Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/DF8749D5A148D582D0CE22B2624BD078FB17022A.mft
File:                     DF8749D5A148D582D0CE22B2624BD078FB17022A.mft (raw, json)
Hash identifier:          tJ6uFnRWAuHLcZeWwoQhmhQ9qRVQyHhvMt7LzWQoX9k=
Subject key identifier:   8B:7A:1C:D7:CC:FB:AA:74:DB:7B:9D:0B:57:D6:73:2D:27:7E:CB:3C
Authority key identifier: DF:87:49:D5:A1:48:D5:82:D0:CE:22:B2:62:4B:D0:78:FB:17:02:2A
Certificate issuer:       /CN=DF8749D5A148D582D0CE22B2624BD078FB17022A
Certificate serial:       46FE760454E09C16606584E1B69B7027583B72DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DF8749D5A148D582D0CE22B2624BD078FB17022A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/DF8749D5A148D582D0CE22B2624BD078FB17022A.mft
Manifest number:          035C
Signing time:             Tue 12 Apr 2022 11:40:00 +0000
Manifest this update:     Tue 12 Apr 2022 11:35:00 +0000
Manifest next update:     Wed 13 Apr 2022 11:55:00 +0000
Files and hashes:         1: 323830343a333764303a3a2f33322d3438203d3e20323636343337.roa (hash: QU9wHcDU0HO+1lJzukb1UaygkOeT+LI2S3wRh0W8JXA=)
                          2: DF8749D5A148D582D0CE22B2624BD078FB17022A.crl (hash: rjq30ZRV2hSqSHBmQSCnQ0VRbzO7cNhnRbE04immIsY=)
                          3: 3137302e38322e31362e302f32322d3234203d3e20323636343337.roa (hash: +IfU+y2soKatsmaOEHUKAByjPPZZcSvcEnOlo0VyhpU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:fe:76:04:54:e0:9c:16:60:65:84:e1:b6:9b:70:27:58:3b:72:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF8749D5A148D582D0CE22B2624BD078FB17022A
        Validity
            Not Before: Apr 12 11:35:00 2022 GMT
            Not After : Apr 13 11:55:00 2022 GMT
        Subject: CN=8B7A1CD7CCFBAA74DB7B9D0B57D6732D277ECB3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0f:c0:0e:e0:ca:3d:7b:3a:67:38:0a:76:78:
                    a1:48:16:87:0e:d3:af:33:ed:b7:89:55:05:a5:e3:
                    01:2a:af:85:89:08:7a:fe:d0:2e:17:55:2f:b7:28:
                    c1:85:85:61:31:64:0d:14:3c:e6:03:51:ea:3e:68:
                    52:9f:aa:18:97:f8:3b:62:00:fe:88:3e:e1:73:b7:
                    b5:7b:f5:49:02:9f:69:17:17:b1:da:85:cb:ec:06:
                    94:42:2c:91:ce:db:44:74:50:c9:cc:4c:32:6e:c8:
                    df:e6:e5:b1:4b:7f:8b:bd:9c:f5:9c:03:42:95:28:
                    a3:5d:5f:94:be:86:84:f1:39:99:ac:c8:1b:95:aa:
                    37:df:f4:38:81:df:30:84:c1:bd:af:17:e7:08:47:
                    2b:50:05:2e:a1:c7:5c:e8:96:22:6b:cb:a7:cf:6d:
                    b0:27:c4:a5:20:db:75:b4:f1:76:7e:0f:4b:55:05:
                    e7:b5:ec:b0:71:36:d1:f2:9d:8d:4b:7b:61:4b:e7:
                    7f:d7:8e:ac:4e:5f:fe:f5:cd:13:56:76:9c:b1:d9:
                    06:1a:03:c3:18:31:05:d9:d3:b5:fc:08:45:22:43:
                    a5:f9:3e:a8:93:19:24:b5:b3:62:19:54:3e:20:6c:
                    66:b0:61:90:5d:0c:ed:43:52:f7:ea:8c:76:9c:4f:
                    ce:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:7A:1C:D7:CC:FB:AA:74:DB:7B:9D:0B:57:D6:73:2D:27:7E:CB:3C
            X509v3 Authority Key Identifier:
                keyid:DF:87:49:D5:A1:48:D5:82:D0:CE:22:B2:62:4B:D0:78:FB:17:02:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/DF8749D5A148D582D0CE22B2624BD078FB17022A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DF8749D5A148D582D0CE22B2624BD078FB17022A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/DF8749D5A148D582D0CE22B2624BD078FB17022A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:3d:e0:72:e9:3b:34:f5:5c:3f:ca:07:92:6f:1f:ef:79:0b:
         a7:4e:b3:ea:4d:7b:bf:45:ce:11:e2:f0:65:97:71:64:89:88:
         7d:15:19:15:1c:2e:a0:ad:ca:a0:50:6f:1a:74:60:1c:a6:6e:
         a6:0e:06:aa:9e:5d:05:af:fa:f6:e7:70:df:2c:3c:d0:31:7e:
         04:ea:39:cd:d8:cc:ea:b9:73:fc:e6:b0:cc:1a:38:0f:a8:00:
         b8:e0:e3:2e:b4:d9:39:96:a8:fc:11:6b:e5:3c:45:30:0b:d4:
         84:ff:a3:1c:82:23:a2:16:13:84:28:e0:86:b3:f9:5d:a4:bc:
         1e:4e:61:6d:bb:d5:98:2f:da:62:2b:3c:60:0f:90:e9:cf:20:
         80:ff:4f:1f:31:17:4c:1d:d1:98:35:c3:f1:60:43:71:3e:e2:
         7b:2d:56:8f:7f:be:98:13:eb:24:cd:ee:e0:ff:0b:e5:bf:04:
         84:ed:15:f7:f7:df:4a:23:1c:5f:53:cf:39:cd:03:17:d3:69:
         28:52:5f:51:35:44:8e:43:62:64:aa:db:2c:cd:bd:37:a1:c8:
         a9:c8:8f:43:ae:04:93:b5:3f:36:0b:ec:db:b2:0b:5f:a0:86:
         c3:1a:4e:bd:32:17:6c:d6:79:58:a9:be:6b:0b:85:bb:0a:23:
         0f:58:73:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----