Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/9995C6F8949F28A618E5A3C8DF6C130EF98CF5B1.mft
File:                     9995C6F8949F28A618E5A3C8DF6C130EF98CF5B1.mft (raw, json)
Hash identifier:          TAZqfFuMX4N3U14ndvgumLZZMHAK+ddq85egrDqGPKg=
Subject key identifier:   7A:CB:EE:11:91:F0:ED:A6:B3:08:A6:8D:87:12:DD:1F:54:B4:32:15
Authority key identifier: 99:95:C6:F8:94:9F:28:A6:18:E5:A3:C8:DF:6C:13:0E:F9:8C:F5:B1
Certificate issuer:       /CN=9995C6F8949F28A618E5A3C8DF6C130EF98CF5B1
Certificate serial:       0ED3C1CF393448CD3DA703571ECAD38965920CCF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9995C6F8949F28A618E5A3C8DF6C130EF98CF5B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/9995C6F8949F28A618E5A3C8DF6C130EF98CF5B1.mft
Manifest number:          CC
Signing time:             Tue 08 Mar 2022 08:00:00 +0000
Manifest this update:     Tue 08 Mar 2022 07:55:00 +0000
Manifest next update:     Wed 09 Mar 2022 08:00:00 +0000
Files and hashes:         1: 323830343a333933633a3a2f3334203d3e20323636303230.roa (hash: t5oQcTmA7XQGMXikc94wOaIZGvAHZE4W/Ka8Vlw6Zw4=)
                          2: 323830343a333933633a633030303a3a2f3334203d3e20323636303230.roa (hash: L38wONvkyw3Wh+EZeZIYuCwTDnxknB8AxzXGPnOc500=)
                          3: 323830343a333933633a343030303a3a2f3334203d3e20323636303230.roa (hash: ZoHXIk1Wq1DlJDq/0qyo+xVLXkixboYEJnKfdf/TFL4=)
                          4: 323830343a333933633a3a2f3332203d3e20323636303230.roa (hash: va5+Cq6rlYCYELAK2Z/jFJr9o5DSGJsATmLcdAPAja4=)
                          5: 323830343a333933633a383030303a3a2f3334203d3e20323636303230.roa (hash: rXTgi6gdPdVweserROpBj0uP8iuzRPP81XI44GM3FYc=)
                          6: 3137302e3234352e3233362e302f32322d3234203d3e20323636303230.roa (hash: AdCvNq1AT3V3bHS9fNkl0hBNd+y9/Zg4L9yRwR4MSGw=)
                          7: 9995C6F8949F28A618E5A3C8DF6C130EF98CF5B1.crl (hash: rnbKkdWSVQYRt9mbEkWWTNM+N6mSSSS7adP/xFgeaP8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:d3:c1:cf:39:34:48:cd:3d:a7:03:57:1e:ca:d3:89:65:92:0c:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9995C6F8949F28A618E5A3C8DF6C130EF98CF5B1
        Validity
            Not Before: Mar  8 07:55:00 2022 GMT
            Not After : Mar 15 08:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:54:16:54:51:d4:13:e3:b4:46:54:ff:9d:ef:
                    88:92:0b:0f:c6:8f:97:0e:bb:9d:f2:84:f4:ea:ea:
                    e9:f7:98:38:cf:b8:91:b7:0a:af:e9:49:33:64:09:
                    18:ff:22:85:c8:cf:d6:a1:32:8f:e4:b8:8b:f8:aa:
                    f6:d7:49:cb:40:d3:0d:fa:39:21:57:8f:75:83:a8:
                    b1:bc:da:77:51:23:a7:e9:08:5b:8b:5f:80:ac:91:
                    db:a4:2b:1b:14:16:62:9a:e8:1a:b8:f6:de:25:de:
                    03:c4:5e:26:23:0a:95:1b:0c:73:f7:55:c9:1f:3f:
                    94:03:c5:f2:1c:dd:27:4a:18:29:45:87:5e:c3:fe:
                    08:25:14:35:78:55:3e:9a:63:79:e2:79:82:b8:95:
                    e7:6d:0f:8a:6c:b1:04:77:6d:b9:b6:aa:0b:76:23:
                    15:db:c9:6b:e0:a8:9a:10:7d:23:f6:41:5b:2a:d6:
                    1c:c1:07:74:d3:97:ae:cb:5f:d2:76:3d:c0:70:e4:
                    e3:6d:be:e0:65:93:93:1b:d4:c4:cb:5d:d2:3a:48:
                    47:3d:e5:51:86:b1:d7:5a:f8:51:4f:6c:d9:dd:a6:
                    30:af:70:1f:3a:c5:28:16:2c:a1:60:4d:10:61:c3:
                    32:28:a4:b3:a0:dc:e1:96:53:b6:bb:0c:a4:5a:20:
                    34:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:CB:EE:11:91:F0:ED:A6:B3:08:A6:8D:87:12:DD:1F:54:B4:32:15
            X509v3 Authority Key Identifier:
                keyid:99:95:C6:F8:94:9F:28:A6:18:E5:A3:C8:DF:6C:13:0E:F9:8C:F5:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/9995C6F8949F28A618E5A3C8DF6C130EF98CF5B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9995C6F8949F28A618E5A3C8DF6C130EF98CF5B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/9995C6F8949F28A618E5A3C8DF6C130EF98CF5B1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:94:0a:f8:79:49:39:90:0e:4d:e5:cb:65:0f:61:96:66:17:
         4c:0e:99:0d:51:28:44:07:16:ce:5b:29:a5:ab:cb:83:3b:9d:
         24:85:e1:be:fd:1f:2a:22:ba:59:1a:d7:21:3e:47:68:f3:1f:
         eb:51:8e:b9:58:08:59:fd:2a:bf:ef:9d:d2:7b:e8:bb:2b:e5:
         ed:42:f7:5f:5b:90:4a:9e:90:94:f7:f7:56:3e:28:d5:a2:76:
         64:fe:5a:63:d6:d0:a5:36:10:96:76:db:47:e9:26:f2:0b:fa:
         ef:51:32:8e:b2:b4:fa:8e:c5:a5:f2:f0:a6:49:95:47:08:d7:
         7d:91:00:26:f4:76:e5:f4:bd:f2:26:30:e0:65:81:e0:74:fd:
         65:0e:df:c1:3d:e7:ec:93:2e:fe:32:37:4f:f7:38:53:42:10:
         78:63:c0:2e:8b:e2:ce:35:05:a5:83:49:c0:05:1e:1d:9a:53:
         d6:c1:42:99:3c:49:81:42:e2:da:69:d6:62:fe:02:ca:ed:c3:
         41:d5:d4:bc:d9:fa:33:b6:87:d8:ac:25:ee:a2:4a:be:fa:b4:
         e5:05:3b:81:ef:0c:6e:84:6d:ac:f5:5b:90:c8:ac:bd:79:e7:
         ce:03:62:98:9d:6a:f0:89:46:8c:c7:e5:e5:4a:e1:26:8a:9b:
         d2:14:61:06
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----