Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/0/1E31F2D33DE449B3C0E322F1BA17CA1BDBDC30BC.mft
File:                     1E31F2D33DE449B3C0E322F1BA17CA1BDBDC30BC.mft (raw, json)
Hash identifier:          DfM3K86iQx5S8/nwnnoFIxNFgWYN96cVuJzBdPrxPh8=
Subject key identifier:   12:90:8D:BF:D7:8A:AC:48:98:12:47:07:E5:48:4A:FB:D9:94:32:4E
Authority key identifier: 1E:31:F2:D3:3D:E4:49:B3:C0:E3:22:F1:BA:17:CA:1B:DB:DC:30:BC
Certificate issuer:       /CN=1E31F2D33DE449B3C0E322F1BA17CA1BDBDC30BC
Certificate serial:       1632AD910F59A05036FBEF3D06D33823F868A438
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E31F2D33DE449B3C0E322F1BA17CA1BDBDC30BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/0/1E31F2D33DE449B3C0E322F1BA17CA1BDBDC30BC.mft
Manifest number:          3F
Signing time:             Thu 23 Mar 2023 02:50:35 +0000
Manifest this update:     Thu 23 Mar 2023 02:45:35 +0000
Manifest next update:     Fri 24 Mar 2023 04:57:35 +0000
Files and hashes:         1: 323830343a333839633a3a2f33322d3332203d3e20323636343839.roa (hash: W9J5t3Mh1tsyH7vJbgcSdd54CBtdKDJsNm/Rb1uPP2M=)
                          2: 1E31F2D33DE449B3C0E322F1BA17CA1BDBDC30BC.crl (hash: AWyGkYXmPs52IIDHQyUVRBIDVLrtXOSQMUJmiqDmlJo=)
                          3: 3137302e3234342e32372e302f32342d3234203d3e20323636343839.roa (hash: ESpY6nZys4dmCo8o2Ma82v4eGZ7NU4IarhsAHEMOtd0=)
                          4: 3137302e3234342e32342e302f32322d3232203d3e20323636343839.roa (hash: uMjNR4U3uOzP/CJnCjRmR3Frq7UI7KCJYJGwQoksOr0=)
                          5: 3137302e3234342e32342e302f32342d3234203d3e20323636343839.roa (hash: EOM7AkEQFL39Ha28gJ1cPzgsWwIOBej7NZoM9wlAwuQ=)
                          6: 3137302e3234342e32362e302f32342d3234203d3e20323636343839.roa (hash: NJ0pT8L+iQ5xzoCf8t+DaD6I4IdDHzRdIMk8m8BdbO4=)
                          7: 3137302e3234342e32352e302f32342d3234203d3e20323636343839.roa (hash: hCxsbdSCrJug0BjfvZkGU4iIL1WXCezbZde498bMVj8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:32:ad:91:0f:59:a0:50:36:fb:ef:3d:06:d3:38:23:f8:68:a4:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E31F2D33DE449B3C0E322F1BA17CA1BDBDC30BC
        Validity
            Not Before: Mar 23 02:45:35 2023 GMT
            Not After : Mar 24 04:57:35 2023 GMT
        Subject: CN=12908DBFD78AAC4898124707E5484AFBD994324E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d3:2e:d8:71:09:63:b2:b8:fa:a2:03:46:74:
                    0b:03:c1:8d:3a:38:20:dc:01:ff:04:59:99:f2:cf:
                    4f:6c:82:ac:8b:3b:51:77:01:08:30:38:5e:8f:16:
                    bf:e7:d6:ba:8d:b8:0d:c9:f1:35:39:f5:4a:fa:58:
                    8c:1f:ef:0d:0e:3a:03:c7:49:6e:0f:ce:9d:41:5a:
                    bf:22:bb:09:37:b6:02:e0:2d:51:75:5a:ba:b4:f6:
                    4e:2f:b0:6e:ec:d3:c5:98:29:47:78:ea:9e:4f:ab:
                    7d:6b:99:15:db:d5:fa:a5:74:3d:0b:03:6d:c7:d2:
                    63:ef:47:c9:3d:f2:7f:23:24:9c:58:40:b1:76:a0:
                    e6:4f:5f:ff:19:23:cf:49:ed:a2:97:7e:19:87:ec:
                    7f:ce:b6:f2:84:2a:66:d1:6b:2c:0f:ce:57:5a:86:
                    b4:59:9e:53:ee:c0:c2:fb:cc:f2:5c:ac:63:c5:51:
                    e1:5a:4b:df:bd:a4:d5:ec:cf:1f:20:3f:ee:98:8a:
                    fd:80:c2:a1:41:46:da:bd:d6:26:88:a8:2d:96:8c:
                    00:a0:d3:02:4e:b2:5b:c8:de:ba:4d:f1:15:38:2a:
                    93:09:17:45:90:dc:69:5d:4a:5f:a7:c9:b3:09:01:
                    15:08:a7:cf:db:b7:1f:aa:fa:ef:53:91:a9:22:50:
                    04:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:90:8D:BF:D7:8A:AC:48:98:12:47:07:E5:48:4A:FB:D9:94:32:4E
            X509v3 Authority Key Identifier:
                keyid:1E:31:F2:D3:3D:E4:49:B3:C0:E3:22:F1:BA:17:CA:1B:DB:DC:30:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/0/1E31F2D33DE449B3C0E322F1BA17CA1BDBDC30BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E31F2D33DE449B3C0E322F1BA17CA1BDBDC30BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/0/1E31F2D33DE449B3C0E322F1BA17CA1BDBDC30BC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:55:80:2b:ea:41:0c:d1:dd:e4:08:8f:91:5c:83:fd:94:19:
         05:25:9e:9f:65:0c:75:29:ab:12:27:06:d7:cb:64:7c:0f:6b:
         c4:d0:1a:57:ee:34:41:3d:d7:23:35:6c:b8:36:8b:7e:fd:23:
         1b:29:ca:8c:0d:70:77:13:09:24:8b:e7:0f:db:17:e6:9d:3f:
         37:d7:6f:9c:1f:b7:c8:ac:0c:ec:83:2e:33:61:a6:a8:be:d2:
         fc:02:8a:51:c1:32:b1:0f:e9:dc:81:1a:2d:7d:d5:d8:a8:ca:
         ea:a8:4f:fd:de:0c:0f:7e:e4:f7:85:d9:91:cb:95:4e:2f:39:
         5e:db:e4:03:a7:9b:f8:32:92:ff:0c:b7:ce:24:fd:4b:76:58:
         60:76:ab:65:19:d5:65:c7:01:9c:11:a0:76:b1:c2:e7:cb:16:
         22:b8:4b:3a:78:a8:e7:2a:7e:a3:41:0c:eb:fc:36:c6:22:71:
         7e:4f:64:c3:e9:ce:b4:57:09:e9:03:07:80:6e:55:f2:47:57:
         7b:4d:8c:0b:42:5f:89:3f:e5:86:73:f4:2c:3a:ca:d3:43:4b:
         cf:48:8a:b1:09:f7:9c:03:3f:d6:80:66:c1:10:d1:18:d2:70:
         58:92:97:84:ee:57:31:f7:4d:4f:0c:2d:e6:a4:74:c9:21:18:
         75:5e:db:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----