06:a1:8b:6a:5e:c6:87:
         42:49:cd:6a:19:7a:a0:4e:f5:52:06:6d:75:91:ff:58:42:f2:
         27:37:7c:31:c0:23:af:8b:0d:b1:b0:eb:d2:ab:f8:be:91:94:
         3f:62:c8:83:15:63:a5:9a:51:25:6c:6d:32:be:5e:4a:1c:00:
         ad:a3:19:0d:c9:09:07:7b:8d:28:9f:a0:1d:8b:e0:3b:b3:e8:
         e7:59:27:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----