Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/0/367BE2B7678F9D822A47BBA42220B9EB8BE8F4C9.mft
File:                     367BE2B7678F9D822A47BBA42220B9EB8BE8F4C9.mft (raw, json)
Hash identifier:          vJuFHNnpt2vt8Xs+pT9KSW1MpY1BQglk7qhHGKZ8Yyo=
Subject key identifier:   3D:C2:3A:C6:43:B9:04:A6:48:1B:D2:0F:50:DA:AD:3E:D3:C8:94:C5
Authority key identifier: 36:7B:E2:B7:67:8F:9D:82:2A:47:BB:A4:22:20:B9:EB:8B:E8:F4:C9
Certificate issuer:       /CN=367BE2B7678F9D822A47BBA42220B9EB8BE8F4C9
Certificate serial:       68CFA7B204F04C1CBCBC41A91E633E2702255C1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/367BE2B7678F9D822A47BBA42220B9EB8BE8F4C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/0/367BE2B7678F9D822A47BBA42220B9EB8BE8F4C9.mft
Manifest number:          04
Signing time:             Thu 06 Jul 2023 10:22:43 +0000
Manifest this update:     Thu 06 Jul 2023 10:17:43 +0000
Manifest next update:     Fri 07 Jul 2023 13:09:43 +0000
Files and hashes:         1: 367BE2B7678F9D822A47BBA42220B9EB8BE8F4C9.crl (hash: uOTqlbAQPK9rSYlP0YNcSrFO1tdpDhGn9spjfqi6jtg=)
                          2: 3134332e3230382e39322e302f32322d3332203d3e20323635313232.roa (hash: ObgoJhoe+qYPTMSTMG4mfP1CYQMB6Clg3iz0M/93GOI=)
                          3: 323830343a326164383a3a2f33322d313238203d3e20323635313232.roa (hash: actU8pAe56YMWAaz2pxG4HMsZQp+9f5++IgDxKWpM6M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:cf:a7:b2:04:f0:4c:1c:bc:bc:41:a9:1e:63:3e:27:02:25:5c:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367BE2B7678F9D822A47BBA42220B9EB8BE8F4C9
        Validity
            Not Before: Jul  6 10:17:43 2023 GMT
            Not After : Jul  7 13:09:43 2023 GMT
        Subject: CN=3DC23AC643B904A6481BD20F50DAAD3ED3C894C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6f:39:45:b6:f1:c6:11:b3:41:f0:5c:9b:41:
                    d4:bf:f9:89:cb:ab:33:91:e2:e2:79:55:cd:3f:6c:
                    34:32:36:56:da:8a:a4:46:34:52:54:a2:8a:d6:7c:
                    12:65:f8:0c:a5:b8:12:1e:2b:22:0b:a7:63:67:32:
                    d9:8d:e3:37:b3:3f:b0:9a:26:3e:aa:5d:64:6e:47:
                    7d:f2:3d:03:43:99:b5:21:72:aa:c8:5e:c1:85:1e:
                    e9:ec:cf:e2:a6:63:ea:15:cc:89:fe:79:89:fa:22:
                    8b:99:b8:ee:c1:06:79:2e:e4:8f:bb:8d:1e:c0:80:
                    fb:bb:0e:a3:d3:b3:86:15:9d:c6:50:74:5b:2d:3d:
                    67:68:47:92:5d:31:3c:14:67:c0:6d:d7:a8:87:4a:
                    d8:b2:9d:f1:02:08:82:56:63:0b:46:87:1d:21:03:
                    c3:27:92:7f:e1:d9:4b:0a:a1:a5:d7:99:5f:23:4e:
                    30:f0:e6:ad:e2:be:40:6e:30:ee:7a:9a:e9:b1:1b:
                    9f:dc:48:7b:6a:f6:9a:aa:4f:24:9d:7c:f6:47:2a:
                    4b:5c:78:d3:46:31:02:03:95:4c:34:52:8c:a0:53:
                    3b:94:cd:07:e9:62:3c:4b:14:9c:4b:fa:e8:a6:ad:
                    e1:28:da:00:8a:d1:34:53:d0:94:1c:61:d5:a2:43:
                    d2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C2:3A:C6:43:B9:04:A6:48:1B:D2:0F:50:DA:AD:3E:D3:C8:94:C5
            X509v3 Authority Key Identifier:
                keyid:36:7B:E2:B7:67:8F:9D:82:2A:47:BB:A4:22:20:B9:EB:8B:E8:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/0/367BE2B7678F9D822A47BBA42220B9EB8BE8F4C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/367BE2B7678F9D822A47BBA42220B9EB8BE8F4C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/0/367BE2B7678F9D822A47BBA42220B9EB8BE8F4C9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:6a:e4:37:e5:0d:88:7e:ed:43:7d:91:46:54:cb:75:7a:70:
         a2:54:4d:d4:9d:8d:71:f0:0b:cb:d8:00:8f:4b:10:0e:b0:f5:
         26:00:13:1a:35:d2:91:79:7a:b4:65:84:f8:c8:97:d7:4c:79:
         c4:ae:12:fb:a7:62:10:0e:7e:cb:de:28:96:93:c1:6e:8c:5b:
         3f:0a:8d:e1:33:1f:47:62:79:51:88:69:91:78:c4:e0:97:9b:
         3f:b3:5b:ed:14:7f:e2:89:33:f5:25:e2:e0:32:8e:a2:9c:70:
         6a:ea:47:52:2c:1d:4b:a7:3b:c2:cf:6d:95:ff:a1:a3:6f:b6:
         3b:bc:b3:d3:91:4b:df:76:1e:60:77:51:6b:73:1d:bf:01:51:
         31:69:39:a0:03:c3:6a:0d:a9:ed:f9:0e:5b:73:e9:9b:b8:9a:
         fe:7b:0c:8a:19:51:aa:af:47:19:30:b1:3e:1f:22:26:5b:d4:
         63:4c:0c:56:85:bc:92:06:36:d7:fd:4a:ed:de:8f:0c:53:6b:
         6c:f8:a2:31:cf:a4:e6:32:e2:82:57:f4:6d:c8:45:df:a7:db:
         fe:01:ca:31:f6:9c:44:f2:84:2d:9d:0c:89:5a:33:7c:1d:62:
         25:ce:67:81:93:4e:52:7b:5f:25:71:96:c3:72:34:eb:1b:53:
         f8:99:64:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----