Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/iQMcW3n7AW99XdjWkQiMSV4UYgBnRZZzjbovJ42zmf6/0/0C3786D50EAF50026A0616BFD02BE7B203759EE6.mft
File:                     0C3786D50EAF50026A0616BFD02BE7B203759EE6.mft (raw, json)
Hash identifier:          qq+vR9c+XLNZLORu7f9JJ8nds+Ovzzp9woCJkbPmyPE=
Subject key identifier:   C3:EA:23:22:52:86:86:AF:ED:C1:C5:16:94:01:E2:D3:85:30:3E:03
Authority key identifier: 0C:37:86:D5:0E:AF:50:02:6A:06:16:BF:D0:2B:E7:B2:03:75:9E:E6
Certificate issuer:       /CN=0C3786D50EAF50026A0616BFD02BE7B203759EE6
Certificate serial:       11F3FE7E5612470123A2AEFB81C1A66C23EC6C67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C3786D50EAF50026A0616BFD02BE7B203759EE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/iQMcW3n7AW99XdjWkQiMSV4UYgBnRZZzjbovJ42zmf6/0/0C3786D50EAF50026A0616BFD02BE7B203759EE6.mft
Manifest number:          02
Signing time:             Tue 25 Apr 2023 17:56:23 +0000
Manifest this update:     Tue 25 Apr 2023 17:51:23 +0000
Manifest next update:     Wed 26 Apr 2023 19:17:23 +0000
Files and hashes:         1: 323830343a373761303a3a2f33322d3634203d3e20323731313535.roa (hash: 1qHt/l4b0SF5osJNEhfS5ChbHYFOWSlOgMIrRWtui90=)
                          2: 0C3786D50EAF50026A0616BFD02BE7B203759EE6.crl (hash: gu/F9Ue1gRU4SeGCFY+xk96bzVAqlnmpaF47VbksV+I=)
                          3: 3137372e38372e3234382e302f32332d3234203d3e20323731313535.roa (hash: vujuoRjO6Z4HBPI/VSog9kyjPhgMmvS4r9X3LRDsfss=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f3:fe:7e:56:12:47:01:23:a2:ae:fb:81:c1:a6:6c:23:ec:6c:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C3786D50EAF50026A0616BFD02BE7B203759EE6
        Validity
            Not Before: Apr 25 17:51:23 2023 GMT
            Not After : Apr 26 19:17:23 2023 GMT
        Subject: CN=C3EA2322528686AFEDC1C5169401E2D385303E03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0a:9b:4a:07:d1:a1:d6:a5:86:d8:79:96:b6:
                    c7:5f:f3:59:fe:7d:25:3f:89:46:16:eb:01:02:8b:
                    d6:c9:0a:e2:25:04:05:da:0e:e9:2c:4b:73:e3:2a:
                    d0:5e:9e:80:06:44:e9:e7:d7:a1:4e:28:15:6f:b6:
                    75:5a:e6:2c:4a:6d:9a:38:fb:cf:3b:6e:1e:24:53:
                    98:c6:19:d5:9d:36:d3:a8:6f:3c:3a:33:6c:b8:cd:
                    cd:c8:0c:ba:60:99:ce:83:5f:27:77:57:d7:ce:75:
                    d4:8a:98:b1:bd:18:11:0c:e0:a7:f0:70:bd:bc:71:
                    cc:ed:b9:69:fd:0a:8e:f6:84:06:47:1c:e7:47:66:
                    1b:f5:24:41:9f:ef:b5:7a:8c:78:4c:58:d3:67:8e:
                    f9:ee:c7:c7:11:fb:de:a6:6b:3d:72:cb:69:4f:ee:
                    cb:51:86:dc:bd:7f:09:c7:98:29:f3:13:1f:90:ac:
                    96:af:33:b8:08:6d:ac:cb:5e:2e:df:28:96:57:c0:
                    61:8a:28:f4:ab:52:bb:63:0b:72:87:a5:3c:4a:24:
                    6d:a3:6c:15:52:98:89:e7:10:cc:a9:12:4a:58:8e:
                    c8:6c:18:21:21:ac:61:43:04:64:33:75:a7:4d:22:
                    b4:f8:2c:03:0c:0c:05:01:ca:42:b7:31:50:fe:db:
                    1f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:EA:23:22:52:86:86:AF:ED:C1:C5:16:94:01:E2:D3:85:30:3E:03
            X509v3 Authority Key Identifier:
                keyid:0C:37:86:D5:0E:AF:50:02:6A:06:16:BF:D0:2B:E7:B2:03:75:9E:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/iQMcW3n7AW99XdjWkQiMSV4UYgBnRZZzjbovJ42zmf6/0/0C3786D50EAF50026A0616BFD02BE7B203759EE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C3786D50EAF50026A0616BFD02BE7B203759EE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/iQMcW3n7AW99XdjWkQiMSV4UYgBnRZZzjbovJ42zmf6/0/0C3786D50EAF50026A0616BFD02BE7B203759EE6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:d1:5f:43:9b:ee:79:9c:84:85:22:48:45:15:45:cc:10:a7:
         26:10:dc:e1:0d:4e:0b:ac:21:61:30:2b:82:98:56:43:d6:4d:
         e5:f5:28:ab:f4:8b:9e:fd:f7:21:46:a8:88:9f:56:1f:5b:e3:
         f8:12:d8:20:77:47:cd:dc:63:84:33:48:bf:81:82:d9:2f:ed:
         ca:31:e0:65:a5:20:80:86:02:de:02:0c:6b:74:83:f7:44:7a:
         00:86:f0:17:8c:fb:86:76:db:08:ac:ef:f2:85:b5:88:f8:e9:
         f9:e5:c5:3d:0c:23:0f:64:c4:82:d1:44:e9:f8:87:bd:65:a0:
         62:7a:d1:47:ea:35:b6:ff:77:9c:54:fc:68:1a:ef:96:9b:98:
         33:82:c3:1f:43:74:e3:35:f7:4b:4b:ee:d7:da:f3:40:0f:91:
         50:18:3a:de:a8:c2:61:2f:ed:c7:13:0a:23:cd:8b:85:e3:0d:
         ae:5d:a0:91:ba:5e:1c:e3:97:da:d4:2b:7c:8a:80:6c:a1:2a:
         6c:2e:7b:4b:27:74:b8:ae:62:26:76:8a:42:d7:06:90:26:8c:
         67:c3:67:51:37:5c:a4:c3:d1:90:03:13:d6:50:61:ba:c3:a3:
         d1:08:f1:3b:0b:3a:bc:8d:33:a3:21:89:be:40:62:eb:5b:eb:
         5b:b9:29:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----