Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/06752EAA3A633FE6238AF0F9A15355E44C6C7799.mft
File:                     06752EAA3A633FE6238AF0F9A15355E44C6C7799.mft (raw, json)
Hash identifier:          T23HSLoEWlepqArcQzqPpnWQz3b6vNS10umhnHR4zr4=
Subject key identifier:   F6:95:49:A6:E5:34:20:41:DB:ED:C4:89:5B:41:27:AE:23:FE:3A:71
Authority key identifier: 06:75:2E:AA:3A:63:3F:E6:23:8A:F0:F9:A1:53:55:E4:4C:6C:77:99
Certificate issuer:       /CN=06752EAA3A633FE6238AF0F9A15355E44C6C7799
Certificate serial:       143C92F39D5B1006503C2253092C74DD3E5B804F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/06752EAA3A633FE6238AF0F9A15355E44C6C7799.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/06752EAA3A633FE6238AF0F9A15355E44C6C7799.mft
Manifest number:          D3
Signing time:             Tue 21 Jun 2022 21:38:53 +0000
Manifest this update:     Tue 21 Jun 2022 21:33:53 +0000
Manifest next update:     Thu 23 Jun 2022 00:25:53 +0000
Files and hashes:         1: 3137302e3234342e3138302e302f32322d3232203d3e20323636353036.roa (hash: hHV3XhDJLj612lDIbVDOEFhxCX9SCSnJMpABGpLN67Y=)
                          2: 323830343a333864633a3a2f33322d3332203d3e20323636353036.roa (hash: arS8LsNa7gzJJsheKSeLxbOUqLpon0bkYxqBE9qeC70=)
                          3: 06752EAA3A633FE6238AF0F9A15355E44C6C7799.crl (hash: U2aO4Wu/bwLZDOeqGdz6rDixLy5hfwMUFzOW3WlpHuQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:3c:92:f3:9d:5b:10:06:50:3c:22:53:09:2c:74:dd:3e:5b:80:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06752EAA3A633FE6238AF0F9A15355E44C6C7799
        Validity
            Not Before: Jun 21 21:33:53 2022 GMT
            Not After : Jun 23 00:25:53 2022 GMT
        Subject: CN=F69549A6E5342041DBEDC4895B4127AE23FE3A71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a6:a6:3c:e8:ba:9b:4b:2d:74:69:52:d3:fa:
                    ab:10:62:3b:07:ed:97:66:b9:26:ae:7e:46:27:09:
                    d6:86:82:1b:1e:20:e0:8b:7c:f5:75:5c:e6:4f:4b:
                    ac:95:0c:14:18:99:d9:96:51:04:92:c7:ea:eb:b5:
                    f3:68:00:3e:98:fb:c8:9f:db:66:28:d9:37:b0:f2:
                    34:7d:49:95:7a:1f:8d:ce:dd:f3:fb:c2:e5:10:2c:
                    47:e4:6d:a2:04:14:53:0e:02:1c:86:b5:86:d1:9e:
                    0a:bb:ee:f0:00:0e:13:fd:f8:1e:88:35:23:c4:c2:
                    40:d7:db:d4:02:3d:aa:91:86:46:55:3f:5c:14:92:
                    38:ba:ba:05:6e:a5:27:ce:07:e0:3f:89:ff:c3:1f:
                    9f:81:ee:98:be:56:3a:6e:1a:77:15:75:76:c0:c9:
                    6d:36:c3:bb:b2:42:a2:7b:7d:c7:99:9e:36:b5:e8:
                    77:86:27:57:4f:bd:f9:53:2c:5a:10:4f:52:56:38:
                    14:9c:c1:12:9f:4b:ce:38:dc:6c:7b:06:58:1d:a1:
                    a8:dc:50:70:4d:a1:11:5a:b5:11:bd:58:ab:e3:62:
                    fe:ca:34:8e:57:8a:a4:a3:5f:4e:66:18:19:fe:17:
                    7a:dd:60:5c:8b:fd:40:a4:b4:bd:a2:93:93:bf:b9:
                    7a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:95:49:A6:E5:34:20:41:DB:ED:C4:89:5B:41:27:AE:23:FE:3A:71
            X509v3 Authority Key Identifier:
                keyid:06:75:2E:AA:3A:63:3F:E6:23:8A:F0:F9:A1:53:55:E4:4C:6C:77:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/06752EAA3A633FE6238AF0F9A15355E44C6C7799.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/06752EAA3A633FE6238AF0F9A15355E44C6C7799.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/06752EAA3A633FE6238AF0F9A15355E44C6C7799.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:14:32:b9:4a:6a:63:45:6d:30:31:69:8d:81:0f:22:eb:b2:
         50:74:ad:77:cd:9c:32:6a:f8:22:d8:81:67:1c:4b:f0:49:fe:
         0f:1d:ad:62:2a:2e:4b:75:2b:28:95:fd:56:5e:f2:95:86:30:
         81:ad:26:28:48:79:bd:62:53:98:06:aa:2a:f7:0e:02:72:71:
         28:ab:d9:34:c4:50:f2:01:d2:84:3a:22:66:19:e1:cb:04:eb:
         32:41:d2:b7:72:cb:7c:7c:29:e7:80:15:5b:ce:e2:06:d2:b4:
         c2:bc:27:c8:77:97:73:1e:36:c5:2c:4c:ab:d7:fd:b0:c7:60:
         c4:7d:08:3c:6a:1a:04:be:19:99:c7:b0:5d:31:03:74:1f:f9:
         f1:e7:1e:7a:34:0c:df:57:f7:cd:ab:b9:67:6e:c3:56:a3:62:
         46:7c:df:19:91:f8:0d:f1:b8:6d:4c:d9:e4:aa:bf:fb:60:a4:
         26:8d:c4:4a:74:14:71:bf:0d:76:18:13:74:80:1a:03:35:68:
         42:a3:47:4c:e2:dd:c3:a6:68:b3:f3:f2:fa:c0:e2:d3:1c:dc:
         ca:db:2b:28:b5:6d:5b:89:d5:34:19:a1:91:84:0a:e1:9a:4e:
         74:2d:a7:a1:26:ec:24:c1:76:90:d6:19:67:66:bb:27:35:76:
         e4:48:9c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----