Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/0/1B13A45E2018CFA37825076127F264C00061EDEB.mft
File:                     1B13A45E2018CFA37825076127F264C00061EDEB.mft (raw, json)
Hash identifier:          lsv6KcrIK5JRoOjRMPDiGx5E4KuIq6PadWnRlHJmGE0=
Subject key identifier:   35:10:80:FA:F6:E5:E2:CF:27:49:E7:65:0E:34:81:96:46:62:1D:CF
Authority key identifier: 1B:13:A4:5E:20:18:CF:A3:78:25:07:61:27:F2:64:C0:00:61:ED:EB
Certificate issuer:       /CN=1B13A45E2018CFA37825076127F264C00061EDEB
Certificate serial:       7568042A6A2D75228CF80F72388DC9E84D81CAD5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B13A45E2018CFA37825076127F264C00061EDEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/0/1B13A45E2018CFA37825076127F264C00061EDEB.mft
Manifest number:          CD
Signing time:             Mon 24 Apr 2023 09:19:17 +0000
Manifest this update:     Mon 24 Apr 2023 09:14:17 +0000
Manifest next update:     Tue 25 Apr 2023 12:42:17 +0000
Files and hashes:         1: 34352e3138352e342e302f32322d3234203d3e20323639333535.roa (hash: qmcu/67tEKnu9mAl2VDkyysn6rY6wriqBRMXAY5ggGk=)
                          2: 323830343a363335383a3a2f33322d3334203d3e20323639333535.roa (hash: vQRt34EXiijpq0YcTR8JX4CzA++FZ+0Ege4EDnulhrE=)
                          3: 1B13A45E2018CFA37825076127F264C00061EDEB.crl (hash: 9OpmRUP5PJQjVAny1+YaiUCIzGpbruFOcwDJZA7A9bk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:68:04:2a:6a:2d:75:22:8c:f8:0f:72:38:8d:c9:e8:4d:81:ca:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B13A45E2018CFA37825076127F264C00061EDEB
        Validity
            Not Before: Apr 24 09:14:17 2023 GMT
            Not After : Apr 25 12:42:17 2023 GMT
        Subject: CN=351080FAF6E5E2CF2749E7650E34819646621DCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:44:47:f4:8e:31:42:a2:a3:00:b6:f8:b5:e1:
                    cb:d3:d9:b1:73:e9:12:d7:2f:90:c2:69:48:20:f3:
                    75:73:cc:6e:ca:e0:d5:5e:e3:eb:f4:c9:f8:95:c7:
                    af:5f:46:71:5f:bc:31:4f:f0:0a:26:04:a5:80:6c:
                    e1:99:79:c8:fa:eb:90:fc:c3:1f:6f:ed:61:4d:cd:
                    f2:96:70:62:e1:28:ce:d2:40:29:91:83:30:d7:7d:
                    de:45:46:b2:1f:89:3e:18:ba:6a:28:db:a4:bc:b7:
                    50:59:2d:2d:84:24:5a:01:67:8f:65:e6:15:5e:ac:
                    84:6f:3a:fe:61:24:0e:c6:8e:38:8e:a6:b6:60:82:
                    52:cf:dd:34:8c:3d:03:90:52:ec:bb:43:58:74:86:
                    cc:51:7f:e5:d5:c2:ea:a6:7d:84:37:cf:25:26:6f:
                    6b:a1:ea:41:f4:7b:4a:a4:e0:a4:f4:0d:ea:e3:0e:
                    53:23:62:50:2a:3f:62:f9:24:0c:de:aa:16:62:f2:
                    07:a8:df:5f:78:41:04:1e:25:84:a5:83:58:45:6d:
                    16:7e:c4:05:19:92:d1:00:0f:23:6d:58:6e:59:ef:
                    82:d7:cc:e3:62:20:99:68:b6:8f:ff:c0:11:52:fb:
                    07:e2:c5:3a:43:4b:c8:40:d4:3c:c4:fc:5e:f3:28:
                    b8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:10:80:FA:F6:E5:E2:CF:27:49:E7:65:0E:34:81:96:46:62:1D:CF
            X509v3 Authority Key Identifier:
                keyid:1B:13:A4:5E:20:18:CF:A3:78:25:07:61:27:F2:64:C0:00:61:ED:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/0/1B13A45E2018CFA37825076127F264C00061EDEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B13A45E2018CFA37825076127F264C00061EDEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/0/1B13A45E2018CFA37825076127F264C00061EDEB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:a6:d6:96:f4:5b:5e:3b:7d:fd:5a:54:de:13:85:5a:52:6e:
         60:38:b7:38:4f:b8:29:23:f8:9c:a7:01:db:71:c3:16:05:6a:
         dc:93:0e:5f:0f:53:46:fc:b5:a7:a8:19:1e:e0:c9:11:ac:c5:
         ca:54:2c:ca:21:b8:cc:7a:cd:6a:05:1a:6c:e0:51:28:a5:2b:
         fd:82:8f:56:55:e1:ec:a6:55:38:46:0d:00:68:8c:e3:14:1e:
         79:5a:41:da:ea:92:05:10:92:44:0a:dc:e4:45:95:25:84:3b:
         1a:09:06:6e:af:5f:e8:ee:d1:2a:47:4b:8f:33:fe:5a:bd:84:
         f9:61:ae:1d:44:1d:43:68:46:0a:27:d3:14:8d:09:ba:d6:02:
         19:dd:99:a7:67:f2:68:fe:d4:b7:3c:f5:6b:7e:ec:2d:00:d5:
         42:18:66:3b:50:42:fa:8d:4a:4b:07:1e:fc:0d:2f:85:c3:d0:
         13:53:40:79:7a:3e:8b:a7:32:4e:10:51:1d:5e:ca:0e:28:53:
         15:10:6c:4a:80:6b:b9:dd:fa:c4:7d:af:e1:6a:f6:b1:af:ea:
         97:e0:5a:4c:3f:6c:3a:28:10:08:9d:b9:f0:94:e4:fc:ef:25:
         43:25:07:ea:86:0d:de:be:60:ed:74:e3:f0:11:41:cb:b9:a7:
         89:79:b8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----