Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/0/38CB8780348540E936E47924E01C69A24F8C15DE.mft
File:                     38CB8780348540E936E47924E01C69A24F8C15DE.mft (raw, json)
Hash identifier:          nP2wvhJSreV+H0Psw+sF6UWMqyU2mXrZepHUPCh7938=
Subject key identifier:   9B:C6:92:B7:D7:D9:49:9A:B9:E2:B8:8D:D6:3F:2A:8C:F7:AC:F6:2D
Authority key identifier: 38:CB:87:80:34:85:40:E9:36:E4:79:24:E0:1C:69:A2:4F:8C:15:DE
Certificate issuer:       /CN=38CB8780348540E936E47924E01C69A24F8C15DE
Certificate serial:       642E969BF1C3D7C2FC104C4D47526D98D1610BED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38CB8780348540E936E47924E01C69A24F8C15DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/0/38CB8780348540E936E47924E01C69A24F8C15DE.mft
Manifest number:          15
Signing time:             Sun 14 Apr 2024 22:39:39 +0000
Manifest this update:     Sun 14 Apr 2024 22:34:39 +0000
Manifest next update:     Mon 15 Apr 2024 22:50:39 +0000
Files and hashes:         1: 323830343a353137303a3a2f33322d3336203d3e20323638343532.roa (hash: tGm1xAXC0+dsJYsLUsY6TJeiOk5SFA4OaEn6dPYF/gk=)
                          2: 34352e3136302e3234342e302f32322d3234203d3e20323638343532.roa (hash: k6eDwDc1w5G55OxzcO1X5cWcdttzEckISp+bwoam8Lg=)
                          3: 38CB8780348540E936E47924E01C69A24F8C15DE.crl (hash: rJW9s3E57AOIhYdD/zniFCy3X+trPI+xzMveZpC0ZfY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:2e:96:9b:f1:c3:d7:c2:fc:10:4c:4d:47:52:6d:98:d1:61:0b:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CB8780348540E936E47924E01C69A24F8C15DE
        Validity
            Not Before: Apr 14 22:34:39 2024 GMT
            Not After : Apr 15 22:50:39 2024 GMT
        Subject: CN=9BC692B7D7D9499AB9E2B88DD63F2A8CF7ACF62D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:12:fb:dd:32:f9:0d:98:b9:ba:78:a0:e1:ae:
                    91:de:b9:69:bf:ae:a9:f7:3c:1e:9c:40:7b:d7:80:
                    96:60:d1:e0:03:be:c7:ec:1a:03:c2:ce:2e:79:88:
                    25:71:f0:c9:6a:8d:ae:15:e5:2a:4a:4f:d3:12:34:
                    ef:bb:15:66:3a:bf:29:3b:7d:ef:d3:cc:0a:2b:6b:
                    b4:f9:6c:e2:cf:4b:68:a6:91:c8:3e:63:8c:49:7b:
                    06:10:24:8a:e5:1f:5c:68:51:b1:73:b0:61:0b:10:
                    eb:97:2a:3b:22:05:e1:eb:c3:2b:1a:48:d1:5a:c6:
                    a3:4c:7a:30:b0:ce:45:6b:67:a9:97:cd:65:15:75:
                    d0:9b:ca:84:30:d7:10:da:99:fc:5b:7c:e5:90:00:
                    a0:60:b8:d7:07:7a:71:10:e7:33:a0:32:f7:24:05:
                    08:78:43:4c:4e:bc:00:7c:da:63:05:16:71:73:1e:
                    51:fc:0b:4b:66:93:db:ba:bf:4b:66:a2:70:4b:ac:
                    22:c7:b8:2b:85:80:47:94:56:8b:be:23:bc:ef:a5:
                    50:60:10:10:7b:bd:af:44:9f:a1:a8:15:f4:e4:1e:
                    3e:3e:2a:ab:ef:8b:b6:ab:a4:4b:f8:d5:99:aa:69:
                    e3:e7:b2:93:74:50:28:a7:26:b3:fa:42:a4:93:be:
                    52:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C6:92:B7:D7:D9:49:9A:B9:E2:B8:8D:D6:3F:2A:8C:F7:AC:F6:2D
            X509v3 Authority Key Identifier:
                keyid:38:CB:87:80:34:85:40:E9:36:E4:79:24:E0:1C:69:A2:4F:8C:15:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/0/38CB8780348540E936E47924E01C69A24F8C15DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38CB8780348540E936E47924E01C69A24F8C15DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/0/38CB8780348540E936E47924E01C69A24F8C15DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:e6:d2:9e:d9:56:50:a1:bc:67:32:2e:cd:ed:c4:84:57:8d:
         a2:58:2c:6d:6e:f1:73:8d:0d:35:18:6d:a8:9c:2e:13:00:f5:
         97:25:97:4a:82:ba:6a:40:02:48:45:ad:1e:a3:27:96:9a:16:
         4b:89:a7:a8:a5:40:53:09:f7:38:2e:82:6c:f2:f9:09:da:bf:
         1f:be:7c:8c:cc:90:6a:ec:3e:2c:1f:ae:58:9f:85:b6:ab:9c:
         b7:25:ca:ba:82:f3:ff:b4:9a:41:df:d2:44:f1:3f:0c:ea:f4:
         ce:be:bb:89:86:67:f5:35:ea:13:92:53:39:24:11:a6:99:11:
         cd:6e:54:63:f8:f4:0e:27:14:a9:3b:b9:61:68:fb:cc:9e:ba:
         e0:fe:c1:b3:7f:43:0b:03:28:e8:47:2e:1e:2c:6c:1a:83:3d:
         cf:7b:d6:d1:23:ba:3c:2e:35:47:85:97:7f:73:a8:d1:72:fc:
         e8:b5:ec:7d:55:9c:5a:88:1e:5e:1a:2e:41:45:c4:c6:3f:19:
         23:fd:f0:de:0c:1f:e1:0b:41:07:f4:67:ac:82:18:7a:0c:a0:
         5e:35:b5:a1:7d:05:c4:d4:cb:89:79:28:2c:ac:22:b0:53:a8:
         8c:e8:12:b4:38:0e:b8:f4:e5:8e:98:7a:1d:54:0d:5e:ac:57:
         3d:67:a6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----