Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/D3CAB97915C0D30D0E7B53C605755C025D209C8D.mft
File:                     D3CAB97915C0D30D0E7B53C605755C025D209C8D.mft (raw, json)
Hash identifier:          OqvB1qbt2eqjwhVLW1U2jgXNfZcvIakJQ+W7GDxRlJw=
Subject key identifier:   BB:3D:FB:A4:2D:79:24:A5:D5:79:41:E8:92:60:BE:53:95:94:82:49
Authority key identifier: D3:CA:B9:79:15:C0:D3:0D:0E:7B:53:C6:05:75:5C:02:5D:20:9C:8D
Certificate issuer:       /CN=D3CAB97915C0D30D0E7B53C605755C025D209C8D
Certificate serial:       9D84AA566454732D52496652FDC668141D6AB3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D3CAB97915C0D30D0E7B53C605755C025D209C8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/D3CAB97915C0D30D0E7B53C605755C025D209C8D.mft
Manifest number:          0C
Signing time:             Sat 09 Jul 2022 13:26:44 +0000
Manifest this update:     Sat 09 Jul 2022 13:21:44 +0000
Manifest next update:     Sun 10 Jul 2022 13:30:44 +0000
Files and hashes:         1: 3137302e3234342e3138332e302f32342d3234203d3e20323636353036.roa (hash: eccBjYLxs+KgyyZpZnTCI7Z3GMV2lDPvO30rTfLzuOM=)
                          2: 3137302e3234342e3138312e302f32342d3234203d3e20323636353036.roa (hash: RyMqFt64Kif1quYWTmBPhFVv1B8Ve7XIv+DXQ6/OC+o=)
                          3: 3137302e3234342e3138322e302f32342d3234203d3e20323636353036.roa (hash: FtFA59a3DLS8zcmn8uRr7mbmBUM/vPbdfGbSbD9h9yA=)
                          4: D3CAB97915C0D30D0E7B53C605755C025D209C8D.crl (hash: +YDqwOe3STgqPDf1DvmEIk4WPu60ytsZAA/aGpaYlBI=)
                          5: 323830343a333864633a3a2f33322d3332203d3e20323636353036.roa (hash: fcHe9UoGKcEukn5+EagL2XOIB5SkXfkCZ7jCR6dU6J4=)
                          6: 3137302e3234342e3138302e302f32342d3234203d3e20323636353036.roa (hash: /pD1ae7Axt787RO/6oTf6BAHyGpM0lLMXccArYqlT9k=)
                          7: 3137302e3234342e3138302e302f32322d3232203d3e20323636353036.roa (hash: DktNhsQdPHj0VBOLnulhsvGsWERLSM+kuUWbpLirqMM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            9d:84:aa:56:64:54:73:2d:52:49:66:52:fd:c6:68:14:1d:6a:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3CAB97915C0D30D0E7B53C605755C025D209C8D
        Validity
            Not Before: Jul  9 13:21:44 2022 GMT
            Not After : Jul 10 13:30:44 2022 GMT
        Subject: CN=BB3DFBA42D7924A5D57941E89260BE5395948249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c9:98:1c:ae:60:a9:79:8a:5a:b3:97:3b:bd:
                    15:4f:c5:ac:1b:ab:cd:a3:17:e6:b1:76:d0:fe:ab:
                    fb:a0:09:3f:72:14:eb:ea:6a:57:da:81:a1:fb:75:
                    e4:a4:b8:dc:cf:89:6a:c7:20:77:04:be:ea:a0:a6:
                    f6:19:a4:71:50:93:cc:36:fe:3a:08:d0:43:7a:85:
                    01:da:f2:71:34:5a:d1:6d:df:ec:c8:7e:ca:98:15:
                    00:f5:ce:6c:3a:f0:1d:e7:8d:60:05:92:5c:fc:b6:
                    23:c2:ee:18:1e:93:87:dd:60:6e:2a:f7:1f:3a:c4:
                    bd:ff:b0:a0:a1:1c:ce:7a:28:53:01:9b:9c:e7:3c:
                    40:21:ce:ee:94:c5:42:af:d1:bf:cb:14:4c:9a:55:
                    4b:d0:78:83:67:5e:9c:88:90:3c:c6:c4:22:94:8e:
                    1d:40:e6:8d:93:0c:43:14:71:1a:0d:bd:dd:10:1c:
                    96:cb:bb:88:ce:e4:d0:c9:e5:3e:0c:25:39:8a:01:
                    d1:44:62:f1:09:98:8b:ec:9c:04:61:d1:25:64:02:
                    2d:0b:73:56:43:dd:ad:a0:98:fc:cd:2b:13:0e:2f:
                    27:8e:8d:17:03:c5:f9:be:81:f4:02:1c:4f:a9:bb:
                    ab:66:6b:e3:8c:31:b0:d8:63:ae:d3:d6:7a:46:c4:
                    90:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:3D:FB:A4:2D:79:24:A5:D5:79:41:E8:92:60:BE:53:95:94:82:49
            X509v3 Authority Key Identifier:
                keyid:D3:CA:B9:79:15:C0:D3:0D:0E:7B:53:C6:05:75:5C:02:5D:20:9C:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/D3CAB97915C0D30D0E7B53C605755C025D209C8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D3CAB97915C0D30D0E7B53C605755C025D209C8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/D3CAB97915C0D30D0E7B53C605755C025D209C8D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:fc:83:cc:5b:27:31:8b:74:86:93:a6:09:8b:f4:58:ba:49:
         b0:33:50:60:3e:34:ee:9a:57:12:db:1d:5f:ff:8b:b1:85:fc:
         5b:bc:c3:e9:4d:14:06:24:8d:84:9f:97:76:08:1c:ba:ce:06:
         a9:b0:53:49:09:d4:e3:13:93:90:49:25:bc:51:86:4d:83:aa:
         e9:ac:93:42:49:33:6c:0d:bd:92:a5:3c:04:c7:15:a0:16:24:
         03:b1:79:90:ae:20:c2:12:2c:92:56:27:23:91:9e:0c:11:c9:
         37:43:22:40:0e:86:2c:6d:aa:73:dd:12:41:f3:bc:d5:4e:e0:
         2c:86:aa:dd:81:4c:4d:23:32:ce:08:d1:69:e9:f4:0f:94:4a:
         64:62:6a:05:ef:d5:c6:db:fb:33:c8:94:9c:20:46:6f:5d:37:
         17:57:46:93:76:5d:d5:e9:ae:09:b8:53:39:a8:d4:91:c2:f9:
         ab:ed:30:a0:51:e0:ba:64:d2:66:88:04:74:ee:9b:7f:bd:7a:
         f6:7b:3f:43:1c:40:73:08:96:b2:a2:3a:d5:0c:32:70:2d:b2:
         8b:c8:34:28:a8:a7:9e:35:8b:5d:52:f8:b7:6d:96:d8:f2:54:
         c4:e2:5f:9e:67:99:cb:94:32:70:a8:58:ac:da:94:a2:23:84:
         46:1e:3c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----