Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2FXcq8X6vWXwxoNpdZsJSwN98BXC5rCwdyYhcmFqUarB/0/C1E6279FDA95FF63A9A4FAB2434C3945074DA982.mft
File:                     C1E6279FDA95FF63A9A4FAB2434C3945074DA982.mft (raw, json)
Hash identifier:          8iJyvSK9Puj1TPXtFj5dGFoLMEcUG2eKKrZoywNQilE=
Subject key identifier:   6B:AF:02:DA:07:28:96:F3:16:49:C9:8A:F2:F0:DA:C6:CB:72:6C:CA
Authority key identifier: C1:E6:27:9F:DA:95:FF:63:A9:A4:FA:B2:43:4C:39:45:07:4D:A9:82
Certificate issuer:       /CN=C1E6279FDA95FF63A9A4FAB2434C3945074DA982
Certificate serial:       3B4C9091D691C6375FC594C4C6B7A8156C9A5EBC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C1E6279FDA95FF63A9A4FAB2434C3945074DA982.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FXcq8X6vWXwxoNpdZsJSwN98BXC5rCwdyYhcmFqUarB/0/C1E6279FDA95FF63A9A4FAB2434C3945074DA982.mft
Manifest number:          1D
Signing time:             Mon 11 Apr 2022 11:50:00 +0000
Manifest this update:     Mon 11 Apr 2022 11:45:00 +0000
Manifest next update:     Tue 12 Apr 2022 15:22:00 +0000
Files and hashes:         1: 323830343a6230303a3a2f33322d3332203d3e203532393333.roa (hash: avH4pJDKZcEejy3vv/i5TNuS2kgBRNcQ/FBrUhOouQk=)
                          2: C1E6279FDA95FF63A9A4FAB2434C3945074DA982.crl (hash: XTt4bekCOxont8nVS1TEPiSGFvoQOKX+VqEQtMLUI+A=)
                          3: 3137372e31302e3138302e302f32322d3234203d3e203532393333.roa (hash: 0hNlQT13w1maBAfSy//H/pieY49+HTA0Jr6gD+1qUvM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:4c:90:91:d6:91:c6:37:5f:c5:94:c4:c6:b7:a8:15:6c:9a:5e:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1E6279FDA95FF63A9A4FAB2434C3945074DA982
        Validity
            Not Before: Apr 11 11:45:00 2022 GMT
            Not After : Apr 12 15:22:00 2022 GMT
        Subject: CN=6BAF02DA072896F31649C98AF2F0DAC6CB726CCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f4:a0:73:00:56:18:8f:1b:93:13:01:9c:d6:
                    c7:7d:6f:8b:d1:37:90:62:3b:02:b5:7e:c7:1b:92:
                    f1:c2:d6:d9:93:cc:5d:22:b2:1e:95:35:34:6c:a8:
                    f9:c7:47:e1:f1:74:a3:11:62:c5:16:1c:c1:de:f9:
                    ba:ba:83:30:2d:d1:fb:96:b7:79:b2:86:e6:af:c0:
                    8d:61:b1:d3:62:11:d9:ae:85:1d:03:3c:16:90:26:
                    a0:95:17:1b:b8:27:0c:8e:e6:3a:93:1c:72:8e:30:
                    cf:30:26:47:f9:9b:09:d4:4d:00:85:e2:23:08:43:
                    56:83:e1:16:61:bd:3d:10:4e:5e:d2:2f:9d:ab:c1:
                    0f:76:ca:15:b0:f8:32:ef:c6:dd:81:17:02:81:48:
                    b9:10:a2:8c:fe:ee:d6:51:42:ea:a2:f3:cb:1d:22:
                    95:a5:a9:c8:d7:5f:4e:a2:28:e9:14:52:da:f3:d0:
                    e8:a7:41:d2:1b:1d:95:27:85:90:88:94:35:76:4c:
                    39:05:33:0a:b8:e7:16:d2:54:3d:8e:2a:42:b6:c1:
                    a4:95:96:d8:47:7c:5c:1d:ac:7f:33:1a:fd:39:c8:
                    d3:d7:5b:77:c9:4e:06:99:d4:f4:99:48:5c:97:29:
                    fd:6e:2d:82:7b:9d:3b:54:73:80:29:34:5d:b8:fe:
                    fa:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:AF:02:DA:07:28:96:F3:16:49:C9:8A:F2:F0:DA:C6:CB:72:6C:CA
            X509v3 Authority Key Identifier:
                keyid:C1:E6:27:9F:DA:95:FF:63:A9:A4:FA:B2:43:4C:39:45:07:4D:A9:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FXcq8X6vWXwxoNpdZsJSwN98BXC5rCwdyYhcmFqUarB/0/C1E6279FDA95FF63A9A4FAB2434C3945074DA982.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C1E6279FDA95FF63A9A4FAB2434C3945074DA982.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FXcq8X6vWXwxoNpdZsJSwN98BXC5rCwdyYhcmFqUarB/0/C1E6279FDA95FF63A9A4FAB2434C3945074DA982.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         f6:7c:55:37:4f:7a:27:fc:90:0b:12:2f:0c:d4:6b:25:d6:a2:
         3d:12:78:ea:de:5a:27:7f:13:93:b2:22:32:03:4f:cf:7c:7c:
         61:72:c2:62:d4:3d:d1:d6:a2:db:ca:d8:68:ec:bd:45:c9:14:
         5c:30:f4:d6:69:a3:62:00:4f:c7:c9:6c:bf:28:85:e4:0e:17:
         50:81:9d:81:cd:21:a3:68:de:ef:ff:23:8d:4d:2e:b3:70:0c:
         c9:f3:40:e7:b0:7b:6d:1d:0d:56:cc:b3:4f:af:7c:3f:3d:d3:
         e5:2f:69:1a:15:b9:ea:bc:cb:de:71:62:48:99:28:8a:f7:23:
         da:86:9b:1c:7f:fe:00:a6:cf:13:41:a3:17:ce:87:8f:df:fd:
         a4:c5:cf:c8:6b:f2:ee:f9:67:b4:5e:b2:26:00:68:c6:59:67:
         3f:40:1d:f7:fc:dc:7e:b7:29:e4:59:32:81:7d:b9:fa:cd:2e:
         74:91:86:b3:e7:b7:38:c2:8e:09:65:3d:df:b1:3e:89:03:8a:
         9c:7e:6e:2c:0a:76:85:18:c4:33:4c:79:6b:56:bd:d7:b1:ea:
         a0:a5:36:39:28:7e:7a:74:3d:79:48:d9:57:96:bc:e7:48:5f:
         61:7c:ab:2c:dd:ee:cb:92:69:ae:45:92:d2:bd:91:b7:bd:99:
         1e:4b:20:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----