Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/90863AF4D9030AECC98F323AFF9895F2FA31FCE6.mft
File:                     90863AF4D9030AECC98F323AFF9895F2FA31FCE6.mft (raw, json)
Hash identifier:          lY2Q15H4XCXKlgsXB3RBSGcHvk24KtuvBnyfwXip/bk=
Subject key identifier:   10:C0:AD:54:FD:D9:1A:6E:E5:6B:E1:A4:FF:8F:43:85:FA:20:82:4D
Authority key identifier: 90:86:3A:F4:D9:03:0A:EC:C9:8F:32:3A:FF:98:95:F2:FA:31:FC:E6
Certificate issuer:       /CN=90863AF4D9030AECC98F323AFF9895F2FA31FCE6
Certificate serial:       2026FACE35E5DBAE654D2695FE21A55DA86C4065
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90863AF4D9030AECC98F323AFF9895F2FA31FCE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/90863AF4D9030AECC98F323AFF9895F2FA31FCE6.mft
Manifest number:          B0
Signing time:             Tue 28 Jun 2022 00:03:45 +0000
Manifest this update:     Mon 27 Jun 2022 23:58:45 +0000
Manifest next update:     Wed 29 Jun 2022 03:06:45 +0000
Files and hashes:         1: 323830343a373935303a3a2f33322d3438203d3e20323731323938.roa (hash: 0gIsigPtOieYBN4mebR1ZJDjflY4TSSWTB1tYBLcpWs=)
                          2: 90863AF4D9030AECC98F323AFF9895F2FA31FCE6.crl (hash: n6ydYPHL8jZ11XYQIv2GyhKfg+K8RRBIpA7VUGrmyec=)
                          3: 3230302e35332e38342e302f32322d3234203d3e20323731323938.roa (hash: a68N1R4GtCq8yoglCHTXL2ateK7Qmk39In6lAFpmkmE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:26:fa:ce:35:e5:db:ae:65:4d:26:95:fe:21:a5:5d:a8:6c:40:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90863AF4D9030AECC98F323AFF9895F2FA31FCE6
        Validity
            Not Before: Jun 27 23:58:45 2022 GMT
            Not After : Jun 29 03:06:45 2022 GMT
        Subject: CN=10C0AD54FDD91A6EE56BE1A4FF8F4385FA20824D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fe:78:34:57:97:7c:81:fe:b2:bb:01:38:e6:
                    36:0a:b3:a4:3c:36:c7:bf:be:aa:c6:90:76:89:b5:
                    06:14:02:db:f1:99:d2:d0:86:74:a9:ef:9f:13:e9:
                    96:60:75:2d:97:f5:98:d6:aa:1a:02:ec:cd:b5:0b:
                    d1:e4:85:78:24:cc:7f:2d:c8:4f:22:8a:86:f2:5c:
                    00:23:3f:4b:fc:62:b2:35:bf:48:ab:1a:17:56:6c:
                    42:c3:b0:e4:ff:37:2f:d9:ff:5f:6d:d6:5a:3b:3b:
                    be:7a:fb:38:47:b2:15:95:e1:79:1c:00:0f:30:3f:
                    1b:72:d1:d3:44:c3:0a:c5:38:9e:e5:2a:f6:77:0d:
                    5b:f9:d0:f1:fd:d6:55:38:c7:56:be:55:a4:96:9c:
                    ab:a7:d5:4f:95:f4:89:b5:4f:14:e1:03:09:3d:e9:
                    27:3c:f1:51:c8:39:29:26:46:d5:a7:6d:32:68:37:
                    4f:21:f5:2e:1a:15:bb:f6:eb:3e:31:d9:d9:65:06:
                    2e:56:2e:53:0f:a9:2c:f0:dd:a7:c7:96:d2:ea:91:
                    51:a6:43:59:bf:87:07:3f:6f:d9:11:1e:cc:42:58:
                    21:dc:ef:9d:53:03:3c:ac:bf:e2:0c:e7:28:c4:fb:
                    58:8e:e4:92:26:90:25:8e:c6:f3:f9:27:40:cd:4f:
                    8b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C0:AD:54:FD:D9:1A:6E:E5:6B:E1:A4:FF:8F:43:85:FA:20:82:4D
            X509v3 Authority Key Identifier:
                keyid:90:86:3A:F4:D9:03:0A:EC:C9:8F:32:3A:FF:98:95:F2:FA:31:FC:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/90863AF4D9030AECC98F323AFF9895F2FA31FCE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90863AF4D9030AECC98F323AFF9895F2FA31FCE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/90863AF4D9030AECC98F323AFF9895F2FA31FCE6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:51:3f:9f:45:5f:77:a9:07:57:4f:a0:52:fe:67:d8:3f:3e:
         a5:c3:71:72:08:e9:ce:1f:21:16:cb:89:25:a7:c9:fd:76:65:
         5c:24:21:59:f8:24:84:05:33:28:69:85:32:14:4e:4f:78:9f:
         03:27:3f:13:16:fd:7e:95:3b:a0:94:90:c6:d1:c8:6f:8a:78:
         f9:51:ef:a4:09:11:55:72:5b:89:e9:ef:5f:a7:17:f4:88:0e:
         33:57:b4:71:bf:e1:23:9b:18:b1:1d:a5:46:fa:52:41:40:60:
         60:ad:c5:f2:22:14:3f:92:93:a6:7b:0c:c4:95:3f:b1:66:cb:
         49:03:5b:55:d4:3c:14:37:64:ab:00:1f:31:10:41:5d:9c:76:
         3a:40:27:b2:d1:e3:1d:a7:c5:46:98:4b:45:0a:2e:5e:f6:ef:
         f1:6b:0f:71:62:5c:f4:b9:b1:8f:5e:ce:fc:12:18:2b:ff:b1:
         57:08:99:b3:b2:71:22:1b:05:7c:2d:81:c6:4e:88:1f:ad:72:
         44:ad:eb:52:df:00:bb:6b:8e:aa:68:b2:fe:cb:d0:68:b9:bb:
         d9:9d:d8:a2:9a:68:67:16:f9:5a:a4:b3:8d:33:a3:81:42:47:
         dd:24:2a:21:29:8f:f0:16:80:dc:ce:7e:cc:db:5d:fc:4d:7e:
         41:89:03:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----