Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Bu7gL29tZj8GwX8KDWYb3cmuuSm3TkJCAs4ojfbaQcBE/0/79AAE3955BE77C83AE4C95C5E68F2E975AB0B8E2.mft
File:                     79AAE3955BE77C83AE4C95C5E68F2E975AB0B8E2.mft (raw, json)
Hash identifier:          4N9RN1hb/zLnMrHH7iYK2cf6rbsSdNnmXwixV1+x4dg=
Subject key identifier:   1F:3F:A0:7B:DB:98:03:7B:61:64:78:88:8B:DE:CE:03:61:64:8F:5F
Authority key identifier: 79:AA:E3:95:5B:E7:7C:83:AE:4C:95:C5:E6:8F:2E:97:5A:B0:B8:E2
Certificate issuer:       /CN=79AAE3955BE77C83AE4C95C5E68F2E975AB0B8E2
Certificate serial:       6F5C5CE400F14D4E64A9AD5D74DBC30193498C7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79AAE3955BE77C83AE4C95C5E68F2E975AB0B8E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bu7gL29tZj8GwX8KDWYb3cmuuSm3TkJCAs4ojfbaQcBE/0/79AAE3955BE77C83AE4C95C5E68F2E975AB0B8E2.mft
Manifest number:          09
Signing time:             Sat 18 Nov 2023 07:37:13 +0000
Manifest this update:     Sat 18 Nov 2023 07:32:13 +0000
Manifest next update:     Sun 19 Nov 2023 08:43:13 +0000
Files and hashes:         1: 79AAE3955BE77C83AE4C95C5E68F2E975AB0B8E2.crl (hash: ZjZW04SGstVlpQJodYRC2Vxpw2XHmWm5Qi/GOuQSt8M=)
                          2: 323830343a353165633a3a2f33322d3334203d3e20323638343835.roa (hash: i6mNAgeh5sqYDpvn87Q0G6XDjIwLTMPFgoqiSc45sfg=)
                          3: 34352e3136322e382e302f32322d3234203d3e20323638343835.roa (hash: IyTEff6O3NvcdlHBWWzDXoobRquFZVtYfMxLxL3s6rs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:5c:5c:e4:00:f1:4d:4e:64:a9:ad:5d:74:db:c3:01:93:49:8c:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79AAE3955BE77C83AE4C95C5E68F2E975AB0B8E2
        Validity
            Not Before: Nov 18 07:32:13 2023 GMT
            Not After : Nov 19 08:43:13 2023 GMT
        Subject: CN=1F3FA07BDB98037B616478888BDECE0361648F5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b4:6b:1b:26:75:c3:65:e3:14:0e:42:28:e5:
                    92:f7:53:a0:7b:ba:6b:e3:91:0c:be:b2:e9:41:45:
                    f9:8d:1d:76:66:30:d0:93:e6:60:3f:e1:fb:88:6c:
                    f1:34:d7:41:1b:5d:b4:cb:85:dc:44:8b:e9:39:9c:
                    c4:ad:db:73:b9:f3:c4:bd:0d:5c:f4:04:8e:f3:5e:
                    26:fb:73:d6:9b:8a:7b:47:d2:b2:8c:c2:3a:f9:59:
                    00:36:84:55:4b:67:22:e1:09:62:77:4b:c2:32:af:
                    46:db:70:73:3b:f0:de:fc:84:94:b6:6d:9f:a8:8f:
                    73:a4:3f:62:7c:70:50:71:73:9b:51:2f:b2:b6:80:
                    ed:02:9d:69:4f:68:6e:48:22:d6:79:3f:84:65:5c:
                    a5:b5:a2:e2:e1:c7:39:64:2d:a9:d8:70:59:8f:ae:
                    6c:4b:13:cd:db:f3:62:8a:36:e8:0d:7b:f0:2a:99:
                    e8:f5:17:11:82:93:00:c5:60:5f:77:88:23:7f:61:
                    4c:74:c6:51:f5:61:8e:82:6d:f4:e4:ce:c2:63:8a:
                    19:f7:6b:ee:44:0b:ef:01:30:26:f8:20:45:69:68:
                    13:c6:a9:33:65:d1:11:48:68:7d:cd:77:1f:1c:a6:
                    ed:38:0c:5a:44:d4:6d:9a:50:64:1e:fc:b6:fb:1f:
                    3a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:3F:A0:7B:DB:98:03:7B:61:64:78:88:8B:DE:CE:03:61:64:8F:5F
            X509v3 Authority Key Identifier:
                keyid:79:AA:E3:95:5B:E7:7C:83:AE:4C:95:C5:E6:8F:2E:97:5A:B0:B8:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bu7gL29tZj8GwX8KDWYb3cmuuSm3TkJCAs4ojfbaQcBE/0/79AAE3955BE77C83AE4C95C5E68F2E975AB0B8E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79AAE3955BE77C83AE4C95C5E68F2E975AB0B8E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bu7gL29tZj8GwX8KDWYb3cmuuSm3TkJCAs4ojfbaQcBE/0/79AAE3955BE77C83AE4C95C5E68F2E975AB0B8E2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:7b:dc:1a:f0:1a:2c:b1:33:67:f4:f9:b8:09:fe:06:e5:fa:
         84:5a:62:de:92:18:63:51:62:98:a1:6a:ec:be:d1:90:64:6f:
         7c:40:42:e7:05:6e:57:14:25:3b:4f:1b:e9:42:07:da:88:27:
         b0:3e:f4:c5:7f:be:f2:4c:c9:8c:39:d7:53:3b:ab:05:d9:d2:
         52:22:a6:13:38:34:83:c1:c9:34:02:95:aa:dd:fe:fb:f3:e0:
         f5:33:b6:a0:ed:6f:47:4c:51:13:3a:34:cc:78:19:8e:09:61:
         b8:72:2c:14:b2:09:f5:13:8c:50:94:4a:b2:ca:aa:c5:a7:c6:
         dd:33:2c:b3:b0:a7:0e:e7:92:b5:62:f4:f5:ae:99:43:84:5d:
         9d:1a:04:a0:5a:47:52:f0:9d:2f:d0:92:e9:d3:20:e8:ac:9c:
         ad:45:94:9d:c6:d8:6a:3a:7c:05:b2:ea:9c:fe:70:17:2b:6a:
         66:bd:9c:1f:da:e9:04:78:65:e8:13:05:6f:00:3a:2d:28:71:
         c2:5e:f1:6c:23:87:3a:4b:de:e2:7a:75:8b:9b:31:53:16:6c:
         0f:3b:f6:b1:74:25:03:74:e4:ef:a2:f8:fc:ae:ac:9f:61:bf:
         e4:96:8d:49:1b:bc:88:51:63:ff:6a:07:bf:f4:d0:12:b0:bd:
         08:04:07:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----