Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/0/F9482A93DF3BCE7BB6B3F801727FA8E83B2D1B3E.mft
File:                     F9482A93DF3BCE7BB6B3F801727FA8E83B2D1B3E.mft (raw, json)
Hash identifier:          gRSmy4R+692qeHU9WvGz6c5HiNMVERrS3zQUTIG9rbQ=
Subject key identifier:   2D:95:B7:B3:5A:99:C4:B8:23:30:07:41:27:F0:C3:70:9E:A7:D0:C7
Authority key identifier: F9:48:2A:93:DF:3B:CE:7B:B6:B3:F8:01:72:7F:A8:E8:3B:2D:1B:3E
Certificate issuer:       /CN=F9482A93DF3BCE7BB6B3F801727FA8E83B2D1B3E
Certificate serial:       1FBBD861B5725F0EB460C58AF5537F4F96CF9665
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9482A93DF3BCE7BB6B3F801727FA8E83B2D1B3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/0/F9482A93DF3BCE7BB6B3F801727FA8E83B2D1B3E.mft
Manifest number:          0242
Signing time:             Fri 27 Jan 2023 09:39:14 +0000
Manifest this update:     Fri 27 Jan 2023 09:34:14 +0000
Manifest next update:     Sat 28 Jan 2023 13:23:14 +0000
Files and hashes:         1: F9482A93DF3BCE7BB6B3F801727FA8E83B2D1B3E.crl (hash: eUrNIZ4FQM4Atps358HJbsTUEVfq5AbgUXzz45AQcC8=)
                          2: 3230312e3138322e3132302e302f32322d3234203d3e20323637353137.roa (hash: aizrXppAt9fn5cDOXqirL2GjQc1EKmvx3GGhs7PKUjQ=)
                          3: 323830343a343261383a3a2f33322d3332203d3e20323637353137.roa (hash: HXtPEoVpaPujlFbjVi7Okfm9sbToZK2eSMpSHoVuuc0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:bb:d8:61:b5:72:5f:0e:b4:60:c5:8a:f5:53:7f:4f:96:cf:96:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9482A93DF3BCE7BB6B3F801727FA8E83B2D1B3E
        Validity
            Not Before: Jan 27 09:34:14 2023 GMT
            Not After : Jan 28 13:23:14 2023 GMT
        Subject: CN=2D95B7B35A99C4B82330074127F0C3709EA7D0C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:4a:5d:d8:37:74:01:04:d5:06:51:bf:5a:df:
                    56:ae:dd:a2:1f:e6:34:e5:94:0b:d2:68:5f:ee:0c:
                    d3:47:4c:39:60:37:59:43:9e:bf:d6:3f:4a:83:d2:
                    57:33:22:1a:7b:a8:68:31:f2:76:22:d4:fe:e9:eb:
                    71:dc:38:5d:5e:60:2b:b6:92:16:90:4c:4c:82:fd:
                    9e:fc:76:1a:84:63:a1:77:4f:5d:2b:4b:8a:9f:71:
                    3f:1a:df:cf:26:a7:b5:49:a0:de:2b:28:4e:95:76:
                    5c:36:b2:d5:96:65:93:cd:29:d6:66:5a:c3:fa:7f:
                    85:4b:fe:dc:18:e7:6e:4a:b3:d4:b6:1d:19:07:2a:
                    b5:f5:84:c5:32:a6:51:af:06:89:a9:cc:83:e5:ed:
                    75:08:e7:a5:3b:b5:0e:13:10:17:c6:7f:0a:3b:29:
                    4e:24:1b:9a:8a:4a:9f:9b:3c:41:18:91:a0:ff:1c:
                    f2:cb:9a:09:df:25:6c:32:73:0a:bc:7f:50:1b:b6:
                    57:d5:32:e6:16:e9:56:01:9d:c4:32:1b:55:72:3f:
                    93:93:55:5f:36:a7:10:bb:7a:fc:7c:7a:37:c3:9b:
                    01:e4:d5:cb:34:59:5b:d8:e1:8a:a3:c0:c8:7f:31:
                    01:7d:77:51:c0:b3:a6:84:c7:12:b1:b6:f5:e1:e5:
                    37:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:95:B7:B3:5A:99:C4:B8:23:30:07:41:27:F0:C3:70:9E:A7:D0:C7
            X509v3 Authority Key Identifier:
                keyid:F9:48:2A:93:DF:3B:CE:7B:B6:B3:F8:01:72:7F:A8:E8:3B:2D:1B:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/0/F9482A93DF3BCE7BB6B3F801727FA8E83B2D1B3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9482A93DF3BCE7BB6B3F801727FA8E83B2D1B3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/0/F9482A93DF3BCE7BB6B3F801727FA8E83B2D1B3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:2f:8b:89:9a:d8:95:fb:78:47:f4:f7:53:43:d2:b2:89:b1:
         c4:0d:c3:d6:2f:87:ab:b3:31:ee:d0:6b:d9:bb:e9:8b:99:2a:
         58:e9:8e:44:63:cf:12:c6:a0:29:c7:2a:4b:e9:f4:76:2c:59:
         2f:2c:ed:8b:9c:d8:ca:66:af:a3:8a:65:20:e5:61:cd:f1:0c:
         6b:3f:c6:d9:6c:ef:60:da:b1:9d:3e:16:79:42:fd:f5:a7:05:
         19:7c:7c:54:48:63:dd:d5:6c:ca:ee:54:95:00:86:db:c0:de:
         87:54:07:e6:a2:15:e0:b4:f4:7a:fc:16:b0:71:1d:4e:5f:3c:
         c3:1e:8d:ad:c3:24:d3:80:33:08:68:d0:53:9f:93:40:fd:8c:
         a3:5f:6c:74:04:f6:b1:6d:f4:0b:21:e6:c2:ea:af:99:f7:10:
         da:6e:16:9c:db:d6:19:b2:41:43:5d:82:a5:87:15:66:14:d7:
         5a:cd:a9:be:80:88:1f:dd:05:56:55:15:55:21:be:20:ff:65:
         23:f8:0a:1a:f3:a9:4d:14:25:05:bb:d4:41:86:22:f0:ec:0f:
         b1:75:6f:9b:64:e2:7b:a4:49:4e:2a:e0:ad:b8:82:45:c5:0e:
         ae:48:e2:1e:2e:b0:e7:06:51:05:8b:72:c1:53:f8:44:be:b7:
         e0:2c:13:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----