Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/BD3C6F3B1223FA6345D28272334E1F496EA34741.mft
File:                     BD3C6F3B1223FA6345D28272334E1F496EA34741.mft (raw, json)
Hash identifier:          2R17wH1Don3miCS4VnYysM6f8SnLvk4wTUBP3UGXmic=
Subject key identifier:   09:A3:24:67:10:14:79:CC:F3:61:C5:B5:54:44:9D:0F:60:2B:9E:5C
Authority key identifier: BD:3C:6F:3B:12:23:FA:63:45:D2:82:72:33:4E:1F:49:6E:A3:47:41
Certificate issuer:       /CN=BD3C6F3B1223FA6345D28272334E1F496EA34741
Certificate serial:       27747C8FB1026F7B73BA6B9EBE9AAFC69073EFC3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD3C6F3B1223FA6345D28272334E1F496EA34741.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/BD3C6F3B1223FA6345D28272334E1F496EA34741.mft
Manifest number:          1E
Signing time:             Tue 17 Sep 2024 06:53:20 +0000
Manifest this update:     Tue 17 Sep 2024 06:48:20 +0000
Manifest next update:     Wed 18 Sep 2024 08:42:20 +0000
Files and hashes:         1: BD3C6F3B1223FA6345D28272334E1F496EA34741.crl (hash: LRBpcuZU5LMrqlXGjEG0Gr+pEN5N/LR/AUUCmjApKB4=)
                          2: 34352e3233362e31302e302f32342d3234203d3e20323638323133.roa (hash: 72D2sKjedPnAV3cOWM+BeZCuuO2EwhQnStC+Xj+YKGM=)
                          3: 323830343a346462303a3a2f33322d3332203d3e20323638323133.roa (hash: q3dFYwpOJlOFd7sJrm/Afgd4lDVnnjK2VzWavjfAbOc=)
                          4: 34352e3233362e382e302f32342d3234203d3e20323638323133.roa (hash: NSij1b1nUSx2gha/ufooe05zIpDMewFaL4O2HdmZpDs=)
                          5: 34352e3233362e392e302f32342d3234203d3e20323638323133.roa (hash: k5Gk9Ttj/zNIrVG8dk+SJ1yUHc03vfDBcnBjRKDY7z4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:74:7c:8f:b1:02:6f:7b:73:ba:6b:9e:be:9a:af:c6:90:73:ef:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD3C6F3B1223FA6345D28272334E1F496EA34741
        Validity
            Not Before: Sep 17 06:48:20 2024 GMT
            Not After : Sep 18 08:42:20 2024 GMT
        Subject: CN=09A32467101479CCF361C5B554449D0F602B9E5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6e:2c:3e:f2:af:2b:a7:53:51:2e:71:fd:46:
                    26:76:a0:5c:fb:5b:8e:e8:2b:08:a6:2e:2e:f2:79:
                    68:51:e1:88:93:40:9a:e1:e8:ed:18:6e:1e:e5:1c:
                    c9:d7:1f:d4:df:6b:92:cf:78:3d:39:ed:1b:05:a0:
                    2c:89:40:2b:d1:ea:45:1f:0d:f8:08:af:54:08:36:
                    de:53:54:40:7a:bc:b4:03:2a:9c:d2:34:4b:2b:4d:
                    52:67:3d:41:0e:84:70:1d:93:d4:2b:09:67:f1:e8:
                    7f:29:67:a2:7c:ed:b2:e7:a6:f5:23:fb:62:e1:cd:
                    ab:69:c0:ed:80:11:f0:e7:9b:77:b8:22:3f:a3:cd:
                    40:ef:ea:84:42:c5:d2:cd:74:a1:d8:47:6e:b1:95:
                    8a:a4:ff:51:e6:07:76:8e:06:c8:83:73:b4:1a:f4:
                    1f:5e:0c:71:3a:bb:32:6b:a5:3d:04:b9:f0:c7:d0:
                    98:86:46:7d:68:76:bd:b5:1f:3e:ed:8c:de:f0:56:
                    40:4b:db:01:d3:bc:81:bb:71:13:8d:06:db:7a:41:
                    72:d6:ab:e7:c9:e3:19:7d:97:a1:e6:31:68:f4:11:
                    8f:50:6a:72:fd:c6:e5:81:ee:f1:c7:35:0a:da:3f:
                    4d:5f:1b:67:2e:f6:f5:7d:ca:bf:e4:27:d9:86:86:
                    68:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A3:24:67:10:14:79:CC:F3:61:C5:B5:54:44:9D:0F:60:2B:9E:5C
            X509v3 Authority Key Identifier:
                keyid:BD:3C:6F:3B:12:23:FA:63:45:D2:82:72:33:4E:1F:49:6E:A3:47:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/BD3C6F3B1223FA6345D28272334E1F496EA34741.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD3C6F3B1223FA6345D28272334E1F496EA34741.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/BD3C6F3B1223FA6345D28272334E1F496EA34741.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:6d:62:44:1e:2a:ee:a7:71:a0:1e:e5:37:f4:33:c6:aa:37:
         fe:1e:e9:c0:9f:33:e3:23:92:7e:2a:27:ba:6b:33:b0:92:2e:
         d1:d7:c8:7d:4c:7e:b0:30:29:12:9d:5d:35:14:d8:a1:75:ed:
         88:46:7a:f2:7a:b6:f8:95:e7:2f:7c:a8:7c:76:b1:bc:99:f6:
         f0:86:3e:a7:5e:9d:74:30:15:0d:fb:8d:3e:e1:10:69:25:00:
         ef:8e:e3:cf:04:ca:ef:34:8d:02:c1:53:08:21:7e:90:12:cb:
         6c:41:23:59:a6:02:3d:18:6a:b2:3b:67:03:25:fe:c4:22:b6:
         88:d5:d0:e8:bf:be:12:9c:cf:2e:7c:42:4a:d8:9c:73:c5:e2:
         d2:fe:d1:4d:ff:06:49:0d:b2:30:e8:2c:ee:4c:62:1e:06:71:
         f0:a6:39:de:4e:a5:85:68:06:70:73:3a:8e:c8:83:54:9e:1f:
         30:eb:0a:72:01:94:22:11:dc:1c:b6:ad:66:d8:e7:e7:d5:e8:
         41:ea:8f:b2:60:b1:e3:51:3a:f4:5d:8b:97:a9:8b:c0:55:fb:
         df:cb:c2:11:cf:43:b8:da:3c:ec:0a:4b:94:43:2e:69:5a:e7:
         8a:c5:a0:61:1f:58:cc:48:d9:79:90:17:fc:07:5b:b4:43:21:
         9a:cb:74:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----