Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/3025A4E17E8376B9C6D848C48215B1A81FD1DFE4.mft
File:                     3025A4E17E8376B9C6D848C48215B1A81FD1DFE4.mft (raw, json)
Hash identifier:          6Jf4QvpWxT33f1EdLBwJAXhaGGOPXJzjLNgLYRcLRtw=
Subject key identifier:   A7:FD:13:6B:13:1B:28:36:7F:CD:C9:8B:D8:82:54:76:61:E8:7E:C6
Authority key identifier: 30:25:A4:E1:7E:83:76:B9:C6:D8:48:C4:82:15:B1:A8:1F:D1:DF:E4
Certificate issuer:       /CN=3025A4E17E8376B9C6D848C48215B1A81FD1DFE4
Certificate serial:       38F00EC37D5A83B56019C6407D915F05EE9AB6A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3025A4E17E8376B9C6D848C48215B1A81FD1DFE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/3025A4E17E8376B9C6D848C48215B1A81FD1DFE4.mft
Manifest number:          0386
Signing time:             Mon 15 Apr 2024 05:30:49 +0000
Manifest this update:     Mon 15 Apr 2024 05:25:49 +0000
Manifest next update:     Tue 16 Apr 2024 06:51:49 +0000
Files and hashes:         1: 3025A4E17E8376B9C6D848C48215B1A81FD1DFE4.crl (hash: 2ghIPoxdkcdr72pu62gCQS4b6YtDx2VzezSnFEHXNKw=)
                          2: 323830343a333730303a3a2f33322d3338203d3e20323632333132.roa (hash: b8nRNbAIU1c4qw/cS5TgP6wORwaDhz6+86BNbWmOMYw=)
                          3: 3137372e3132342e31362e302f32322d3234203d3e20323632333132.roa (hash: pDh78GENVDEC9+EHvp/+MlTsmNpomMMtqtdAvUkFKJU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:f0:0e:c3:7d:5a:83:b5:60:19:c6:40:7d:91:5f:05:ee:9a:b6:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3025A4E17E8376B9C6D848C48215B1A81FD1DFE4
        Validity
            Not Before: Apr 15 05:25:49 2024 GMT
            Not After : Apr 16 06:51:49 2024 GMT
        Subject: CN=A7FD136B131B28367FCDC98BD882547661E87EC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:95:0e:2d:b8:5e:82:f0:5b:2e:65:20:18:c1:
                    8f:36:ac:8b:96:ec:b8:be:c3:77:ec:ad:50:b8:3f:
                    28:56:61:8c:74:ef:ef:71:ba:04:52:30:12:ee:dc:
                    a4:0d:2a:5f:18:95:08:8d:46:86:84:98:aa:5a:97:
                    eb:14:6a:5a:da:8a:3d:ec:63:97:18:b1:30:58:f4:
                    bb:da:4e:d3:d1:34:95:92:e4:ad:35:76:a4:7c:c9:
                    7d:9a:eb:44:52:9b:22:0a:05:c2:d8:55:b9:e0:8a:
                    fc:44:ad:4d:fc:dd:2f:b8:05:bc:a0:ed:f3:3f:df:
                    d3:a8:8c:8a:f7:25:15:8d:cc:03:15:24:1a:a8:f5:
                    a6:32:60:83:c4:60:41:49:20:8a:85:c3:cd:13:f9:
                    29:b9:b8:c4:75:53:2a:23:0e:41:e3:6f:d9:d8:4b:
                    f4:76:06:95:64:4b:e5:75:75:b9:9c:83:3e:99:e3:
                    73:5a:ff:3b:c5:65:84:3a:24:28:13:86:47:fb:4e:
                    6e:79:f7:62:0a:ba:a4:5d:df:49:91:ee:fc:a8:46:
                    c2:f0:27:4a:a2:89:12:d2:e9:f7:7d:50:d1:21:c5:
                    b8:e4:e6:e7:fa:78:c3:30:8d:04:7b:6d:39:6c:da:
                    37:4b:63:18:1a:ce:dd:a6:1a:11:82:75:ac:a2:d0:
                    7d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:FD:13:6B:13:1B:28:36:7F:CD:C9:8B:D8:82:54:76:61:E8:7E:C6
            X509v3 Authority Key Identifier:
                keyid:30:25:A4:E1:7E:83:76:B9:C6:D8:48:C4:82:15:B1:A8:1F:D1:DF:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/3025A4E17E8376B9C6D848C48215B1A81FD1DFE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3025A4E17E8376B9C6D848C48215B1A81FD1DFE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/3025A4E17E8376B9C6D848C48215B1A81FD1DFE4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:90:ce:1a:eb:ac:f5:70:8c:17:9b:38:f8:97:87:de:11:82:
         61:a7:22:1a:f9:2d:c2:5c:0b:4e:3e:16:b1:77:28:bd:23:65:
         fa:29:94:3d:5d:ba:4c:2f:2a:84:a9:5e:bf:45:d4:26:7b:a4:
         7e:7c:c3:dc:9d:52:00:72:c6:28:1a:ee:ee:24:d1:e8:f0:16:
         9a:46:3d:32:f9:74:ea:5c:2b:07:a9:ff:3c:31:1b:e5:59:3a:
         aa:cb:91:35:fa:fa:a6:cc:44:10:0a:4b:10:6c:4b:86:72:7e:
         58:50:d3:38:a6:1a:9e:0a:49:c8:42:fd:15:34:68:b5:78:94:
         5e:20:c6:b1:3a:7e:ad:f7:60:d7:83:af:5d:21:35:0b:7b:ef:
         7e:d6:d4:70:ee:c9:9e:77:ff:a1:66:06:1c:d7:db:95:2f:3d:
         00:9c:f0:51:cd:05:6d:80:45:69:67:ee:61:09:a7:d1:66:22:
         d1:41:d5:f0:ef:72:ea:d2:c9:34:3d:31:b4:25:90:4b:81:e7:
         35:93:d9:8a:96:9d:7c:37:6c:70:a2:2c:4a:4a:c2:0b:83:1e:
         28:1d:ab:f9:85:62:14:81:1f:4e:16:4f:e9:d1:74:cb:8e:3d:
         bc:28:f0:60:b4:93:90:0d:74:74:d1:36:cc:50:e3:ad:a1:8d:
         ee:7c:a0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----