Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/0/DCEEF876280AD0F8A64408AA561950E992DBCBD8.mft
File:                     DCEEF876280AD0F8A64408AA561950E992DBCBD8.mft (raw, json)
Hash identifier:          uWRk2iGMq2axCot0N3pibtiCaXKpocLJu6nuqucPPzw=
Subject key identifier:   B3:D2:A3:22:86:FA:C4:55:CE:EC:8A:DF:8B:0E:07:45:28:86:5E:1A
Authority key identifier: DC:EE:F8:76:28:0A:D0:F8:A6:44:08:AA:56:19:50:E9:92:DB:CB:D8
Certificate issuer:       /CN=DCEEF876280AD0F8A64408AA561950E992DBCBD8
Certificate serial:       649FCD89E67E33BFF309A3A26051EADC3CDD9DE7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCEEF876280AD0F8A64408AA561950E992DBCBD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/0/DCEEF876280AD0F8A64408AA561950E992DBCBD8.mft
Manifest number:          0189
Signing time:             Sat 18 Jun 2022 00:01:21 +0000
Manifest this update:     Fri 17 Jun 2022 23:56:21 +0000
Manifest next update:     Sun 19 Jun 2022 02:13:21 +0000
Files and hashes:         1: 3136382e3139362e38302e302f32322d3234203d3e20323633353832.roa (hash: bu3TH56fXBAZhJEzJS3fnM0pQOE6pG+nacuzp1XlRlo=)
                          2: 323830343a6636303a3a2f33322d3438203d3e20323633353832.roa (hash: 6NDwDknL+HVWBVYP1+HwYwt2vWddI/jyDhaTn+UkKYw=)
                          3: 3133312e3235352e3230342e302f32322d3234203d3e20323633353832.roa (hash: nDzApUryZ4JL8syWdGzOM4bcoQM+Avo4+0GgKeXf/nw=)
                          4: DCEEF876280AD0F8A64408AA561950E992DBCBD8.crl (hash: BztbYrinxgASUYBdabXy855E8mQx0dr2uLFcb57C/WA=)
                          5: 3137392e3130392e38302e302f32312d3234203d3e20323633353832.roa (hash: xDmDQXV6iH74mWKEta91Kf/w4XwV/1OIcbhYY8ZCqQs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:9f:cd:89:e6:7e:33:bf:f3:09:a3:a2:60:51:ea:dc:3c:dd:9d:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCEEF876280AD0F8A64408AA561950E992DBCBD8
        Validity
            Not Before: Jun 17 23:56:21 2022 GMT
            Not After : Jun 19 02:13:21 2022 GMT
        Subject: CN=B3D2A32286FAC455CEEC8ADF8B0E074528865E1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:06:ae:c6:bb:09:20:9d:88:b3:f5:a5:be:de:
                    41:7e:ab:2c:c1:19:51:84:24:bf:7a:50:41:ab:9e:
                    56:4e:68:0c:ab:b6:7c:ea:0a:15:1f:40:8a:32:66:
                    42:07:6c:2c:e7:47:ef:42:ff:3c:de:01:fc:42:71:
                    c7:15:5c:08:43:36:7c:5c:3a:a9:86:a3:10:a1:e2:
                    de:ef:44:1c:50:ec:30:14:f9:cb:d5:b1:c0:f8:4f:
                    0b:00:01:28:d5:d2:d5:5e:0d:f2:a5:26:c1:c1:e9:
                    ca:47:3e:d4:0f:39:75:30:c3:b3:0d:10:9b:17:e0:
                    8e:d7:1b:8d:e9:69:8c:29:44:65:e0:03:00:27:88:
                    95:4a:0b:42:ea:64:f7:c4:b3:8b:82:80:ec:55:88:
                    89:ab:4f:59:a4:27:55:5a:59:97:a5:21:00:24:a0:
                    db:f8:60:13:ac:f4:3e:6c:79:73:0f:9d:b0:a5:7f:
                    51:15:51:1b:2b:47:cf:11:e9:f5:f3:ea:d2:c2:1c:
                    7d:e7:35:a3:c8:59:b7:ee:2f:68:d2:30:d3:12:1b:
                    b0:7a:4c:d9:1a:7f:69:b4:81:e7:48:de:2d:a8:de:
                    04:01:85:0d:69:03:59:b8:09:04:d5:8d:2a:e4:42:
                    32:47:88:e0:1f:4c:e2:0c:5b:89:25:d0:c8:61:61:
                    61:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D2:A3:22:86:FA:C4:55:CE:EC:8A:DF:8B:0E:07:45:28:86:5E:1A
            X509v3 Authority Key Identifier:
                keyid:DC:EE:F8:76:28:0A:D0:F8:A6:44:08:AA:56:19:50:E9:92:DB:CB:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/0/DCEEF876280AD0F8A64408AA561950E992DBCBD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCEEF876280AD0F8A64408AA561950E992DBCBD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/0/DCEEF876280AD0F8A64408AA561950E992DBCBD8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:ed:01:a2:a3:f5:ac:ca:57:93:04:0c:59:13:f2:bd:19:5b:
         d0:27:32:a7:db:d3:d0:81:0a:45:40:96:e7:82:01:ad:cb:36:
         0a:bf:6f:d7:8f:e3:37:cd:3c:98:a0:78:d8:c7:85:66:39:16:
         93:3d:50:55:27:da:5e:db:8f:bd:52:0a:55:b3:b7:76:61:39:
         a7:35:08:bf:b3:45:7e:70:33:fd:5e:ad:6c:cd:e6:d1:95:3a:
         50:db:b5:e4:e6:a2:06:d7:e1:25:bd:7a:01:47:b2:bd:11:66:
         4d:24:8a:b8:43:b0:f0:98:d6:6d:ec:04:68:d4:43:72:0f:5e:
         30:23:03:fa:f4:54:48:df:9d:b9:95:3f:4a:4c:ec:1d:0c:af:
         10:d1:0b:0c:62:6b:c6:74:63:53:aa:bf:c8:f1:f0:1a:70:6c:
         3d:61:cc:f5:d7:95:cf:17:66:05:0a:84:d4:44:cb:49:ae:7e:
         e0:bd:ea:1e:3e:c6:45:ee:e9:61:42:fe:b6:7b:7f:dc:ed:ee:
         75:a9:a4:c6:29:64:2f:5b:a3:de:21:92:2e:56:2e:4f:62:20:
         11:e8:67:d0:52:d9:5b:5c:f4:92:2f:af:d7:c5:20:2c:da:1c:
         18:a3:2e:3e:54:07:81:c7:61:c1:96:80:0c:f3:93:a4:fa:f1:
         ab:d6:e3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----