Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/D7A30B531643C3551FA07E8F53451D77C433BA1E.mft
File:                     D7A30B531643C3551FA07E8F53451D77C433BA1E.mft (raw, json)
Hash identifier:          awVxAKRvhupxvbmfka4R+bKa0oeCyXUlwJArUAkqvRQ=
Subject key identifier:   D1:7A:0F:8F:30:C3:5F:9D:B8:8A:68:6B:40:EC:A5:72:5C:1C:A8:1E
Authority key identifier: D7:A3:0B:53:16:43:C3:55:1F:A0:7E:8F:53:45:1D:77:C4:33:BA:1E
Certificate issuer:       /CN=D7A30B531643C3551FA07E8F53451D77C433BA1E
Certificate serial:       428081DAE62649B6E6C6C19D2C521FF9678A8965
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7A30B531643C3551FA07E8F53451D77C433BA1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/D7A30B531643C3551FA07E8F53451D77C433BA1E.mft
Manifest number:          2F
Signing time:             Sat 11 Feb 2023 21:32:01 +0000
Manifest this update:     Sat 11 Feb 2023 21:27:01 +0000
Manifest next update:     Mon 13 Feb 2023 01:14:01 +0000
Files and hashes:         1: 34352e3138372e36302e302f32322d3332203d3e20323639343537.roa (hash: X41beXOBYxn+/Tis7cvgRz1LTuVN9ZmNgQ6kmdDPwNU=)
                          2: 323830343a363465383a3a2f33322d313238203d3e20323639343537.roa (hash: mDr2GWPHAUSwH5f5lFZmonpuJSsQJ+BSHnWrvgfvTDE=)
                          3: D7A30B531643C3551FA07E8F53451D77C433BA1E.crl (hash: 8lpEDXwo1Wq6vNrr9H3FoLxm+YfH8zlFWna/CAJq1jw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:80:81:da:e6:26:49:b6:e6:c6:c1:9d:2c:52:1f:f9:67:8a:89:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7A30B531643C3551FA07E8F53451D77C433BA1E
        Validity
            Not Before: Feb 11 21:27:01 2023 GMT
            Not After : Feb 13 01:14:01 2023 GMT
        Subject: CN=D17A0F8F30C35F9DB88A686B40ECA5725C1CA81E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:21:9e:d5:a1:62:47:90:59:74:60:00:75:d8:
                    23:1f:16:01:98:26:2a:e8:41:4b:f4:88:b6:eb:68:
                    45:e9:ed:02:b2:1b:0e:f0:07:1c:f4:f5:ce:8e:94:
                    5d:4f:a9:96:94:65:aa:b5:66:25:7b:58:4b:83:0f:
                    37:14:a2:4e:84:8e:77:d5:f7:32:f6:90:7a:cc:5c:
                    51:ba:8f:fb:3b:3f:7c:2c:cf:df:9b:78:26:d5:b0:
                    87:1a:02:d4:fd:ce:69:93:57:fe:76:01:5b:8e:36:
                    81:79:d1:34:d5:4d:38:9c:b6:e8:c2:15:6d:44:cc:
                    da:75:79:18:ff:4c:44:4f:33:a4:d7:d5:d3:82:78:
                    81:88:32:5e:63:fe:0a:d5:9f:18:47:b2:31:f7:a1:
                    11:1c:e4:42:71:5b:97:56:85:b7:e0:f4:d8:f5:b1:
                    ca:5b:9a:34:99:be:39:1d:eb:e2:ba:1f:5c:e0:46:
                    af:f2:84:c3:08:4b:a7:59:1e:3c:35:ff:69:0d:3b:
                    e4:87:f7:ca:f5:29:f5:eb:d7:30:dc:5f:a0:62:0b:
                    35:8d:4f:13:8b:ef:b1:df:f0:07:1d:d5:36:67:55:
                    c0:7c:6d:d0:d1:75:29:b0:11:1f:0f:04:ed:a5:dd:
                    a5:0b:5c:f8:64:db:a8:27:9e:34:28:03:53:2e:3b:
                    2d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7A:0F:8F:30:C3:5F:9D:B8:8A:68:6B:40:EC:A5:72:5C:1C:A8:1E
            X509v3 Authority Key Identifier:
                keyid:D7:A3:0B:53:16:43:C3:55:1F:A0:7E:8F:53:45:1D:77:C4:33:BA:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/D7A30B531643C3551FA07E8F53451D77C433BA1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7A30B531643C3551FA07E8F53451D77C433BA1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/D7A30B531643C3551FA07E8F53451D77C433BA1E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:e4:31:c4:87:2c:d2:f4:b6:77:d5:26:95:ce:5c:1e:58:27:
         c3:06:a5:75:78:ca:16:17:f6:6a:ae:96:9f:5b:ea:28:8b:08:
         dd:80:96:8a:f3:c5:da:ff:5d:91:fc:e3:98:df:12:73:ae:59:
         f1:1e:24:ff:14:b9:a4:16:8b:d3:9f:13:9c:f2:16:cc:eb:dd:
         7f:df:3f:08:6c:fe:28:f4:a1:9b:40:ab:d4:00:cc:74:7b:af:
         87:cb:b1:0a:4a:42:96:6c:7e:a0:48:15:d9:50:48:8c:55:94:
         84:8b:ff:54:30:53:e0:6b:b1:51:94:65:93:f0:29:eb:ff:29:
         e2:51:24:0e:6a:6f:75:ff:a7:2b:93:e9:b5:11:98:60:1b:ce:
         5a:89:b2:c3:9d:51:19:7c:0c:bf:3b:d0:fb:fd:32:09:e8:9f:
         50:ad:b7:fd:7b:2e:94:c8:a1:55:c4:7c:fc:19:88:5b:a1:de:
         d5:09:67:5e:c8:95:4e:bf:c8:e9:8f:7a:ab:6a:95:c1:f7:8f:
         d7:0f:74:7c:53:92:69:b5:a6:40:b5:40:37:be:b8:41:00:7f:
         3e:ed:18:83:47:bb:06:ad:83:06:7f:3f:8a:16:04:c6:df:3e:
         62:d4:09:40:0d:b6:15:e4:81:13:b7:92:89:b4:95:f7:8e:60:
         8f:7e:4b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----