Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/3AA25D1A66959674425740B0D69389FFFDDE91CB.mft
File:                     3AA25D1A66959674425740B0D69389FFFDDE91CB.mft (raw, json)
Hash identifier:          aTT7hHEUMsCxvdLh1k0vbz0MMWmfBSq8asak7TDVVAE=
Subject key identifier:   8E:BB:8F:24:35:23:8F:1D:01:1B:56:AD:A8:C3:E1:E2:BB:00:9C:08
Authority key identifier: 3A:A2:5D:1A:66:95:96:74:42:57:40:B0:D6:93:89:FF:FD:DE:91:CB
Certificate issuer:       /CN=3AA25D1A66959674425740B0D69389FFFDDE91CB
Certificate serial:       3994DC1AD62EC031F297697A7DA8CC1C145DE7D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AA25D1A66959674425740B0D69389FFFDDE91CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/3AA25D1A66959674425740B0D69389FFFDDE91CB.mft
Manifest number:          0474
Signing time:             Sun 17 Mar 2024 16:40:00 +0000
Manifest this update:     Sun 17 Mar 2024 16:35:00 +0000
Manifest next update:     Mon 18 Mar 2024 17:18:00 +0000
Files and hashes:         1: 3AA25D1A66959674425740B0D69389FFFDDE91CB.crl (hash: lmX4hu7wSJcL3vyu6pZvk9x0EqrxrNmyC1NFQuoMOgI=)
                          2: 323830343a353162343a3a2f33322d3438203d3e20323638343731.roa (hash: iKICrCOHZtF7WtAPev3OkAgssW8pGc1rJgg/MUPRIdY=)
                          3: 34352e3136302e3139322e302f32322d3234203d3e20323638343731.roa (hash: DPIddFPVeYLdxuhsDLNeOXVUdoI0h2RSJf1Rw3mPOII=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:94:dc:1a:d6:2e:c0:31:f2:97:69:7a:7d:a8:cc:1c:14:5d:e7:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AA25D1A66959674425740B0D69389FFFDDE91CB
        Validity
            Not Before: Mar 17 16:35:00 2024 GMT
            Not After : Mar 18 17:18:00 2024 GMT
        Subject: CN=8EBB8F2435238F1D011B56ADA8C3E1E2BB009C08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:72:1d:65:42:62:6f:b1:4d:1d:38:7b:9a:d6:
                    5f:c2:f7:88:0c:94:14:e0:6c:08:c0:a3:17:d0:d1:
                    f6:7a:d8:24:84:b5:39:e5:e4:5f:5d:3e:52:27:26:
                    f9:89:af:e3:f8:a7:84:2b:69:ef:6f:34:20:c0:dc:
                    e7:db:6f:49:5c:21:bc:d9:42:ae:3d:99:d7:08:2f:
                    43:14:d2:03:81:41:3b:8a:42:5c:0d:96:55:e8:4a:
                    98:fa:65:9a:07:f2:b1:cd:80:a5:ec:79:db:33:0b:
                    5d:71:ee:73:6e:50:98:c9:85:aa:a3:34:12:e7:bf:
                    b2:1d:05:7d:41:1b:fb:a1:69:a2:b7:a1:ca:0a:33:
                    b3:13:bb:d0:8f:af:d0:d1:f4:48:0d:bb:4f:80:c6:
                    13:f9:0c:c8:1a:fb:1d:3c:40:e0:3c:b2:9e:21:92:
                    48:81:5f:cb:27:e7:06:2a:77:da:07:1c:aa:69:91:
                    da:ca:a3:d1:60:a6:f5:75:cb:a5:ce:81:a3:c5:ff:
                    71:51:79:d8:a7:28:0c:d3:d4:c0:68:e4:e2:0b:e9:
                    44:08:ee:f8:1a:78:ff:43:4c:9d:68:e0:dc:ab:a3:
                    1f:aa:34:63:18:c9:0c:49:e8:9c:94:3d:54:3f:f2:
                    0b:30:1c:47:1c:a1:f5:54:70:9a:2b:d2:71:d5:c2:
                    29:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:BB:8F:24:35:23:8F:1D:01:1B:56:AD:A8:C3:E1:E2:BB:00:9C:08
            X509v3 Authority Key Identifier:
                keyid:3A:A2:5D:1A:66:95:96:74:42:57:40:B0:D6:93:89:FF:FD:DE:91:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/3AA25D1A66959674425740B0D69389FFFDDE91CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AA25D1A66959674425740B0D69389FFFDDE91CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/3AA25D1A66959674425740B0D69389FFFDDE91CB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:34:24:69:9b:c5:ab:7f:80:de:e6:15:74:8f:ba:75:65:50:
         bc:56:b0:73:b1:77:ce:b7:92:cc:84:4b:d0:2d:7f:8b:14:c9:
         1f:00:a9:ab:a6:fa:8a:93:62:38:80:0d:8c:ba:43:35:35:1a:
         7b:69:a9:af:e8:87:02:8d:da:cb:8a:85:40:36:28:64:2e:03:
         13:91:fe:a9:ae:d5:7e:6e:cb:1a:68:71:2a:46:f9:15:91:81:
         ee:e9:04:40:6d:5a:00:b8:6b:fa:c0:c0:fc:b9:38:3a:d0:cc:
         38:ae:7a:77:4f:26:92:1e:dc:60:df:b1:2b:6b:08:06:c5:61:
         9a:92:7d:a6:8d:8b:13:f7:25:12:3f:c1:77:8a:3d:2c:d6:33:
         07:89:1a:ca:a5:2f:ec:31:ab:2c:71:1f:d8:e9:a1:89:e7:95:
         4e:8f:59:2f:da:58:de:73:43:d5:ae:a9:6e:d4:de:06:cd:bd:
         33:d0:5f:27:b8:4f:68:33:f2:e4:e1:f2:8e:57:84:9f:83:f0:
         35:03:51:fb:e1:5d:76:8f:93:50:a3:76:65:3a:a8:49:7f:82:
         11:79:4d:1b:40:54:56:9f:e9:16:7e:4b:e0:5c:1f:6a:33:33:
         35:95:e3:c5:0d:af:12:80:1c:e0:64:dd:dc:09:fb:1c:0f:2b:
         ce:ec:9e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----