Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Bu7gL29tZj8GwX8KDWYb3cmuuSm3TkJCAs4ojfbaQcBE/0/2FE3B3CC4B39550DB1B02D4AF1ACF5461BC71ADD.mft
File:                     2FE3B3CC4B39550DB1B02D4AF1ACF5461BC71ADD.mft (raw, json)
Hash identifier:          CCsHdd/LDhBJJ0dCMoCdHwaCO6/NhcPgfUXEBEQOctE=
Subject key identifier:   0D:B1:56:D6:01:70:EF:D6:42:B4:4E:11:AB:45:78:8D:3D:4D:B4:DA
Authority key identifier: 2F:E3:B3:CC:4B:39:55:0D:B1:B0:2D:4A:F1:AC:F5:46:1B:C7:1A:DD
Certificate issuer:       /CN=2FE3B3CC4B39550DB1B02D4AF1ACF5461BC71ADD
Certificate serial:       036EF52BC80E143C459B6EF694C0D8F127354020
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FE3B3CC4B39550DB1B02D4AF1ACF5461BC71ADD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bu7gL29tZj8GwX8KDWYb3cmuuSm3TkJCAs4ojfbaQcBE/0/2FE3B3CC4B39550DB1B02D4AF1ACF5461BC71ADD.mft
Manifest number:          0113
Signing time:             Fri 03 Nov 2023 03:07:29 +0000
Manifest this update:     Fri 03 Nov 2023 03:02:29 +0000
Manifest next update:     Sat 04 Nov 2023 05:35:29 +0000
Files and hashes:         1: 2FE3B3CC4B39550DB1B02D4AF1ACF5461BC71ADD.crl (hash: roLGSYwjPvdUdaT2ZwcrTuCmlc5GpJbOE2M0J1KWYdA=)
                          2: 34352e3136322e382e302f32322d3234203d3e20323638343835.roa (hash: lZasriB8pRHI8w7OoH3FhFvs1pyKDF79OnqAQxzuQ+o=)
                          3: 323830343a353165633a3a2f33322d3336203d3e20323638343835.roa (hash: PzVYyfbxWAUIxWdZMnYbcU8GSj1MFhcNitR63/WBlwU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:6e:f5:2b:c8:0e:14:3c:45:9b:6e:f6:94:c0:d8:f1:27:35:40:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FE3B3CC4B39550DB1B02D4AF1ACF5461BC71ADD
        Validity
            Not Before: Nov  3 03:02:29 2023 GMT
            Not After : Nov  4 05:35:29 2023 GMT
        Subject: CN=0DB156D60170EFD642B44E11AB45788D3D4DB4DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f8:80:b0:6a:2a:63:6a:5f:8a:a3:d7:6e:f4:
                    6f:4f:7c:5f:c1:4c:6a:33:7b:b7:10:36:26:d8:ad:
                    ea:f1:32:f1:54:c9:27:d1:09:0c:31:28:3a:0e:e0:
                    b4:c3:75:c3:21:76:ac:1e:7e:b3:11:eb:d9:a0:60:
                    f6:e8:8f:cb:e9:18:7f:2d:cb:ef:74:08:ec:96:fb:
                    19:2c:c3:4d:1b:36:be:4e:a9:04:ca:52:87:93:d4:
                    7b:fb:94:50:d8:61:9d:92:81:a7:a8:b2:9c:ee:81:
                    09:37:2c:26:39:3e:83:1f:66:fc:e2:7e:44:93:88:
                    50:c5:68:c3:90:1e:28:9d:dc:35:cf:95:9c:d3:ee:
                    33:a2:63:3b:cb:de:47:01:8b:2f:2f:af:0a:91:15:
                    ec:c7:4e:93:ca:62:cf:e5:ac:f1:bd:0a:8e:d1:9e:
                    e9:fc:e2:83:70:13:1f:18:e9:e6:58:10:9a:ea:ac:
                    b2:14:b0:49:29:ac:79:6d:2e:c5:e8:6c:e2:57:a4:
                    72:dd:f0:85:60:06:af:c7:92:fa:6b:a2:b1:e7:49:
                    61:ac:fd:78:1e:f9:b7:a3:9f:a9:db:55:a9:91:07:
                    c1:08:89:22:43:bc:80:eb:30:36:98:ae:5c:c7:f9:
                    2c:4e:92:14:3b:6c:4b:6d:57:a0:49:aa:40:bd:26:
                    c4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B1:56:D6:01:70:EF:D6:42:B4:4E:11:AB:45:78:8D:3D:4D:B4:DA
            X509v3 Authority Key Identifier:
                keyid:2F:E3:B3:CC:4B:39:55:0D:B1:B0:2D:4A:F1:AC:F5:46:1B:C7:1A:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bu7gL29tZj8GwX8KDWYb3cmuuSm3TkJCAs4ojfbaQcBE/0/2FE3B3CC4B39550DB1B02D4AF1ACF5461BC71ADD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FE3B3CC4B39550DB1B02D4AF1ACF5461BC71ADD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bu7gL29tZj8GwX8KDWYb3cmuuSm3TkJCAs4ojfbaQcBE/0/2FE3B3CC4B39550DB1B02D4AF1ACF5461BC71ADD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:a6:3b:96:fb:cd:16:b8:78:42:2f:c5:05:30:f8:af:b4:e8:
         e3:03:9d:b9:7f:9c:3c:bb:cc:75:75:6c:f9:79:7a:f9:7f:1e:
         7a:21:fe:17:c2:57:24:e7:4a:83:40:d6:61:6a:b2:9c:59:92:
         fa:95:27:d6:52:17:62:92:95:32:4a:da:e4:16:a6:b7:b1:74:
         af:a3:3a:f6:0c:af:e9:f8:5d:3f:26:7d:bc:05:b4:a1:58:06:
         72:28:10:50:98:f5:8f:54:17:5b:b3:84:d0:f0:e9:4f:98:51:
         94:ad:73:f4:98:cb:b6:9b:c5:92:cf:06:15:f4:6f:21:af:53:
         03:4b:dd:3f:ce:e5:c6:d7:a1:6a:d8:50:76:e9:26:1f:ce:5b:
         10:01:4b:65:fd:0f:95:d5:93:e1:a0:09:27:dd:17:b9:25:61:
         20:98:48:13:53:1d:fd:f9:b9:b6:91:27:4f:9a:ac:f6:3b:1d:
         56:a0:b1:ef:ef:e8:13:39:66:bb:bd:b9:11:31:27:f1:b8:d1:
         80:80:bd:d9:87:c1:9f:d2:13:bc:39:9e:78:b0:cb:29:07:d6:
         d9:39:55:0d:66:12:ef:33:b6:d3:a8:e9:25:15:6f:63:bd:18:
         fc:5b:a6:ba:5c:d0:69:8f:9f:7f:43:ca:6c:ab:6b:88:c2:e2:
         69:46:2b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----