Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/0/3A120A308B3DB51C52A4F4C0A374481656D3FA1B.mft
File:                     3A120A308B3DB51C52A4F4C0A374481656D3FA1B.mft (raw, json)
Hash identifier:          1aBvFb+xg14upE1g/W63ywW3YQg+h2s2e2v8SgZhOMI=
Subject key identifier:   32:63:F3:B7:A9:AB:59:9E:A9:73:D7:8C:2D:44:F7:E0:C6:4A:B5:48
Authority key identifier: 3A:12:0A:30:8B:3D:B5:1C:52:A4:F4:C0:A3:74:48:16:56:D3:FA:1B
Certificate issuer:       /CN=3A120A308B3DB51C52A4F4C0A374481656D3FA1B
Certificate serial:       716093AE4E8F9B7F48F9E64E16FEBF729171B5CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3A120A308B3DB51C52A4F4C0A374481656D3FA1B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/0/3A120A308B3DB51C52A4F4C0A374481656D3FA1B.mft
Manifest number:          0350
Signing time:             Mon 15 Apr 2024 01:18:41 +0000
Manifest this update:     Mon 15 Apr 2024 01:13:40 +0000
Manifest next update:     Tue 16 Apr 2024 03:16:40 +0000
Files and hashes:         1: 3A120A308B3DB51C52A4F4C0A374481656D3FA1B.crl (hash: CUSJ4bAu9sjUITPLEUKARvBSazm4iqOqPz8Exd646pY=)
                          2: 34352e3139312e3234302e302f32322d3234203d3e20323730323430.roa (hash: 9VSLXzLwYS5zLeM+p1D/D/3Gt1X+eaFI/9btaK+e2Ho=)
                          3: 323830343a363866383a3a2f33322d3438203d3e20323730323430.roa (hash: UY4KynMsFPjPWiackF78y/k+/uc6yyrAs44ZzaqLKzk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:60:93:ae:4e:8f:9b:7f:48:f9:e6:4e:16:fe:bf:72:91:71:b5:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A120A308B3DB51C52A4F4C0A374481656D3FA1B
        Validity
            Not Before: Apr 15 01:13:40 2024 GMT
            Not After : Apr 16 03:16:40 2024 GMT
        Subject: CN=3263F3B7A9AB599EA973D78C2D44F7E0C64AB548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e1:51:ef:31:82:91:08:61:66:65:4e:fa:8d:
                    5d:b9:f2:08:36:43:e2:f4:a9:a8:48:c6:21:2c:5d:
                    e0:63:7b:ae:23:db:81:96:e8:d6:28:fa:c4:16:9c:
                    4b:48:48:c5:4b:42:8a:5b:ee:bf:ff:cf:62:63:84:
                    bd:ba:c0:7f:07:95:03:9a:d7:15:0a:2b:29:09:1d:
                    ff:f9:bb:77:da:ce:42:a2:27:dd:c0:9d:2f:51:35:
                    65:9a:3a:ca:8d:e5:fa:fa:bc:5b:7e:61:2e:ae:f6:
                    7c:8f:dd:1c:03:8e:eb:f8:cc:7b:07:cf:fc:99:2c:
                    ab:bf:34:92:b3:32:14:2e:f7:4e:18:55:e8:d6:67:
                    3a:86:23:d7:31:32:f3:56:f6:14:18:44:30:c8:ff:
                    2d:8d:56:02:c6:63:77:d5:1f:57:5b:4a:eb:a9:91:
                    e1:7a:0d:cf:2b:8f:e8:fa:86:41:a3:26:f1:ab:8c:
                    26:b2:9e:bb:7f:a4:8b:44:71:77:cc:b1:64:f2:7f:
                    cd:51:22:97:b1:b6:7d:a9:47:f5:d7:c6:0f:0a:5b:
                    89:02:f8:4c:fb:1b:07:a0:cf:7e:6d:b0:a2:1c:e5:
                    eb:60:96:14:20:8e:85:6b:b5:b3:4b:ea:b3:d3:70:
                    90:1b:cd:19:96:4a:07:1d:68:12:4f:1e:05:0c:b6:
                    75:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:63:F3:B7:A9:AB:59:9E:A9:73:D7:8C:2D:44:F7:E0:C6:4A:B5:48
            X509v3 Authority Key Identifier:
                keyid:3A:12:0A:30:8B:3D:B5:1C:52:A4:F4:C0:A3:74:48:16:56:D3:FA:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/0/3A120A308B3DB51C52A4F4C0A374481656D3FA1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3A120A308B3DB51C52A4F4C0A374481656D3FA1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/0/3A120A308B3DB51C52A4F4C0A374481656D3FA1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:27:e7:23:94:4e:35:77:bd:4b:a7:fb:0c:80:0b:36:fd:c3:
         de:b4:a7:90:f9:71:4a:3f:f8:e1:1a:55:84:9e:a9:70:10:fd:
         cb:54:5f:37:9c:06:e8:86:e7:bb:44:94:28:2f:68:16:20:f7:
         bd:85:53:e7:31:3c:7c:09:49:08:a8:8b:77:b7:c0:7a:8d:c6:
         ed:28:46:f2:12:15:fe:84:52:b9:6a:eb:11:d9:bd:5b:a4:c0:
         8d:71:d5:f5:a4:78:59:49:b5:cb:73:dc:5c:e6:49:fb:6d:b7:
         7a:7f:5a:e8:8c:bd:f1:54:ba:84:cd:38:c6:f3:a5:8e:5a:e3:
         59:59:02:8a:70:e4:05:83:27:fd:04:6e:c1:17:cd:8d:c4:dc:
         92:da:f6:aa:41:b3:63:7d:cf:ec:eb:45:5f:ad:01:b9:c4:49:
         d5:3d:e0:2b:89:dc:17:1a:8d:0d:c8:8a:ef:57:ac:ae:2b:2e:
         45:b3:3d:b1:0f:23:00:36:81:d5:7c:13:14:90:bb:34:af:c7:
         23:d1:95:78:ad:5d:42:02:95:80:64:eb:d5:f3:cb:07:61:06:
         d8:10:ea:ac:95:7a:b4:cf:84:02:aa:d6:5a:91:8b:bd:7d:85:
         5c:82:85:66:84:49:68:79:64:a6:58:59:94:03:15:3e:9f:ec:
         1b:15:4a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----