Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/34471C9E8B96C02FEE3B209347E7B5EE0BF8F0EA.mft
File:                     34471C9E8B96C02FEE3B209347E7B5EE0BF8F0EA.mft (raw, json)
Hash identifier:          KhNbqcwno0nPXnCa8BBUaGGPN/EK/0fhadTtRQP6GzM=
Subject key identifier:   20:86:22:8D:81:1F:1E:0C:44:B4:9F:44:D8:39:E7:9A:89:23:98:86
Authority key identifier: 34:47:1C:9E:8B:96:C0:2F:EE:3B:20:93:47:E7:B5:EE:0B:F8:F0:EA
Certificate issuer:       /CN=34471C9E8B96C02FEE3B209347E7B5EE0BF8F0EA
Certificate serial:       21B8CDC80E2944DC1A80BF2C42B6D61FB28A992E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34471C9E8B96C02FEE3B209347E7B5EE0BF8F0EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/34471C9E8B96C02FEE3B209347E7B5EE0BF8F0EA.mft
Manifest number:          C5
Signing time:             Mon 11 Jul 2022 15:50:00 +0000
Manifest this update:     Mon 11 Jul 2022 15:45:00 +0000
Manifest next update:     Tue 12 Jul 2022 17:27:00 +0000
Files and hashes:         1: 323830343a323132383a3a2f33322d3334203d3e20323634353339.roa (hash: RTUV55pAnPUnGa9Wl1Db2wHaOGnEoXBHP5uJ6hShGQk=)
                          2: 34471C9E8B96C02FEE3B209347E7B5EE0BF8F0EA.crl (hash: yaDzcXoaUX+yHNM7fJnRKSRmzuNVKUV0N6C9zHLqlJc=)
                          3: 3133382e302e32342e302f32322d3234203d3e20323634353339.roa (hash: 2FXrWkgzj1pGN7Rr8vGbe5lO1F88s5jAIKznHR6SjX8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:b8:cd:c8:0e:29:44:dc:1a:80:bf:2c:42:b6:d6:1f:b2:8a:99:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34471C9E8B96C02FEE3B209347E7B5EE0BF8F0EA
        Validity
            Not Before: Jul 11 15:45:00 2022 GMT
            Not After : Jul 12 17:27:00 2022 GMT
        Subject: CN=2086228D811F1E0C44B49F44D839E79A89239886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a3:e2:0c:45:98:ab:60:fb:31:93:74:73:7c:
                    7c:5e:db:06:36:32:1c:c3:06:a4:52:ef:60:06:5b:
                    39:82:66:c0:f8:67:69:da:76:99:52:a5:8c:db:59:
                    b6:1a:b3:5f:ee:67:e2:92:80:2b:80:5e:40:21:94:
                    58:a7:e1:d9:dc:f2:84:6b:e1:21:87:9d:23:44:06:
                    4b:12:bb:c7:8e:ad:80:be:d4:5b:97:2a:fa:c3:7d:
                    cb:c1:b6:71:ad:3e:e3:0e:75:84:2c:93:36:99:b7:
                    67:80:dc:bb:d1:7e:c6:33:36:13:7e:34:9a:65:31:
                    30:e3:6c:3b:25:45:b3:59:1b:39:13:a0:87:38:ff:
                    42:8f:43:05:5a:5f:60:07:b8:30:d4:06:3f:70:65:
                    7f:ee:6f:9a:2a:b4:81:bd:79:cd:0a:e9:d2:ea:bb:
                    bf:42:3b:cd:1a:65:80:ee:4f:e3:60:6e:04:f3:31:
                    c9:42:bd:d9:01:8c:ef:c5:9d:d2:c3:85:e3:b5:d0:
                    73:81:47:d2:81:7e:a4:8d:70:d1:55:f1:6d:3d:b5:
                    ca:f3:55:f0:06:62:7c:08:c6:e5:1f:95:ea:a1:51:
                    1d:b8:2a:49:26:05:07:47:8c:be:7f:77:49:c4:f5:
                    00:6b:20:10:e3:9a:f1:a4:8a:f0:3e:03:67:d8:69:
                    36:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:86:22:8D:81:1F:1E:0C:44:B4:9F:44:D8:39:E7:9A:89:23:98:86
            X509v3 Authority Key Identifier:
                keyid:34:47:1C:9E:8B:96:C0:2F:EE:3B:20:93:47:E7:B5:EE:0B:F8:F0:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/34471C9E8B96C02FEE3B209347E7B5EE0BF8F0EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34471C9E8B96C02FEE3B209347E7B5EE0BF8F0EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/34471C9E8B96C02FEE3B209347E7B5EE0BF8F0EA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:1f:d3:c3:81:56:8e:54:65:62:64:26:99:3b:df:27:f2:a6:
         e3:c2:aa:2c:62:e7:76:52:dd:14:96:33:68:29:1a:31:74:25:
         ec:c9:a8:f5:1e:65:41:cb:8f:55:74:61:c6:28:2d:d8:82:21:
         09:34:9c:49:d3:39:d0:26:6f:72:10:86:5f:1b:b0:d2:d4:db:
         2b:a8:a7:71:24:e7:ff:da:85:14:c6:8a:2a:c5:b3:45:bd:ce:
         3f:ab:5e:c3:66:94:20:82:f4:ef:e4:64:8a:60:db:58:de:ad:
         92:cd:61:94:fe:4b:c1:de:a8:85:15:66:72:cd:8f:c7:47:1d:
         2e:87:76:fa:bd:30:f0:4b:5c:2b:f4:98:0c:3c:03:58:5a:db:
         19:19:00:c3:b8:6a:a6:73:e1:34:43:8b:e1:9f:dc:a4:97:f5:
         e2:6f:fb:48:b4:c0:ae:fd:ba:7f:e1:b3:cd:0d:d1:af:68:ba:
         fe:eb:fe:3a:c5:65:b0:4d:f4:99:3f:ee:8f:4a:95:7c:66:82:
         3b:bf:51:95:f2:6b:7e:66:79:4e:b2:3a:4c:b8:b9:a5:1a:82:
         78:3d:7b:71:7a:8e:48:10:c6:2e:0f:05:58:f8:ca:18:79:19:
         97:6a:cf:0f:9a:4f:c6:f5:e7:eb:0f:8b:e3:b3:38:59:94:4a:
         c6:dd:e6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----