Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/1/3C042F4CB917EE76AC8D2731C5C1F1868F918B00.mft
File:                     3C042F4CB917EE76AC8D2731C5C1F1868F918B00.mft (raw, json)
Hash identifier:          XrbqhdJ2TV7YMICNrImqRhU3Yp/FlDLfK8osLr8q3qs=
Subject key identifier:   97:DB:F5:60:7B:B2:D5:6F:22:CF:08:11:D0:3D:BB:59:22:1D:76:5F
Authority key identifier: 3C:04:2F:4C:B9:17:EE:76:AC:8D:27:31:C5:C1:F1:86:8F:91:8B:00
Certificate issuer:       /CN=3C042F4CB917EE76AC8D2731C5C1F1868F918B00
Certificate serial:       3364AF14B0B8AB22BDDE598E39628B9BD063AFBC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C042F4CB917EE76AC8D2731C5C1F1868F918B00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/1/3C042F4CB917EE76AC8D2731C5C1F1868F918B00.mft
Manifest number:          BF
Signing time:             Mon 15 Apr 2024 04:45:41 +0000
Manifest this update:     Mon 15 Apr 2024 04:40:41 +0000
Manifest next update:     Tue 16 Apr 2024 08:30:41 +0000
Files and hashes:         1: 3C042F4CB917EE76AC8D2731C5C1F1868F918B00.crl (hash: y/kZXHgIvWQlyfaD2FT68ctCUHtmU+uY6y5smZ25OLU=)
                          2: 34352e37302e3130302e302f32322d3235203d3e20323637353637.roa (hash: 8tKg7LLskrfm+8iVzzwsp7URmvcDRoh5kG9/qQEZ+jo=)
                          3: 323830343a343336343a3a2f33322d3333203d3e20323637353637.roa (hash: F2msOH5Zw6LviBL7h6XwqrAYayiTdQC8uMsmsQ+mTx4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:64:af:14:b0:b8:ab:22:bd:de:59:8e:39:62:8b:9b:d0:63:af:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C042F4CB917EE76AC8D2731C5C1F1868F918B00
        Validity
            Not Before: Apr 15 04:40:41 2024 GMT
            Not After : Apr 16 08:30:41 2024 GMT
        Subject: CN=97DBF5607BB2D56F22CF0811D03DBB59221D765F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:06:76:5f:1e:fd:c0:89:1d:6b:a1:01:00:0e:
                    66:75:0c:cf:3b:e3:bc:9f:ba:6a:24:ed:4f:8a:ff:
                    d5:d8:cb:53:88:25:05:a3:c1:8d:f3:b6:d5:4a:23:
                    e8:ae:61:c0:8c:5b:d5:71:68:3a:2f:f7:f6:5f:0f:
                    cf:0b:f9:17:c6:00:10:cf:d7:7c:a2:15:a6:ba:ea:
                    7e:20:a7:ce:58:c0:7d:86:1c:38:b4:be:fd:e1:4a:
                    51:bc:f0:79:57:68:12:c9:e5:fb:18:1c:f0:6f:57:
                    44:5b:88:73:82:7e:11:25:95:07:fe:c7:96:7e:f5:
                    cc:90:c8:a3:a2:29:6d:81:64:c4:5b:5a:09:c8:48:
                    b4:f6:02:fb:60:3e:b3:01:2e:c8:38:e8:d0:fe:e2:
                    1e:e5:57:75:34:88:d2:9f:3b:eb:db:0d:02:5f:7c:
                    cb:b7:f5:42:09:a7:e5:dd:d3:18:c7:f4:fd:44:87:
                    2d:a2:66:eb:20:d3:f6:58:48:64:5c:59:f5:96:6b:
                    b0:1c:8e:97:13:bb:0e:42:cc:f9:bf:17:fc:00:c3:
                    3b:da:b3:39:37:3f:75:a2:d8:b4:de:d6:02:cd:63:
                    86:f8:ce:b6:8f:d4:47:64:7c:6c:8d:20:09:d3:3e:
                    71:f6:cb:c3:b3:57:7d:0d:2f:27:89:b3:36:f3:d0:
                    4c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:DB:F5:60:7B:B2:D5:6F:22:CF:08:11:D0:3D:BB:59:22:1D:76:5F
            X509v3 Authority Key Identifier:
                keyid:3C:04:2F:4C:B9:17:EE:76:AC:8D:27:31:C5:C1:F1:86:8F:91:8B:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/1/3C042F4CB917EE76AC8D2731C5C1F1868F918B00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C042F4CB917EE76AC8D2731C5C1F1868F918B00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/1/3C042F4CB917EE76AC8D2731C5C1F1868F918B00.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:05:8e:84:04:c8:73:7e:e6:64:bb:5b:3a:af:64:cb:6a:2d:
         cf:91:2f:0f:eb:fa:7d:69:9b:ef:3e:87:2a:15:c7:c5:f0:a7:
         9e:20:9f:38:d9:e5:61:c8:3f:05:4c:2c:8d:3b:f5:56:8a:45:
         07:db:a8:68:00:99:28:56:2e:f0:13:b3:76:e2:f8:3e:b3:01:
         9b:4b:ed:94:cb:46:d8:eb:ef:e2:db:e6:41:86:50:e3:92:ff:
         a5:0e:8f:65:03:9b:be:f7:ac:c7:10:2d:a8:9d:1b:18:08:8f:
         5c:5d:58:87:4f:36:80:b9:9e:75:78:db:bd:3e:1a:d1:5d:57:
         20:2a:02:73:bf:98:80:a5:f9:dd:ac:36:41:d7:eb:53:c7:64:
         e1:f3:16:d3:c0:6b:3b:c0:dd:fa:7d:69:6b:46:1f:d6:a1:bd:
         4b:9e:60:ca:4a:90:f3:51:2e:ab:a5:d3:fd:eb:e6:03:4c:e8:
         3b:fa:97:13:a8:5b:e9:45:05:97:8f:48:14:1a:ab:25:46:37:
         9e:4f:bc:e8:eb:f8:e5:64:f5:0f:42:3d:4e:7b:1d:a1:37:e7:
         8b:65:84:32:03:58:d9:c6:08:29:6f:1a:08:d3:93:04:c4:16:
         e9:40:f9:45:08:52:d7:2a:60:56:7d:c5:1e:c3:18:9f:1b:0a:
         68:8f:e7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----