Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2gruTcwzMGNrGBCWmsvYieu1HhFR1NBhpoHf83HKpxpj/0/70D6F03C94BBDD1EEA9A12F594C3E70ACB60253F.mft
File:                     70D6F03C94BBDD1EEA9A12F594C3E70ACB60253F.mft (raw, json)
Hash identifier:          Dea++msq2hIbIFaewEaTT8FFxi/CkN0kUSL2Y25QuM4=
Subject key identifier:   96:C8:1E:4B:D8:39:21:05:85:45:84:8F:FA:33:0C:BC:4F:8A:D1:F3
Authority key identifier: 70:D6:F0:3C:94:BB:DD:1E:EA:9A:12:F5:94:C3:E7:0A:CB:60:25:3F
Certificate issuer:       /CN=70D6F03C94BBDD1EEA9A12F594C3E70ACB60253F
Certificate serial:       5EF7F916D5897269033D26F324794F5DDF402201
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70D6F03C94BBDD1EEA9A12F594C3E70ACB60253F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2gruTcwzMGNrGBCWmsvYieu1HhFR1NBhpoHf83HKpxpj/0/70D6F03C94BBDD1EEA9A12F594C3E70ACB60253F.mft
Manifest number:          048A
Signing time:             Sat 15 Jul 2023 11:52:48 +0000
Manifest this update:     Sat 15 Jul 2023 11:47:48 +0000
Manifest next update:     Sun 16 Jul 2023 14:13:48 +0000
Files and hashes:         1: 70D6F03C94BBDD1EEA9A12F594C3E70ACB60253F.crl (hash: HDsLm0Y1smBCePyf1LYVUm1bxGxReZFLXHq0hnlBdmQ=)
                          2: 3230302e3131352e3130302e302f32322d3234203d3e20323730323638.roa (hash: tvqOn1sFZNNl590K4Z4AxNzJWjTNZuw8wWQISZwGalE=)
                          3: 323830343a363936383a3a2f33322d3332203d3e20323730323638.roa (hash: 9YOf+xmnjcmCzNWHA71kJZjNNCq1T86ammYgCqmaxE0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:f7:f9:16:d5:89:72:69:03:3d:26:f3:24:79:4f:5d:df:40:22:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70D6F03C94BBDD1EEA9A12F594C3E70ACB60253F
        Validity
            Not Before: Jul 15 11:47:48 2023 GMT
            Not After : Jul 16 14:13:48 2023 GMT
        Subject: CN=96C81E4BD83921058545848FFA330CBC4F8AD1F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:47:9d:b2:e0:77:ac:fa:aa:0d:81:ee:93:bf:
                    1c:50:39:cf:05:4c:d2:aa:e6:39:0e:0c:45:5c:ef:
                    6b:3d:c8:d0:92:3a:43:c8:65:0b:88:1d:51:16:aa:
                    dc:80:5f:cb:ea:6f:eb:7a:44:c4:fc:71:e3:74:af:
                    78:9d:01:10:48:8e:14:e6:b4:63:17:90:30:e4:b3:
                    10:46:5d:1b:cc:a1:84:e6:32:08:8c:37:8a:04:1d:
                    16:9b:80:6b:89:3e:b5:0f:b0:80:2a:89:b9:e0:99:
                    3d:9f:29:13:b3:43:e5:44:3e:47:4b:24:8d:c7:ed:
                    eb:5f:be:00:12:a6:6e:66:00:eb:86:13:ef:f1:3b:
                    36:58:34:db:11:62:3d:cb:75:69:aa:22:08:c0:98:
                    cc:80:0f:13:47:3c:c2:d1:b7:99:4e:80:fe:7c:ce:
                    a1:5b:1d:91:62:f6:14:a1:00:77:ae:a7:f1:77:8c:
                    4d:17:c2:cb:6e:25:a9:48:b7:90:4b:c8:76:4a:5f:
                    49:7e:3b:3d:f0:84:09:41:fd:e1:da:1f:0d:a8:d9:
                    59:14:7a:96:87:be:ac:4f:85:fe:b6:0f:7e:30:d4:
                    a4:4c:36:b8:8b:52:e6:91:f9:0a:03:76:e8:7a:c6:
                    43:cf:7b:0a:cd:dc:59:7e:d5:f2:e3:cd:05:d5:fe:
                    bc:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C8:1E:4B:D8:39:21:05:85:45:84:8F:FA:33:0C:BC:4F:8A:D1:F3
            X509v3 Authority Key Identifier:
                keyid:70:D6:F0:3C:94:BB:DD:1E:EA:9A:12:F5:94:C3:E7:0A:CB:60:25:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2gruTcwzMGNrGBCWmsvYieu1HhFR1NBhpoHf83HKpxpj/0/70D6F03C94BBDD1EEA9A12F594C3E70ACB60253F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70D6F03C94BBDD1EEA9A12F594C3E70ACB60253F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2gruTcwzMGNrGBCWmsvYieu1HhFR1NBhpoHf83HKpxpj/0/70D6F03C94BBDD1EEA9A12F594C3E70ACB60253F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:b6:fe:86:73:37:e3:43:59:2a:b0:15:e7:aa:01:75:70:c1:
         8f:19:aa:7f:6d:1b:8c:ae:20:93:81:45:13:e5:0c:64:6c:2e:
         17:be:ad:2c:f5:fb:f3:a3:76:4b:88:70:63:f5:95:dc:7d:4f:
         3e:76:27:c2:b0:95:0f:06:04:f5:10:84:f5:96:f7:56:d2:87:
         71:bb:7d:cb:49:ea:6f:cd:c8:67:bc:6e:d7:e2:2e:df:37:fe:
         c0:d0:08:f4:6f:74:68:bd:e7:58:5e:d9:84:cc:fb:c1:86:da:
         c4:a1:ff:17:56:19:09:3e:7a:e8:c0:c3:88:61:61:0f:45:87:
         46:d8:5e:66:1e:24:ed:d6:e8:c4:1e:1b:48:bb:2b:85:39:32:
         64:1a:ff:d6:d9:b6:d6:9e:db:95:92:dd:a5:f5:4b:6e:d4:87:
         2d:d3:e9:40:c7:12:cb:21:7c:e2:78:e6:75:d1:a6:32:98:4b:
         42:30:22:b6:01:7b:e9:98:bf:e6:c6:33:c0:27:05:28:f4:4d:
         72:b0:4b:6b:35:7b:aa:7f:43:e6:57:0f:6f:38:67:d5:49:6e:
         f0:3f:17:9d:7b:29:34:6c:89:bb:be:ce:3d:0b:3f:70:be:fe:
         59:7d:97:0d:aa:66:6c:6e:21:ce:47:66:c1:64:bb:e5:12:ea:
         ce:0e:60:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----