Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HdKDMm65Y6RiMT5uU3jqqHmYwWnjirFLwHNWdXgYaSHC/0/F3655869531FDF3D2813ED9C5D0ADF28BCFD0CE8.mft
File:                     F3655869531FDF3D2813ED9C5D0ADF28BCFD0CE8.mft (raw, json)
Hash identifier:          e919WLl4jijRAXeKGCxmOAEDiBRS32yRmIh+QE5O504=
Subject key identifier:   E3:91:A4:0C:2C:FD:43:36:22:E9:C3:7C:F6:D3:13:09:98:44:BC:17
Authority key identifier: F3:65:58:69:53:1F:DF:3D:28:13:ED:9C:5D:0A:DF:28:BC:FD:0C:E8
Certificate issuer:       /CN=F3655869531FDF3D2813ED9C5D0ADF28BCFD0CE8
Certificate serial:       0CAF55B3492F9F2713594CE4CF366BBCE576ED98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3655869531FDF3D2813ED9C5D0ADF28BCFD0CE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdKDMm65Y6RiMT5uU3jqqHmYwWnjirFLwHNWdXgYaSHC/0/F3655869531FDF3D2813ED9C5D0ADF28BCFD0CE8.mft
Manifest number:          2A
Signing time:             Sat 13 Jan 2024 19:55:04 +0000
Manifest this update:     Sat 13 Jan 2024 19:50:04 +0000
Manifest next update:     Sun 14 Jan 2024 20:37:04 +0000
Files and hashes:         1: 3137372e39322e3132382e302f32312d3234203d3e20323633313038.roa (hash: cKmRXURfJTXzvdk1ymZ90YE8t/neG6d5ZgWAmQteCLM=)
                          2: 323830343a313665633a3a2f33322d3336203d3e20323633313038.roa (hash: ayr8P1FvBxAOOLHR9ogtGOChsg/n0pOBCuf9MtgQrNA=)
                          3: F3655869531FDF3D2813ED9C5D0ADF28BCFD0CE8.crl (hash: aeS0QTotc3Xoqr5OUQnyOQTKc/7GQXwPQjmrudwOcjA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:af:55:b3:49:2f:9f:27:13:59:4c:e4:cf:36:6b:bc:e5:76:ed:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3655869531FDF3D2813ED9C5D0ADF28BCFD0CE8
        Validity
            Not Before: Jan 13 19:50:04 2024 GMT
            Not After : Jan 14 20:37:04 2024 GMT
        Subject: CN=E391A40C2CFD433622E9C37CF6D313099844BC17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9d:4a:92:3e:d4:8a:e5:a3:1a:b4:7e:44:39:
                    bd:4b:9e:a4:7c:56:d1:9d:7d:9c:a3:0a:e1:f4:2a:
                    aa:08:1f:51:e4:0c:06:0d:38:63:7a:7a:33:e7:81:
                    f2:99:c5:04:f2:19:0d:51:7d:03:f4:96:52:bd:f7:
                    dc:c9:06:56:d1:08:6d:45:40:8e:f0:b7:16:13:07:
                    79:3b:0d:f7:c8:84:26:a7:dc:b2:86:fc:c4:c4:99:
                    5d:4a:b6:d5:7e:5f:c9:9c:dc:36:a0:54:e1:5f:10:
                    b6:74:75:2a:67:e5:f2:37:22:75:6d:49:7e:46:0b:
                    04:1a:55:6f:4c:a3:3e:fa:ed:77:2c:49:06:cb:38:
                    24:04:bc:b6:7a:56:b4:22:c5:06:91:33:46:73:dc:
                    a0:32:6a:5d:9d:c2:60:41:b2:7e:73:c6:48:ea:e3:
                    37:44:29:e0:54:6f:f5:e0:b2:a2:db:55:ad:72:64:
                    cc:9b:d1:dc:9d:e3:6b:90:5a:91:14:66:b0:ea:6b:
                    e0:91:dd:8f:32:9f:f0:d5:fd:24:e0:3a:09:88:cb:
                    66:21:38:21:dc:e9:29:0d:01:e3:80:9d:2c:cc:eb:
                    80:d7:85:f6:e5:4c:31:fc:45:a4:f7:2c:76:fd:c6:
                    2a:5d:bc:b4:a0:e2:4e:bb:59:ed:56:96:2e:d8:32:
                    08:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:91:A4:0C:2C:FD:43:36:22:E9:C3:7C:F6:D3:13:09:98:44:BC:17
            X509v3 Authority Key Identifier:
                keyid:F3:65:58:69:53:1F:DF:3D:28:13:ED:9C:5D:0A:DF:28:BC:FD:0C:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdKDMm65Y6RiMT5uU3jqqHmYwWnjirFLwHNWdXgYaSHC/0/F3655869531FDF3D2813ED9C5D0ADF28BCFD0CE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3655869531FDF3D2813ED9C5D0ADF28BCFD0CE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdKDMm65Y6RiMT5uU3jqqHmYwWnjirFLwHNWdXgYaSHC/0/F3655869531FDF3D2813ED9C5D0ADF28BCFD0CE8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:a9:d0:b2:db:59:52:57:0d:2b:f4:c7:60:85:62:37:61:83:
         4d:10:5b:0c:ad:21:8d:01:80:96:6d:df:c6:2e:51:5e:2d:76:
         f2:8a:8d:ae:c0:97:b4:c1:86:04:3d:e2:14:a0:b6:1e:f3:b2:
         5a:ae:3b:70:76:1f:39:bd:d3:76:23:e7:c8:ca:d4:f6:41:c5:
         3b:24:ba:5a:23:1c:ad:b4:ef:0b:40:3f:9a:4b:b4:bc:54:83:
         14:49:d5:ea:33:9a:aa:e6:59:6b:b5:7a:70:94:b2:4a:bb:55:
         f8:0c:c9:87:04:1f:e4:56:c4:11:4e:dc:69:53:1d:1a:25:c4:
         e9:96:f3:a4:b1:6b:8d:2e:5c:de:25:ec:63:7b:bf:4a:6b:c5:
         35:8f:32:08:87:42:f9:b3:8b:54:1b:fa:4a:5a:b3:96:40:6a:
         78:39:8a:e2:90:2f:3f:ac:10:54:48:c5:b6:da:11:97:7a:30:
         38:66:78:6d:f6:85:0b:76:7b:79:cc:c5:e0:03:90:cb:05:75:
         e1:63:27:b9:c5:16:bd:d9:86:1c:16:06:8d:11:4d:ec:99:0c:
         94:6b:07:53:bd:42:cd:b0:d3:ed:23:f1:70:45:75:48:39:1b:
         2a:15:af:b1:a2:7d:7d:0d:24:18:b5:d1:f7:fa:dd:56:31:88:
         c9:85:a4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----