Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/16A171ED0A9C6ED5B6CD7CECFA6A971120A6DEBF.mft
File:                     16A171ED0A9C6ED5B6CD7CECFA6A971120A6DEBF.mft (raw, json)
Hash identifier:          jug5q4DA06L4SFh3UB4T3PG0W5pDBcTTL831QZVjjgU=
Subject key identifier:   CA:1F:7A:EC:B7:26:02:73:BA:E9:8B:7D:D6:31:9C:1A:5F:FE:67:28
Authority key identifier: 16:A1:71:ED:0A:9C:6E:D5:B6:CD:7C:EC:FA:6A:97:11:20:A6:DE:BF
Certificate issuer:       /CN=16A171ED0A9C6ED5B6CD7CECFA6A971120A6DEBF
Certificate serial:       2053DB8B59464A74BE038B0EC43CF4FF851C66CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16A171ED0A9C6ED5B6CD7CECFA6A971120A6DEBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/16A171ED0A9C6ED5B6CD7CECFA6A971120A6DEBF.mft
Manifest number:          55
Signing time:             Wed 26 Apr 2023 04:00:12 +0000
Manifest this update:     Wed 26 Apr 2023 03:55:12 +0000
Manifest next update:     Thu 27 Apr 2023 07:27:12 +0000
Files and hashes:         1: 3136382e302e3136352e302f32342d3234203d3e20323633343833.roa (hash: Zsr3SWtAvMiKo5Gddu2M4OWNHSQpLBcUKy/Z2d/w8Z0=)
                          2: 3136382e302e3136362e302f32342d3234203d3e20323633343833.roa (hash: miuUanZEgYgyY8N1Son+DHdasHP+gRd9KrC4gxwvCi4=)
                          3: 16A171ED0A9C6ED5B6CD7CECFA6A971120A6DEBF.crl (hash: /DMM33Guah6dz4Eve4wN5E36Ru9fWKCI2xLDN81U6iA=)
                          4: 3136382e302e3136342e302f32342d3234203d3e20323633343833.roa (hash: Kzoucv24bbju89hPcNC+vAnU0SO7shdBHtZMxl9WiIg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:53:db:8b:59:46:4a:74:be:03:8b:0e:c4:3c:f4:ff:85:1c:66:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16A171ED0A9C6ED5B6CD7CECFA6A971120A6DEBF
        Validity
            Not Before: Apr 26 03:55:12 2023 GMT
            Not After : Apr 27 07:27:12 2023 GMT
        Subject: CN=CA1F7AECB7260273BAE98B7DD6319C1A5FFE6728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:27:0b:c0:6c:b2:1d:5f:dc:7e:9e:5c:39:d8:
                    47:37:7c:64:a6:a5:84:4b:1a:d0:7b:05:72:67:6b:
                    0b:e6:f8:e4:1e:57:29:b3:c9:55:75:e7:4d:f3:44:
                    c5:54:96:82:2f:32:6b:29:65:3c:19:64:55:ba:36:
                    f3:50:7d:46:64:ea:2b:6f:6f:10:58:93:64:e0:3f:
                    80:3b:21:8c:ef:dd:cb:cb:39:8f:3d:7c:8a:65:a5:
                    5f:96:8c:92:c2:52:bc:62:05:8f:51:a9:41:1d:20:
                    08:51:34:ef:29:f6:e9:b3:2f:dd:b7:80:14:02:99:
                    8d:fd:4e:d7:f8:51:1d:d4:c3:6b:f7:b5:6f:d3:3c:
                    7b:db:90:a2:03:4d:f0:d6:c7:f0:2a:80:fd:a1:4a:
                    07:a9:1d:2f:ee:73:ec:54:76:59:6b:52:0e:7d:52:
                    86:f3:c8:87:09:e6:30:20:9b:55:9e:82:85:55:0b:
                    3f:7e:18:e5:a8:86:4e:21:52:6b:e5:8f:0d:20:f6:
                    fe:f4:a0:07:69:53:44:eb:36:0d:e6:31:ee:86:57:
                    65:3a:57:f7:21:5e:58:a7:85:cf:6d:20:11:ea:56:
                    6a:4b:45:6f:0c:34:33:e7:4f:13:b3:89:7a:45:2b:
                    37:6f:f8:71:c2:0f:fb:92:9a:99:6c:13:b4:3a:b5:
                    55:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:1F:7A:EC:B7:26:02:73:BA:E9:8B:7D:D6:31:9C:1A:5F:FE:67:28
            X509v3 Authority Key Identifier:
                keyid:16:A1:71:ED:0A:9C:6E:D5:B6:CD:7C:EC:FA:6A:97:11:20:A6:DE:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/16A171ED0A9C6ED5B6CD7CECFA6A971120A6DEBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16A171ED0A9C6ED5B6CD7CECFA6A971120A6DEBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/16A171ED0A9C6ED5B6CD7CECFA6A971120A6DEBF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:5a:21:f1:aa:da:af:f2:76:40:12:73:e2:93:c7:ad:68:43:
         15:10:b2:60:db:13:f8:cd:9b:9e:e1:c3:fe:ac:aa:9c:e0:4a:
         01:36:3b:cc:c7:1f:1d:ad:d9:86:86:b5:d2:b9:ea:08:c2:dd:
         4d:29:4b:a3:51:8a:07:b1:69:db:4c:66:5e:19:45:b3:f2:fc:
         12:1c:d1:66:b1:a9:fb:1b:dc:34:4b:46:b7:7f:be:21:83:af:
         9a:1f:9e:a3:e6:50:90:d1:e9:58:42:2b:25:eb:2d:9a:d7:63:
         46:f5:2a:aa:d4:87:b4:fd:bf:37:00:f5:84:0c:64:78:7e:83:
         2c:e7:48:49:ca:0b:e9:6f:d6:3b:76:30:9e:21:fe:64:73:88:
         51:6e:28:07:a3:3d:ed:72:5a:d7:71:8b:0c:ba:42:2e:01:1a:
         f1:3f:9a:92:16:e0:33:6f:93:ba:c5:ab:d1:30:0f:6a:13:1f:
         5b:e7:50:a2:56:5e:2a:95:72:1c:d6:e1:55:82:f9:d3:a9:de:
         25:15:bc:d6:aa:f2:b2:dd:d2:13:fc:d5:42:78:f0:b7:22:dc:
         45:03:45:a1:a1:1d:da:bc:4a:e9:e1:f7:40:2e:85:2f:6b:6a:
         70:3a:6e:09:fb:2f:c7:85:96:19:b3:e8:28:8d:cd:73:66:69:
         11:5e:8c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----