Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/38158ADC15C8E1413580D65A3E48E90EF3B7DC6C.mft
File:                     38158ADC15C8E1413580D65A3E48E90EF3B7DC6C.mft (raw, json)
Hash identifier:          CUvRhpGgxLRMvin9HuPi15vYb3r+FzTJcQllnFH07Kg=
Subject key identifier:   C2:7D:BB:5D:6D:C0:41:08:B9:62:3C:05:3C:A1:89:2B:AE:91:64:61
Authority key identifier: 38:15:8A:DC:15:C8:E1:41:35:80:D6:5A:3E:48:E9:0E:F3:B7:DC:6C
Certificate issuer:       /CN=38158ADC15C8E1413580D65A3E48E90EF3B7DC6C
Certificate serial:       303BD693FADBC32E6B616B7919B5B8128AC2745E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38158ADC15C8E1413580D65A3E48E90EF3B7DC6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/38158ADC15C8E1413580D65A3E48E90EF3B7DC6C.mft
Manifest number:          2D
Signing time:             Mon 08 May 2023 09:10:49 +0000
Manifest this update:     Mon 08 May 2023 09:05:49 +0000
Manifest next update:     Tue 09 May 2023 11:11:49 +0000
Files and hashes:         1: 3137372e37332e32342e302f32312d3231203d3e203532363835.roa (hash: b0IDkRuIi+JU6s2dh2H7i5uNEAhGguTlKHzkaRk792A=)
                          2: 38158ADC15C8E1413580D65A3E48E90EF3B7DC6C.crl (hash: xZ7w4+WgKlLR/9EEC8Zctm9IGmEsQenZDGr4c6QwD4Q=)
                          3: 323830343a6333383a3a2f33322d3332203d3e203532363835.roa (hash: VqR2M/hIKb6rLJ18z3Sx5QzC3oji4/PJ95qUh8hUpNs=)
                          4: 3137372e37332e32342e302f32332d3233203d3e203532363835.roa (hash: 6KkdBezukUhTdiUvQCK2SfOaKHXoP6zrOzwYzOk5h5U=)
                          5: 3137372e3133362e3230382e302f32312d3231203d3e203532363835.roa (hash: wA5pHNHzApthnWaxy3cYpV4CNJr3yTfUmvEqd57uq+Q=)
                          6: 3137372e37332e32382e302f32332d3233203d3e203532363835.roa (hash: HxDVZOLAvWGTSi0mZF9fXDPqPj0D9zvs4C6Y7yCqRUA=)
                          7: 3137372e3133362e3230382e302f32322d3232203d3e203532363835.roa (hash: OXRA/MAKcbBk9mXs9vx4lYF3fN6yeC5p6BMDCMxVmO0=)
                          8: 3137372e37332e33312e302f32342d3234203d3e203532363835.roa (hash: wqSAi3hi4gcqH5kbFeOvTPSo8N9UohgqXtYkiwOxrU4=)
                          9: 3137372e3133362e3231322e302f32332d3233203d3e203532363835.roa (hash: xYh7J/QfhPQJ0pGVtZisY2ThjR5/aeKbBFzY64l4nu8=)
                          10: 3137372e37332e32342e302f32322d3232203d3e203532363835.roa (hash: 2Mh7qWzvr/iwYzn+1ptcFI/POFqkBRkG0gMqHjVrRTk=)
                          11: 3137372e37332e32392e302f32342d3234203d3e203532363835.roa (hash: r7AMCAkanTD9YP1MG6OuV/1wkgw3muBYoIurw/76KGQ=)
                          12: 3137372e37332e32382e302f32322d3232203d3e203532363835.roa (hash: yO0MPlBGMZa7EKj+sUxDW807l6GqK2BspFcsC6MjgXE=)
                          13: 3137372e37332e32362e302f32342d3234203d3e203532363835.roa (hash: w16d3X5eY2YnRxNbmD+UiI3pSEAIsrnw1RKLibfa+ZA=)
                          14: 3137372e3133362e3231302e302f32332d3233203d3e203532363835.roa (hash: nGPA9XpvSCa69Az+WL+R21l6fI9qh12QcDomcuBQRK4=)
                          15: 3137372e3133362e3230382e302f32332d3233203d3e203532363835.roa (hash: /MFHBui0uro7GRoGTSeyKCAXi04D2eb4UCAfXKqCibo=)
                          16: 3137372e3133362e3231342e302f32332d3233203d3e203532363835.roa (hash: zpcdh4S/XQXQselkEsFy9+lE4djXGFuZCwRt2oKDf6M=)
                          17: 3137372e37332e33302e302f32332d3233203d3e203532363835.roa (hash: 7myW+Fqe+uTec887clAxvP93cs1NNYHifmbsa5o1HOg=)
                          18: 3137372e3133362e3231322e302f32322d3232203d3e203532363835.roa (hash: 3ShjQgoNGC6ymmtazAfyK3ywlbjWUktu3kbNb8DPNew=)
                          19: 3137372e37332e32362e302f32332d3233203d3e203532363835.roa (hash: nnwOVcnQPrwr+Esy/7UNyfO9fJ8cx4UzkQpcQkC07yc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:3b:d6:93:fa:db:c3:2e:6b:61:6b:79:19:b5:b8:12:8a:c2:74:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38158ADC15C8E1413580D65A3E48E90EF3B7DC6C
        Validity
            Not Before: May  8 09:05:49 2023 GMT
            Not After : May  9 11:11:49 2023 GMT
        Subject: CN=C27DBB5D6DC04108B9623C053CA1892BAE916461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:30:6e:71:cb:3c:51:6b:bf:49:a5:bb:3f:90:
                    12:2c:02:2d:74:a0:44:9d:5e:56:62:f3:1b:d8:5d:
                    0a:0c:f6:2b:49:99:90:a1:9e:66:bb:52:6a:a5:37:
                    b7:68:16:fe:62:b2:73:fb:a7:57:6c:01:68:56:03:
                    fd:d9:f7:5a:e7:94:c5:fe:4d:5d:92:2d:77:82:2d:
                    20:8f:e1:42:61:09:53:0c:26:a3:de:71:cc:01:c1:
                    f8:30:ee:fd:21:0b:b4:ff:91:4f:d0:de:ea:15:1a:
                    43:7d:46:fc:de:86:bb:27:9f:de:63:b8:56:65:69:
                    40:5c:b2:07:4e:0f:0a:b9:15:c5:69:67:b9:22:02:
                    73:3b:ba:cd:b1:d1:94:8b:fb:3c:26:53:15:c0:8f:
                    00:20:87:f8:73:74:cb:c9:89:d5:35:79:01:eb:b3:
                    6d:df:df:ac:46:8f:93:d7:cc:f4:70:85:d3:a5:e7:
                    e7:85:a9:5d:26:26:69:1b:35:74:24:79:c6:e5:93:
                    fe:2f:27:ee:a9:95:ad:43:eb:06:63:18:aa:5d:ad:
                    c2:0e:63:bb:55:d6:3d:39:18:09:6e:81:12:7b:64:
                    4a:f3:05:10:27:f9:92:6d:ec:c8:93:96:40:a5:de:
                    e5:52:36:c3:d4:75:e6:02:51:ef:9b:82:d1:3d:01:
                    c4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7D:BB:5D:6D:C0:41:08:B9:62:3C:05:3C:A1:89:2B:AE:91:64:61
            X509v3 Authority Key Identifier:
                keyid:38:15:8A:DC:15:C8:E1:41:35:80:D6:5A:3E:48:E9:0E:F3:B7:DC:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/38158ADC15C8E1413580D65A3E48E90EF3B7DC6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38158ADC15C8E1413580D65A3E48E90EF3B7DC6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/38158ADC15C8E1413580D65A3E48E90EF3B7DC6C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:29:6a:d5:29:d9:7e:5c:55:4e:21:46:9d:82:b9:75:45:1f:
         8b:6e:4e:09:1c:49:42:5c:5e:e6:94:e0:64:1a:b4:4b:f7:0f:
         1a:1e:04:7e:4d:4f:9c:9c:34:da:18:fa:7d:e5:fa:9f:e5:de:
         20:b9:f6:a2:d1:75:9e:12:1f:c6:52:91:6e:b6:74:63:cc:52:
         28:33:46:3e:93:64:f7:51:ed:d9:39:38:a2:79:71:70:63:c9:
         83:7e:10:0a:48:66:4e:f0:b3:21:b0:9b:93:a4:54:1d:22:7a:
         ef:0f:5c:18:1b:7e:26:80:83:b4:4a:39:e3:9a:bb:5a:2f:35:
         d7:98:ca:3c:14:e2:dc:b9:ae:0b:b3:66:45:04:1b:e8:7a:39:
         d6:68:98:c3:4b:80:88:57:f6:47:bc:d5:8b:2a:25:2b:9d:3c:
         92:b1:dc:01:45:60:0a:a0:3a:c0:27:59:27:09:ad:7e:ce:f1:
         f7:f7:da:33:06:0b:6c:84:e9:69:63:15:6d:e9:3b:04:23:f3:
         4b:1c:1a:17:83:ee:2c:3f:f3:9f:c1:da:7d:4e:7c:b3:36:83:
         04:fa:cd:40:a4:38:5c:88:68:6b:1f:43:e4:45:1d:0a:b9:b5:
         bb:e6:2b:93:13:1b:d2:b3:2f:4f:ca:98:58:93:85:a9:67:94:
         06:ba:ee:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----