Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/0E01DDDD7B8C2201D6207A10161296A8ADB7A2DE.mft
File:                     0E01DDDD7B8C2201D6207A10161296A8ADB7A2DE.mft (raw, json)
Hash identifier:          gASUQVYgimiuHBMjBf5EqzLocCxo0Wgp8xZWkvkOXVM=
Subject key identifier:   F5:E0:40:70:B3:E6:65:F4:7D:B8:54:50:78:49:F3:EA:C7:78:1D:0D
Authority key identifier: 0E:01:DD:DD:7B:8C:22:01:D6:20:7A:10:16:12:96:A8:AD:B7:A2:DE
Certificate issuer:       /CN=0E01DDDD7B8C2201D6207A10161296A8ADB7A2DE
Certificate serial:       3F0CCA2889A003C5CD541254ED5F443BC2AC86DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0E01DDDD7B8C2201D6207A10161296A8ADB7A2DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/0E01DDDD7B8C2201D6207A10161296A8ADB7A2DE.mft
Manifest number:          019E
Signing time:             Thu 15 Jun 2023 05:30:01 +0000
Manifest this update:     Thu 15 Jun 2023 05:25:01 +0000
Manifest next update:     Fri 16 Jun 2023 08:51:01 +0000
Files and hashes:         1: 0E01DDDD7B8C2201D6207A10161296A8ADB7A2DE.crl (hash: h2/P689zk6Qv5DAKTt1/x9BA2Gs4k16hAkYg2JnM7Rs=)
                          2: 323830343a313331383a3a2f33322d3438203d3e20323633353135.roa (hash: DMW6CsDrzJESpbMYsg5SUYzAHMgs93I6R557kTPssdc=)
                          3: 3139312e3234332e3231362e302f32312d3234203d3e20323633353135.roa (hash: arcqwWNff/vo7NX/33I0RFSLXBpA1cAte82/OTkQ23s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:0c:ca:28:89:a0:03:c5:cd:54:12:54:ed:5f:44:3b:c2:ac:86:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E01DDDD7B8C2201D6207A10161296A8ADB7A2DE
        Validity
            Not Before: Jun 15 05:25:01 2023 GMT
            Not After : Jun 16 08:51:01 2023 GMT
        Subject: CN=F5E04070B3E665F47DB854507849F3EAC7781D0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:24:fd:bc:b8:b3:37:d9:48:10:2c:b7:66:d1:
                    99:06:ee:72:f1:94:de:da:05:3f:40:0d:08:e4:c3:
                    6b:6e:9d:cd:85:63:d5:fe:dd:25:c8:c0:10:47:e7:
                    aa:88:2d:81:b8:9d:66:48:e1:8d:c7:b1:0a:b9:a3:
                    cd:58:78:23:b0:7b:1f:93:03:8b:0b:59:83:d0:21:
                    64:dc:65:d9:2b:69:11:c4:5d:ff:f9:c5:34:6f:5c:
                    47:b3:47:2e:5d:b7:f1:a9:a0:d7:7b:5f:33:e7:ff:
                    9d:de:77:da:00:4b:d2:98:64:20:96:91:cf:fb:cf:
                    ff:6e:25:f1:f0:46:09:31:48:7a:72:12:20:fb:99:
                    ef:fa:3a:d3:4d:fb:2c:78:35:69:73:70:7a:bb:88:
                    9e:da:7c:5c:2b:54:80:bc:2b:1f:a8:25:de:c6:a6:
                    43:da:d4:ee:f9:17:1c:e8:05:18:80:02:cb:6c:8f:
                    06:4c:4b:35:b1:47:13:6f:52:e7:26:ad:20:d1:8e:
                    5c:c8:23:8d:3a:52:30:dd:6b:94:b9:5e:93:85:bd:
                    82:1b:c0:a0:d4:4c:43:9d:ff:20:21:09:2b:cc:c1:
                    2b:91:4a:cf:4b:ea:78:a3:55:df:18:96:98:03:4c:
                    0d:b5:8d:c7:82:87:9e:6c:41:ed:0d:c2:26:3f:5c:
                    4e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E0:40:70:B3:E6:65:F4:7D:B8:54:50:78:49:F3:EA:C7:78:1D:0D
            X509v3 Authority Key Identifier:
                keyid:0E:01:DD:DD:7B:8C:22:01:D6:20:7A:10:16:12:96:A8:AD:B7:A2:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/0E01DDDD7B8C2201D6207A10161296A8ADB7A2DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0E01DDDD7B8C2201D6207A10161296A8ADB7A2DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/0E01DDDD7B8C2201D6207A10161296A8ADB7A2DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:99:ac:c4:5c:19:8e:32:e2:59:45:fd:88:d0:d9:6a:a2:f6:
         54:13:82:e6:21:d8:cf:c3:c2:b8:89:c9:b9:b3:e3:28:e6:2e:
         78:f7:da:04:5d:14:a0:7e:15:c9:24:00:75:a0:33:aa:7e:b5:
         0c:ca:7b:f1:9c:a3:88:c2:bb:d9:23:77:3e:51:7f:63:3b:d9:
         e3:52:21:c2:43:16:01:88:77:5a:58:e7:19:15:48:50:7a:3b:
         ca:e9:0e:af:66:76:22:32:54:9f:d0:b5:55:e9:f8:35:85:21:
         1b:0d:a2:49:12:9b:87:dd:4b:df:48:cf:e3:f7:58:e4:3f:76:
         d2:fe:bb:f9:16:d4:28:fb:56:1d:4d:26:04:c4:a8:09:39:d6:
         d5:bd:6a:71:68:09:ca:66:a0:51:cc:6d:ea:3a:65:0b:b7:ed:
         d3:d5:ba:34:62:9e:e6:54:5b:df:a3:20:cf:ad:4f:4f:de:df:
         6b:f4:75:30:c6:ff:9d:30:fc:71:16:1c:f6:f7:40:29:1f:b6:
         94:ed:7f:11:e3:b9:d8:4c:17:13:ba:c7:33:07:67:58:93:4c:
         dc:c4:47:e0:3f:65:3e:01:34:e7:f9:50:7c:cb:e7:8e:dc:7c:
         37:4c:5b:52:6b:a2:b3:97:25:a7:a9:d1:25:21:ba:b7:ea:64:
         18:51:08:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----