Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/0/3F0705FC4127F9D4667DD917703327B2B41A215A.mft
File:                     3F0705FC4127F9D4667DD917703327B2B41A215A.mft (raw, json)
Hash identifier:          VG7wrwyKPASQjkIH/Wwmn4PyqPi+Phw4ccO6CD+/1Mw=
Subject key identifier:   61:2D:0E:02:91:42:6A:51:3E:31:D3:15:70:9C:C0:CD:58:28:51:96
Authority key identifier: 3F:07:05:FC:41:27:F9:D4:66:7D:D9:17:70:33:27:B2:B4:1A:21:5A
Certificate issuer:       /CN=3F0705FC4127F9D4667DD917703327B2B41A215A
Certificate serial:       3D1783E87E7B1AEB57DA4D4CF67C459ADE0911BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F0705FC4127F9D4667DD917703327B2B41A215A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/0/3F0705FC4127F9D4667DD917703327B2B41A215A.mft
Manifest number:          DE
Signing time:             Mon 15 Apr 2024 05:17:48 +0000
Manifest this update:     Mon 15 Apr 2024 05:12:48 +0000
Manifest next update:     Tue 16 Apr 2024 05:58:48 +0000
Files and hashes:         1: 323830343a313664633a3a2f33322d313238203d3e20323633313034.roa (hash: LRKURbz2j2weaz0Hk4gs3Odq5/CaoPu3NPGIWqy0VcQ=)
                          2: 3137392e3132342e34382e302f32312d3332203d3e20323633313034.roa (hash: tC2rUjQNe1zOqctRZnMaLaYTn/uVGHHSXuXj3jMijIk=)
                          3: 3137392e3132342e34392e302f32342d3234203d3e20323633313034.roa (hash: aJ0/ENlDltbKBE+nQEUB/5tKb3zbZw+ewBFrAPbXD6I=)
                          4: 3F0705FC4127F9D4667DD917703327B2B41A215A.crl (hash: hkrIM16WtXExTXkUucy9OV3+UvyKOI1XkeEWArTfLoQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:17:83:e8:7e:7b:1a:eb:57:da:4d:4c:f6:7c:45:9a:de:09:11:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F0705FC4127F9D4667DD917703327B2B41A215A
        Validity
            Not Before: Apr 15 05:12:48 2024 GMT
            Not After : Apr 16 05:58:48 2024 GMT
        Subject: CN=612D0E0291426A513E31D315709CC0CD58285196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:29:07:c0:55:35:bc:fe:d1:25:67:44:9e:19:
                    2b:70:f1:ea:69:83:28:40:bb:04:ce:39:93:6a:0e:
                    ca:6f:27:fc:5b:2f:7f:e3:6c:db:a2:7e:fc:ee:56:
                    4c:9b:2e:c6:06:3e:5f:af:38:b0:25:1e:34:da:eb:
                    b6:b3:58:e6:e1:ab:6d:ca:f4:77:e2:a3:61:4e:1f:
                    03:35:77:7c:1b:be:db:3f:04:1f:ed:d0:7c:02:36:
                    72:67:62:82:15:91:6d:7f:34:82:0f:ae:fe:92:64:
                    5f:18:f6:c1:1f:cb:9b:33:a9:11:76:13:39:3c:a7:
                    13:4c:5f:59:fe:3c:bb:d4:47:da:ca:6e:78:0e:ce:
                    c0:5c:b9:75:58:13:5e:00:ce:d7:b7:4b:ec:b9:a1:
                    31:1a:a9:2b:03:76:5b:7c:6b:a2:75:70:c5:fd:98:
                    45:eb:a9:05:da:56:7b:fe:32:fe:4e:0b:59:12:7a:
                    5c:d2:b5:1f:23:6a:c7:8d:63:f7:ef:fe:a1:5f:4e:
                    55:cc:c3:fa:6c:c3:c9:83:c2:90:b9:cd:82:fc:89:
                    69:e7:16:64:1f:9a:c0:07:0c:a2:44:6b:55:78:3c:
                    e8:56:fb:ca:20:11:a9:7d:98:7e:56:0e:70:87:41:
                    5e:de:a2:2b:5c:43:4d:b8:0f:60:8e:f7:89:58:18:
                    4b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:2D:0E:02:91:42:6A:51:3E:31:D3:15:70:9C:C0:CD:58:28:51:96
            X509v3 Authority Key Identifier:
                keyid:3F:07:05:FC:41:27:F9:D4:66:7D:D9:17:70:33:27:B2:B4:1A:21:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/0/3F0705FC4127F9D4667DD917703327B2B41A215A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F0705FC4127F9D4667DD917703327B2B41A215A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/0/3F0705FC4127F9D4667DD917703327B2B41A215A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:bb:92:7f:1e:66:b8:a4:14:ed:17:0a:e4:d4:0c:98:9c:42:
         b4:b5:d1:48:be:45:fe:e3:81:66:91:e2:56:67:9e:32:6d:fd:
         76:19:54:e4:08:f6:57:2a:73:c7:32:72:24:bc:1d:9b:5c:09:
         a4:fd:51:98:c9:fe:76:19:20:ad:90:d7:ed:f0:85:35:c2:4a:
         d1:e9:55:5f:c9:52:c6:a6:3b:2f:29:66:cc:d6:d5:6d:00:8e:
         90:61:38:f7:4c:c6:71:32:dd:8f:e4:53:bf:9e:76:84:60:de:
         f7:01:83:16:85:e9:90:9c:2b:11:ee:88:e6:72:c9:36:2f:b5:
         63:55:4e:9c:a7:22:f3:76:0b:c2:f8:2d:ff:45:c3:76:91:86:
         5f:82:cd:f3:1b:bb:15:9e:17:93:f9:5d:a8:f9:1c:ec:5a:6a:
         12:77:fb:1f:e5:69:1d:d5:0e:dd:81:d6:af:f3:68:0b:50:cf:
         22:b9:9c:b9:3f:9d:52:b2:42:77:d4:cb:d7:3c:55:61:55:f7:
         33:4a:75:63:e6:e8:67:26:91:3b:5f:9f:53:b1:83:1b:79:2e:
         94:cb:ec:46:d2:fe:36:81:28:b7:fd:16:fb:12:f8:f2:60:91:
         e5:b8:59:96:89:5b:1d:9a:14:10:22:59:d6:33:9d:14:bf:2a:
         b4:ea:90:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----