Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/B307070B022012B3CA67F9A9BDD67BCF7B1E15C1.mft
File:                     B307070B022012B3CA67F9A9BDD67BCF7B1E15C1.mft (raw, json)
Hash identifier:          oXf4pDFAz9EgKtJMPH9eGeRksqLkO4AQa/BChC7SAYw=
Subject key identifier:   8E:C8:B2:A4:A9:DE:C8:43:8A:FF:30:A8:47:E0:D6:B3:A7:C9:D9:3C
Authority key identifier: B3:07:07:0B:02:20:12:B3:CA:67:F9:A9:BD:D6:7B:CF:7B:1E:15:C1
Certificate issuer:       /CN=B307070B022012B3CA67F9A9BDD67BCF7B1E15C1
Certificate serial:       1F5AEFA58C6320123AC1D3C902E04552F3C411D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B307070B022012B3CA67F9A9BDD67BCF7B1E15C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/B307070B022012B3CA67F9A9BDD67BCF7B1E15C1.mft
Manifest number:          31
Signing time:             Tue 14 Mar 2023 07:20:06 +0000
Manifest this update:     Tue 14 Mar 2023 07:15:06 +0000
Manifest next update:     Wed 15 Mar 2023 10:50:06 +0000
Files and hashes:         1: B307070B022012B3CA67F9A9BDD67BCF7B1E15C1.crl (hash: zpPqYsxQ7S4D/Riwe52hITw2GvkqHaUwaerAPRbP878=)
                          2: 323830343a313937383a3a2f33322d3336203d3e203631373936.roa (hash: mmy2axIdzzVIIKCHuELbG1PF6OOaYE1ztDC0oEX4rB8=)
                          3: 3230312e3135392e3138302e302f32322d3234203d3e203631373936.roa (hash: Jg9isU4ShtPleoKNMtk1y6c8XaCN6eVfLRV1GiZY/c0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:5a:ef:a5:8c:63:20:12:3a:c1:d3:c9:02:e0:45:52:f3:c4:11:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B307070B022012B3CA67F9A9BDD67BCF7B1E15C1
        Validity
            Not Before: Mar 14 07:15:06 2023 GMT
            Not After : Mar 15 10:50:06 2023 GMT
        Subject: CN=8EC8B2A4A9DEC8438AFF30A847E0D6B3A7C9D93C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:39:6e:cf:87:7d:bb:5c:51:8a:90:8d:7c:50:
                    72:37:f6:50:92:61:45:a0:8a:1f:11:7b:7c:d5:56:
                    df:e4:11:69:6d:3b:d7:bd:24:00:2e:e5:d5:96:7e:
                    24:0a:2c:95:99:3e:f9:c2:6e:99:4a:2a:06:84:b9:
                    ed:a0:e8:0c:7a:0e:5f:d4:f4:03:c7:90:03:94:4e:
                    3f:12:37:df:ae:d6:58:e6:90:1a:e0:ef:c8:f2:da:
                    44:9e:72:cc:0c:fd:ea:3f:97:d4:0b:38:eb:cc:ab:
                    52:db:69:a8:af:4f:f7:e0:32:71:00:c0:b0:0d:af:
                    15:40:b4:8f:d4:7d:bb:b2:23:ee:dc:b7:09:54:cd:
                    95:ec:df:a9:6d:76:55:bc:71:dc:eb:a1:39:64:c9:
                    7f:ac:2a:62:a3:83:c8:75:55:7b:72:8a:0a:bd:98:
                    3c:a1:37:ab:22:54:ad:d8:1a:cd:44:6c:85:c2:06:
                    54:7a:ef:f5:da:16:26:2c:d7:e9:4c:75:63:b7:de:
                    a7:6e:59:ae:b0:a3:86:dc:44:1f:c3:33:f8:9e:83:
                    47:d2:7e:84:c7:1e:15:f7:d7:c4:7c:60:a1:77:a2:
                    77:af:3a:ed:ff:d5:15:e6:81:9b:90:1c:d6:9f:09:
                    11:e7:ce:96:0e:c0:ef:be:ee:26:e8:95:36:97:87:
                    69:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C8:B2:A4:A9:DE:C8:43:8A:FF:30:A8:47:E0:D6:B3:A7:C9:D9:3C
            X509v3 Authority Key Identifier:
                keyid:B3:07:07:0B:02:20:12:B3:CA:67:F9:A9:BD:D6:7B:CF:7B:1E:15:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/B307070B022012B3CA67F9A9BDD67BCF7B1E15C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B307070B022012B3CA67F9A9BDD67BCF7B1E15C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/B307070B022012B3CA67F9A9BDD67BCF7B1E15C1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:8b:8d:88:5f:a4:88:c4:d5:1e:c4:8d:69:79:8c:f8:15:35:
         b4:96:bf:5a:af:74:de:74:74:2f:55:2b:38:5e:e4:cd:5b:5e:
         fb:88:02:99:e7:56:ce:51:53:b8:df:fe:d0:7a:fd:64:fe:04:
         d8:89:a1:84:0f:a5:c0:17:57:ec:79:ad:ee:10:69:5c:01:8d:
         05:a8:64:6a:d5:f9:37:0e:37:83:37:53:a4:c1:a6:ab:70:54:
         db:66:61:e1:c4:b6:76:06:67:16:55:05:69:e4:cc:1e:f7:91:
         7b:99:59:f1:31:54:08:33:cb:34:2e:de:48:69:91:4f:48:7f:
         33:21:32:2a:fb:f0:71:93:6f:35:6b:cd:20:36:ee:67:54:a3:
         e8:af:fd:82:5a:d7:b4:f7:d9:34:a8:38:68:eb:6b:e1:e0:07:
         08:c3:85:6c:58:00:c2:64:7d:eb:eb:96:5d:90:6c:b7:6d:9c:
         15:cb:13:c3:50:70:10:b3:1f:56:de:33:0d:a9:8e:dc:aa:41:
         fa:b7:48:1d:3a:fd:2f:6f:f2:7a:36:af:f4:a7:d0:91:64:94:
         c1:49:01:6f:02:5d:ad:f2:1a:92:81:eb:64:fe:d8:4c:4d:ec:
         ff:13:f3:68:4f:a7:19:ab:c7:b5:78:a5:21:52:d5:d0:15:24:
         26:d7:35:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----