Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/FF3604A2C2389DC8A85ED0D2BD885B96AE59B60B.mft
File:                     FF3604A2C2389DC8A85ED0D2BD885B96AE59B60B.mft (raw, json)
Hash identifier:          Y03osYJvoj28MIjV7xUzMX8OXFMtAMq6mjLZevvxTnQ=
Subject key identifier:   2C:3B:24:98:FD:3B:9D:40:C3:F0:A4:56:40:A7:18:DD:9B:84:35:0D
Authority key identifier: FF:36:04:A2:C2:38:9D:C8:A8:5E:D0:D2:BD:88:5B:96:AE:59:B6:0B
Certificate issuer:       /CN=FF3604A2C2389DC8A85ED0D2BD885B96AE59B60B
Certificate serial:       0F9E02E0E59D38977BD84F24047F281C8FA15F11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF3604A2C2389DC8A85ED0D2BD885B96AE59B60B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/FF3604A2C2389DC8A85ED0D2BD885B96AE59B60B.mft
Manifest number:          28
Signing time:             Tue 17 Sep 2024 23:07:36 +0000
Manifest this update:     Tue 17 Sep 2024 23:02:36 +0000
Manifest next update:     Thu 19 Sep 2024 00:29:36 +0000
Files and hashes:         1: 323830343a386235633a383030303a3a2f33342d3334203d3e20323733373238.roa (hash: oHC+rnXWtFPMO+MT2eVDeKOqnqYDVJltOH6CXY8HX/s=)
                          2: 323830343a386235633a343030303a3a2f33342d3334203d3e20323733373238.roa (hash: I1c6aLxATH8i0Q9sLEewrdo3BZLJXuWSgPWd6iwg814=)
                          3: 323830343a386235633a3a2f33322d3332203d3e20323733373238.roa (hash: V+gdhDTwvqyN+FEWDP6qzTEjKuE7xH4DvY0EIFnzufY=)
                          4: 323830343a386235633a3a2f33342d3334203d3e20323733373238.roa (hash: YVg/l3pgq3AD55cuLSoHuRCIXxHeoIxqYc+bhUvDZCA=)
                          5: 323830343a386235633a383030303a3a2f33332d3333203d3e20323733373238.roa (hash: XSu+GNbWncXd3y8QqT8MZZDHs3PtZX4HemmQxJG4QV4=)
                          6: 323830343a386235633a3a2f33332d3333203d3e20323733373238.roa (hash: yJmyvmo5ZX1b49EhNFPI0D8FIQUpuV8LqAOUujR8wTQ=)
                          7: 323830343a386235633a633030303a3a2f33342d3334203d3e20323733373238.roa (hash: Uf4bHwPq6rHZWhgNitL1+UMGPaKgjKoiakPcOtHd6Is=)
                          8: FF3604A2C2389DC8A85ED0D2BD885B96AE59B60B.crl (hash: NOlkG94m4kNuXkJtpQA4l0aP7tlS8qbM0foc0ocHMZ4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:9e:02:e0:e5:9d:38:97:7b:d8:4f:24:04:7f:28:1c:8f:a1:5f:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF3604A2C2389DC8A85ED0D2BD885B96AE59B60B
        Validity
            Not Before: Sep 17 23:02:36 2024 GMT
            Not After : Sep 19 00:29:36 2024 GMT
        Subject: CN=2C3B2498FD3B9D40C3F0A45640A718DD9B84350D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:13:fb:2d:28:74:03:e6:ba:c6:29:e9:1b:b2:
                    bc:a2:ac:d9:25:f0:39:61:fc:d2:62:03:9e:3e:1b:
                    c2:6b:b0:78:d2:9d:ce:84:64:0c:c8:49:37:78:8b:
                    11:88:a2:07:48:dc:ca:95:17:1a:a7:a8:fa:0e:6c:
                    50:9d:4c:74:09:7f:fa:d1:56:62:32:b6:7f:33:d0:
                    c0:89:03:98:23:b2:3e:31:75:d1:35:23:a5:05:a2:
                    63:27:1a:37:c2:99:7b:81:b3:ce:9e:91:86:6b:e6:
                    16:9d:44:54:0c:99:32:ff:1b:5d:13:14:da:ea:be:
                    bc:81:90:e6:7e:d1:87:60:26:6e:eb:aa:07:57:46:
                    a8:3a:ec:b1:7d:29:81:47:25:b7:95:4d:b4:a9:ba:
                    cc:bd:99:91:70:17:8d:cf:5c:ba:86:40:40:b8:08:
                    20:8a:b6:cc:e3:21:eb:17:a5:45:73:04:22:a1:86:
                    68:4a:97:41:99:33:46:af:78:d5:8f:ef:15:29:41:
                    25:40:45:e3:1b:de:85:a4:52:77:69:af:a8:9e:9a:
                    04:f7:94:00:36:7c:e3:3b:29:97:b8:6a:10:e3:ac:
                    18:10:14:20:14:56:c3:51:4e:e2:88:52:5c:36:b7:
                    de:c4:cd:46:95:f6:46:97:89:8e:5d:92:b7:8d:22:
                    71:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:3B:24:98:FD:3B:9D:40:C3:F0:A4:56:40:A7:18:DD:9B:84:35:0D
            X509v3 Authority Key Identifier:
                keyid:FF:36:04:A2:C2:38:9D:C8:A8:5E:D0:D2:BD:88:5B:96:AE:59:B6:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/FF3604A2C2389DC8A85ED0D2BD885B96AE59B60B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF3604A2C2389DC8A85ED0D2BD885B96AE59B60B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/FF3604A2C2389DC8A85ED0D2BD885B96AE59B60B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:8c:a9:c1:f3:a4:e0:b5:65:82:68:f1:d0:2f:90:a1:f4:ff:
         42:99:25:a4:af:99:2b:24:26:a6:21:20:08:21:50:97:69:99:
         35:00:fc:88:bf:1b:32:79:af:78:1e:7f:e7:8c:85:36:79:4e:
         17:12:c4:65:37:88:f6:49:d3:b3:63:26:c0:5a:cb:00:c8:f9:
         50:95:39:b9:5d:a0:34:96:cb:0d:57:dd:d6:91:22:aa:ed:b8:
         06:4b:91:ee:91:b2:09:93:e0:cd:c3:2a:08:fc:b6:e9:9e:d6:
         34:36:33:d7:6e:5d:6f:b0:76:7b:e7:9e:83:13:0a:e0:c9:f8:
         1b:0c:6a:d3:60:27:1d:b6:27:05:27:9e:dc:56:eb:53:3b:23:
         a2:56:42:75:a3:b2:a0:d6:41:de:43:cd:8a:40:c2:f4:ce:ef:
         f0:07:f6:79:ea:69:6a:e0:c4:a2:2e:ae:03:40:7c:46:02:8d:
         87:09:ff:8a:4c:35:de:25:22:d8:d8:90:8a:87:a4:c4:22:c1:
         fa:80:e1:15:41:29:09:f7:1c:7f:d2:e1:cd:17:2f:10:3d:1f:
         de:64:2c:2b:79:45:cd:01:89:49:64:2f:e5:34:59:8a:b1:05:
         7e:39:c8:20:61:8a:de:62:4d:74:01:ea:91:9f:21:bb:e0:35:
         e6:06:92:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----