Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/0/B3354BD7E050337656367BDB511F6A3F55FEB98F.mft
File:                     B3354BD7E050337656367BDB511F6A3F55FEB98F.mft (raw, json)
Hash identifier:          hKz6yV+vno/jl1wBferM1nwg1IF2Xs7kNbH/pa6w/uU=
Subject key identifier:   85:D5:F7:E5:1F:B5:B2:7B:D8:08:AF:51:87:3A:4E:92:D6:78:DB:FA
Authority key identifier: B3:35:4B:D7:E0:50:33:76:56:36:7B:DB:51:1F:6A:3F:55:FE:B9:8F
Certificate issuer:       /CN=B3354BD7E050337656367BDB511F6A3F55FEB98F
Certificate serial:       41E398089F2AE1D01D013E04F2A4B75F75CFF0D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3354BD7E050337656367BDB511F6A3F55FEB98F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/0/B3354BD7E050337656367BDB511F6A3F55FEB98F.mft
Manifest number:          01B8
Signing time:             Mon 15 Apr 2024 09:34:50 +0000
Manifest this update:     Mon 15 Apr 2024 09:29:50 +0000
Manifest next update:     Tue 16 Apr 2024 11:05:50 +0000
Files and hashes:         1: 3136382e3132312e37322e302f32322d3234203d3e20323635333032.roa (hash: KU3q4ow8iMwNRbukMtG7KZKLD3ooGwJYLCmCi7KjJus=)
                          2: 323830343a326463343a3a2f33322d3333203d3e20323635333032.roa (hash: x4e9t4WJ1PlvSslDHh1PfeQgsRLp6zWpLtCfMT3YPlA=)
                          3: B3354BD7E050337656367BDB511F6A3F55FEB98F.crl (hash: bVV6YhbRWuI67//iOOTcYu4s5QHAxaqhx9RrMnqjyTk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:e3:98:08:9f:2a:e1:d0:1d:01:3e:04:f2:a4:b7:5f:75:cf:f0:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3354BD7E050337656367BDB511F6A3F55FEB98F
        Validity
            Not Before: Apr 15 09:29:50 2024 GMT
            Not After : Apr 16 11:05:50 2024 GMT
        Subject: CN=85D5F7E51FB5B27BD808AF51873A4E92D678DBFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:bc:1e:a4:0b:52:5e:1f:bc:35:16:cb:9b:5c:
                    5d:5a:31:18:9d:28:8e:4a:19:73:05:27:2a:f2:9e:
                    5e:f8:b5:b2:e6:a9:20:3c:f9:20:0e:19:be:b2:84:
                    91:02:fb:d9:44:48:30:5f:e9:68:4b:f0:03:7a:c2:
                    05:ff:9a:b5:cb:4b:b4:26:dd:d9:bf:6f:6c:7a:0c:
                    68:ab:3f:7c:67:0e:cd:85:5a:76:de:6b:59:24:15:
                    8a:0a:fb:aa:a8:4e:6a:6d:2c:75:78:e7:ed:ba:17:
                    77:83:16:4b:78:8e:3a:27:7b:1a:48:22:b4:74:2d:
                    c1:ed:b8:3a:7e:38:22:a9:27:b7:6f:4e:fa:45:d7:
                    17:22:f2:53:a6:4e:f1:59:13:77:35:10:69:76:bc:
                    ba:01:eb:84:96:fb:13:ff:52:ac:d7:c3:ce:6b:bf:
                    45:e5:b3:4b:fd:dc:89:d8:ea:10:c5:9f:96:24:06:
                    9a:23:f0:6a:47:a8:b3:1e:c6:ea:74:b5:75:27:06:
                    7e:24:87:12:35:99:b5:53:c5:96:71:14:6b:47:c9:
                    45:71:ae:9b:73:47:8b:cf:2e:e1:b7:71:c8:7c:19:
                    0b:4b:48:8e:d1:9b:3e:a7:b3:95:1f:4e:e6:b2:f2:
                    a9:69:ba:66:8f:4e:ee:4a:26:28:23:18:6d:5f:53:
                    16:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D5:F7:E5:1F:B5:B2:7B:D8:08:AF:51:87:3A:4E:92:D6:78:DB:FA
            X509v3 Authority Key Identifier:
                keyid:B3:35:4B:D7:E0:50:33:76:56:36:7B:DB:51:1F:6A:3F:55:FE:B9:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/0/B3354BD7E050337656367BDB511F6A3F55FEB98F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3354BD7E050337656367BDB511F6A3F55FEB98F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/0/B3354BD7E050337656367BDB511F6A3F55FEB98F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:f3:40:d3:1c:73:67:03:69:e1:58:a5:21:53:41:a7:48:14:
         32:64:ce:74:89:17:8c:7f:83:f4:8e:94:d4:7a:0f:d2:cc:ed:
         65:cd:31:50:d3:3d:e2:d7:35:75:6d:13:f5:12:c6:87:5a:48:
         8d:32:b3:fc:ee:6e:e7:17:b7:a0:30:9b:75:f5:fc:3c:1c:63:
         bc:a8:1b:13:2c:14:ed:7a:9a:47:41:e9:7f:25:64:d1:c9:03:
         95:7b:97:f7:a1:c3:63:fa:35:13:49:e7:00:fc:bd:7f:fa:08:
         b3:64:6e:2f:70:21:02:bf:62:d6:f4:ab:ae:55:5b:18:40:89:
         ad:28:6b:8e:f8:d0:58:66:3b:e9:9b:ab:11:7a:b3:30:b0:2a:
         64:67:2b:de:a8:27:df:10:74:0b:09:a3:81:88:36:3b:5c:f4:
         cf:95:20:7e:32:ef:48:96:e1:ad:00:a0:29:7d:c4:34:de:4c:
         2d:28:9d:85:e2:52:56:c8:0f:c4:53:16:cc:94:5b:4d:45:50:
         13:f1:1a:1c:37:57:f1:ee:4a:11:2f:f1:0a:f5:34:a0:60:35:
         1a:19:26:b1:13:53:69:d8:b1:74:66:28:5b:e9:40:3c:a6:64:
         06:e0:f0:e3:ce:eb:15:8e:a7:2c:e5:75:ae:8d:4d:78:eb:d0:
         8b:df:66:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----