Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2nvxQgRJP5Pt1JxoGCbQw5AkB2yr6VEcfKt6KKKU54XD/0/A241D017C20F338021199DDB6542CF566A53BB03.mft
File:                     A241D017C20F338021199DDB6542CF566A53BB03.mft (raw, json)
Hash identifier:          +467kVDuY3ZMsC0GgSytfoouRKhg8li5PvfdhXHBa0w=
Subject key identifier:   50:40:C4:04:38:CD:99:01:1E:D7:4D:C9:A2:25:6B:0E:70:6B:29:05
Authority key identifier: A2:41:D0:17:C2:0F:33:80:21:19:9D:DB:65:42:CF:56:6A:53:BB:03
Certificate issuer:       /CN=A241D017C20F338021199DDB6542CF566A53BB03
Certificate serial:       171B261B84CDA981925E5453C3AA4164581523FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A241D017C20F338021199DDB6542CF566A53BB03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nvxQgRJP5Pt1JxoGCbQw5AkB2yr6VEcfKt6KKKU54XD/0/A241D017C20F338021199DDB6542CF566A53BB03.mft
Manifest number:          7F
Signing time:             Mon 13 Feb 2023 08:15:15 +0000
Manifest this update:     Mon 13 Feb 2023 08:10:15 +0000
Manifest next update:     Tue 14 Feb 2023 09:16:15 +0000
Files and hashes:         1: A241D017C20F338021199DDB6542CF566A53BB03.crl (hash: pBAwbabd6tKzJMzTm9Z6kENtSXkUkBybICMQ3zboyJs=)
                          2: 323830343a363562343a3a2f33322d313238203d3e20323639353039.roa (hash: a5M88I5xVILRaC/5msFWJXA1Lo2oeGYZD7xTVDD0KaY=)
                          3: 34352e3138382e3132302e302f32322d3332203d3e20323639353039.roa (hash: xIV2b+aarEpSsoFWnhyNRDnPZWk0W/hpbDHxEbuFt+s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:1b:26:1b:84:cd:a9:81:92:5e:54:53:c3:aa:41:64:58:15:23:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A241D017C20F338021199DDB6542CF566A53BB03
        Validity
            Not Before: Feb 13 08:10:15 2023 GMT
            Not After : Feb 14 09:16:15 2023 GMT
        Subject: CN=5040C40438CD99011ED74DC9A2256B0E706B2905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:70:ea:26:79:a7:99:19:91:79:18:83:ac:b4:
                    71:b3:86:5b:75:90:0d:78:99:21:83:ea:03:ee:9e:
                    34:8a:9e:33:51:85:94:52:fb:48:8e:3a:1b:45:0f:
                    80:78:1a:b2:54:37:cb:c6:da:a5:8d:b7:11:f1:35:
                    7f:65:2b:ff:9f:55:13:81:5d:6f:f0:36:01:48:51:
                    1a:2f:ba:54:c3:94:a6:9a:71:ff:14:09:9a:7d:60:
                    72:43:e2:31:a2:58:ba:e6:01:e1:0c:00:0c:45:21:
                    87:31:06:d1:45:fa:ce:6c:4c:d3:57:8b:ab:67:4a:
                    9f:9b:2f:66:8d:e6:37:0c:ec:7f:54:ce:2b:4e:6a:
                    31:b5:ae:e2:1f:53:69:4b:37:8f:37:51:91:b4:69:
                    aa:17:5b:35:8d:a8:5d:5b:b5:85:0a:c7:57:47:45:
                    1e:45:02:46:4d:a7:d5:15:65:69:71:17:5b:6a:23:
                    12:46:d3:46:af:7f:d4:4b:07:4a:50:1c:3c:5d:0d:
                    e6:bc:a8:24:66:3e:c8:09:e3:59:22:cf:d3:17:e6:
                    94:ea:b9:c6:cb:21:8d:1a:2a:b5:08:01:9c:a9:f0:
                    b2:f8:8c:e5:ff:39:31:8e:64:71:fa:b8:76:b1:d5:
                    71:93:3b:01:c8:00:39:e1:8b:30:59:99:ec:b3:5b:
                    74:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:40:C4:04:38:CD:99:01:1E:D7:4D:C9:A2:25:6B:0E:70:6B:29:05
            X509v3 Authority Key Identifier:
                keyid:A2:41:D0:17:C2:0F:33:80:21:19:9D:DB:65:42:CF:56:6A:53:BB:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nvxQgRJP5Pt1JxoGCbQw5AkB2yr6VEcfKt6KKKU54XD/0/A241D017C20F338021199DDB6542CF566A53BB03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A241D017C20F338021199DDB6542CF566A53BB03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nvxQgRJP5Pt1JxoGCbQw5AkB2yr6VEcfKt6KKKU54XD/0/A241D017C20F338021199DDB6542CF566A53BB03.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:37:93:8f:a4:fa:ca:c5:e6:c7:15:61:bf:f7:06:f6:96:78:
         65:fd:ba:45:93:2e:ae:c2:6a:7c:4f:d5:8f:98:a3:2d:b5:64:
         fc:0b:1c:2f:27:cf:b4:5e:49:8b:f9:d9:b7:a2:9b:77:e8:69:
         9b:83:ef:eb:c2:69:20:f2:45:9d:f9:76:1a:68:cb:c7:ed:de:
         f3:c1:e0:81:a6:48:5f:79:72:9f:70:02:da:85:d7:75:da:17:
         6a:8c:fe:94:10:2c:47:85:f1:32:15:b0:b2:fa:bf:14:0e:56:
         68:73:a8:13:8b:67:7c:59:5d:8e:54:72:6d:e5:8c:3f:a5:1e:
         94:88:35:e6:52:2f:17:80:b3:1a:b7:5d:b6:ee:e8:c7:a8:e4:
         f0:75:54:37:ed:ad:26:52:83:0b:77:cb:ef:34:92:bd:dd:e8:
         e3:dd:cc:1e:88:f6:77:be:b6:c4:47:2b:cc:05:de:9f:fc:64:
         f0:12:f2:19:c2:cd:40:c0:4c:ec:d5:c6:ad:51:84:92:7c:dd:
         ee:72:9a:55:d7:e2:bc:2a:0e:47:df:25:c5:3b:9e:9b:e7:25:
         e6:fe:71:fa:14:47:f8:60:cb:2d:bf:f1:4d:85:33:34:85:bf:
         9d:86:d0:95:15:81:93:38:98:ec:a3:1f:15:b4:b3:b5:69:4e:
         ad:e5:13:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----