Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/281328068781C273A57EF922D278B0369E04A6D5.mft
File:                     281328068781C273A57EF922D278B0369E04A6D5.mft (raw, json)
Hash identifier:          1Gn137C+14cjEoXICnmJthj/wuj5SIOULyJndH+mz38=
Subject key identifier:   3B:C6:4E:FA:4C:A8:11:13:A2:7A:FA:26:6D:42:B4:3C:01:F3:CC:7C
Authority key identifier: 28:13:28:06:87:81:C2:73:A5:7E:F9:22:D2:78:B0:36:9E:04:A6:D5
Certificate issuer:       /CN=281328068781C273A57EF922D278B0369E04A6D5
Certificate serial:       7C2707861007BEB195C470B7640E6FB0ED8830CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/281328068781C273A57EF922D278B0369E04A6D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/281328068781C273A57EF922D278B0369E04A6D5.mft
Manifest number:          A9
Signing time:             Mon 20 Mar 2023 09:19:28 +0000
Manifest this update:     Mon 20 Mar 2023 09:14:28 +0000
Manifest next update:     Tue 21 Mar 2023 12:08:28 +0000
Files and hashes:         1: 3137302e3234342e3138302e302f32322d3232203d3e20323636353036.roa (hash: bTcGkuE8SHQwQDeCClI1ba/pgiKvqXQabp8HvKtTtDs=)
                          2: 281328068781C273A57EF922D278B0369E04A6D5.crl (hash: +SoCwb6GWA96klpF30vJKsyqU2i4Za9Cb7ErAdOBYzg=)
                          3: 323830343a333864633a3a2f33322d3332203d3e20323636353036.roa (hash: MnYqXJfQ4P7A2xiTa2r5h1HBvTt6U7y31p3n/CDBdOc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:27:07:86:10:07:be:b1:95:c4:70:b7:64:0e:6f:b0:ed:88:30:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=281328068781C273A57EF922D278B0369E04A6D5
        Validity
            Not Before: Mar 20 09:14:28 2023 GMT
            Not After : Mar 21 12:08:28 2023 GMT
        Subject: CN=3BC64EFA4CA81113A27AFA266D42B43C01F3CC7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:81:5c:4d:d7:15:ef:54:f4:f3:d4:13:8b:03:
                    4d:d7:58:0b:b9:42:83:42:f2:a3:a2:de:09:25:b1:
                    a4:1e:03:4e:d7:6f:5e:42:9a:4b:43:e0:80:83:e4:
                    31:bc:a3:1b:74:35:4f:58:33:67:c4:90:a0:3d:39:
                    80:37:ee:38:0f:b8:44:c7:b9:7e:14:de:bb:20:80:
                    c4:73:01:9c:e0:9c:13:0c:82:70:f2:e3:b3:55:9e:
                    ab:24:c3:85:c8:06:b6:9b:42:8e:d7:6e:51:14:1e:
                    19:a5:aa:c3:29:35:02:cc:27:3d:73:a6:ac:cd:6c:
                    69:18:24:cb:14:08:08:06:5a:41:de:36:31:f0:cb:
                    8d:0d:25:51:8f:50:e8:fd:20:47:1a:00:e3:85:96:
                    82:0e:01:ef:75:29:8a:c4:93:e5:d3:02:73:83:dd:
                    d2:0c:52:c8:21:5a:23:a6:71:bf:4a:ff:bc:65:f4:
                    14:08:96:5d:08:c8:15:d0:5b:59:b4:59:89:bb:87:
                    20:3e:6c:96:34:6e:9a:66:9c:3e:86:a5:e1:a3:21:
                    34:db:fe:bf:16:3f:3e:e4:89:cd:77:ac:a6:d0:51:
                    c0:05:ea:70:01:2c:16:84:94:ec:33:61:29:4a:f9:
                    bf:e6:8f:cf:95:9a:48:0b:d0:01:75:dd:14:9a:1f:
                    22:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C6:4E:FA:4C:A8:11:13:A2:7A:FA:26:6D:42:B4:3C:01:F3:CC:7C
            X509v3 Authority Key Identifier:
                keyid:28:13:28:06:87:81:C2:73:A5:7E:F9:22:D2:78:B0:36:9E:04:A6:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/281328068781C273A57EF922D278B0369E04A6D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/281328068781C273A57EF922D278B0369E04A6D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/281328068781C273A57EF922D278B0369E04A6D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:40:ea:5e:af:ed:54:5b:2c:c0:38:1e:4d:42:d8:52:55:72:
         71:c5:a3:c0:92:82:e1:36:50:57:ad:81:34:a5:e8:f1:9d:b7:
         64:d6:c6:a3:50:5a:ca:1c:c7:59:a3:a0:4a:86:d9:80:33:b1:
         72:41:c0:a2:4d:51:85:7b:f9:df:3d:41:71:7c:cb:dc:e5:11:
         f6:bd:a7:c8:e8:f2:12:a3:d7:f6:90:6c:4b:6c:ec:40:f0:97:
         c7:50:64:08:ac:73:b1:5a:6c:61:54:c6:23:8e:9c:d3:ba:50:
         8a:0a:6f:b2:cc:ed:5a:ea:d9:6b:44:42:9f:73:6c:10:e9:8e:
         c0:d6:06:80:92:e9:fb:c7:71:ba:24:79:5a:2b:8b:a4:6c:06:
         d3:a0:95:3b:08:5c:46:47:23:ac:bd:45:26:c4:41:10:20:f2:
         bb:84:3b:4b:9e:6e:8f:78:fc:92:7e:40:28:3c:c2:6b:c5:85:
         66:ad:a8:52:0b:02:46:ab:c1:78:00:7d:8e:71:2f:f6:ae:3a:
         86:62:ff:a5:7b:84:c6:ec:9a:a2:c6:67:b5:82:ca:db:f4:5c:
         a3:56:4c:98:bf:8a:e5:db:19:b7:a2:c5:b0:15:c9:fa:20:d2:
         b6:1d:b5:56:19:a5:2e:1a:e4:3e:6a:d4:92:21:b4:53:e5:9c:
         59:67:e8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----