Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/0/90E8CFF847D72830B780ABCC81598B87DDFCB309.mft
File:                     90E8CFF847D72830B780ABCC81598B87DDFCB309.mft (raw, json)
Hash identifier:          QhlRce4beL0H9gnsbn4REDrusV6eNfXtW8d90oeRj0Q=
Subject key identifier:   7C:DF:9A:22:F2:6D:E6:A8:48:8F:A5:7E:C1:8B:50:09:BB:E8:07:60
Authority key identifier: 90:E8:CF:F8:47:D7:28:30:B7:80:AB:CC:81:59:8B:87:DD:FC:B3:09
Certificate issuer:       /CN=90E8CFF847D72830B780ABCC81598B87DDFCB309
Certificate serial:       29553F7ACA7C382A0A3EEF65ECE5B3925771DAF9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90E8CFF847D72830B780ABCC81598B87DDFCB309.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/0/90E8CFF847D72830B780ABCC81598B87DDFCB309.mft
Manifest number:          03
Signing time:             Sun 10 Apr 2022 14:30:00 +0000
Manifest this update:     Sun 10 Apr 2022 14:25:00 +0000
Manifest next update:     Mon 11 Apr 2022 16:17:00 +0000
Files and hashes:         1: 90E8CFF847D72830B780ABCC81598B87DDFCB309.crl (hash: Ov7R9wPGHrpVcGfEfgi2W1qB4TuSbCQM2R4I7wA1yAA=)
                          2: 3133382e3138352e35362e302f32322d3234203d3e20323634333430.roa (hash: QRe53IPoZhfAtSpe/NTJ7ZXsxPSFnV31FyIP45Ya2Ew=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:55:3f:7a:ca:7c:38:2a:0a:3e:ef:65:ec:e5:b3:92:57:71:da:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90E8CFF847D72830B780ABCC81598B87DDFCB309
        Validity
            Not Before: Apr 10 14:25:00 2022 GMT
            Not After : Apr 11 16:17:00 2022 GMT
        Subject: CN=7CDF9A22F26DE6A8488FA57EC18B5009BBE80760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:47:3e:db:9b:e6:75:29:0c:66:fc:f5:d5:6e:
                    69:7a:5f:d5:16:50:80:fc:6b:20:eb:55:99:d3:e8:
                    d0:ac:f8:d6:b1:06:b8:af:e1:a8:e7:2a:f4:ef:2c:
                    14:cd:0f:86:34:58:da:4a:b2:30:da:99:58:ee:1e:
                    d4:81:c3:03:f8:2c:f9:46:e1:e4:48:fe:5a:86:89:
                    9b:fa:d1:24:fd:94:0e:72:af:87:37:da:4e:6f:82:
                    fc:dd:fd:99:0b:d3:2b:3c:d3:ea:e9:ef:8d:e0:34:
                    8c:4c:a7:5e:22:5d:fe:6b:89:83:2b:28:4c:f2:97:
                    0b:a3:43:15:eb:9a:41:66:ae:d6:f1:ef:67:76:50:
                    19:59:32:a7:f0:e7:45:8a:56:5c:ad:f7:92:b2:c1:
                    1b:62:3e:ba:75:7f:21:39:f9:f8:8e:4a:1e:da:0f:
                    e0:d9:a9:60:eb:43:e3:63:05:e4:15:ac:d1:46:74:
                    fb:ca:91:4b:98:d8:70:08:3f:7f:72:b2:ef:2e:3c:
                    70:71:18:06:1e:62:5e:35:bb:c1:2c:fd:f0:61:61:
                    d8:e4:33:72:e3:a9:1c:c6:91:f3:a2:c6:2c:ff:79:
                    ab:26:d5:83:80:f3:29:db:37:64:f2:81:f2:26:6e:
                    ff:4c:5e:96:8e:e4:cd:d3:1f:dc:a6:d8:d6:86:60:
                    b4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DF:9A:22:F2:6D:E6:A8:48:8F:A5:7E:C1:8B:50:09:BB:E8:07:60
            X509v3 Authority Key Identifier:
                keyid:90:E8:CF:F8:47:D7:28:30:B7:80:AB:CC:81:59:8B:87:DD:FC:B3:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/0/90E8CFF847D72830B780ABCC81598B87DDFCB309.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90E8CFF847D72830B780ABCC81598B87DDFCB309.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/0/90E8CFF847D72830B780ABCC81598B87DDFCB309.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:d2:20:c5:8e:22:63:23:8b:8e:7a:1f:46:c6:8c:2f:a3:01:
         2a:07:7b:25:ec:52:33:00:d0:7a:54:ce:fe:9a:31:84:31:a4:
         f4:b2:ae:a0:f1:fc:0e:f2:a4:d0:4a:41:cf:70:ce:03:e8:79:
         0d:07:79:da:c6:81:37:12:c1:17:c5:21:aa:ae:96:0c:7f:06:
         d0:2c:e5:16:1b:44:2f:11:71:dc:c0:25:73:ea:59:f9:74:43:
         9c:12:e7:70:92:7c:4d:b5:aa:98:52:34:66:13:c0:9e:5e:78:
         b8:6f:32:f5:4d:90:41:5d:f5:6f:30:7a:9d:68:0d:ff:4c:41:
         25:66:05:e2:85:78:db:2b:35:31:f3:3e:cf:22:dd:7f:32:72:
         16:27:60:57:52:d9:9a:63:cb:a1:c0:e9:f1:75:b0:bd:44:d2:
         c0:34:b3:ab:1f:52:04:b9:9e:6d:4e:06:20:7c:4b:f4:2d:e8:
         82:71:1d:32:ac:3b:c4:bb:39:51:5e:d2:80:f6:96:5b:fc:aa:
         91:fd:8c:80:2a:67:97:82:1e:2f:d2:29:a6:96:43:99:04:c0:
         b0:64:90:7d:81:e2:c1:19:18:3b:4e:4c:ef:6f:58:7a:cc:2b:
         e6:e5:6f:37:df:c6:8c:e5:bd:4e:d8:f0:bb:26:ae:4f:53:50:
         48:83:a2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----