Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/3BC3484DBFF02B8671B397AA4277D6C416FABF7B.mft
File:                     3BC3484DBFF02B8671B397AA4277D6C416FABF7B.mft (raw, json)
Hash identifier:          bmgBW+0KaWmd6AC4AKDyxasuKUh3Kc1y5yK+ABKKB+g=
Subject key identifier:   05:25:3B:B5:DC:69:23:48:FA:D0:7A:A9:04:B8:1B:03:1C:93:0B:28
Authority key identifier: 3B:C3:48:4D:BF:F0:2B:86:71:B3:97:AA:42:77:D6:C4:16:FA:BF:7B
Certificate issuer:       /CN=3BC3484DBFF02B8671B397AA4277D6C416FABF7B
Certificate serial:       6DDACFF74B80A898C35B48E135EBC265FD76DCD8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3BC3484DBFF02B8671B397AA4277D6C416FABF7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/3BC3484DBFF02B8671B397AA4277D6C416FABF7B.mft
Manifest number:          061D
Signing time:             Mon 15 Apr 2024 08:34:03 +0000
Manifest this update:     Mon 15 Apr 2024 08:29:03 +0000
Manifest next update:     Tue 16 Apr 2024 09:08:03 +0000
Files and hashes:         1: 323830343a353030343a3a2f33322d3336203d3e20323638333634.roa (hash: 5uSP/gE9fai+1yS+P/xWKV0zKM0ZB3/RYJytJAQfapU=)
                          2: 34352e3233382e3234302e302f32322d3232203d3e20323638333634.roa (hash: xl7W3CrAU3P85hYV2C6z9Qqt2KjY3WLWSUv0+HsjfjM=)
                          3: 34352e3233382e3234322e302f32342d3234203d3e20323638333634.roa (hash: xehxEYAQcXr1Dus03On6pI3hqBYf12Qjpaj6TZ99Wlg=)
                          4: 34352e3233382e3234322e302f32332d3233203d3e20323638333634.roa (hash: o7uFS1jKrCkhnG5F/7/DfP/3cDGL0ChcdwoNmbMzVaI=)
                          5: 3BC3484DBFF02B8671B397AA4277D6C416FABF7B.crl (hash: 3CqItRLMRfbMx7UcGhq90iVpjEv3HTj8+63+R/TZvNk=)
                          6: 34352e3233382e3234302e302f32342d3234203d3e20323638333634.roa (hash: IWmNczTc5cxU4Del2wfSwnEr8vnua+YUD9X4NaP/oTQ=)
                          7: 34352e3233382e3234302e302f32332d3233203d3e20323638333634.roa (hash: HYECFl2yqHEwd9tr+GYsuvTZP7wGl30MjCRC+wHpA9I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:da:cf:f7:4b:80:a8:98:c3:5b:48:e1:35:eb:c2:65:fd:76:dc:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BC3484DBFF02B8671B397AA4277D6C416FABF7B
        Validity
            Not Before: Apr 15 08:29:03 2024 GMT
            Not After : Apr 16 09:08:03 2024 GMT
        Subject: CN=05253BB5DC692348FAD07AA904B81B031C930B28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:90:24:06:78:b1:bb:f7:62:2b:96:c7:08:bb:
                    b9:6d:ed:7c:9a:46:32:f4:87:a9:e8:f1:a4:4d:5e:
                    23:ec:7d:a5:b5:84:a8:d5:28:c3:97:2c:f2:14:cf:
                    f3:1f:b5:b1:fa:ca:b3:31:17:b8:dd:27:86:01:3d:
                    60:52:47:9a:87:1f:bb:7f:f4:ca:fe:7e:ee:0a:fe:
                    d3:3e:22:73:f0:0e:4b:52:70:ff:c8:62:db:44:bc:
                    02:6f:eb:1e:f0:96:4a:81:58:79:b3:36:ec:d0:5e:
                    01:fe:7c:31:e5:74:24:b8:18:db:d0:85:88:6a:da:
                    91:48:d8:e5:15:b6:d2:be:73:90:83:6b:57:fd:92:
                    be:61:13:82:df:8b:c1:c8:c5:6c:26:8e:d2:01:79:
                    17:6d:f7:61:ee:b4:46:d1:b1:b5:47:29:a2:87:cc:
                    34:a4:83:18:b8:cc:22:8c:76:dd:ef:f8:12:14:75:
                    55:ad:99:cd:78:1f:ad:84:a0:ad:21:77:9e:9c:97:
                    0d:52:25:d0:5c:a7:3b:a8:d5:d5:53:da:28:eb:6b:
                    b7:ed:e4:b7:d5:84:2e:82:0a:5f:fb:5c:8e:9c:f6:
                    bf:3e:3e:f0:92:bd:97:a8:e5:13:95:c0:93:0b:d6:
                    bc:b6:76:b7:59:41:d2:3e:93:02:41:5e:b1:21:24:
                    9f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:25:3B:B5:DC:69:23:48:FA:D0:7A:A9:04:B8:1B:03:1C:93:0B:28
            X509v3 Authority Key Identifier:
                keyid:3B:C3:48:4D:BF:F0:2B:86:71:B3:97:AA:42:77:D6:C4:16:FA:BF:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/3BC3484DBFF02B8671B397AA4277D6C416FABF7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3BC3484DBFF02B8671B397AA4277D6C416FABF7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/3BC3484DBFF02B8671B397AA4277D6C416FABF7B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:39:07:99:dd:97:77:a5:c6:38:20:3c:95:c2:f8:71:82:bf:
         d3:b3:8a:88:c0:39:22:3b:9c:95:b9:00:ad:30:3f:e7:48:ce:
         a8:09:a9:87:12:97:85:bf:b7:66:0b:1e:bb:6d:1c:c2:75:57:
         97:f3:c3:b8:96:86:d2:5f:50:ad:ef:ff:5c:9a:37:29:ce:00:
         ef:5d:30:25:ac:cb:79:62:d4:d8:13:b2:46:8a:21:f7:c7:29:
         fe:ab:61:42:fb:04:59:af:22:b4:7e:cb:2e:ff:55:db:45:56:
         85:d9:60:b5:4d:27:4a:45:55:26:4b:9c:6e:be:5e:ee:c1:93:
         f2:be:bb:45:17:6c:4b:87:21:7a:4e:a5:67:a2:4a:c9:25:d6:
         5d:a4:2c:a9:b5:24:3e:04:b1:98:83:1e:02:76:da:50:01:d6:
         9b:be:8b:7e:2b:1e:d1:09:ec:fb:23:60:d6:43:ba:4e:f5:c8:
         0d:3d:cb:64:38:05:26:dd:42:71:41:63:34:10:7f:c1:bf:fd:
         3d:a5:9d:b1:a7:d0:46:9c:ea:ab:40:98:22:d3:ae:c6:95:30:
         fd:77:95:cd:20:a5:2a:9c:fb:1b:6c:66:a2:bb:6f:f5:96:36:
         c4:31:50:d2:ce:7b:fd:f0:bb:31:63:16:dd:cb:cb:7b:4d:73:
         3e:de:e4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----