Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2QLJnR6BK4ETR5D8hDsXRFYoPhAfcgAkw5CZEpSwLN3C/0/FF198A8E9E1334E576727171337F571CE7708607.mft
File:                     FF198A8E9E1334E576727171337F571CE7708607.mft (raw, json)
Hash identifier:          SOKuIX0SQtfmKM46P3xLE28+jcbZ5C4+1RLR01+u8qg=
Subject key identifier:   08:FB:F0:63:6C:13:51:B3:31:5A:B4:64:EC:FE:BB:A6:16:F3:02:AD
Authority key identifier: FF:19:8A:8E:9E:13:34:E5:76:72:71:71:33:7F:57:1C:E7:70:86:07
Certificate issuer:       /CN=FF198A8E9E1334E576727171337F571CE7708607
Certificate serial:       1ABFE7A480A1D8F0128BD6AA04340964726FBE4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF198A8E9E1334E576727171337F571CE7708607.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QLJnR6BK4ETR5D8hDsXRFYoPhAfcgAkw5CZEpSwLN3C/0/FF198A8E9E1334E576727171337F571CE7708607.mft
Manifest number:          2F
Signing time:             Tue 23 Aug 2022 03:34:12 +0000
Manifest this update:     Tue 23 Aug 2022 03:29:12 +0000
Manifest next update:     Wed 24 Aug 2022 04:00:12 +0000
Files and hashes:         1: FF198A8E9E1334E576727171337F571CE7708607.crl (hash: ioiB4GQEuE7l9ZKaTqnH2UhJ+6r+woh85mjXCtonBZ0=)
                          2: 34352e3139312e3132302e302f32322d3234203d3e20323639363831.roa (hash: Xc+H/7GMKr+nrS8zCuGimdDDB6uShZYA1i1Ymr6MvaU=)
                          3: 323830343a363834343a3a2f33322d3336203d3e20323639363831.roa (hash: IOggsUQlnO279rD1+ho61KrXOPA4caxr9D+lhCAxWCo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:bf:e7:a4:80:a1:d8:f0:12:8b:d6:aa:04:34:09:64:72:6f:be:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF198A8E9E1334E576727171337F571CE7708607
        Validity
            Not Before: Aug 23 03:29:12 2022 GMT
            Not After : Aug 24 04:00:12 2022 GMT
        Subject: CN=08FBF0636C1351B3315AB464ECFEBBA616F302AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:28:6a:2c:1b:4f:12:f3:40:6e:ec:7e:b0:9e:
                    8c:f8:78:2e:88:e1:e5:81:ba:d0:42:09:93:ee:43:
                    f9:41:91:fe:7b:70:fe:85:3f:51:91:b1:2a:c2:3f:
                    60:f1:8d:ea:20:fa:30:6d:11:18:94:18:99:68:40:
                    53:c3:31:6d:81:d7:21:21:17:71:cc:68:4a:d2:c2:
                    34:f5:7f:39:1d:e1:ff:03:24:1c:6a:f1:7b:0d:42:
                    d3:5e:e9:59:63:74:84:b2:5c:74:62:ce:53:31:a2:
                    f3:ce:18:b7:91:f1:89:d0:48:c8:76:8c:de:f4:8e:
                    b0:f5:cd:46:b7:19:f1:cd:b5:dd:4c:63:9b:02:df:
                    f0:d1:a3:df:66:e0:56:12:51:54:f4:eb:ad:66:89:
                    71:76:9c:1f:57:19:f3:56:4d:61:fa:f7:6f:52:0d:
                    63:92:76:fe:c0:1d:b8:55:c3:38:8f:2e:b7:b3:9b:
                    26:37:3f:6d:1d:2a:87:7f:88:ce:cd:b1:1d:95:a3:
                    7c:cb:42:fe:2e:91:65:d4:55:45:08:df:46:bd:3f:
                    fb:11:c7:f6:bf:f1:5b:1e:1d:6e:73:c1:38:24:c1:
                    40:e9:2d:df:cc:ac:89:61:10:fa:c0:a5:c9:4e:4b:
                    80:02:03:ff:a1:74:22:50:eb:4b:14:4e:b7:61:34:
                    20:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:FB:F0:63:6C:13:51:B3:31:5A:B4:64:EC:FE:BB:A6:16:F3:02:AD
            X509v3 Authority Key Identifier:
                keyid:FF:19:8A:8E:9E:13:34:E5:76:72:71:71:33:7F:57:1C:E7:70:86:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QLJnR6BK4ETR5D8hDsXRFYoPhAfcgAkw5CZEpSwLN3C/0/FF198A8E9E1334E576727171337F571CE7708607.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF198A8E9E1334E576727171337F571CE7708607.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QLJnR6BK4ETR5D8hDsXRFYoPhAfcgAkw5CZEpSwLN3C/0/FF198A8E9E1334E576727171337F571CE7708607.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:08:06:5e:77:dc:0d:d2:b0:3c:87:3f:81:05:27:a1:b4:f2:
         92:52:39:a8:d3:cb:fe:4b:c9:00:75:9b:18:a0:b8:c1:b0:c7:
         c1:ae:ce:8f:de:f5:04:07:53:84:29:12:57:35:95:55:34:cf:
         79:74:5b:aa:4e:48:93:ac:fa:06:1f:f7:81:b3:06:1b:6e:92:
         58:49:54:e0:e7:6a:60:06:92:1d:15:13:b3:d3:1e:38:87:5c:
         f9:44:5a:6e:8c:06:da:09:25:4a:c4:f4:03:6d:b0:17:21:2c:
         f1:36:1e:b3:c5:46:60:b3:ea:5b:63:d3:69:5c:1f:b2:93:5d:
         8b:38:9d:d3:6c:29:dc:46:be:93:9a:a7:33:6b:73:6c:af:8a:
         b4:fb:0f:d6:c4:32:f0:25:61:7c:65:8b:64:89:37:28:a0:e0:
         10:c1:5e:e2:4e:e9:c4:fe:c6:0a:68:1b:f0:2e:c9:30:23:b2:
         e9:90:06:6e:f5:74:79:eb:d7:c8:50:fe:2a:60:3e:0b:45:b2:
         b0:7f:47:08:f6:71:6d:43:ce:75:9c:6e:56:a4:02:bf:43:a7:
         12:83:3c:c7:f2:59:a0:97:0e:4d:8a:43:24:48:4c:90:cf:0b:
         d7:a2:4e:5f:1d:b5:a5:39:ea:24:5b:e1:85:fe:4c:f8:41:fc:
         52:d3:7c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----