Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0/CA7BD435419921E9B64C08B38696678579117B8F.mft
File:                     CA7BD435419921E9B64C08B38696678579117B8F.mft (raw, json)
Hash identifier:          Z9JEI0gQzauKNPzpQVhl3y2RWGDtNsIJK7xCtzbIGnM=
Subject key identifier:   43:6D:40:79:DD:41:94:68:5C:25:F2:54:D3:DF:70:7C:8D:65:3F:F9
Authority key identifier: CA:7B:D4:35:41:99:21:E9:B6:4C:08:B3:86:96:67:85:79:11:7B:8F
Certificate issuer:       /CN=CA7BD435419921E9B64C08B38696678579117B8F
Certificate serial:       18C8519B6AD858767A09C45AF4A36A5858F92963
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA7BD435419921E9B64C08B38696678579117B8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0/CA7BD435419921E9B64C08B38696678579117B8F.mft
Manifest number:          03FB
Signing time:             Fri 18 Nov 2022 05:11:50 +0000
Manifest this update:     Fri 18 Nov 2022 05:06:50 +0000
Manifest next update:     Sat 19 Nov 2022 08:08:50 +0000
Files and hashes:         1: 34352e3136382e36342e302f32322d3234203d3e20323638313338.roa (hash: QH9syuDZQ/WhQErGqWLsrvGp3LklP/1xbQE6OW/bDOE=)
                          2: CA7BD435419921E9B64C08B38696678579117B8F.crl (hash: pVWEOgEhU1iTnUQGdWC5l/Jjzu03d/NNDEVSHeTe5UA=)
                          3: 323830343a353839383a3a2f33322d3438203d3e20323638313338.roa (hash: yKcIvn5qNuwMLrqy6YAjpqK3izKHZvIYSOb0XM4MuFY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c8:51:9b:6a:d8:58:76:7a:09:c4:5a:f4:a3:6a:58:58:f9:29:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA7BD435419921E9B64C08B38696678579117B8F
        Validity
            Not Before: Nov 18 05:06:50 2022 GMT
            Not After : Nov 19 08:08:50 2022 GMT
        Subject: CN=436D4079DD4194685C25F254D3DF707C8D653FF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2b:33:b0:8f:5f:3c:b9:16:12:d3:57:56:86:
                    4b:65:51:ba:48:b4:8a:b6:d6:d2:1c:9c:3d:e5:57:
                    4a:b9:14:28:45:8b:e0:0d:b0:9a:b1:12:74:e1:29:
                    0a:0a:ad:c6:02:02:dd:b0:3d:40:e5:cb:82:14:b9:
                    d5:08:12:3c:9a:6b:3e:43:8e:90:90:68:50:1f:ef:
                    33:f6:25:d0:99:5d:23:91:47:e1:f3:b8:77:90:f1:
                    49:bd:e9:d0:e0:88:bf:75:4a:aa:2a:43:dc:da:65:
                    dd:0e:d7:44:31:d9:c3:7d:41:35:4d:3c:d4:7a:ed:
                    fa:60:ae:e0:e5:ad:37:30:86:06:53:54:f6:a3:3e:
                    c6:06:f4:05:ac:89:84:f1:31:a2:ee:77:70:01:88:
                    07:2e:6c:e4:a8:6e:da:8d:1e:af:b3:0d:9a:d4:47:
                    f4:93:65:2d:51:71:50:dc:8e:25:2f:d3:27:19:03:
                    3d:aa:65:ee:5d:ff:eb:ca:d5:02:c6:dc:16:eb:03:
                    a6:c3:c6:66:44:df:6c:c5:43:5e:e4:51:af:36:66:
                    84:36:19:da:4a:f7:2b:e2:c2:a1:1c:e0:72:ca:a7:
                    31:f0:95:bf:2a:8b:48:e0:c2:8d:96:79:75:1c:0d:
                    be:99:30:f1:cb:af:29:36:27:37:ec:f5:48:8e:2c:
                    e6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:6D:40:79:DD:41:94:68:5C:25:F2:54:D3:DF:70:7C:8D:65:3F:F9
            X509v3 Authority Key Identifier:
                keyid:CA:7B:D4:35:41:99:21:E9:B6:4C:08:B3:86:96:67:85:79:11:7B:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0/CA7BD435419921E9B64C08B38696678579117B8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA7BD435419921E9B64C08B38696678579117B8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0/CA7BD435419921E9B64C08B38696678579117B8F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:f2:3d:b5:ac:96:d0:39:f8:0b:f7:e4:d9:0a:94:a5:eb:af:
         ba:9c:0d:f2:41:bc:67:5d:eb:81:55:05:23:2e:8f:42:28:2b:
         a1:2a:74:ae:f4:00:77:c8:57:ff:f4:0b:f2:24:0c:89:eb:09:
         45:28:d4:da:af:2e:84:26:d5:96:9f:46:99:40:ac:5e:1b:e2:
         80:32:29:d9:cd:5c:eb:91:04:41:c2:39:32:15:fd:7a:7f:d1:
         50:17:3f:6a:af:f4:0d:8e:26:9c:fc:5c:6d:df:2f:dd:e3:7c:
         e4:53:a7:51:e2:86:1a:4e:ae:ed:cb:e3:5b:44:f6:58:9a:f2:
         ca:de:af:5c:07:6f:2e:fd:ff:b0:2a:f6:e0:e5:b7:c2:32:10:
         ec:8e:ea:01:d0:fa:45:81:4a:b9:c2:ea:fe:2d:df:35:ae:55:
         72:a1:17:cd:29:24:99:52:39:40:c7:5c:08:d9:e3:ea:34:97:
         e0:10:5c:f1:c9:de:ac:7e:10:3b:46:db:a2:4b:94:54:6d:e5:
         5a:ca:0d:ed:fd:db:41:d1:c0:a4:bb:11:b1:fc:b7:20:b3:76:
         fa:a9:1d:de:03:b7:f8:ce:81:6b:ed:f5:2a:bf:75:56:ea:83:
         82:8c:b1:b9:38:f6:34:60:39:5a:07:82:88:e9:8f:21:1a:48:
         1a:7c:8a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----