Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/0/8F399D44012B782E46447CB2E4C4BEA59C1F08DD.mft
File:                     8F399D44012B782E46447CB2E4C4BEA59C1F08DD.mft (raw, json)
Hash identifier:          noO5bCrvg5+KtWS0q31MwdduaHVHCiQ4C+tT2MWK9vk=
Subject key identifier:   1E:B3:0C:F0:14:AE:4D:56:98:CC:5D:C6:11:BF:6E:F3:63:44:57:E0
Authority key identifier: 8F:39:9D:44:01:2B:78:2E:46:44:7C:B2:E4:C4:BE:A5:9C:1F:08:DD
Certificate issuer:       /CN=8F399D44012B782E46447CB2E4C4BEA59C1F08DD
Certificate serial:       07C99C919C6B04D339E38787AD9338932B408751
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F399D44012B782E46447CB2E4C4BEA59C1F08DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/0/8F399D44012B782E46447CB2E4C4BEA59C1F08DD.mft
Manifest number:          01CE
Signing time:             Sun 19 Jun 2022 22:11:07 +0000
Manifest this update:     Sun 19 Jun 2022 22:06:07 +0000
Manifest next update:     Tue 21 Jun 2022 00:00:07 +0000
Files and hashes:         1: 323830343a346536343a3a2f33322d3336203d3e20323638323538.roa (hash: pEN+SMB6vw4VJQIQybrlqTAapoHRpgKWVg3XKU1xsrY=)
                          2: 34352e3233372e382e302f32322d3234203d3e20323638323538.roa (hash: zHFDqpumC4eJKkHy/rmIa+IAbIrv+A2O0mFXRKEv8TM=)
                          3: 8F399D44012B782E46447CB2E4C4BEA59C1F08DD.crl (hash: Wq2u1nfLWpLScCS4usBVtlLefHLp4cq6v2wcLWkWG50=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:c9:9c:91:9c:6b:04:d3:39:e3:87:87:ad:93:38:93:2b:40:87:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F399D44012B782E46447CB2E4C4BEA59C1F08DD
        Validity
            Not Before: Jun 19 22:06:07 2022 GMT
            Not After : Jun 21 00:00:07 2022 GMT
        Subject: CN=1EB30CF014AE4D5698CC5DC611BF6EF3634457E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:db:3a:7f:02:45:f2:92:78:fe:0a:b3:d2:5f:
                    55:24:8d:15:4a:54:b4:44:47:b6:d3:d5:e4:d5:cc:
                    06:27:2e:47:c6:c4:8d:b1:2b:9e:b2:8d:9a:70:b0:
                    4e:35:21:94:d1:2a:eb:ca:3e:a6:e5:2a:c9:d6:1d:
                    11:ca:8c:1a:61:24:ca:c9:5e:4b:b4:80:eb:38:c0:
                    45:d5:ac:91:bc:6b:99:23:02:32:b7:45:a8:a6:e4:
                    a0:80:93:c3:4c:ac:8d:dd:d0:36:bd:5b:aa:e7:95:
                    73:6f:d9:f1:98:ec:2c:97:c9:c3:d9:89:08:47:f2:
                    36:e5:67:14:72:86:8d:6f:a7:3f:37:06:d9:5e:75:
                    02:53:c4:f5:21:8c:10:43:c8:b2:75:cc:7b:32:b1:
                    d9:01:d6:72:b5:ac:04:fd:f9:ff:f6:53:3e:ed:ed:
                    e1:3d:c3:70:f8:1c:6e:93:fc:e6:0b:0f:4e:a6:78:
                    f6:3f:f9:bf:1e:70:e4:64:30:eb:d3:7d:fb:bd:16:
                    f2:b0:23:f6:8d:3a:a7:69:a8:2b:c7:8f:76:8d:5b:
                    19:60:b4:e6:2a:20:31:dc:e1:b6:ee:59:e2:e3:93:
                    94:2b:bd:53:1d:20:db:a9:46:23:e1:b3:c5:f5:e7:
                    0b:ba:44:78:88:cc:de:50:2d:86:eb:1e:7e:e3:44:
                    83:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B3:0C:F0:14:AE:4D:56:98:CC:5D:C6:11:BF:6E:F3:63:44:57:E0
            X509v3 Authority Key Identifier:
                keyid:8F:39:9D:44:01:2B:78:2E:46:44:7C:B2:E4:C4:BE:A5:9C:1F:08:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/0/8F399D44012B782E46447CB2E4C4BEA59C1F08DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F399D44012B782E46447CB2E4C4BEA59C1F08DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/0/8F399D44012B782E46447CB2E4C4BEA59C1F08DD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:5a:ff:41:4a:85:2e:54:51:af:eb:a4:5f:46:ec:ca:e4:ab:
         67:15:74:aa:9b:d7:d9:fe:d6:ea:14:66:b9:68:bc:6b:cd:a5:
         5f:31:a0:a5:25:56:b7:30:5a:17:42:4c:7c:83:01:fb:86:42:
         b3:b5:9e:53:5b:fe:24:81:d4:d0:ee:53:6b:a5:21:19:e1:36:
         7d:2d:64:35:6a:07:b9:61:40:d5:3f:a3:61:46:88:2b:4e:1c:
         c3:83:e3:a6:4a:fc:55:b9:aa:80:88:c9:3b:4c:12:00:eb:8a:
         9c:06:21:db:64:a6:76:19:7c:60:5a:48:46:e5:5c:27:9e:9f:
         a0:29:71:00:71:65:59:e1:cc:58:82:aa:e2:c7:8c:c4:d4:f5:
         b4:38:ed:df:62:13:ca:42:7d:31:72:80:ac:d9:c0:61:67:6b:
         e6:73:9a:7c:36:ab:66:bb:40:01:07:77:62:65:96:9e:14:c0:
         9e:3b:a9:4d:7e:85:3a:bf:4e:d9:c0:90:63:22:c0:30:bc:3b:
         6c:66:80:cc:ae:87:c2:63:1b:18:fe:2f:a1:0d:b3:31:4e:44:
         8c:d1:ee:3b:c7:25:62:b3:1c:ce:da:e9:a9:7d:6e:cb:58:52:
         35:ce:5e:29:55:a6:cb:03:ad:92:b5:8f:07:9e:d1:61:ae:ec:
         e9:66:ae:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----